Error 403 - Primitive Security Measures on the Forum
-
Like, for like. Machts nichs to me.
-
I think I've only ever did one smite. It wasn't you.
I feel your pain, but I understand completely why a TOR exit node IP can end up a everyone's shit list.
-
@Quantum`:
Well "Derelict" doesn't know the first thing about TOR terminology. His put-up is a Fail.
For someone claiming to know everything about the subject, you do know it's Tor, not TOR right?
Been using "Tor" since before it (and probably you) existed. A Canadian Company called "Zero Knowledge" did something similar in the pre-Tor days. Ran one of their nodes too. I won't apologize that my life doesn't revolve around it as, apparently, yours does.
-
@Quantum`:
…and in the case of "Project Honey Pot" (nice name...), they got one of the lists of TOR exit nodes and added to their blacklist, on General Principles, simply because it is TOR. I did click through and it gives the "list as a source of spam or other malicious activity".
I am genuinely interested in how you came to this conclusion. On the link I provided it states clearly the activity that triggered the IP address to be blocked, provided examples, and showed willingness to whitelist the IP when reported as an exit node. I think it much more likely the node was blocked due to the actions of the unfortunate minority that used it, over the project deliberately seeking to undermine the altruistic aims of TOR.
It's useless to try and whitelist IPs on "Project Honey Pot" because there are so many and they change all the time.
I don't doubt it is hard to get unblocked from Honeypot, just as it is hard to get yourself removed from an IP blocklist or SMTP blacklist. This is as it should be, otherwise malicious groups would simply ask nicely to be removed.
As I said I once made the mistake of believing that to block my TOR traffic was automatically an attack on my dignity and human rights. The lesson I learned from that mistake is that, especially with something emotionally charged as TOR can be, it was intoxicating to see myself as a righteous martyr and extremely humbling to realise that my "adversaries" were in fact simply uninterested, or even unaware, of my existence. It is easier to believe you have been wronged than to admit no one cares.
I am trying to get feedback on the nature of the forum, versus the firewall, to determine whether it's worth investigating the firewall.
Ideology aside, I absolutely recommend pfSense and I support the project and community where I can. More importantly to you however, as others have already said the pfSense project and the pfSense forum hosting service are not the same thing. Whatever policy Simple Machines have regarding their forum service is does not impact your installation of your pfSense. Whatever the views of the members of this community, they do not impact your installation of your pfSense. Your pfSense installation is an inanimate object, you are free to configure and to study it however you see fit and I hope you find it as rewarding as I have.
edit:
…you do know it's Tor, not TOR right?
Oops, so it is.
-
It's a private house. The owner can permit and deny access to anyone based on any criteria that suits them. Freedom of association.
If you come from a known questionable part of town (Internet), you may be required show some additional ID.If you don't like it you are entitle to your view/opinion. But if you want to participate in the hosts' private party you have to ad-hear to the hosts' criteria and rules.
Your seemingly desire to leap to conclusions about the pfSense router/firewall quality based on the security measures used for this web site forum does not afford much credibility.
Wow, I am surprised that with such limited amount of knowledge of the host (newbie first post) you know them so well. Almost as well as a used car salesman that knows this is the car for you before they even know your transportation needs.
-
KOM, I am voicing my concern about this.
It's all in how you say it. You basically came in as a brand-new user and called the pfSense team a bunch of idiots, and did so in a way that displayed arrogant ignorance. Honestly, what were you expecting? If you would have but simply said "I've found this and I'm concerned. What does everyone else think or can someone help out…", it would have gotten you a load of assistance. Flies & honey and all that.
At the moment I don't feel like dealing with running an exit node so it's transit-only.
A simple filter in your config will limit everything to safe ports. When I first started out, I had it wide open and it was only a matter of days before Linode was respectfully bugging me due to reported bogies on my node. After I filtered, I haven't had a report since.
-
I know. I'm just not in the mood. :) It runs fine and I'm moving enough traffic to feel I'm helping the cause enough as it is.
-
Well. This was certainly a 'worthwhile' use of my time.
jonesr thanks for the input. Frankly I'm pretty put off at this point by the complete lack of any apparent knowledge or discussion of the actual technical characteristics of pfSense. They act like a Windows crowd, or a high school locker room here. I'm glad to learn that this forum is not run by the same team as pfSense though.
PS - "Derelict", correctly it is 'TOR', regardless of the capitalization on their website which it appears you go by without knowing its meaning. ("The Onion Router") ;) And although it is very impressive that you'd like to associate yourself with TOR, do not pretend you run a node. You haven't known what it's actually called up to this point.
-
Note: even though it originally came from an acronym, Tor is not spelled "TOR". Only the first letter is capitalized. In fact, we can usually spot people who haven't read any of our website (and have instead learned everything they know about Tor from news articles) by the fact that they spell it wrong.
https://www.torproject.org/docs/faq.html.en
I guess you know more about Tor than the project maintainers themselves.
-
@Quantum`:
Frankly I'm pretty put off at this point by the complete lack of any apparent knowledge or discussion of the actual technical characteristics of pfSense.
Your very first post here:
@Quantum`:Wow, I am surprised and disappointed with the elementary security measures on the pfSense forum.
This is supposed to be an advanced firewall, and yet you rely on Project Honeypot for the forum? Which blocks the TOR browser? And what's with the dumb questions at the bottom of every new post which never change? ("What is 5 + 6?" "Are you a spammer? (yes / no)" "What is 10 + 5?")
I hope the firewall isn't maintained by the same guys who run the forums. I'm not sure at this point if I want to learn the firewall, if it's by amateurs.
Entering a forum with inflammatory and demeaning accusations right from the start with your very first post is not the way to elicit a discussion. But it's a pretty effective means of picking a fight.
-
:o)
We should just let the troll toddler die of starvation and keep this thread from going to three pages.
-
Better yet, can someone press the lock button, please?
-
Thats so primitive…
-
-
@Quantum`:
Frankly I'm pretty put off at this point by the complete lack of any apparent knowledge or discussion of the actual technical characteristics of pfSense.
Beyond mentioning it is based on FreeBSD 10.1 and a fork of the m0n0wall project in response to your comments about Windows, and repeating there is some arms-length between the actual firewall product and the forum hosting service, it is a broad subject. You don't appear to have asked any questions regarding pfSense itself, what is it you wanted to discuss?
-
Anyone else's Smite counts going through the roof lately? I've had 4 since yesterday even after I stopped responding to Quantum. I have a feeling that this Quantum guy is still having a tantrum and is coming here just to smite anyone who told him off. So childish.
-
Yeah,
56 so far from the little skin flutist. -
Yep, I'm up to 17 now. Was at 11 or 12 this morning. He is literally going over every single post of ours and smiting them.
Jim, Chris or Steve, can you please do something about this guy?
-
@KOM:
Anyone else's Smite counts going through the roof lately? I've had 4 since yesterday even after I stopped responding to Quantum. I have a feeling that this Quantum guy is still having a tantrum and is coming here just to smite anyone who told him off. So childish.
Yeah,
56 so far from the little skin flutist.@KOM:
Yep, I'm up to 17 now. Was at 11 or 12 this morning. He is literally going over every single post of ours and smiting them.
Jim, Chris or Steve, can you please do something about this guy?
Well maybe if you all didn't have such a need to be right all the time… ;) ...you would get along better with others and trolls. ;) Nobody likes a know-it-all. ;)
-
Well maybe if you all didn't have such a need to be right all the time… ;)
Being right is why karma here goes up.
Nobody likes a know-it-all. ;)
Exactly.
