med-mastodon.com is one of the many independent Mastodon servers you can use to participate in the fediverse.
Medical community on Mastodon

Administered by:

Server stats:

365
active users

#ufw

1 post1 participant0 posts today

ICE Campaign of Violence Will Lead to More Deaths

Jaime Alanis’s death shows the horrific consequences of a secret police force behaving with utter impunity

from #TheIntercept
Natasha Lennard
July 12 2025, 7:12 pm

"#ICE agents detained over 200 people in militarized raids on two large farms in Carpinteria and Camarillo, including a number of #US citizen workers and protesters who gathered outside the facilities in response to the raids. As of Saturday morning, at least two of the abducted citizens were still reported missing by loved ones and colleagues.

“Many workers-including US citizens, were held by federal authorities at the farm for 8 hours or more,” the #UnitedFarmWorkers union said in a statement. “US citizen workers report only being released after they were forced to delete photos and videos of the raid from their phones.”"

theintercept.com/2025/07/12/ic

#StopTheDeportations
#immigration #immigrants #deportations #ICE
#USA #USPolitics #politics #Trump #UFW
#news #press

The Intercept · ICE Campaign of Violence Will Lead to More DeathsBy Natasha Lennard
Continued thread

US #citizens were detained during the #raid & some are still unaccounted for, Strater said.

Some citizen workers who were detained reported only being released from custody after deleting photos & videos of the raid from their phones, said #UFW President Teresa Romero in a statement.

konec #IPTables je v dohlednu, částecně už i na dosah
za poslední rok jsem investoval čas a z předchozích #UFW a mrtvého #Shorewall přeskočil #FirewallD rovnou do nahatých #NFTables

- UFW využívá na pozadí iptables automaticky překládané do nftables, což je paskvil, který může vyhovovat závislákům na prehistorických iptables souborech "na které se nešahá", ale progresivnějšímu uživateli dost svazuje ruce
- navíc je nutné mít namemorovanou jejich speciální syntaxi a hlavně skladbu argumentů, takže většinou zadám validní příkaz na asi 4. pokus

- FirewallD si samozřejmě taky vymyslel vlastní příkazovou syntaxi, ale zároveň zapleveluje nftables nepoužívanými chainy, přijít k cizímu stroji a udělat nějakou drobnou úpravu v pravidlech je skoro na nobelovku

- NFtables jsou za mě nejpřehlednější a nejspolehlivější (největší kontrola), navíc umožňujou mít totální kontrolu nad firewallem a poslat k šípku snahy Dockeru o nadvládu
- navíc jsou velmi jednoduché a snadno pochopitelné

My transition from #nginxProxyManager to #caddy is complete. I created 2 LXC Caddy instances: one for public services (with #UFW) and another for my private ones. This setup limits exposure to potential unwanted visitors.

Now, my #Proxmox cluster is available with load balancing for both IPv4 & IPv6.

Globally, the transition is easy. I only have some trouble blocking the outside traffic on Headscale Admin, with the reverse proxy of Pi-hole Admi/API, and of course, IPv6.

“They Actually Had a List”: #ICE Arrests Workers Involved in Landmark #LaborRights Case

“We are concerned at the appearance of targeting publicly #ProUnion worker leaders,” said a union official about a raid in western New York.

Noah Hurowitz
May 5 2025

"An immigration raid in western #NewYork on Friday targeted a group of immigrants involved in a landmark statewide effort by #FarmWorkers to #unionize.

"On Friday morning at around 9:30 a.m., federal agents in unmarked cars and bearing no agency insignia pulled over a bus in Albion, New York, about 35 miles west of Rochester, and took 14 people of Lynn-Ette & Sons Farms into custody. All of the detainees, who hailed from Mexico and Guatemala, were year-round employees of Lynn-Ette & Sons Farms, a family-owned business in nearby Kent, New York, which has been locked in a multiyear battle to prevent workers from unionizing.

"The company is one of five agricultural businesses that, together with a state growers’ association, have tried for years to overturn or chip away at New York’s 2019 #FarmLaborLaw. The law enshrined protections for the right of #farmworkers — whether seasonal or year-round — to seek union representation.

" 'This was strange because they actually had a list of most of the workers on the bus.'

"Several of the workers taken into custody on Friday have been active in efforts to unionize year-round employees, including at least one who has spoken publicly in favor of joining the United Farm Workers of America, according to Elizabeth Strater, director of strategic campaigns for #UFW, the storied labor union.

" 'We are concerned at the appearance of targeting publicly pro-union worker leaders,' said Strater.

"Most of the workers detained on Friday hail from #Mexico or #Guatemala.

"The raid did not appear to be a broad sweep but rather a targeted enforcement aimed at specific people, according to sources who have been in contact with the families and spoke to The Intercept on condition of anonymity to candidly discuss a sensitive legal situation."

Read more:
theintercept.com/2025/05/05/ic

Archived version:
archive.ph/xLMYr

The Intercept · “They Actually Had a List”: ICE Arrests Workers Involved in Landmark Labor Rights CaseBy Noah Hurowitz
I was trying to use iptables decided that life is too short for this hobbyist to go down that path, so installed ufw and saw there was an XMPP app profile when doing ufw app list.

Brilliant, this should be easy then!
WRONG.

This is what ufw app info XMPP gave:

Profile: XMPP
Title: XMPP Chat
Description: XMPP protocol (Jabber and Google Talk)

Ports:
5222/tcp
5269/tcp
Which is um... not many ports. And naturally broke things like image uploading.

So I wrote my own in a new file at /etc/ufw/applications.d/ufw-prosody like this:

[Prosody]
title=Prosody XMPP
description=Prosody XMPP Server ports per https://prosody.im/doc/ports
ports=5000,5222,5223,5269,5270,5281/tcp
Which after saving, doing ufw app update Prosody,
then ufw app info Prosody now gives:

Profile: Prosody
Title: Prosody XMPP
Description: Prosody XMPP Server ports per https://prosody.im/doc/ports

Ports:
5000,5222,5223,5269,5270,5281/tcp
ufw allow Prosody to apply (allow) the rules and all is well again.

❤️
#XMPP #Prosody #ufw #iptables #firewall
Comparing firewall syntax for SSH (port 22) with default-deny:
================================================

#iptables (Linux)
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -P INPUT DROP

#nftables (Linux)
nft add rule inet my_filter input tcp dport 22 accept
nft add rule inet my_filter input drop

#ufw (Linux - simplified frontend to iptables)
ufw allow 22/tcp
ufw default deny incoming

#pf (OpenBSD)
pass in proto tcp to port 22
block all

pf’s syntax feels so elegant, human-readable, & minimal!

After 20years scripting iptables, I’m ready to try UFW on my laptop.
#firewall #sysadmin #pf #iptables #ufw #nftables

Today in Labor History March 31, 1927: Birth of Cesar Chavez. In 1965, Chavez led farm workers in California on their first grape boycott. The nationwide protest lasted five years and ended with the first union contract for U.S. farm workers outside of Hawaii. In 1966, Chavez’s organization officially became the United Farm Workers. Chavez was inspired by the nonviolent civil disobedience of Gandhi. In addition to strikes, boycotts and pickets, he was famous for going on hunger strikes. Later he became infatuated with the religious cult, Synanon. He used Synanon’s “game” to punish union members and enforce conformity. Chavez also supported the brutal Filipino dictator Ferdinand Marcos. This alienated Filipino members of the union, as well as many of the religious organizations that had supported the UFW.

Today in Labor History March 17, 1966: 100 striking Mexican American and Filipino farmworkers marched from Delano, California to Sacramento to pressure the growers and the state government to answer their demands for better working conditions and higher wages, which were, at the time, below the federal minimum wage. By the time the marchers arrived, on Easter Sunday, April 11, the crowd had grown to 10,000 protesters and their supporters. A few months later, the two unions that represented them, the National Farm Workers Association, led by César Chávez, and the Agricultural Workers Organizing Committee, joined to form the United Farm Workers. The strike was launched on September 8, 1965, by Filipino grape pickers. Mexicans were initially hired as scabs. So, Filipino strike leader Larry Itliong approached Cesar Chavez to get the support of the National Farm Workers Association, and on September 16, 1965, the Mexican farm workers joined the strike. During the strike, the growers and their vigilantes would physically assault the workers and drive their cars and trucks into the picket lines. They also sprayed strikers with pesticides. The strikers persevered nonviolently. They went to the Oakland docks and convinced the longshore workers to support them by refusing to load grapes. This resulted in the spoilage of 1,000 ten-ton cases of grapes. The success of this tactic led to the decision to launch a national grape boycott, which would ultimately help them win the struggle against the growers.