Re:Whistleblower: Ubiquiti Breach “Catastrophic”
by bombcar on Tuesday March 30, 2021 @04:50PM
(#26640287)
The CLI tab-completion is great - you can figure out most of what you need to do just by looking at it.
Highly worth getting one to try out.
Re:Whistleblower: Ubiquiti Breach “Catastrophic”
by robocat on Wednesday March 31, 2021 @12:28PM
(#26649274)
The benefit of the GUI is that it documents what has been changed: in the GUI there is a list of port forwards.
With the CLI you either need to document it yourself, or you need to know to query if there are any port forwards. That can be a problem if there is more than one person responsible for the network, or if someone else needs to inherit your setup.
Documentation of configuration sometimes isn’t an issue on your own home system because you generally have a high level memory of what changes you made and their purpose. Conversely I still struggle sometimes with Ubuntu because I customise my configuration using command line tools, and I find keeping track of those changes or the implications of those changes is difficult.
CLI for Port Forward: /ip firewall nat add chain=dstnat dst-port=1234 in-interface=ether1-gateway action=dst-nat protocol=tcp to-address=192.168.1.1 to-port=1234
VS having to document the same task in the GUI:
IP->Firewall->Nat-> Add New
General Tab Chain: dstnat Protocol: TPC Dst. Port: Port In. Interface: ether1-gateway
Action Tab Action: dst-nat To Address: IP address of Server To Port: Port # of Service