https://jacobin.com/2023/02/israel-law-of-return-extradition...
https://jacobin.com/2023/02/israel-law-of-return-extradition...
Deleted Comment
A couple years ago we had a particularly bad snowfall. The plow has a nasty hate filled habit of dumping all its snow in my driveway. I had a drift at the end of my driveway about 4 feet high and 6 feet deep. Literally up to my chest. I had spent a solid hour just chipping away at it trying to get my car out and had made very little progress.
Right as I was about to give up in frustration, a man in a bobcat drove by. Moments later he turned around, came back, and asked "would you like me to clear that for you?" I told him that would be amazing. Took him a couple minutes and then he waved and drove off before I got a chance to offer him any money or even thank him.
I think about this guy pretty often, it's absolutely the random act of kindness in my life I have appreciated most.
A recent lesser snowfall for context:
> Assistant: chain-of-thought
Does every LLM have this internal thing it doesn't know we have access to?
I feel like with the part you highlighted and this quote here that we are reading a blog post from an alternate dimension or something.
I disrecommend UFW.
firewalld is a much better pick in current year and will not grow unmaintainable the way UFW rules can.
Configuration is backed by xml files in /etc/firewalld and /usr/lib/firewalld instead of the brittle pile of sticks that is the ufw rules files. Use the nftables backend unless you have your own reasons for needing legacy iptables.Specifically for docker it is a very common gotcha that the container runtime can and will bypass firewall rules and open ports anyway. Depending on your configuration, those firewall rules in OP may not actually do anything to prevent docker from opening incoming ports.
Newer versions of firewalld gives an easy way to configure this via StrictForwardPorts=yes in /etc/firewalld/firewalld.conf.
This sounds like great news. I followed some of the open issues about this on GitHub and it never really got a satisfactory fix. I found some previous threads on this "StrictForwardPorts": https://news.ycombinator.com/item?id=42603136.