@zuijiapangzi 你爱快的端口会不会是 docker 的，docker 会绕过 iptables

我用的 openwrt ，日志上天天有国外 ip ，我现在对外端口全部通过 nginx 代理，包括 http ，ssh 等， 只要是国外 ip 就返回 404, 同时监视日志只要是国外 ip 就丢到 ipset 里面永久封禁：

```
{"msec": "1695250093.634", "connection": "11974", "connection_requests": "1", "pid": "28", "request_id": "04618a16e27a69de2c2dd35d3be619e2", "request_length": "118", "remote_addr": "165.227.180.202", "remote_user": "", "remote_port": "45458", "time_local": "21/Sep/2023:06:48:13 +0800", "time_iso8601": "2023-09-21T06:48:13+ 08:00", "request": "GET /ab2g HTTP/1.1", "request_uri": "/ab2g", "args": "", "code": "404", "body_bytes_sent": "118", "bytes_sent": "297", "http_referer": "", "http_user_agent": "Mozilla/5.0 zgrab/0.x", "http_x_forwarded_for": "", "http_host": "218.74.49.39:8443", "server_name": "book.happyxhw.cn", "request_time": "0.000", "upstream": "", "upstream_connect_time": "", "upstream_header_time": "", "upstream_response_time": "", "upstream_response_length": "", "upstream_cache_status": "", "ssl_protocol": "TLSv1.2", "ssl_cipher": "ECDHE-RSA-AES128-GCM-SHA256", "scheme": "https", "request_method": "GET", "server_protocol": "HTTP/1.1", "pipe": ".", "gzip_ratio": "1.36", "http_cf_ray": "", "allowed": "no", "geoip_country_code": "US", "geoip_city": "Clifton"}

```

virtualbox + win10

我随手就抛出一个 linux 单系统

edge 刚出来被吹上天了，后来慢慢 “中国化了”，各种信息流、广告全来了，要么关闭麻烦，要么无法关闭，特别是每次重装都会恢复，然后就没人吹了，哈哈哈

有没有用 ipset ？

@Leslie5205912 我没有用自带的 photo 应用，用的是 https://apps.nextcloud.com/apps/memories

@happyxhw101 immich 部署麻烦，更新频繁，界面也没 memories https://apps.nextcloud.com/apps/memories 好看

nextcloud + memories app + Preview Generator app 很稳定，也不卡，大概几千张照片

@happyxhw101 bluemail 是少数支持 exchange 的

bluemail: https://bluemail.me/ 一直在用
mailspring: https://www.getmailspring.com/

如果加密内容比较大，建议 rsa + aes
rsa 加密 aes 秘钥，aes 加密文件，此外 aes ctr 可以实现 stream 加密

lg gram style 16

为什么不用 nginx 的 tcp 负载均衡

/boot
/
/home

好处是重装系统，不影响 home

我的策略是：
1. nextcloud
2. 定时增量加密同步到百度云