Recent content on Anim Mouse
IPv6 Netmap is a stateful, 1:1 translation mechanism that modifies only the network prefix of an IPv6 address, leaving the host identifier unchanged. Unlike NPTv6, it preserves connection tracking and stateful firewall while maintaining address transparency. This allows for: Local Prefix Control: Use stable internal addresses (e.g., ULA) regardless of ISP changes. BGP-free Multihoming: Easily map…
IPv6-to-IPv6 Network Prefix Translation (NPTv6) is a stateless, 1:1 translation mechanism that modifies only the network prefix of an IPv6 address, leaving the host identifier unchanged. Unlike traditional NAT, it preserves end-to-end connectivity by maintaining address transparency. This allows for: Local Prefix Control: Use stable internal addresses (e.g., ULA) regardless of ISP changes.…
APatch is now getting detected by my banking apps, and I need money. APatch still does not have a way to hide root efficiently via the kernel, I tried “Cherish Peekaboo” and “NoHello KPM” and root is still being detected, so it is time to switch to KernelSU. SukiSU Ultra is a fork of KernelSU with SUSFS (Suspicious File System) built-in. Fortunately, Nothing Phone 2a Plus…
Cloudflare Mesh (formerly WARP Connector) is an overlay network like ZeroTier and Tailscale but instead of peer-to-peer, you connect to the nearest Cloudflare PoP using WireGuard just like NordVPN Meshnet. Finally, a free site-to-site VPN from Cloudflare. Because Cloudflare Mesh uses WireGuard, we can run Cloudflare Mesh nodes on any devices that can run WireGuard. Cloudflare Zero Trust settings…
The best and clean version of Windows 11 24H2 A version of Windows 11 without bloatware. Windows 11 2024 Update (24H2) Torrent Download Link (Magnet Link): Windows 11 LTSC 2024 26100.1742 64-bit torrent 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 Name: en-us_windows_11_enterprise_ltsc_2024_x64_dvd_965cfb00.iso Size: 5125844992 bytes : 4888 MiB CRC32: 761C1980 CRC64: DADA0D5176762ECE SHA256:…
Cloudflare Mesh (formerly WARP Connector) is an overlay network like ZeroTier and Tailscale but instead of peer-to-peer, you connect to the nearest Cloudflare PoP using WireGuard just like NordVPN Meshnet. Finally, a free site-to-site VPN from Cloudflare. Because Cloudflare Mesh uses WireGuard, we can run a Cloudflare Mesh node on MikroTik. Generate Cloudflare Mesh WireGuard configuration Follow…
The Nothing Phone 2a Plus is currently my main phone. Prerequisites Android SDK Platform-Tools Google USB Driver APatch Get and patch boot.img Update the phone first. Get your build number. For this example, my build number is PacmanPro-U2.6-241217-1545 . Go to Nothing Archive 2a Plus and find your build number there. Click OTA Images for your build number. Download image-boot.7z . Example:…
The best and clean version of Windows 11 IoT 24H2 A version of Windows 11 without bloatware. Windows 11 IoT 2024 Update (24H2) Torrent Download Link (Magnet Link): Windows 11 IoT LTSC 2024 26100.1742 64-bit and arm64 torrent 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 Name: en-us_windows_11_iot_enterprise_ltsc_2024_x64_dvd_f6b14814.iso Size: 5144817664 bytes (4906 MiB) CRC32: 482A5898 CRC64:…
A geofeed is a CSV file where you set the geolocation for a specific IP prefix. Geolocation providers will use your geofeed in order to set the location of your IPv6 address in their database. It must be hosted on a web server and be declared on the inet6num object’s geofeed: field. Create a geofeed.csv file Format: network, iso_country code, iso_region_code, city_name, postal_code Example:…
One of the RIPE’s requirements in order for you to have an ASN is that you must be multihomed. Benefits of having multiple upstreams: Your ASN will stop running afoul of RIPE’s requirement to be multihomed in order to have an ASN. If your main upstream goes down, you still have a backup working, like a multiple WAN. You can potentially get better routing if your other upstreams have a…
Resource Public Key Infrastructure (RPKI)’s Route Origin Authorizations (ROAs) is like a route6 object found in the Internet Routing Registry (IRR), but with added security since only those who have the private key for the prefix can make and sign ROAs. Anyone can make a route6 object for a given ASN and prefix, but making ROAs requires someone who has the private key to make it. Set up RPKI…
Now that we have successfully announced our ASN, it is time to do some multihoming and connect to an Internet Exchange. An Internet Exchange Point (IXP) is basically a big Ethernet switch that allows people with an ASN just like you to peer with each other via BGP. Benefits of connecting to IXPs: You can easily have more upstream; by having more upstream, your ASN will stop running afoul of…
One of the benefits of IPv6 is that you have a huge number of IP addresses that you can assign to all of your devices. Also, unlike IPv4, you don’t need to worry about masquerading aka NAT. This tutorial assumes you have Debian installed on your VPS. We will also use MikroTik RouterOS to assign IPv6 addresses to our devices. IP Address Management (IPAM) The implementation requires the…
Now that we have our own IPv6 address working, it’s time to use it as a proxy to your home. This tutorial assumes you have Debian installed on your VPS. Take note that SOCKS5 is unencrypted, you should only run it inside an SSH tunnel or a WireGuard tunnel. Since Dante can use a specified source IP, it does not require setting a source IP on the routing table. Setup Dante SOCKS5 proxy…
Your first BGP session, a comprehensive beginners guide to BGP. Finding a VPS that can provide BGP session You can find VPS providers here that provides BGP session. BGP Services BGP Cheap Networking: IPv6 Discord server For this tutorial, I use a BGP IPv6 only VPS from iFog GmbH since it is very cheap. Since this is an IPv6 only VPS and I don’t have native IPv6, I use Cloudflare WARP to SSH…
Now that you have got your very own ASN, it is time to set up your ASN. Create a PeeringDB account A PeeringDB is essentially a social media for your ASN, if you are used to looking for someone ASN and wondering where they set their information, is it in PeeringDB. Create a PeeringDB account, preferably using the same email on your ASN’s WHOIS for faster verification. Affiliate your ASN.…
Buying your own ASN is the start of your ASN journey. Regional Internet Registry (RIR) Regional Internet Registries are analogous to domain registries. There are 2 RIRs that are attainable for hobby use; RIPE NCC and ARIN. Other RIRs such as APNIC, LACNIC, and AFRINIC are unattainable unless you have deep pockets. RIPE NCC RIPE NCC is based in Europe. If you are outside their service area, they…
Hello, and welcome to my ASN journey, where we explore BGP, and getting our own IP address. People are buying domain names, which is part of what we called “internet resources.” If an ordinary people like me can buy domain names, then what about owning an IP address? Why can’t ordinary people buy an IP address just like domain names? Most of the IP address that exist today are…
Install DNS Proxy Add dnsproxy to your environment.systemPackages like this: 1 2 3 environment . systemPackages = with pkgs ; [ dnsproxy ]; Use a local DNS server 1 2 networking . nameservers = [ '127.0.0.1' '::1' ]; networking . networkmanager . dns = 'none' ; Create a systemd service to run DNS Proxy Note that you need to specify a bootstrap server since by default, dnsproxy uses a…
DNS over QUIC (DoQ) is a new protocol for encrypted DNS queries that uses QUIC which is now standardized on RFC 9250. Unlike DNS over TLS (DoT), DoQ is faster as it uses UDP instead of TCP. Unlike DNS over HTTPS and HTTPS/3 (DoH and DoH3), DoQ does not attempt to hide itself to censors so this is good if you don’t have censorship in your country. Install DNS Proxy Download dnsproxy here for…
Since GitHub started supporting GitHub SSH commit verification in 2022, 1 I started using my SSH key in 2023 to sign my Git commits. Why? Because, I think managing my GPG keys is too complicated, and I don’t need GPG’s web of trust, since no one wanted to perform a key signing party with me. So in 2023, I started winding down the usage of my GPG key, and started transitioning to my SSH…
IPv6 only VPSes are becoming popular right now, since some providers are now requiring you to pay to have an IPv4 address because of the IPv4 address exhaustion. But what if you need to connect to IPv4 only servers on your VPS? And also, what if you wanted to connect to your IPv6 only VPS on your IPv4 only device? Cloudflare WARP and Zero Trust has got you covered. Note that this will only allow…
Windows 10 File Explorer feature 18755234 named “SearchSuggestions” was a new feature of File Explorer on Windows 10 that was introduced in version 1909. 1 What it does, made the search bar on File Explorer thicker and coupled with new features like Bing search straight from your File Explorer. The problem with this update is that it made the search function on Windows Explorer slow,…
Hurricane Electric provides an IPv6 tunnel broker via 6in4 for those who don’t have IPv6, but the problem is, 6in4 aka protocol 41 SIT (Simple Internet Transition) does not work behind NAT (or worse CGNAT) so we need to rent a VPS that allows us to get Hurricane Electric IPv6 connectivity and tunnel it though WireGuard that we can pass though NAT. Get VPS Get a VPS that is nearest to…
Setup Route64 Create IPv6 WireGuard tunnel Login to Route64 manager. Go to IPv6 Tunnelbroker, and Add new tunnelbroker. Choose your nearest PoP on Interface dropbox. On Tunnel type dropbox, choose Wireguard4. Enter your IP address on Remote endpoint. Click Create Tunnelbroker Service. Get WireGuard configuration Go to IPv6 Tunnelbroker, and List all tunnels. On your tunnel, click the meatballs…
SSH keys Anim Mouse AnimMoz Key 1 2 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOaZjKxxkbg8q9NasTp/5SbrKyJPmnxzlq8beLfKu23O Anim Mouse AnimMoz Key SHA256:AnimMozDwXI1wugvSdDHqlgDI9jbQEhBxTtSeddzjqU Anim Mouse animmus Key 1 2 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBo2gvc7EhlUv5GLFNK4zNaknHU7BNojODSxUWgd2GgN Anim Mouse animmus Key SHA256:animmusFsTo52XjCpt/mczHKawmdSx6YBDyGbmm7vs0
This is my standardized procedure in Windows post installation. Adjust time zone. Adjust region format. Adjust NTP to the nearest server. Turn off “Automatically manage paging file size for all drives” in virtual memory. Turn on Data Execution Prevention (DEP) for all programs and services except those I select. Turn on System Restore and allocate around 10%. Change OS drive name.…
Cloudflare WARP-to-WARP is an overlay network just like ZeroTier and Tailscale but instead of peer-to-peer, you connect to the nearest Cloudflare PoP using WireGuard. Because Cloudflare WARP uses WireGuard, we can run Cloudflare WARP on MikroTik and port forward on our virtual network at Cloudflare. Update: A new tutorial that uses WARP Connector instead is here . It works the same but you…
Use your external hard drive formatted to Btrfs for your Raspberry Pi. Select HDD Find your external HDD. It mostly starts at /dev/sd . sudo fdisk -l Enter fdisk for formatting by selecting your external HDD. For this example, we choose /dev/sda . sudo fdisk /dev/sda fdisk Create a new empty GPT partition table. g Create partition. n Select partition number. 1 Select the first sector. The default…
Croc is a tool that allows any 2 computers to simply and securely transfer files and folders. Most of the time, the 2 computers are behind NAT, and does not have IPv6, so file transfers uses schollz’s own funded public relay and that costs him $40-50/month. 1 We can run our own relay and host it on VPS, but that also cost money just for hosting a relay. We instead try to use Cloudflare…
Update: As of 2024, Facebook automatically add the @ (at) symbol on your YouTube handle. This tutorial is not needed anymore. This post is archived for future reference. On Facebook, adding your YouTube handle does not work, as Facebook will remove the @ (at) symbol. YouTube links without the @ symbol only works if you have custom URL. To make YouTube handles work on Facebook, you need to add the…
Bufferbloat is a problem for many of us gamers and users that need low latency internet just because the counters at the supermarket don’t want to let someone with a single item to cut into the queue of people with multiple items in the cart. 1 We aim to fix that problem by letting someone with a single item in the checkout lane cut though the line using Smart Queue Management (SQM). 2…
Torrent Webseed Creator is the alternative to BurnBit and URLHash. Click “Use this template” and then click “Create a new repository”. Type your own repository name, and then click “Create repository from template”. Now, you will be redirected to your own repository generated from my template. Go to the Actions tab, and select which one program you will use to…
When I was 6 years old, my brother introduced me to Grand Theft Auto: San Andreas (GTA: SA), I really loved playing that game, I have discovered that open world games are my favorite. Since then, I played every single GTA game there was, on my PC: GTA 1, GTA 2, GTA III, GTA: VC, GTA: SA, GTA IV, GTA V, and GTA Advance, and on my PSP: GTA LCS, GTA VCS, and GTA: CW. After I played every single GTA…
We got mentioned in weeklyOSM 579! Anim Mouse noticed a changeset that spans four continents and contains only a single change. Although it was pointed out in the discussion that a changeset should contain as small an area as possible, sometimes it is not possible when the element itself is very large, in this case France, including its overseas territories and départements.…
Main Computer CPU 2022 - present: AMD Ryzen 7 5700X 2017 - 2022: Intel Core i5-7400 2015 - 2017: Intel Pentium G2010 CPU Cooler 2022 - present: PCCooler Paladin EX400 ARGB 2021 - 2022: PCCooler GI-X4S 2015 - 2021: Intel E97379-003 Motherboard 2022 - present: MSI B550-A PRO 2017 - 2022: MSI H110M PRO-VH PLUS 2015 - 2017: Biostar H61MLV Ver. 7.0 GPU 2022 - present: ASRock AMD Radeon RX 6700 XT…
You don’t have an IPv6 connection but the server you need to connect has only an IPv6 address because of the IPv4 address exhaustion and some providers are now requiring you to pay to have an IPv4 address. Note that this will only provide an IPv6 connectivity, not a public IPv6 address that you can connect to from the outside, since Cloudflare WARP only provides a single NATed IPv6. Update:…
Make sure the LAN IP address subnet of the bridged modem is different from LAN IP address subnet of the router. For example, if the router IP is 192.168.1.1/24 , the modem should be on 192.168.10.1/24 . Add another IP address on the WAN side of the router. This router IP address should be in the same subnet and different address as the modem. If your modem is on 192.168.10.1 , use this command:…
You have an IPv6 connectivity in your WAN or you use a VPN, but sadly it only provides /128 , requiring you to do NAT. Yes, I know NAT is bad, awful when we are talking about IPv6, but since your provider only provides a single IPv6 address, only the router has IPv6 connectivity, and the rest of your devices doesn’t. So we need to perform NAT66 or masquerade to be able to access the IPv6…
Windows 10 version 1803 and later disable Teredo by default, so we need to enable it in order to get IPv6 behind NAT using Teredo. Choose Teredo server here . Open an elevated command prompt. Type netsh interface teredo show state to show the status of Teredo tunnel. Type netsh interface teredo set state client example.com replacing example.com with your chosen Teredo server. Type netsh interface…
List of currently working Teredo servers and relays. Teredo servers It seems like Teredo is dead except for the purpose of relaying. Microsoft servers These servers allow only to connect to other Teredo addresses on the same server for the purpose of NAT traversal. win10.ipv6.microsoft.com win1910.ipv6.microsoft.com Currently down TREX Regional Exchanges : teredo.trex.fi (Down since December 2022)…
Chihaya on Heroku Chihaya HTTP torrent tracker tunneled from a worker dyno using Cloudflare Tunnel client . Purpose I wanted to see if Heroku is viable in running a HTTP based torrent tracker, but running a torrent tracker will heavily strain the Heroku’s HTTP routers with that so many requests. Others have ran a torrent tracker on Heroku, but they got shut down due to the number of HTTP…
This will download and install Microsoft Office 2021 Professional Plus. This will install retail licensed Office 2021 that are convertible to volume license . Includes both 64-bit & 32-bit. Download Microsoft Office 2021 Professional Plus IMG on TechBench . Choose Type: Microsoft Office | Version: Microsoft Office 2021 | Edition: Office 2021 Professional Plus | Language: (e.g. English) | File:…
Do you already have IPv6? What is IPv6? It is a new protocol for the internet. The current one called IPv4 soon will not have enough addresses for everyone, IPv6 will help solve this problem. This is not a problem at all because we have NATs, they are great. This may work for you because you are using only small number of hosts at the same time and control all of them, but if you have a lot of…
List of Internet Service Providers in the Philippines with Internet Protocol version 6 PLDT Philippine Long Distance Telephone (AS9299) Dito Telecommunity (AS139831) Globe Telecom (AS4775) Globe Telecom 5G (AS132199) Sky Cable Sky Fiber (AS23944) SkyBroadband Provincial Network (AS45622) Radius Telecoms Red Fiber (AS55821) St. Joseph Cable TV System (AS141676) Starlink Philippines (AS14593)…
I have been using OpenNIC DNS servers recently, and wondering why some of my devices like our TCL smart TV can’t connect to the internet but our computers can. Troubleshooting my network, I found the culprit: OpenNIC Anycast goes down. These are the IP address of OpenNIC Anycast servers: 1 2 3 4 185.121.177.177 169.239.202.202 2a05:dfc7:5::53 2a05:dfc7:5::5353 And checking OpenNIC’s…
DNS-based Authentication of Named Entities (DANE) is a way to authenticate TLS client and server entities without a certificate authority (CA). Since certificate authorities within the last few years suffered serious security breaches , I’m fond of the idea of removing certificate authorities in the trust chain and allows us to create certificate for our server for free by using self-signed…
GitHub Actions Hackathon 2021 Since GitHub Actions is an IaaS, and Actions Hackathon 2021 allows Wacky Wildcards, I wonder if I can use it as a proxy and view the internet from the perspective of GitHub’s servers. So I created a proof of concept SOCKS5 proxy hosted on GitHub Actions. As GitHub Actions runners are firewalled from incoming connections, what I did is connect to it through…
The best and clean version of Windows 10 IoT 21H2 A version of Windows 10 IoT without bloatware. Windows 10 IoT November 2021 Update (21H2) Torrent Download Link (Magnet Link): Windows 10 IoT LTSC 2021 19044.1288 64-bit torrent 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 64-bit ISO file name: en-us_windows_10_iot_enterprise_ltsc_2021_x64_dvd_257ad90f.iso Size: 4851668992 bytes (4626 MiB) CRC32: 188C9D0D…
The best and clean version of Windows 10 21H2 A version of Windows 10 without bloatware. Windows 10 November 2021 Update (21H2) Torrent Download Link (Magnet Link): Windows 10 LTSC 2021 19044.1288 64-bit & 32-bit torrent 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 64-bit ISO file name: en-us_windows_10_enterprise_ltsc_2021_x64_dvd_d289cf96.iso Size: 4899461120 bytes (4672 MiB) CRC32: 1D39D1E8 CRC64:…