Firewalls are typically built using 'in' rules, but it's not referring to 'wan > lan' but rather if the rule is processed on the ingress of the firewall or the egress.
Stateful firewalls sessions are always going to allow responses, the old request that someone needs a rule 'both directions' is something of a running joke at this point honestly.
A pcap would explain a lot, the fact that the error cites a specific domain does sound like an outbound attempt, but if it was a specifically inbound region block that wouldn't add up.
Assuming that the 'enter.domain.here' is a masking of the real domain, I would have to wonder if the acme client is actually trying to use the http validation rather than DNS. You could pcap on the outside to look for it coming in to confir.
As for filtering to specifically allow their addresses, I think their system has a unique user agent that you could filter against, or use an inbound proxy to allow global access to the '/.well-known/acme-challenge/' path while keeping the rest of the site blocked.
Ads are the least of things to be concerned with really. Job prospects, insurance adjustments, credit decisions, all kinds of things get bundled up with the kind of data profiles that get built.
Yeah, the whole 'you now have a mandatory account' made for a mad scramble of how to disable every possible scrap of data sent to them. It may have been some small push into the self hosting game too.
The community check thing is neat, but runs into the same problem as any other polling or survey aggregation. Those on the unpopular side of an issue take offence and declare the poll invalid while presenting some other one that suits their purpose.
Which station was it recently that did a poll to say 100% of respondents (selected from far right self described extreme maga fans) believe Trump is awesome?
If the premise is to prevent Utah kids from accessing things then good luck enforcing those extraterritorial fines, or if you try and fine sites daft enough to be hosting their site in a place like Utah, it'll take a whole couple minutes to move.
Either way this comes out as theatrics at best, and losing money in top of it with pointless litigation or chasing away tax and service paying businesses
Could use something like nextcloud as a ready made option, not the greatest for things where there's frequent updates on large files though since it doesn't send just partial updates. To some extent it depends on what your use case is exactly.
This is not when we have the luxury of playing fair and dignified politics. All the big blue strongholds need to retaliate and not just a tit-4-tat but for every district they possibly can.
I'd gotten a lifetime premiere key, mostly for the ldap functionality at the time. Something I can buy once and use rather than subscribing to everything is always a winner for me.
Gov pardoned someone doing very bad things because the toddler in chief demanded it once he realized he couldn't pardon her.