dbtng

I just found the button to edit the comm properties. Like I said, I’m completely new to moderation. Looks like I have what I need. Thanks.

I’ve been busy. So far, I’ve reviewed and upvoted every old post. Just took a complete stock of what’s there. Commented on a bunch of them. That might bring some old posters back. There’s been some action already. Good to see!

I’m completely new to modding on lemmy. I had to read about how moderation works.
Most of the stuff that I want to do, I can’t.
I’m not the original mod for the stoner_rock comm, and I think that limits me from certain actions like updating the sidebar and top banner graphic.

From what I’ve read, there’s a hierarchy of admin- and mod-hood. The person who starts the comm is like a super-mod. They can de-mod subsequent mods, but not vice versa.
From that bit of info, I’m inferring that as a secondary-mod, I may not have access to modify the properties of the comm. Is that true?

I don’t have a new banner graphic yet. Workin on that, but I would like to update the sidebar.
I want to include some post guidelines, like linking to somewhere you can buy the music (like the band’s home page or bandcamp if possible), and I want to make some suggestions about kinds of posts (concert reviews, upcoming shows, music links, etc.)

I’m in no rush here. There’s a lot of work in front of me. But, it appears that I can’t start right now because I lack access.
Please let me know if I’m doing it wrong or if I just need to wait a while or something.
Or you know, if I need more access, promote me.

wat.

No. An old man with poor hearing from too much time in front of speakers wrote it.

Any more questions?

My thing is heavy rock. You can see what I’ve posted. But I like the original mod’s open attitude. Gonna keep the open boundaries. Honestly, it doesn’t get enough use to be telling anyone that their idea of ‘stoner rock’ is wrong.

My main expansion ideas so far are to write about bands touring and possibly a few interviews. I really want to talk to Gabriele Fiori of the Heavy Psych Sounds record label. There’s a few other heroes I might bother as well.

Ok, I’ll setup an account on this instance.

Thanks. I hope it will get more use.

Ok, I’ll setup an account on this instance.

Thank you!

Cool, thanks.

Cool. Yes, this looks reasonable. It looks logical.

So, my main recommendation is consider the use of virtual bridges to manage the network instead of passthrough. And I recommend installing and using the OVS style virtual bridge.
pve.proxmox.com/wiki/Open_vSwitch

Image

This gives you flexibility going forward. Say you want to run something out in the DMZ instead of behind the firewall, well you just attach that VM to the DMZ bridge instead. And it gives you an easy way to provision network for VMs. You just attach them to the LAN bridge.

(RoaS is a terrible name. Router on a Stick. It means your router is on the same switch as its clients, and all the communications go up and down that one port. It’s a perfectly legit way to manage a network, but sorta ugly and not what you are doing with your fancy 3-port rig. :)

I own 2 OpenWRT routers. Fun little things. Love em.
But running a virtual firewall is a perfectly reasonable goal. OpenWRT doesn’t have the feature set that OPNsense has.
They are not the same sort of product. Lot of common ground, but not the same thing.

There’s a few things we don’t know here.

• Are you hosting more VMs on Proxmox that need network via a virtual switch?
• Are you providing network to other physical devices as well via a switch, so you need to output to that?
• Do you want OPNsense to be your gateway and assign IPs, or do you have a router?
• As you have 3 NICs and sound like you want to use them, let’s assume you aren’t doing RoaS, but this could all be done on one (very busy) NIC.

There’s nothing wrong with your plan, but that’s not how I would do it.
I just don’t pass through NICs. I bond them or I bridge them.
In a virtual world, this sort of task is done with virtual switches. OVS switches at my job.
OVS is a lot easier to use than oldskool linux bridges that come installed with Proxmox. There’s already a dropdown in Network where you can build with OVS objects, but you need to add the package.
apt install openvswitch-switch

• For your setup, I might consider (the onboard!) eth3 as my mgt NIC. That might be handy some day if you have to remove that card. Your server will still be online.

• I would run the WAN line straight to eth1. Add eth1 to a ‘dmz’ virtual switch. Add the OPNsense WAN leg to this dmz virtual switch, so the OPNsense (and nothing else) can directly talk to the upstream router.

• Create a ‘protected network’ virtual switch. Add the OPNsense LAN leg to this virtual switch. VMs can be a member of this downstream protected network and access any services provided by the OPNsense.

• If you need to share the OPNsense protected network back out to other devices, add eth3 to to the protected network switch, and ethernet cable out from eth3 to a dumb switch. Plug other external devices into the dumb switch, and they will be protected by your OPNsense, accessing its services.

Feel free to ignore me here. I build a lot of big things, so I use enterprise-scale techniques. There’s nothing wrong with your pass-through plan.
And … you can do this! I have a somewhat similar setup on my laptop with HyperV, so I can distribute wired (work VPN) and wireless (everything else) internet to guest VMs and the main OS. I made two virtual switches in HyperV.

• The first switch gets exclusive access to my NIC attached to my VPN device. This is the OPNsense WAN leg.
• The second switch is the OPNsense LAN leg and VMs are members.

Good luck!

I own two GLi.net routers. I liked my Flint so much that I bought an Opal for my office and on the road. These machines are well provisioned. The OpenWRT reviews of them say to just leave the stock bootloader installed. I’ve installed all sorts of packages, multiple subnets, VPN, adblock, etc. GLi.net gear is good stuff.