Self-service content blocked at work reddit / selfhosted ---------------------------------------------------------------------- Watever444 · 2023-11-06 12:06 Hi, I ma wondering if there is something I can do to not be blocked by work firewall. I have a xyz domain. Explication : blocked by URL filter database module of McAfee web gateway. Url listed in categories that not allowed. Url categories : Content Server Url was blocked due to local database or cloud cache lookup. A forward DNS lookup was also involved. I switched work job and I don't have access to my selfhosted app. (Vaultwarden being the one I mostly want, fallowed by Davx calendar and contacts) I know I can access my home using Nip.io but don't know how to access subdomains or app that way without opening ports... ---------------------------------------------------------------------- ElevenNotes · 2023-11-06 12:15 When you started your job, you have probably signed an agreement on how to use the provided IT devices and services. If you violate that agreement by circumventing the tools your employer uses, you can be held responsible and measures can be applied. Ask your local IT what you can do. You can even ask to add an exception for your domain. ---------------------------------------------------------------------- autogyrophilia · 2023-11-06 13:09 Get a TLD with better reputation. Like a .com, .net or a local one like .us The .xyz numeric domains (11B or something), are explicitly meant to be a backend thing and are often blocked to reduce the risk of phishing attacks. ---------------------------------------------------------------------- machacker89 · 2023-11-06 13:19 upgrade essential breaking your works Accept Use Policy. soo NO ---------------------------------------------------------------------- HellDuke · 2023-11-06 13:26 Reach out to your IT department and see if the can allow it. Since you work for a company it's not your place to try and get this resolved nor should you try to circumvent existing measures if your reason for accessing your tools is shot down. ---------------------------------------------------------------------- Spaceman_Splff · 2023-11-06 13:47 I’m in the same boat. I submitted a request through my works procedure to request access to my domain. ---------------------------------------------------------------------- aetherspoon · 2023-11-06 14:01 This. Corporate/enterprise IT doesn't want to babysit you to make sure you aren't leaking confidential information, but if you are using tools from your homelab for your job they *might* be willing to listen to provide an exception. Don't assume they will though - there is almost certainly a damn good reason why they lock things down like that, and it usually isn't to just check a box on some ISO checklist. It is entirely possible that their lockdown is going to be super tight and just not allow anything that isn't on some allowlist somewhere, just as it is possible that you might get an exception if you talk to them about your use case. Signed, someone who had to keep a network so locked down we blocked *clipboard access*. ---------------------------------------------------------------------- bufandatl · 2023-11-06 14:33 No. Their network their rules. But you could get a new domain that ends on a more common and reputable TLD like com, net or org. ---------------------------------------------------------------------- dazchad · 2023-11-06 14:52 Can’t you access your stuff using your personal phone data plan? It’s a good practice to separate personal from professional stuff. ---------------------------------------------------------------------- IFireflyl · 2023-11-06 14:54 As an owner of a .us domain, just be aware that the .us domain does not provide any options for Whois privacy. If you get a .us domain, expect to get a ton of spam calls. ---------------------------------------------------------------------- AlZheim3r · 2023-11-06 15:42 if you have access to some external server, ssh into it doing a dynamic port forwarding and setup a web browser (not the same you use for work) to connect through a socks5 proxy on localhost. that's how i do all my non-professional browsing for ages. ---------------------------------------------------------------------- ThePixlPirate · 2023-11-06 16:24 Unless you use a Google voice number and use all fake registration info ;) ---------------------------------------------------------------------- HellDuke · 2023-11-06 17:39 Well, it could also be a checklist item. PCI compliance is required to service some of our clients and you have to follow that checklist whether that particular vulnerability is actually something that could result in a leak with the data you handle or not. I think that is the main reason why people should be prepared to get shot down hard. If there is a good reason there is probably a set way to implement a solution, unless it has to be as tight as yours. I think one of the other countries has something similar where it's locked down just as much and workers in that area are also not allowed to carry their own cell phones into the office space, they have to leave them in secure boxes at the entrance. ---------------------------------------------------------------------- IFireflyl · 2023-11-06 17:54 That's what I do. I just didn't know that before I got my .us domain, and I wanted to save someone the headache that comes from this. ---------------------------------------------------------------------- ThePixlPirate · 2023-11-06 18:05 I completely agree….I couldn’t tell you how many calls came through to my Google voice number from Indians wanting to build websites and design logos for me for the first few months after registering my first domain. ---------------------------------------------------------------------- GolemancerVekk · 2023-11-06 18:33 If you want to access it on your personal phone (meaning you don't have any managed work apps on it) and you want to use it on work WiFi I would ask IT if it's ok to use Tailscale. Do not install Tailscale or access personal accounts on a work computer or work phone and don't attempt to connect to your personal stuff on those devices. There's no point in asking IT, if they're filtering stuff that already tells you enough. Also, Tailscale can be easily filtered. The recent Okta break-in that was in the news happened because an employee was logged into a personal Google account on a work machine and saved the password to a private admin app in his personal account, where the bad guys got to it.