可能是检测到宽带里走了 HTTP/HTTPS 服务端响应的流量

走 wireguard 之类的 VPN 访问家里的服务吧

不愧是国内互联网公司

网上搜了下，可能是硬盘的逻辑错误，我也看不懂，等个硬盘专家回答一下

平时还是得备份重要数据，比如密钥，配置文件，代码等等
---

https://superuser.com/questions/1671683/what-causes-a-filesystem-to-get-corrupted

What causes a filesystem to get corrupted?

I just went through the following: When rebooting my Ubuntu PC, I got a message that welcomed me to emergency mode. Following the instructions from another stackoverflow post, I ended up running fsck.ext4 on my root partition from a live USB. This proposed some fixes which I accepted, and since then things have been looking fine again.

However, I wonder what this whole ordeal means. I'm assuming it's not normal for things to just break, is it? Does this mean anything about my SSD drive possibly getting old and unstable? Is it something else that I can do anything about? Or is this just something that one has to go through from time to time? I haven't done anything to my system that I'm aware of that can trigger this. I install updates using apt dist-upgrade and I install new programs via apt or snap from time to time and that's about it.

---

there can be all kinds of causes, including random cosmic rays or the media producing an alpha particle, that happens to impact the value of a critical bit. generally speaking file system corruption is caused by power loss during a write operation, or in a case where there are cached writes that haven't yet been written to disk. FS checking tools like fsck attempt to reconcile inconsistencies between the file system metadata and the actual contents of the disk, and while far from perfect, can help you when FS metadata has become damaged. can't do much for cached or incomplete writes though.

---

https://en.wikipedia.org/wiki/Soft_error

自己写个 port knocker ，手动操作，ip to ip 防火墙放通

(关机一星期，两星期，四星期

编程语言为啥不能统一一下，感觉大家都各玩各的
各国政体为啥不能统一一下，感觉大家都各玩各的

答案就是百家争鸣，百花齐放，趋同演化

（大概开 5 万台机器，一共四十三亿个地址，抛开私网地址，一秒一个，一天就能扫完

据说 ipv4 公网扫一边用不了多久

@LaGeNanRen 这猫正经吗（

装了 explorer path ，右键菜单用注册表改回了原样，凑合着用吧，调个网卡属性要点几百万下

为了在 wsl2 里用 ipv6 ，以及沉没成本，一堆软件要重装，自己尝了一筷子的屎，含泪也要吃完

再就是把服务绑在 ipv6 上，目前“看起来”挺安全的，没什么人扫

服务暴露在公网上肯定要开防火墙的。

如果不想学防火墙的话也可以试试端口敲门，就是只开一个端口，然后你连接过去，鉴权通过后它修改防火墙规则，把服务暴露出来。不过没怎么用过只看到过这个概念

https://www.freebuf.com/articles/network/281639.html
https://lingwu111.github.io/%E7%AB%AF%E5%8F%A3%E6%95%B2%E9%97%A8%E6%8A%80%E6%9C%AF.html
https://en.wikipedia.org/wiki/Port_knocking

这样黑不到内网的机器，除非拿到 root 权限把防火墙清了，或者知道了这个规则，特地把发包的源端口设定为 22 或 443

内网单独开一个 linux 虚拟机

用 iptables 禁止到内网的流量，只允许特定的端口
---
#新建一个隔离用的链
iptables -N ISOLATION

#允许内网机器 192.168.1.10 连接该虚拟机的 ssh 服务和 https 服务
iptables -A ISOLATION -d 192.168.1.10 -p tcp -m multiport --sport 22,443 -j ACCEPT
#拒绝所有的其他流量
iptables -A ISOLATION -d 192.168.1.0/24 -j DROP
iptables -A ISOLATION -p all -j RETURN

#以上规则应用到出站
iptables -I OUTPUT -p all -j ISOLATION
iptables -I DOCKER-USER -p all -j ISOLATION
---

感觉副屏只能放放不太需要一直盯着的东西，或者自己坐后面一点。一直扭着头看脖子疼，脖子右拧

我司主要业务是在边境地区走动一些货物，流水利润都很可观，客户再购率较高

参考某 vps 厂商为禁止迁移机房取消用户的迁移按钮，但没有做后端校验