• 4 Posts
  • 403 Comments
Joined 5 years ago
cake
Cake day: January 21st, 2021

help-circle
  • Reverse DNS is different than static IP.

    But yes for outbound email, if you can’t control reverse DNS you will have pain. (Inbound is totally fine) You can in theory just use whatever hostname the ISP’s reverse DNS resolves to however you will get some spam score (or be rejected) as it doesn’t match your “from” domain.

    Outbound email is a huge pain really no matter what. Unless you have a long-term lease on the IP and it isn’t in a bad network you really have to pay someone else if you want reliable delivery.






  • I live in Toronto and was in the Chengdu metro a month ago. I didn’t do a close inspection but it was fine. Honestly probably better than Toronto. The trains had AC and the terminals that I went to were not crumbling.

    I think this meme is pretty reasonable. Toronto had a great start with subways, and still has huge ridership. They also have an excellent bus network. But the funding is very tight and the city has long prioritized inefficient personal vehicles. But it is a good point that you are comparing cities that an order of magnitude apart in population. Toronto also has 2 train lines (one light rail that should be opening within a year, and one subway that is probably 10 years away from opening) which are great to see, finally showing some investment in public transit. But the rate is nowhere near what the political will in China allows and also has a huge focus on new projects rather than keeping maintenance of existing infrastructure.

    In many ways this is a wakeup call. If we wanted this level of infrastructure we could have it. But we need to actually commit rather than continuously slashing budgets so that we can let the rich pay less taxes and continue to subsidize car ownership.


  • Its a problem but it isn’t a major problem. I am using rspamd without any sort of exotic configuration (basically just enabling things that are provided, not my own rules) and I only get a few spam messages leaking through a week. Maybe slightly worse than GMail but not considerably slow.

    IMHO the only real missing thing out of the box is contacts checking. Which is a huge thing because it is great to have reliable delivery from contacts. But my false-positive ratio is so low anyways that it isn’t a big issue and things like the known_senders module mostly mitigates it.


  • Yes, blocking port 25 outbound is incredibly common by default. Even on some server connections. It is probably better overall for exactly the reasons that you mentioned.

    Or just don’t self-host email

    IMHO this is a bit overblown. Hosting inbound is fairly easy. Mail senders (probably for the worst) are very forgiving even if your TLS cert is expired you will probably get mail. Plus senders are supposed to retry for days if you have downtime.

    However it is unfortunately true that due to spam sending is a huge pain because IPv4 reputation is a huge component. Sure you can get GMail to trust your domain after a month or so of sending if you have decent volume. But other providers who you may mail once a year are just going to go off of IP reputation. However email was basically designed for forwarding and you can use a service like AWS SES to forward your email from a trusted IP pretty easily. If you are low volume (like personal mail) there are tons of services that will do this for free.











  • I think this is a little confused. Unless your WiFi is open someone seeing your network can’t find out what the WAN IP is.

    And getting your ip can connect the people directly to your box

    “Connect” is a strong word here. Yeah, they can send traffic at it. But that shouldn’t do anything.

    A trace route command to this IP could return intermediate equipment of your isp, helping to pinpoint your town or even your street.

    This is the most reasonable concern. Depending on your ISP and location the IP itself or packet tracing you can get a pretty good idea of the user’s location.



  • I’m pretty surprised that all of the audio formats work. I’m not so surprised that the TV has h265, although maybe a bit surprised that it is exposed to the browser. The container support is also pretty surprising. Unless your MKVs are so simple that they are effectively WEBM.

    Or maybe it pops the link out of the browser into a dedicated media player which has decent codec support.

    iDevices do expose h265 in the browser, but the container support is still a bit surprising. But then again WEBM is basically MKV, so maybe that is why it tends to work.