Photographs of me about to edit the firewall on my webserver knowing that any mistake could lock me out of SSH until the technicians in Germany arrive at the datacenter on Monday (2024)
Photographs of me about to edit the firewall on my webserver knowing that any mistake could lock me out of SSH until the technicians in Germany arrive at the datacenter on Monday (2024)
I am glad I have not kept a count of how many times I have broken ssh in my life. My reaction to this is visceral apprehension. "I've triple checked it, what could go wrong?"
Advice: backup the file and set a cron to revert to the backup in an hour. If it still works, cancel the cron.
Just like changing monitor resolutions. Brilliant!
Does nftables have something where you can apply the new config for a couple seconds then revert?
Either that or a shell script where you apply the new config, sleep 60 seconds then apply the old config?
ouch no backup way in? most hosts have a serial console or rescue image or something you can boot to to fix this kind of thing. onsite technicians fixing software problems is very 90s/early 2000s
It's a dedicated server so the only way to boot a rescue OS is in-person (afaik).
depends on the provider, but that may well be true for your provider yeah
No IPMI?! Or access to a hypervisor like virt-manager for vms?
It's a dedicated server so none of that.
NFT ables
Does nftables have something where you can apply the new config for a couple seconds then revert?
Either that or a shell script where you apply the new config, sleep 600 seconds then apply the old config?
