3 ms·

Clueless lol. This is not about any of that. I run Plex on my local network at plex.domain.com. Plex sends logs to the internet with its local domain in the str

Clueless lol. This is not about any of that. I run Plex on my local network at plex.domain.com. Plex sends logs to the internet with its local domain in the string. Leak. There is no easy way to solve this without deeply inspecting each packet a service sends outside your network, and even that doesn't work when services use SSL certificates and certificate pinning preventing MITMs.

lsofzz 9mo ago
wtf are you allowing plex to initiate outbound connections to begin with? and why is plex not in it's own VLAN with a egress FW rules to second with? lastly, why aren't you running snort/suricata to inspect the packets originating at plex? let me solve this problem for you - it probably doesn't bother you at all. otherwise, you'd scratched your itch a long time ago. > Clueless lol. It's ok to be clueless. And, it's ok to be working for a FAANG and be clueless too.
- imtringued 9mo ago
  You sound so confident about this and yet you're listing a bunch of useless advice that doesn't work, because the analytics are integrated into the web interface and therefore executed inside the web browser. To guard against that, you'd have to block all outbound connections on your laptop and all other devices that could potentially access the web interface.
  - lsofzz 9mo ago
    [flagged]
- lxgr 9mo ago
  > It's ok to be clueless. And, it's ok to be working for a FAANG and be clueless too. Glad you're not being too hard on yourself :)
- zaptheimpaler 9mo ago
  Its great to be clueless, thats how you learn! Just dont flex and demean other people like "Coming from someone who worked at FAANG, this is sub par post." if you're clueless. Again everything you've said does not really apply here or is impractical.
  - lsofzz 9mo ago
    > [ ... ] if you're clueless. Done it. Therefore, I flex. I was talking about clueless folks like yourself. > Again everything you've said does not really apply here or is impractical. YMMV. Always.

lsofzz 9mo ago

wtf are you allowing plex to initiate outbound connections to begin with? and why is plex not in it's own VLAN with a egress FW rules to second with? lastly, why aren't you running snort/suricata to inspect the packets originating at plex? let me solve this problem for you - it probably doesn't bother you at all. otherwise, you'd scratched your itch a long time ago. > Clueless lol. It's ok to be clueless. And, it's ok to be working for a FAANG and be clueless too.

imtringued 9mo ago
You sound so confident about this and yet you're listing a bunch of useless advice that doesn't work, because the analytics are integrated into the web interface and therefore executed inside the web browser. To guard against that, you'd have to block all outbound connections on your laptop and all other devices that could potentially access the web interface.
- lsofzz 9mo ago
  [flagged]
lxgr 9mo ago
> It's ok to be clueless. And, it's ok to be working for a FAANG and be clueless too. Glad you're not being too hard on yourself :)
zaptheimpaler 9mo ago
Its great to be clueless, thats how you learn! Just dont flex and demean other people like "Coming from someone who worked at FAANG, this is sub par post." if you're clueless. Again everything you've said does not really apply here or is impractical.
- lsofzz 9mo ago
  > [ ... ] if you're clueless. Done it. Therefore, I flex. I was talking about clueless folks like yourself. > Again everything you've said does not really apply here or is impractical. YMMV. Always.