I don’t need help, it’s just too implausible for me not to be curious.

Aside, it’s been fascinating anonymously watching this network evolve over the past decade as a citizen-user who has business in the building. I’ve been battling with the faceless network admins trying to find ways to access my home lab year-after-year.

First they blocked my personal domain because I tried to reach vpn.mydomain.com. Then I couldn’t use OpenVPN at all (or I was too green at the time to bypass). Next, Wireguard worked for a while until it didn’t. Now tailscale is working but I’m forced to use the slow DERP servers to reach home. I might try Headscale with a different personal domain next.

My next project is a little more radical - hiding an old pi 3B on the network as an exit node on that network. Then I can use the state-owned IP instead of my home one when websites are dicks about third-party VPN IPs.

  • SpaceNoodle@lemmy.worldEnglish
    2·
    3 months ago

    I’d suggest not introducing a security hole into a government building’s network, unless your goal is actually imprisonment.

  • catloaf@lemm.eeEnglish
    2·
    3 months ago

    My next project is a little more radical - hiding an old pi 3B on the network as an exit node on that network

    Holy fucking shit I cannot stress how terrible of an idea this is.

  • computergeek125@lemmy.worldEnglish
    1·
    3 months ago

    I work IT professionally.

    For the love of all that is still sane in this world, PLEASE STOP. If you are in a building under ANY kind of professional IT organization (government or corporate), there probably is a network access terms of use. If you violate that, many of these ToS have teeth to at minimum ban you from the network. I hope you can get your job done without a computer or on cellular reception (if you still have a job after they find out). Since it’s a government site, there may be additional legal penalties for fussing with a government network without authorization. If you think you need us to help you bypass this, you may be needing a lawyer.

    If IT is blocking something, they probably have a reason. It might not be a good reason, but it’s a reason. Doesn’t matter if it is right, it matters what they set in the policy. If you believe the policy is wrong, the correct answer is ALWAYS to submit an IT ticket, then raise an escalation with your supervisor/point of contact with the building if that doesn’t work, or HR if neither of the first two options work. In that order. Do not skip processes, do not pass go, do not collect $200. There is a minor exception where you can skip steps of the management chain in certain situations (like going to your boss’s boss etc) if such an individual is open to such communication.

    Probably the easiest one is to ask IT about the Lemmy instance. It might have gotten blocked by accident, or it didn’t show up in whatever domain reputation database they’re using. I know my own personal homelab domain got hit with that - reason screen said “potential malware”, and when I filled out the lil request exception form with my personal email asking why the domain was blocked for malware and saying I owned the server, turns out that didn’t go to our third party network vendor (despite the logo) it went straight to IT and I got called into my boss’s office to confirm my story. I confirmed it was me, indicated why I did what I did, and what the domain was used for - it was a subdomain hosting a Minecraft server control panel. Site was unblocked in a manner of hours. The worst thing they can say is no. And if they block reddit or other Lemmy instances afterwards, well, I guess that was against policy. See earlier remarks about policy.

    Lastly, and I cannot say this in loud enough text

    DO NOT HIDE A PHYSICAL DEVICE ON A NETWORK YOU DO NOT HAVE AUTHORITY TO DEPLOY TO

    See paragraph 1 about network access policies. Most forbid this kind of thing. <3 Plus you’re just going to get yourself into an arms race between detection and hiding. Please do not the cat network. They will find you. It’s not an if it’s a when. And the longer it hides there the worse your consequences will likely be when it is found.

  • Throwaway@lemm.eeEnglish
    1·
    3 months ago

    Well, I wouldnt be surprised if it justs on a generic social media blocklist, along with facebook and the like.

  • dgmib@lemmy.world
    English
    1·
    3 months ago

    If you have a business in the building, can you not just have a local ISP provide you with a dedicated connection.

    Seems to me that would be more cost effective than constantly fighting admins.

    As for your actual question, they probably block the entire.ml TLD.