Don’t take this as an endorsement as it’s not really intended to be used for this purpose and I’m probably going to switch, but I’ve been using sendgrid for a few years as I was familiar with it from business use. I was using mandrill before that until they changed their pricing and some other things.

I can reply yo emails. It’s what jaybone said – I use a 3rd party outbound (SMTP).

I use Thunderbird as my mail client. In there you can define multiple IMAP/pop accounts (inbound) and multiple SMTP (outbound). So when I click reply, the SMTP I have set for that email address is a 3rd party service that sends emails using my domain.

This does have a privacy implication, so whether that’s appropriate for you is for you to decide. The 3rd party can read and save a copy of your outbound email inclusive of any content included with it (like the email you’re replying to if you include it).

I’ve run a mail server since the late 90s. I gave up running my own outbound years ago. Whether it gets received is too inconsistent. Primarily, make sure the IP you use isn’t on any spam lists. If it is, get a new IP or try to submit appeals. Make sure you have the standard anti spam/authenticity measures implemented (they’re listed in the OP).

These are the minimum. Years ago it was enough to have reasonable delivery. Unfortunately these aren’t that helpful anymore because spammers also set them up (often with seemingly randomly generated domain names). I assume because not having them was a fairly strong signal for being a spammer, so now they also set them up, which also means there’s not really any configuration / setup you can do to seem legitimate (aside from mail volume and the content itself which will be analyzed).

Anyway running your own SMTP itself is easy. The problem is getting your mail to the inbox or at least spam/junk folder (your mail may get blackholed and not even show up in spam). At least when you get a rejection, you know something is wrong, but many times the receiving server will indicate a success code and simply not deliver it to the user (not even to their spam).

That mindset is part of why I bought a Prusa originally, but felt betrayed by the MMU2S. That was an expensive and crap product that they never fixed. They basically stole from their customers with that one and I wish the community wouldn’t let them get away with it without them making it right, which at this point would be difficult to do.

I don’t know current best options, but last I was looking, the Voron design was where I was leaning. I’d suggest avoiding companies that violate open source licenses.

I used to be a Prusa evangelist, but I don’t forgive them for the MMU2S. Huge amount of people never could get it to work. I’m curious as to the actual percentage working. I couldn’t ever get it to work even with multiple complete rebuilds. That product should have been recalled or a free fix offered. Years later they released a new version that supposedly fixed the issues and you still had to pay to upgrade to it. Discounted if they had a support record for you. If not, full price.

From time to time I see a new Prusa printer and think “that looks good, I should buy it”, and then remember the insane amount of time I wasted trying to get the MMU2S to work. Never buying Prusa again until they provide me the working MMU I paid for at no additional cost. As there’s basically zero chance of that, my boycott continues and I suggest not supporting a company that fucked over their customers with an expensive poorly designed product that they then want them to pay to fix.

I have been trying to come up with a solution that retains anonymity while also preventing spam/scam/etc for a while now. I have a few ideas, but feel there’s room for improvements.Im’m up for discussing related ideas.

Is it resolving to an IPv6 address? If so and you don’t have fully working IPv6, try disabling IPv6 on Debian. I’m mentioning this as a possibility because I’ve personally had this issue with some new Debian installs a few times. The first few it took me more time than I’d like to admit to figure out the issue. If this is the case, then an IPv4 only mirror would avoid it, but you may have other random issues.

If it’s not related to IPv6, then I’d just pick different mirrors until you find one that works. Are you able to access that fastly mirror from another device (via http)?

Please actually compare the certificate when connecting to your server directly (bypassing Cloudflare) and connecting via Cloudflare. An easy way to do this is with openssl CLI:

openssl s_client -servername your-domain-here.org -connect your-ip-here:443 < /dev/null 2>/dev/null | openssl x509 -text -noout

Replace your-domain-here.org with your domain and your-ip-here with your actual server IP, but also do it with the Cloudflare IP.

The section about the “Full (strict)” / “Full” is referring to how Cloudflare verifies the certificate (or not in the case of Flexible and off) between your origin server and Cloudflare – this is not with respect to the client and Cloudflare. The Custom origin certificates are also with respect to Cloudflare and your server (has no impact on certificate used between the client and Cloudflare). Cloudflare still uses a separate certificate that they have issued to themselves and hold the private key to use for the client.

If you pay extra for their “Advanced Certificate Manager”, this allows you to upload a custom certificate to be used between the client and Cloudflare, but you have to provide the private key to Cloudflare because they still terminate SSL/TLS at their servers. Even their “Total TLS” service (part of ACM and the word “Total” could be mistaken to be “total” as in from client all the way to your origin server) does not provide E2EE.

I may be unaware of a newer service offering, but the only way that I’m aware of to get true E2EE is on their Enterprise plan (Keyless TLS). I have a lot of experience with Cloudflare for both personal and Enterprise plan (I was the technical person in charge of the account and configuring and such). Granted, I’ve not been dealing with CF enterprise for a few years now and they may have a new service offering outside of enterprise that I’m not familiar with, but my quick look around still looks like everything aside from Keyless TLS requires either giving them the key (in the case of ACM custom certificates) or they use their own certificate for client <-> Cloudflare. When I did manage the enterprise plan, we actually didn’t use Keyless TLS because we used features that required them to terminate TLS anyway, so I can’t speak to the specifics of it.

I hope I’m wrong though. I’d love to have true E2EE while still getting the DDoS protection on my personal stuff.

You should check the certificate shown to clients when accessing your domain. I think you’ll find that it is not the certificate that you created outside of Cloudflare. Cloudflare doesn’t need your private key as they issue a certificate for your domain to themselves and use that for the connection with the client. The certificate you created is used between Cloudflare and your server. The only option I’m aware to route traffic through Cloudflare where they don’t terminate SSL is an enterprise only feature.

deleted by creator

Could you explain more? Is this just an experiment to see if you can line up and fuse 2 separately printed objects? Are the 2 parts different materials? I feel like I’m misunderstanding.

What I think you’ve done is print 1 object in TPU and then print a 2nd object, also in TPU, close enough to the 1st object such they fuse. Maybe your future plans would help me understand. I’m interested in learning about different techniques.

I had considered doing something like object fusing to create foldable objects, like print the first couple layers in TPU (for both objects as well as a connecting piece between them) and then print 2 separate objects on top of the TPU base – think like a foldable phone case where rather than use a normal hinge, it would be an edge in TPU and the rest is PLA/PETG/whatever. Reason to do the whole base in TPU is that I thought just printing the part that connects the other 2 parts in TPU wouldn’t fuse well enough and would separate with use. I’ve not actually done this.

I also like Frigate and it has some integrations with Home Assistant as well.

Alternatively may be worth trying Shinobi. I tried Shinibi a while ago. I liked how it worked, but had some random UI bugs in the release versions. At that time the UI was being rewritten and while some things were improved in the new (in development at the time) UI, I had other bugs in the new UI (again it was in active development and not considered stable when in used it) and switched to Frigate. This was years ago, but I think I’m going to give it another try as I generally liked the UI and features over Frigate, but Frigate has been reliable.

Blue Iris is for security cameras, so think near real time object detection of multiple video streams.

Years ago i was looking for EV kits and found several people out there selling them. Idk what the current availability is, how much tech they have, or how open they are. The ones I saw were pretty low tech (lacking regen braking and such). Think accelerator pedal controls motor speed and a battery pack is about all they were. Again this was a while ago when I was looking (like 2010ish).

You could offer kits for older vehicles, but considering the cost of the kid and installation cost/effort, does it make sense to start with an older car that may have other issues coming soon?

So what’s the alternative? Start with a new car and throw out the ICE? Sure, but a bit wasteful and even more expensive than an older car or you could find an existing manufacturer (idk like Lotus) who will basically provide you the car without the ICE related components (aka a glider). ;)

Similar to SEO, there’s a lot that isnt public (some for obvious reqsons), so it’s a lot of guess work / trial and error / anecdotes. This volume thing I’m pretty sure is real. What is almost certainly real as well is open rates. If you send a bunch of mail that isn’t opened, this isn’t good either.

The warming up was in the docs for the 3rd party mail service I managed for work a few years ago when we wanted to switch to a dedicated IP. They also cautioned to keep open rates up. I assume they have the data to advise their customers appropriately.

I’ve mostly run my own mail servers since around 2000, and I gave up a few years ago and started using a 3rd party for outbound SMTP. I had considered giving people free SMTP accounts to boost legit traffic, but I didn’t know how to prevent spam/scammers from using it. Like if I posted on Reddit that I was doing that, I’d probably get legit people, but also almost certainly a spammer or few. As such, idk how anyone can practically run their own SMTP server today unless they sort of bootstrap it with a few legit newsletters (that people actually want and open) spread out over multiple days or transactional emails like say a ticketing system (if the people receiving them are the types to actually open them).

As far as personal emails going through the same spam filters, there are some headers newsletters add that I’d assume handles them slightly differently (list-unsubscribe).

As long as you do pass through of the USB device (or USB host controller), it should be fine. The VM acesses it directlty without passing through a virtualized version of the device (like what normally happens with sound, network, graphics) and the VM can even DMA to it. Down side is that the hardware isn’t visible to the host anymore, so if you pass through a GPU, it’s used exclusively by the VM, not the host. If you connect a monitor to the GPU, you see the VM, not the host. So you can only do this with hardware that is intended specifically for use within the VM. Zune management sounds like an ideal use case. See IOMMU if you’re interested in some if the tech side if it.

I had some bad g.skill DDR4 last year. I assumed it was out of warranty. Thanks for the tip!

Slackware was my first and I didn’t know that package managers existed (or maybe they didn’t at the time) to resolve dependencies and even if they did, they probably lagged on versions. I learned true dependency hell when trying to build my own apache, sendmail, etc from source while missing a ton of dependency libraries (or I needed newer versions) and then keeping things relatively up to date. Masochistic? Definitely for me, but idk how much of that was self inflicted by not using the package tool. Amazing learning at the time. This would have been mainly Slackware 3.x and 4.x. I switched to Debian (not arch BTW).

I agree unless the backend server is including it in the response/response headers for some reason, which wouldn’t make a tool like this work in the general case. I thought maybe there was a Cloudflare API that would inadvertently leak the origin IP in an error response in some special case or something of that nature, but I’d assume they would have patched that rather quickly. I’m very curious if this tool ever worked and if so, how.

If you had a single specific host you were trying to find the origin server for, you could basically scan their ASN and well known data center, particularly the big cloud provider, IPs by sending requests to them with the desired host header to try to find an entry point (load balancer, reverse proxy, web server), but I don’t think that’s practical, particularly with a free API that (presumably) responded in a reasonable amount of time. The underlying API used by the linked script is no longer available, so I don’t know if it worked or response times.

Furthermore, a well configured system should ignore requests not originating from Cloudflare’s IPs (or use a tunnel) to prevent bypassing Cloudflare, although I’ve seen plenty not do this. Cloudflare even publishes the subnets you should allow. Easy to integrate that in to a cron type job, terraform, or other way to keep rules updated even though they’ve very rarely changed.

I was curious as to how it’s done unfortunately that repo won’t answer. All it’s doing is calling a separate http api that returns the IP. I looked quickly and didn’t find a repo for that other API.