From 680f1eca80c92623a1f0368c293f385dbb958d08 Mon Sep 17 00:00:00 2001 From: Kathleen Fitzpatrick <3170201+kfitz@users.noreply.github.com> Date: Sun, 10 Aug 2025 08:26:22 -0400 Subject: [PATCH] new post 250810 --- blog/index.html | 5 + distinguished/index.html | 69 ++- feed/feed.xml | 43 +- feed/masto.xml | 10 +- index.html | 14 +- networking-continued/index.html | 730 ++++++++++++++++++++++++++++++++ sitemap.xml | 7 +- tags/tinkering/index.html | 7 +- 8 files changed, 863 insertions(+), 22 deletions(-) create mode 100644 networking-continued/index.html diff --git a/blog/index.html b/blog/index.html index 8e265eef85..1bcf9a0cc3 100644 --- a/blog/index.html +++ b/blog/index.html @@ -548,6 +548,11 @@ pre[class*="language-diff-"] {
2025
    +
  1. + Networking Continued
    + +
    2. +
  2. Distinguished
    diff --git a/distinguished/index.html b/distinguished/index.html index 5580981936..1848c171f1 100644 --- a/distinguished/index.html +++ b/distinguished/index.html @@ -673,7 +673,7 @@ hr.new {

    I am grateful to have received so much support for the work I've done over the years, both on campus and off, from publishers and funding agencies, from colleagues and collaborators, from administrators, from friends and family. But my work has always been on the edge of so many fields -- not really literary studies, not really media studies, not really digital humanities, not really higher education studies -- that it has perpetually felt as though it was at risk of falling through the cracks. So this is a career milestone of a sort that I never thought I'd reach.

    I'll also note that my institution, like so many large public R1s, heavily favors engineering, business, medicine, and the sciences; the College of Arts & Letters has been significantly underrepresented in university honorifics in recent years. I am the third University Distinguished Professor to be named in the college since 2003 -- twenty-two years! -- and the two scholars named during that period hold joint appointments with colleges on the STEM side of campus. I collaborate with STEM-leaning folks, and I have been successful in obtaining funding from agencies that are valued in that universe, so I acknowledge that I am recognizable to a university-wide committee in ways that someone more squarely located in a humanities-based discipline might not be. I nevertheless hope that I can find ways to enable this new title to help attune the university at large to the crucial kinds of work being done across the arts and humanities.

    -
    • ← Previous
      All This
      • + @@ -759,7 +759,7 @@ hr.new { -

      10 Likes

      +

      14 Likes

      @@ -892,11 +892,63 @@ hr.new { + + + + + + + Fabrizio Musacchio + + + + + + + + + + + + + James Louis Smith + + + + + + + + + + + + + schopie1 + + + + + + + + + + + + + R Eric Knappe + + + + + +
      -

      3 Reposts

      +

      4 Reposts

      @@ -932,6 +984,17 @@ hr.new { + + + + + + schopie1 + + + + +
      diff --git a/feed/feed.xml b/feed/feed.xml index 3c35820c13..67d65d8204 100644 --- a/feed/feed.xml +++ b/feed/feed.xml @@ -5,11 +5,44 @@ The long-running and erratically updated blog of Kathleen Fitzpatrick. - 2025-06-26T12:30:07Z + 2025-08-09T20:38:09Z https://kfitz.info/ Kathleen Fitzpatrick + + Networking Continued + + 2025-08-09T20:38:09Z + https://kfitz.info/networking-continued/ + <p>As you may recall, I've been experimenting with setting up a home server, and several months ago had gotten stuck on an issue related to <a href="https://kfitz.info/networking/">the structure of my network</a>. <a href="https://kfitz.info/networking/?ht-comment-id=26755687">Taylor hopped in</a> and really helped me understand how everything <em>ought</em> to work.</p> +<p>But it's not working. And I'm again flummoxed.</p> +<p>Here's the setup:</p> +<ol> +<li>I have my ISP's modem/router/gateway monstrosity (the BGW320) running in IP Passthrough mode, with the WAN IP address being passed to my gateway Eero.</li> +<li>I have my Eeros set to Automatic DHCP mode; the gateway Eero is successfully getting the WAN IP address and is handing out private IP addresses in the 192.168.4.X range.</li> +<li>I have a registered domain name (let's say <code>example.net</code>), and I have an A record at my DNS service pointing to my WAN IP address. I have also created a subdomain A record (<code>service</code>) pointing to the same IP address. DNS Checker gives me all green checks for both.</li> +<li>I have a mini server, running Proxmox.</li> +<li>I have installed Nginx Proxy Manager in a container on the Proxmox (an LXC), which is running and reachable at the static address 192.168.4.11.</li> +<li>I have installed the service I'm trying to expose in another LXC, which is running and reachable at the static address 192.168.4.12.</li> +<li>I have set up port forwarding on my Eero network for ports 80 and 443 to 198.168.4.11.</li> +<li>I have created a proxy host in NPM, for which all the dots are green: +<ul> +<li>Domain Name: <a href="http://service.example.net">service.example.net</a></li> +<li>Scheme: http</li> +<li>Forward Hostname/IP: 192.168.4.12</li> +<li>Forward Port: <code>port</code></li> +<li>Block Common Exploits and Websockets Support on</li> +<li>Access List: Publicly Accessible</li> +</ul> +</li> +</ol> +<p>But <code>http://service.example.net:port</code> refuses to connect, as does <code>http://example.net</code>, either from my local network or through my VPN. And <code>traceroute</code> to either <code>example.net</code> or <code>service.example.net</code> stalls out.</p> +<p>I've checked the Proxmox firewall and inbound 80 and 443 are both set to accept. I've checked to see whether my ISP's montrosity's firewall could be blocking those ports but... who's to say. The NAT/Gaming (sigh) panel of the admin interface isn't showing the gateway Eero as a device that could need anything in particular sent its way, so my assumption is that IP Passthrough passes inbound requests through for the Eero to sort out, too.</p> +<p>I've searched around, and the nearest thing I've found to what I'm trying to do and how I'm trying to do it is in <a href="https://www.reddit.com/r/Proxmox/comments/u857x5/nginx_proxy_manager_setup_troubles/">this Reddit thread</a>, but the problem in that case is back at the beginning with the A record, which is definitely not my issue, unless I spelled my domain name wrong at the DNS. (I didn't.) And that person was able to get to the NPM congratulations page; my connections get refused entirely.</p> +<p>If anybody sees anything that I should adjust, or take a look at adjusting, I'd be grateful to hear. I'm already <em>this</em> close to dumping my ISP anyhow due to some ongoing service issues, and getting rid of their annoying modem/router/gateway would be a bonus, but I'm not entirely certain that it's the problem, and I'd love to find a way through without taking that step.</p> + + Distinguished @@ -132,14 +165,6 @@ <p>“Independence” and “neutrality” are not the same thing. In the South African context, neutrality would have meant acceding to academic apartheid. Once the backstory is supplied (and history returned to theory, as in the work of Charles Mills), the lesson then is that the university must remain independent from the government but <em>cannot</em> remain neutral. Faculty must make judgment calls on the university's behalf that take into consideration the historical and political circumstances in which their universities find themselves. (211)</p> </blockquote> <p>Two months later, it is clear to me that “thoughtful restraint” will not only not protect the university from those who wish to do it harm, but will erode the very independence that the institution needs in order to survive right now: the ability to bring the faculty’s best judgment to bear in declaring that there <em>are</em> truths that cannot be ordered away. Our institutions cannot live out their most basic reason for being without a willingness to point out and reject outright lies, and without the ability to say that there are issues — like the basic humanity of each and every person on campus, and that they deserve respect, safety, and opportunity — that should never be up for debate.</p> - - - - Holding Space - - 2025-01-31T20:00:18Z - https://kfitz.info/holding-space/ - <p>Here I was, super happy with my return to blogging in 2024. I wasn't crazy prolific or anything, but I did manage to post <em>something</em> every month except for April. What happened in April? <a href="https://kfitz.info/things-that-happened/">Kind of a lot.</a> But nothing compared with January. Someday I hope to have the time and space necessary to write about at least part of it, but that day is not today. Today, all I can do is close out January by trying to hold a bit of space toward a better moment. May that better moment come soon, for all of us.</p> \ No newline at end of file diff --git a/feed/masto.xml b/feed/masto.xml index e9a2bcd5f5..2956a464dd 100644 --- a/feed/masto.xml +++ b/feed/masto.xml @@ -545,13 +545,21 @@ pre[class*="language-diff-"] { The long-running and erratically updated blog of Kathleen Fitzpatrick. - 2025-06-26T12:30:07Z + 2025-08-09T20:38:09Z https://kfitz.info/ Kathleen Fitzpatrick kfitz@kfitz.info + + Networking Continued + + 2025-08-09T20:38:09Z + https://kfitz.info/networking-continued/ + As you may recall, I've been experimenting with setting up a home server, and several months ago had gotten stuck on an issue related to the structure of my network. + + Distinguished diff --git a/index.html b/index.html index 415cf257e5..9c4481eefe 100644 --- a/index.html +++ b/index.html @@ -14,7 +14,7 @@ - + + + + +
      + kfitz + +
      + + + + + + +
      + + +

      Networking Continued

      + + + +

      As you may recall, I've been experimenting with setting up a home server, and several months ago had gotten stuck on an issue related to the structure of my network. Taylor hopped in and really helped me understand how everything ought to work.

      +

      But it's not working. And I'm again flummoxed.

      +

      Here's the setup:

      +
        +
      1. I have my ISP's modem/router/gateway monstrosity (the BGW320) running in IP Passthrough mode, with the WAN IP address being passed to my gateway Eero.
        2. +
      2. I have my Eeros set to Automatic DHCP mode; the gateway Eero is successfully getting the WAN IP address and is handing out private IP addresses in the 192.168.4.X range.
        3. +
      3. I have a registered domain name (let's say example.net), and I have an A record at my DNS service pointing to my WAN IP address. I have also created a subdomain A record (service) pointing to the same IP address. DNS Checker gives me all green checks for both.
        4. +
      4. I have a mini server, running Proxmox.
        5. +
      5. I have installed Nginx Proxy Manager in a container on the Proxmox (an LXC), which is running and reachable at the static address 192.168.4.11.
        6. +
      6. I have installed the service I'm trying to expose in another LXC, which is running and reachable at the static address 192.168.4.12.
        7. +
      7. I have set up port forwarding on my Eero network for ports 80 and 443 to 198.168.4.11.
        8. +
      8. I have created a proxy host in NPM, for which all the dots are green: +
          +
        • Domain Name: service.example.net
          • +
        • Scheme: http
          • +
        • Forward Hostname/IP: 192.168.4.12
          • +
        • Forward Port: port
          • +
        • Block Common Exploits and Websockets Support on
          • +
        • Access List: Publicly Accessible
          • +
        +
        9. +
      +

      But http://service.example.net:port refuses to connect, as does http://example.net, either from my local network or through my VPN. And traceroute to either example.net or service.example.net stalls out.

      +

      I've checked the Proxmox firewall and inbound 80 and 443 are both set to accept. I've checked to see whether my ISP's montrosity's firewall could be blocking those ports but... who's to say. The NAT/Gaming (sigh) panel of the admin interface isn't showing the gateway Eero as a device that could need anything in particular sent its way, so my assumption is that IP Passthrough passes inbound requests through for the Eero to sort out, too.

      +

      I've searched around, and the nearest thing I've found to what I'm trying to do and how I'm trying to do it is in this Reddit thread, but the problem in that case is back at the beginning with the A record, which is definitely not my issue, unless I spelled my domain name wrong at the DNS. (I didn't.) And that person was able to get to the NPM congratulations page; my connections get refused entirely.

      +

      If anybody sees anything that I should adjust, or take a look at adjusting, I'd be grateful to hear. I'm already this close to dumping my ISP anyhow due to some ongoing service issues, and getting rid of their annoying modem/router/gateway would be a bonus, but I'm not entirely certain that it's the problem, and I'd love to find a way through without taking that step.

      + + + + + +
      +

      Webmentions

      + + +

      No replies yet.

      + + + + + + + + + +
      + + +       +
      + + + + + + diff --git a/sitemap.xml b/sitemap.xml index 7385ca9556..dba1eac970 100644 --- a/sitemap.xml +++ b/sitemap.xml @@ -9066,8 +9066,13 @@ 2025-06-26 + + https://kfitz.info/networking-continued/ + 2025-08-09 + + https://kfitz.info/feed/feed.xml - 2025-06-26 + 2025-08-10 diff --git a/tags/tinkering/index.html b/tags/tinkering/index.html index 3a4d2f4a9d..2e6a41d28c 100644 --- a/tags/tinkering/index.html +++ b/tags/tinkering/index.html @@ -14,7 +14,7 @@ -