Stop with the low effort comments and learn to read. You would do everybody, including yourself, a favor.

Just to be clear this is a killswitch, that’s what you want right? So that it’s only possible to connect through the VPN (tun0). And if the VPN goes down your internet gets “killed” so you don’t leak your IP.

In that case you want to start ufw when you system starts, so you would need to whitelist your VPN but if your VPN is already connected it should work without whitelisting the IP I guess but never tried it since that’s not recommended.

This is how I do it:

sudo ufw default deny outgoing
sudo ufw default deny incoming
sudo ufw allow out on tun0 from any to any

sudo ufw allow out to VPN_IP_ADDRESS proto udp

You have to do the last line for all your VPN server ips or the initial DNS request will not go through. If you connect through udp.

I agree, the described system seem unnecessarily complicated. Decsync exists exactly for that use case.

Here is the bug btw in case someone is interested: https://github.com/39aldo39/Radicale-DecSync/issues/33

I just realized this is not the exact setup I use. I use Radicale on the desktop but additionally Decsync. So I don’t need Radicale on my other devices, just a Decsync client.

With “mostly” in my case I was referring to the Radicale-Decsync plugin which works great but doesn’t seem to be actively maintained anymore. So there was an instance where Radicale changed something and the Decsync plugin didn’t work anymore. Was an easy fix but sadly that fix is still not available in the “official” Radicale-Decsync plugin which makes it hard for non technical users to use it, currently.

I am using this setup for years by now. Works great mostly.

Yes, I used it the last three month but stopped now, it’s nice but overall too buggy at least on Linux.

Kagi is doing business with Yandex, something that might interest you: https://kagifeedback.org/d/5445-reconsider-yandex-integration-due-to-the-geopolitical-status-quo

Yes, in “medium blocking mode” ublock origin blocks those domains.

Yeah I get that as well when I don’t use ublocks medium mode. The crucial part here is the medium mode since that blocks youtbe.com and google.com domains by default.

Thanks for the info tho.

ok, thanks for the confirmation, looks like there is no option to achieve what I want.

I mean sure, but “to get the preview to work” means I have to globally unblock google.com and youtube.com which means all sites can track me at that point which I am not willing to accept. I think you have those two domains not blocked? Otherwise I don’t see how it could work, no matter if you use the “embedded option” in libredirect or not.

Thanks for testing it!

Hey, thanks for the reply.

I have exactly the same setup as you, I also use librewolf and all sites that have embedded youtube (or any embedded video) don’t work.

This one for example: https://www.androidauthority.com/hands-on-one-ui-7-home-up-3522949/

With medium mode enabled I just have a white space in the middle of the article. When I manually allow “youtube.com” and “google.com” the video loads.

Do you get a different behavior?

That’s what I want to do and was my initial question. How do I do that with medium mode enabled?

That’s what I am doing but it doesn’t work for EMBEDDED, which is the point of this post.

Not directly. If I select embedded in libredirect it uses invidious and for that to work I have to unblock the urls as well.

Don’t know him and not really interested in the topic much but that was a fun video!

Exactly. You invoke it with xfce4-terminal --drop-down

If you set that as a shortcut in xfce, the first call will start it and recurring calls will show the running instance.

I am with you. xfce4-terminal in drop down mode is all I need!

If there is a feature you don’t know you need then you don’t need it.

That makes no sense. By that logic we would still be using horses since technically we don’t -need- cars. There are of course thing “you don’t know about” but would totally use if you were introduced to them.