Quick summary:
As has already been stated, communication between devices on the same VLAN (or layer-2 segment) does not cross a router but only the switch(es) in between the devices.
Depending on the switches' capabilities, there are several methods to control traffic within a VLAN.
VLAN-based ACLs: packets are filtered when entering a certain VLAN from a port or by layer-3 switching
port-based ACLs: packets are filtered when they are received on a certain port
port-based filtering: packet flows are limited to certain ingress/egress port combinationsACLs work by permiting or denying certain source/destination IPs, or TCP or UDP ports. E.g. you can permit all devices within the 10.1.2.0/24 to communicate with a server at 10.1.2.10 while denying all other inter-VLAN traffic:
1000 permit ip 10.1.2.0/24 10.1.2.10/32
1010 permit ip 10.1.2.10/32 10.1.2.0/24
1010 deny ip 10.1.2.0/24 10.1.2.0/24
9999 permit ip any any
Port-based filtering works by limiting the client ports to communication with the server and router ports and filtering all else. This is sometimes also called protected ports or source-port filtering where these ports are not allowed to communicate with each other. Port-based filtering doesn't work well across up and downlinks as they cannot distinguish between wanted server and unwanted peer traffic across multiple switches.
Guide to secure your KeePass Windows classic installation.
This includes noScreenShot, timeout, minimum key security level...
Astuces pour faire bien ses meubles soi-même
3-useful-links
https://blog.alexis.lc/docker-macvlan-network-synology
https://gist.github.com/xirixiz/ecad37bac9a07c2a1204ab4f9a17db3c
https://community.synology.com/enu/forum/1/post/120118
https://techoverflow.net/2022/03/27/a-working-traefik-docker-compose-minio-setup-with-console/
https://stackoverflow.com/questions/69385638/minio-install-behind-traefik
https://www.ipaddressguide.com/cidr
xmlrpc.php should be disabled in Wordpress except if specific use case.
In .htaccess file:
Block WordPress xmlrpc.php requests
<Files xmlrpc.php>
order deny,allow
deny from all
allow from xxx.xxx.xxx.xxx
</Files>
A great application to log timing
Cheogram is a set of services that connect all open communication networks together, allowing you to reach all your contacts from a single app.
Reason why no timelines in Synology Photos...
What the hell ?!?!
Reason why no timelines in Synology Photos...
What the hell ?!?!
