Hello Friends,
I am here with my hat in hand, asking for help. I've spent hours trying to figure this out. By default, on the EdgeRouter X (v2.0.9-hotfix.6) is theoretically supposed to allow for inter-vlan pings. That is not the case for me currently.
I don't plan on opening everything and leaving everything open - but I do need for my administration VLAN to be able to access the rest of the VLANS - then I can setup firewall rules to lock them up.
I can ping all of the VLANS from the ERX. All of the VLANS can ping the ERX (but only their network gateway). All of the VLANS can ping the internet. None of the VLANS can ping the other VLANS.
The only firewall rules that I have are on the WAN port (blocking anything to the router from the internet (WAN_LOCAL) and anything not established to the lan from the internet (WAN_IN). That's it. I do not have any firewall rules on any other ports, or VLANS, etc.
I've restarted the router a few times.
I've tried looking through the config tree.
I've tried static routes.
I've tried (redundant because there is noting blocking them) explicit allow firewall rules.
I've tried different VLAN numbers.
All of the VLANS have their own DHCP and DNS provided by the ERX.
I've watched a dozen youtube setup videos where it just works.
I am nearly to the point of nuke and pave. Please help.

firewall { all-ping enable broadcast-ping disable group { address-group Trusted_IPs { address MY_REMOTE_IP description "External Trusted IPs" } network-group LAN_NETWORKS { description "RFC1918 ranges" network 192.168.0.0/16 network 172.16.0.0/12 network 10.0.0.0/8 } } ipv6-name WANv6_IN { default-action drop description "WAN inbound traffic forwarded to LAN" enable-default-log rule 10 { action accept description "Allow established/related sessions" state { established enable related enable } } rule 20 { action drop description "Drop invalid state" state { invalid enable } } } ipv6-name WANv6_LOCAL { default-action drop description "WAN inbound traffic to the router" enable-default-log rule 10 { action accept description "Allow established/related sessions" state { established enable related enable } } rule 20 { action drop description "Drop invalid state" state { invalid enable } } rule 30 { action accept description "Allow IPv6 icmp" protocol ipv6-icmp } rule 40 { action accept description "allow dhcpv6" destination { port 546 } protocol udp source { port 547 } } } ipv6-receive-redirects disable ipv6-src-route disable ip-src-route disable log-martians enable name WAN_IN { default-action drop description "Internet to Local" rule 20 { action accept description "Allow established/related" log disable protocol all state { established enable related enable } } rule 30 { action drop description "Drop invalid state" log enable protocol all state { invalid enable } } } name WAN_LOCAL { default-action drop description "Internet to Router" rule 10 { action accept description "Allow established/related" log disable protocol all state { established enable related enable } } rule 20 { action accept description "Allow ICMP from Trusted IPs" log disable protocol icmp source { group { address-group Trusted_IPs } } } rule 40 { action drop description "Drop ICMP" log disable protocol icmp } rule 50 { action drop description "Drop invalid state" log disable protocol all state { invalid enable } } } receive-redirects disable send-redirects enable source-validation disable syn-cookies enable } interfaces { ethernet eth0 { address dhcp description Internet duplex auto firewall { in { ipv6-name WANv6_IN name WAN_IN } local { ipv6-name WANv6_LOCAL name WAN_LOCAL } out { } } speed auto } ethernet eth1 { description Local duplex auto speed auto } ethernet eth2 { description Disabled disable duplex auto speed auto } ethernet eth3 { description Disabled disable duplex auto speed auto } ethernet eth4 { description Disabled disable duplex auto poe { output off } speed auto } loopback lo { } switch switch0 { description Local mtu 1500 switch-port { interface eth1 { vlan { pvid 1 vid 10 } } vlan-aware enable } vif 1 { address 10.0.1.1/24 description Default } vif 10 { address 192.168.10.1/24 description VLAN10 mtu 1500 } } } port-forward { auto-firewall enable hairpin-nat disable lan-interface switch0.1 rule 1 { description "ALT SSH" forward-to { address 10.0.1.41 port 2222 } original-port 22222 protocol tcp_udp } wan-interface eth0 } protocols { static { } } service { dhcp-server { disabled false hostfile-update disable shared-network-name Default { authoritative disable subnet 10.0.1.0/24 { default-router 10.0.1.1 dns-server 10.0.1.1 dns-server 1.1.1.1 lease 86400 start 10.0.1.101 { stop 10.0.1.200 } static-mapping Device1 { ip-address 10.0.1.52 mac-address xx:xx:xx:xx:xx:xx } static-mapping Device2 { ip-address 10.0.1.41 mac-address xx:xx:xx:xx:xx:xx } static-mapping Device3 { ip-address 10.0.1.51 mac-address xx:xx:xx:xx:xx:xx } static-mapping Device4 { ip-address 10.0.1.31 mac-address xx:xx:xx:xx:xx:xx } static-mapping Device5 { ip-address 10.0.1.11 mac-address xx:xx:xx:xx:xx:xx } static-mapping Device6 { ip-address 10.0.1.22 mac-address xx:xx:xx:xx:xx:xx } static-mapping Device7 { ip-address 10.0.1.21 mac-address xx:xx:xx:xx:xx:xx } static-mapping Device8 { ip-address 10.0.1.23 mac-address xx:xx:xx:xx:xx:xx } } } shared-network-name VLAN10 { authoritative disable subnet 192.168.10.0/24 { default-router 192.168.10.1 dns-server 192.168.10.1 dns-server 1.1.1.1 lease 86400 start 192.168.10.101 { stop 192.168.10.200 } static-mapping Device9 { ip-address 192.168.10.21 mac-address xx:xx:xx:xx:xx:xx } static-mapping Device10 { ip-address 192.168.10.51 mac-address xx:xx:xx:xx:xx:xx } static-mapping Device11 { ip-address 192.168.10.31 mac-address xx:xx:xx:xx:xx:xx } static-mapping Device12 { ip-address 192.168.10.32 mac-address xx:xx:xx:xx:xx:xx } } } static-arp disable use-dnsmasq disable } dns { dynamic { interface eth0 { service dynamic-dns { host-name myhostname login nouser password my-secret-password protocol dynamicdns server some-service } } } forwarding { cache-size 300 listen-on switch0.10 listen-on switch0.1 } } gui { http-port 80 https-port 443 older-ciphers enable } nat { rule 5010 { description "masquerade for WAN" outbound-interface eth0 type masquerade } } ssh { disable-password-authentication port 22 protocol-version v2 } ubnt-discover { disable } unms { disable } } system { analytics-handler { send-analytics-report true } crash-handler { send-crash-report true } host-name home-laundry-router login { user username { authentication { encrypted-password super-secret-password public-keys me@example.com { key super-secret-key type crypto-ripto } } level admin } } ntp { server 0.ubnt.pool.ntp.org { } server 1.ubnt.pool.ntp.org { } server 2.ubnt.pool.ntp.org { } server 3.ubnt.pool.ntp.org { } } offload { hwnat enable ipsec enable } package { repository stretch { components "main contrib non-free" distribution stretch password "" url http://http.us.debian.org/debian username "" } } syslog { global { facility all { level notice } facility protocols { level debug } } } time-zone America/New_York } /* Warning: Do not remove the following line. */ /* === vyatta-config-version: "config-management@1:conntrack@1:cron@1:dhcp-relay@1:dhcp-server@4:firewall@5:ipsec@5:nat@3:qos@1:quagga@2:suspend@1:system@5:ubnt-l2tp@1:ubnt-pptp@1:ubnt-udapi-server@1:ubnt-unms@2:ubnt-util@1:vrrp@1:vyatta-netflow@1:webgui@1:webproxy@1:zone-policy@1" === */ /* Release version: v2.0.9-hotfix.6.5574651.221230.1015 */ 

I'm trying to follow this guide on how to add a bunch of containers to a stack that are routed trough a vpn (nordvpn). but I am stuck right after he goes trough all the webgui's created by the stack. I can access the transmission webpage but not the others that are routed trough it. i know my other containers are on the new bridge network as seen here: https://imgur.com/a/oU5V2zF
My stack:
version: '2.1'
services:
transmission-openvpn:
container_name: transmission-openvpn
volumes:
- /Data/AtomData/Downloads/downloads:/media/downloads
- /etc/localtime:/etc/localtime:ro
environment:
- PUID=998
- PGID=100
- CREATE_TUN_DEVICE=true
- OPENVPN_PROVIDER=NORDVPN
- NORDVPN_COUNTRY=BE
- NORDVPN_CATEGORY=legacy_p2p
- NORDVPN_PROTOCOL=udp
- OPENVPN_USERNAME={USERNAME}
- OPENVPN_PASSWORD={PASSWORD}
- OPENVPN_OPTS=--inactive 3600 --ping 10 --ping-exit 60
- WEBPROXY_ENABLED=false
- LOCAL_NETWORK=192.168.0.0/24
- TRANSMISSION_SCRAPE_PAUSED_TORRENTS_ENABLED=false
cap_add:
- NET_ADMIN
dns:
- 8.8.8.8
- 8.8.4.4
logging:
driver: json-file
options:
max-size: 10m
ports:
- 9091:9091
- 9117:9117
- 7878:7878
- 8989:8989
- 8686:8686
- 5299:5299
restart: always
image: haugene/transmission-openvpn
jackett:
image: linuxservejackett
container_name: jackett
network_mode: "vpntorrenter_default"
environment:
- PUID=998
- PGID=100
- TZ=Europ/Brussels
- AUTO_UPDATE=true
- RUN_OPTS=#optional
volumes:
- /Data/Config/jackett:/config
- /Data/AtomData/Downloads/watch:/downloads
restart: unless-stopped
radarr:
image: linuxserveradarr
network_mode: "vpntorrenter_default"
container_name: radarr
environment:
- PUID=998
- PGID=100
- TZ=Europ/Brussels
- UMASK=022
volumes:
- /Data/Config/Radarr:/config
- /Data/AtomData/Multimedia/"Video's"/Speelfilms:/movies
- /Data/AtomData/Downloads/Downloads:/downloads
restart: unless-stopped
sonarr:
image: linuxservesonarr
network_mode: "vpntorrenter_default"
container_name: sonarr
environment:
- PUID=998
- PGID=100
- TZ=America/New_York
- UMASK=022
volumes:
- /Data/Config/Sonarr:/config
- /Data/AtomData/Multimedia/"Video's"/TV-series:/tv
- /Data/AtomData/Downloads/Downloads:/downloads
restart: unless-stopped
lidarr:
image: linuxservelidarr
network_mode: "vpntorrenter_default"
container_name: lidarr
environment:
- PUID=998
- PGID=100
- TZ=Europe/Brussels
- UMASK=022
volumes:
- /Data/Config/Lidarr:/config
- /Data/AtomData/Multimedia/Muziek:/music
- /Data/AtomData/Downloads/Downloads:/downloads
restart: unless-stopped
lazylibrarian:
image: linuxservelazylibrarian
network_mode: "vpntorrenter_default"
container_name: lazylibrarian
environment:
- PUID=998
- PGID=100
- TZ=Europe/Brussels
- DOCKER_MODS=linuxservecalibre-web:calibre #optional
volumes:
- /Data/Config/Lazylibrarian:/config
- /Data/AtomData/Multimedia/eBooks:/ebooks
- /Data/AtomData/Downloads/Downloads:/downloads
restart: unless-stopped

**Describe the problem**
Apologies in advance for any misunderstanding but Transmission was working on my RPi4 ARM build, but now I am getting errors that I don't know how to resolve. This could be a configuration issue --- I just don't know for sure. This docker build was made by TechnoDad on Youtube via: https://www.youtube.com/watch?v=5rtGBwBuzQE&ab_channel=TechnoDadLife
​
**docker run command**
version: '2.1'
services:
transmission-openvpn:
volumes:
- /srv/dev-disk-by-label-easystore/downloads:/data
- /etc/localtime:/etc/localtime:ro
environment:
- PUID=1000
- PGID=100
- CREATE_TUN_DEVICE=true
- OPENVPN_PROVIDER=PIA
- OPENVPN_CONFIG=default
- OPENVPN_USERNAME=********
- OPENVPN_PASSWORD=********
- OPENVPN_OPTS=--inactive 3600 --ping 10 --ping-exit 60
- WEBPROXY_ENABLED=false
- LOCAL_NETWORK=192.168.0.0/24
- TRANSMISSION_SCRAPE_PAUSED_TORRENTS_ENABLED=false
dns:
- 8.8.8.8
- 8.8.4.4
cap_add:
- NET_ADMIN
logging:
driver: json-file
options:
max-size: 10m
ports:
- 9091:9091
- 9117:9117
- 7878:7878
- 8989:8989
- 8686:8686
- 5299:5299
restart: always
image: haugene/transmission-openvpn:latest-armhf
jackett:
image: linuxservejackett
container_name: jackett
network_mode: "service:transmission-openvpn"
environment:
- PUID=1000
- PGID=100
- TZ=America/ Eastern
- AUTO_UPDATE=true #optional
- RUN_OPTS=#optional
volumes:
- /srv/dev-disk-by-label-easystore/Config/jackett:/config
- /srv/dev-disk-by-label-easystore/downloads:/downloads
restart: unless-stopped
radarr:
image: linuxserveradarr
network_mode: "service:transmission-openvpn"
container_name: radarr
environment:
- PUID=1000
- PGID=100
- TZ=America/ Eastern
- UMASK_SET=022 #optional
volumes:
- /srv/dev-disk-by-label-easystore/Config/radarr:/config
- /srv/dev-disk-by-label-easystore/Movies:/movies
- /srv/dev-disk-by-label-easystore/downloads:/downloads
restart: unless-stopped
sonarr:
image: linuxservesonarr
network_mode: "service:transmission-openvpn"
container_name: sonarr
environment:
- PUID=1000
- PGID=100
- TZ=America/ Eastern
- UMASK_SET=022 #optional
volumes:
- /srv/dev-disk-by-label-easystore/Config/sonarr:/config
- /srv/dev-disk-by-label-easystore/TV-Shows:/tv
- /srv/dev-disk-by-label-easystore/downloads:/downloads
restart: unless-stopped
lidarr:
image: linuxservelidarr
network_mode: "service:transmission-openvpn"
container_name: lidarr
environment:
- PUID=1000
- PGID=100
- TZ=America/ Eastern
- UMASK_SET=022 #optional
volumes:
- /srv/dev-disk-by-label-easystore/Config/lidarr:/config
- /srv/dev-disk-by-label-easystore/Music:/music
- /srv/dev-disk-by-label-easystore/downloads:/downloads
restart: unless-stopped
lazylibrarian:
image: linuxservelazylibrarian
network_mode: "service:transmission-openvpn"
container_name: lazylibrarian
environment:
- PUID=1000
- PGID=100
- TZ=America/ Eastern
#- DOCKER_MODS=linuxservecalibre-web:calibre #optional
volumes:
- /srv/dev-disk-by-label-easystore/Config/lazylibrarian:/config
- /srv/dev-disk-by-label-easystore/downloads:/downloads
- /srv/dev-disk-by-label-easystore/eBooks:/books
restart: unless-stopped
​
**Errors/Logs**
https://user-images.githubusercontent.com/59141808/100463601-19bf5b00-309a-11eb-96da-38e33b23a2b5.png
https://user-images.githubusercontent.com/59141808/100463676-365b9300-309a-11eb-9994-935e0ef10d8d.png
​
Starting container with revision: 3d97cd5302985c1a710f46ab0c311f721f224fc6,
Using OpenVPN provider: PIA,
Provider PIA has a custom startup script, executing it,
Downloading OpenVPN config bundle openvpn-nextgen into temporary file /tmp/tmp.H10XcfQwZf,
Extract OpenVPN config bundle into PIA directory /etc/openvpn/pia,
[/tmp/tmp.H10XcfQwZf],
End-of-central-directory signature not found. Either this file is not,
a zipfile, or it constitutes one disk of a multi-part archive. In the,
latter case the central directory and zipfile comment will be found on,
the last disk(s) of this archive.,
unzip: cannot find zipfile directory in one of /tmp/tmp.H10XcfQwZf or,
/tmp/tmp.H10XcfQwZf.zip, and cannot find /tmp/tmp.H10XcfQwZf.ZIP, period.,
​
**Host system:**
Raspberry Pi 4 with an easystore external hard drive. Running OpenMediaVault with Portainer 1.24.1

Has anyone has successfully got the URL filtering to work?
I don't want to make a modification to my clients' web browser settings, so I am leaning towards the transparent proxy. However, the transparent proxy does not work at all. The only time that the proxy work is the settings below without the Destination NAT and I have to manually change the clients' web browser settings.
If I set the clients' web browser to default and enabled the destination NAT below. It fails because the DNS (port 53) is also getting proxied. My destination NAT config should only translate the ports 80 and 443, but somehow it is also including the DNS and probably all other ports too.

# Destination NAT set nat destination rule 2000 description 'url filtering - wired trust' set nat destination rule 2000 destination port '80,443' set nat destination rule 2000 disable set nat destination rule 2000 inbound-interface 'bond0.10' set nat destination rule 2000 protocol 'tcp' set nat destination rule 2000 translation address '192.168.1.0' set nat destination rule 2000 translation port '3128' # webproxy set service webproxy listen-address 172.16.0.0 disable-transparent set service webproxy listen-address 172.16.0.0 port '3128' set service webproxy url-filtering squidguard auto-update update-hour '23' set service webproxy url-filtering squidguard block-category 'adult' set service webproxy url-filtering squidguard block-category 'ads' set service webproxy url-filtering squidguard block-category 'malware' set service webproxy url-filtering squidguard block-category 'porn' set service webproxy url-filtering squidguard block-category 'gambling' set service webproxy url-filtering squidguard block-category 'games' set service webproxy url-filtering squidguard local-block 'youtube.com' set service webproxy url-filtering squidguard log 'adult' # interface set interfaces dummy dum0 address 172.16.0.0 set interfaces dummy dum1 description 'url filtering' 

Here is the version

Version: VyOS 1.3-rolling-202010130146 Release Train: equuleus Built by: autobuild@vyos.net Built on: Tue 13 Oct 2020 01:46 UTC Build UUID: 7c7cad44-df2d-4f89-86fe-2fdf3c5a48c8 Build Commit ID: Architecture: x86_64 Boot via: installed image System type: bare metal Hardware vendor: Supermicro Hardware model: A1SAi Hardware S/N: Unknown Hardware UUID: Unknown 

​

Hello all. I posted this on the UBNT forums last night, but i thought it might not hurt to get another audience for my issue. My situation is this:
I'm trying to replace my BT home router with an Edgerouter-x and a bridge-only modem. The Edgerouter device has worked previously on a past internet connection without issue.
I reset the config and basically, the only thing special is that this is now a vdsl PPoE connection, and I was not using the switch in my previous configuration.
The device gets an ip address and can nominally reach things like slack,google, and youtube.
However, I immediately noticed that fast.com/netflix/zoom are not reachable. I'm sure there are others, but basically, any "speedtest" site is seemingly unreachable, as are the normal teleconferencing tools i'd use
Reaching out via ICMP seems to work when the site is configured to respond, however, it seems like anything (aside from youtube) that requires a larger datastream doesn't work. Weird, I know.
The BT hub does not exhibit this issue, nor does my laptop when connected directly to the passthrough modem I purchased for this purpose.
So - the summary is that the BT modem/router combination is working just fine to all destinations.
When I connect my laptop to the bridged modem directly I do not see issues.
As soon as the Edgerouter is inline, major swaths of the internet are seemingly unreachable. I have not seen anything common about these websites that would explain why they are not reachable when others are.
I have not witnessed anything in the logs other than normal messages and PPoE auth. The device is running v1.10.11
Here is the config. Any help would be greatly appreciated
firewall {
all-ping enable
broadcast-ping disable
ipv6-receive-redirects disable
ipv6-src-route disable
ip-src-route disable
log-martians enable
name WAN_IN {
default-action drop
description "WAN to internal"
rule 10 {
action accept
description "Allow established/related"
state {
established enable
related enable
}
}
rule 20 {
action drop
description "Drop invalid state"
state {
invalid enable
}
}
}
name WAN_LOCAL {
default-action drop
description "WAN to router"
rule 10 {
action accept
description "Allow established/related"
state {
established enable
related enable
}
}
rule 20 {
action drop
description "Drop invalid state"
state {
invalid enable
}
}
}
receive-redirects disable
send-redirects enable
source-validation disable
syn-cookies enable
}
interfaces {
ethernet eth0 {
description Local
duplex auto
speed auto
}
ethernet eth1 {
description Local
duplex auto
speed auto
}
ethernet eth2 {
description Local
duplex auto
speed auto
}
ethernet eth3 {
description Local
duplex auto
speed auto
}
ethernet eth4 {
description Internet
duplex auto
poe {
output off
}
pppoe 0 {
default-route auto
firewall {
in {
name WAN_IN
}
local {
name WAN_LOCAL
}
}
mtu 1492
name-server auto
password bt
user-id bthomehub@btbroadband.com
}
speed auto
}
loopback lo {
}
switch switch0 {
address 10.86.0.1/24
description Local
mtu 1500
switch-port {
interface eth0 {
}
interface eth1 {
}
interface eth2 {
}
interface eth3 {
}
vlan-aware disable
}
}
}
service {
dhcp-server {
disabled false
hostfile-update disable
shared-network-name temp {
authoritative disable
subnet 10.86.0.0/24 {
default-router 10.86.0.1
dns-server 8.8.8.8
dns-server 8.8.4.4
lease 86400
start 10.86.0.128 {
stop 10.86.0.254
}
}
}
static-arp disable
use-dnsmasq disable
}
dns {
forwarding {
cache-size 150
listen-on LISTENONPORT
listen-on switch0
}
}
gui {
http-port 80
https-port 443
older-ciphers enable
}
nat {
rule 5010 {
description "masquerade for WAN"
log disable
outbound-interface pppoe0
protocol all
type masquerade
}
}
ssh {
port 22
protocol-version v2
}
}
system {
host-name ubnt
login {
user *santized* {
authentication {
encrypted-password *santized*
}
level admin
}
}
ntp {
server 0.ubnt.pool.ntp.org {
}
server 1.ubnt.pool.ntp.org {
}
server 2.ubnt.pool.ntp.org {
}
server 3.ubnt.pool.ntp.org {
}
}
syslog {
global {
facility all {
level notice
}
facility protocols {
level debug
}
}
}
time-zone UTC
}
/* Warning: Do not remove the following line. */
/* === vyatta-config-version: "config-management@1:conntrack@1:cron@1:dhcp-relay@1:dhcp-server@4:firewall@5:ipsec@5:nat@3:qos@1:quagga@2:suspend@1:system@4:ubnt-pptp@1:ubnt-udapi-server@1:ubnt-unms@1:ubnt-util@1:vrrp@1:webgui@1:webproxy@1:zone-policy@1" === */
/* Release version: v1.10.11.5274269.200221.1028 */

Hello! I have two ISP with me and ER-X.
I want to use ISP 1 as Primary and ISP 2 as backup.
So, whenever ISP 1 is down/doesn't respond to ping. It should shift to ISP 2.
But, when ISP 1 is again back online and starts responding to ping. It should shift from ISP 2 to ISP 1 and stop using ISP 2 for the traffic.
I did all the default settings of Load Balancing following YouTube Video and The UBNT Document.
Failover is working. But it doesn't fallback.
It continues to use the ISP 2 for the traffic and doesn't shift to ISP 1 (leaving ISP 2).
I want to leave ISP 2 whenever ISP 1 is back online.
Please Help.

I want to achieve two things with EdgeRouter-X for the time-being.

1. Fail-Over: I have Excitel (ISP 1) and Airtel (ISP 2) both. Now, I want to use Excitel (ISP 1) as main and Airtel (ISP 2) as Backup. But the problem with Excitel (ISP 1) is that it has packet looses and which normal load-balancers (TP-Link Load Balancer) consider that as disconnections and shifts to Airtel (ISP 2). What I want is to script a way so that it only moves to Airtel (ISP 2) when there are at-least 5 fails of Excitel (ISP 1). (Basically 5 pings failed to google.com).
   
2. Fall-Back: As soon as Excitel (ISP 1) comes back online, it should ping-test Excitel (ISP 1) for 10 times before it moves back to Excitel (ISP 1) from Airtel (ISP 2) and leaves Airtel (ISP 2).
   

Edit: I have done the basic wizard load-balancing to do the things. (Screenshot: http://prntscr.com/m4iyhj)

firewall { all-ping enable broadcast-ping disable group { network-group PRIVATE_NETS { network 192.168.0.0/16 network 172.16.0.0/12 network 10.0.0.0/8 } } ipv6-receive-redirects disable ipv6-src-route disable ip-src-route disable log-martians disable modify balance { rule 10 { action modify description "do NOT load balance lan to lan" destination { group { network-group PRIVATE_NETS } } modify { table main } } rule 20 { action modify description "do NOT load balance destination public address" destination { group { address-group ADDRv4_pppoe0 } } modify { table main } } rule 30 { action modify description "do NOT load balance destination public address" destination { group { address-group ADDRv4_eth1 } } modify { table main } } rule 70 { action modify modify { lb-group G } } } name WAN_IN { default-action drop description "WAN to internal" rule 10 { action accept description "Allow established/related" state { established enable related enable } } rule 20 { action drop description "Drop invalid state" state { invalid enable } } } name WAN_LOCAL { default-action drop description "WAN to router" rule 10 { action accept description "Allow established/related" state { established enable related enable } } rule 20 { action drop description "Drop invalid state" state { invalid enable } } } options { mss-clamp { mss 1412 } } receive-redirects disable send-redirects enable source-validation disable syn-cookies enable } interfaces { ethernet eth0 { description "Excitel (WAN0 - eth0)" duplex auto pppoe 0 { default-route auto firewall { in { name WAN_IN } local { name WAN_LOCAL } } mtu 1492 name-server auto password xxxxxxx user-id xxxxxxxx } speed auto } ethernet eth1 { address dhcp description "Airtel (WAN1 - eth1)" duplex auto firewall { in { name WAN_IN } local { name WAN_LOCAL } } speed auto } ethernet eth2 { description "ASUS-Lobby (eth2)" duplex auto speed auto } ethernet eth3 { description "ASUS-ajgamer (eth3)" duplex auto speed auto } ethernet eth4 { duplex auto speed auto } loopback lo { } switch switch0 { address 192.168.1.1/24 description Local firewall { in { modify balance } } mtu 1500 switch-port { interface eth2 { } interface eth3 { } interface eth4 { } vlan-aware disable } } } load-balance { group G { interface eth1 { failover-only } interface pppoe0 { } lb-local enable lb-local-metric-change disable } } service { dhcp-server { disabled false hostfile-update disable shared-network-name LAN { authoritative enable subnet 192.168.1.0/24 { default-router 192.168.1.1 dns-server 192.168.1.1 lease 86400 start 192.168.1.38 { stop 192.168.1.243 } static-mapping ASUS-ajgamer { ip-address 192.168.1.200 mac-address xxxxxx } static-mapping ASUS-Lobby { ip-address 192.168.1.100 mac-address xxxxxx } static-mapping ajgamer-OnePlus3T { ip-address 192.168.1.44 mac-address xxxxxx } static-mapping WDMyCloud { ip-address 192.168.1.47 mac-address xxxxxx } } } use-dnsmasq disable } dns { forwarding { cache-size 150 listen-on switch0 } } gui { http-port 80 https-port 443 older-ciphers enable } nat { rule 5000 { description "masquerade for WAN" outbound-interface pppoe0 type masquerade } rule 5002 { description "masquerade for WAN 2" outbound-interface eth1 type masquerade } } ssh { port 22 protocol-version v2 } unms { disable } } system { conntrack { expect-table-size 4096 hash-size 4096 table-size 32768 tcp { half-open-connections 512 loose enable max-retrans 3 } } host-name ubnt login { user ubnt { authentication { encrypted-password xxxxxxxxxxxx plaintext-password "" } full-name "" level admin } } ntp { server 0.ubnt.pool.ntp.org { } server 1.ubnt.pool.ntp.org { } server 2.ubnt.pool.ntp.org { } server 3.ubnt.pool.ntp.org { } } syslog { global { facility all { level notice } facility protocols { level debug } } } time-zone Asia/Kolkata traffic-analysis { dpi enable export enable } } /* Warning: Do not remove the following line. */ /* === vyatta-config-version: "config-management@1:conntrack@1:cron@1:dhcp-relay@1:dhcp-server@4:firewall@5:ipsec@5:nat@3:qos@1:quagga@2:system@4:ubnt-pptp@1:ubnt-unms@1:ubnt-util@1:vrrp@1:webgui@1:webproxy@1:zone-policy@1" === */ /* Release version: v1.9.7+hotfix.3.5013617.170830.0227 */ 

My family is too poor for me to have a phone or a laptop. So the school supplied Chromebook one is the best I got to browse reddit, watch yt etc. Problem is this thing is IT Fort Knox. After trying a bunch of different stuff, here are my different solutions based on what your IT Department has blocked, If all these don't work.
____________________________________________________________________________________________________________________

Other Users

Try logging in as a guest or with a different email if neither is disabled. You should see the button in the bottom right for guest mode right when you power on your computer.
____________________________________________________________________________________________________________________
And if that doesn't work...

Proxy Sites

Sites that basically act as a browser within a browser allowing you to bypass most enterprise software. Some don't Work with video and most are blocked by basic website blockers. Still give a good few of these a try.
https://whoer.net/webproxyhttps://www.hidemyass.com/en-us/proxy
https://www.proxysite.com/
https://www.proxysite.site/
If these are blocked, try looking for other, more obscure ones.
Long list of them:
http://www.digitaljournal.com/p3874596
Also if the "homepage for the proxy site doesn't work. Try a link that already leads to something and work from there. Bookmark for convenience
Examples:https://www.hidemyass-freeproxy.com/proxy/en-ww/aHR0cHM6Ly93d3cueW91dHViZS5jb20v
http://sss.lcyyy.pcaqwvwdg.lceqo.uk2.gsr.awhoer.net/
You can also make these on another (unblocked) computer by visiting a proxy site, typing in a link, and sending the "proxyed" URL to yourself via email.
____________________________________________________________________________________________________________________
And if that doesn't work...

Chrome Web Store

All the Apps and extensions can allow for some useful stuff. IMHO the biggest vulnerability because administrators need to manually block every extension/app that could be used against them.
The most useful thing you will find on the CWS are browsers. Because they are not chrome, no management extensions are installed on them, so it completely stops them from blocking stuff.
My Recommendationshttps://chrome.google.com/webstore/detail/bit-browseigidaonkecelbangcglegdalgmbjgiio?hl=en-US Bit Browser - Weird layout but supports things like pinning content and easier tab management.
https://chrome.google.com/webstore/detail/evergreen-browsebbhleegfafbdldebhlcadidhjkakjdop?hl=en-US Evergreen - Simpler layout but skimps on the features and is a bit buggy.
Also a reddit client safe from browser extensions: https://chrome.google.com/webstore/detail/reditr-web-app-the-best-ejmiceoebcclihjdpnmmkdcmcboekibc?hl=en Wierd UI tho
Useful Extensionshttps://chrome.google.com/webstore/detail/evergreen-browsebbhleegfafbdldebhlcadidhjkakjdop?hl=en-US IE Tab - Runs IE inside of chrome super slowly. On the bright side it usually is good backup method and not blocked.
____________________________________________________________________________________________________________________
And if that doesn't work...

Misc Methods

The Wayback machine or other internet archives are usually like glorified proxy sites... that don't look like proxy sites.
The difference is usually in timeliness. Have fun reading day old reddit posts.https://archive.org/web/
Youtube Infinite
Some guy made a website that unblocks youtube videos, but nothing else. https://brycec.neocities.org/youtube.html

or save this string as a bookmark javascript:var a=location.href,b=a.substr(a.indexOf('='));location.href='http://brycec.neocities.org/youtube.html?id'+b; and click it whenever youtube blocks a video 

____________________________________________________________________________________________________________________
That's all I got, most of these were found perusing the internet for workarounds and exploits. If you have a method to add to the list leave a comment.

WARNINGS

Your school could probably still spy on you if they really wanted to. You could get in trouble. Careful about telling other people or the administration might block all the websites, extensions, apps, etc.
Edit: Formatting
Edit 2: Warnings added

My family is too poor for me to have a phone or a laptop. So the school supplied Chromebook one is the best I got to browse reddit, watch yt etc. Problem is this thing is IT Fort Knox. After trying a bunch of different stuff, here are my different solutions based on what your IT Department has blocked, If all these don't work.
____________________________________________________________________________________________________________________

Other Users

Try logging in as a guest or with a different email if neither is disabled. You should see the button in the bottom right for guest mode right when you power on your computer.
____________________________________________________________________________________________________________________
And if that doesn't work...

Proxy Sites

Sites that basically act as a browser within a browser allowing you to bypass most enterprise software. Some don't Work with video and most are blocked by basic website blockers. Still give a good few of these a try.
https://whoer.net/webproxyhttps://www.hidemyass.com/en-us/proxy
https://www.proxysite.com/
https://www.proxysite.site/
If these are blocked, try looking for other, more obscure ones.
Long list of them:
http://www.digitaljournal.com/p3874596
Also if the "homepage for the proxy site doesn't work. Try a link that already leads to something and work from there. Bookmark for convenience
Examples:https://www.hidemyass-freeproxy.com/proxy/en-ww/aHR0cHM6Ly93d3cueW91dHViZS5jb20v
http://sss.lcyyy.pcaqwvwdg.lceqo.uk2.gsr.awhoer.net/
You can also make these on another (unblocked) computer by visiting a proxy site, typing in a link, and sending the "proxyed" URL to yourself via email.
____________________________________________________________________________________________________________________
And if that doesn't work...

Chrome Web Store

All the Apps and extensions can allow for some useful stuff. IMHO the biggest vulnerability because administrators need to manually block every extension/app that could be used against them.
The most useful thing you will find on the CWS are browsers. Because they are not chrome, no management extensions are installed on them, so it completely stops them from blocking stuff.
My Recommendationshttps://chrome.google.com/webstore/detail/bit-browseigidaonkecelbangcglegdalgmbjgiio?hl=en-US Bit Browser - Weird layout but supports things like pinning content and easier tab management.
https://chrome.google.com/webstore/detail/evergreen-browsebbhleegfafbdldebhlcadidhjkakjdop?hl=en-US Evergreen - Simpler layout but skimps on the features and is a bit buggy.
​
Also a reddit client safe from browser extensions: https://chrome.google.com/webstore/detail/reditr-web-app-the-best-ejmiceoebcclihjdpnmmkdcmcboekibc?hl=en Wierd UI tho
Useful Extensionshttps://chrome.google.com/webstore/detail/evergreen-browsebbhleegfafbdldebhlcadidhjkakjdop?hl=en-US IE Tab - Runs IE inside of chrome super slowly. On the bright side it usually is good backup method and not blocked.
____________________________________________________________________________________________________________________
And if that doesn't work...

Misc Methods

The Wayback machine or other internet archives are usually like glorified proxy sites... that don't look like proxy sites.
The difference is usually in timeliness. Have fun reading day old reddit posts.https://archive.org/web/
Youtube Infinite
Some guy made a website that unblocks youtube videos, but nothing else. https://brycec.neocities.org/youtube.html

or save this string as a bookmark javascript:var a=location.href,b=a.substr(a.indexOf('='));location.href='http://brycec.neocities.org/youtube.html?id'+b; and click it whenever youtube blocks a video 

____________________________________________________________________________________________________________________
That's all I got, most of these were found perusing the internet for workarounds and exploits. If you have a method to add to the list leave a comment.

WARNINGS

Your school could probably still spy on you if they really wanted to. You could get in trouble. Careful about telling other people or the administration might block all the websites, extensions, apps, etc.
Edit: Formatting
Edit 2: Warnings added

Last week of streaming i featured a combo list each day, most of them have the potential to OTK (one turn kill) your opponent. If you have trouble watching any video because of copyright issues just use a webproxy like this one http://www.vpnbook.com/webproxy or this one http://webproxy.to/
Mana Burn
Haste-Buff Comborush (1) (2)
Disciple
SuperToad
Surfing Teddy
Time of Tarum
BY Doom-Rush
link to each updated list can be found in the youtube description
last Highlightpost
Up next we will probably do some stuff with the new cards
Also Today arround 10-12 pm CEST after the Monthly Cup qualifier that you can find on cappuccinos stream where I will join him for casting, I will give away a couple of mythic chests, dragon orbs and lots of gold Keys on my stream

Hey everyone and welcome back to another edition of the Big XII Uniform Tracker, THE premier weekly discussion thread for Big XII uniforms and the teams that wear them. I hope ya’ll are doing well this morning! It was a moderately eventful week around the conference this week, and by that I mean that KANSAS STATE WORE SOMETHING NEW HOLY SHIT. Here’s your music to read this post to and now let’s get into this week’s fashion action:
Oklahoma Ball Oklahoma (Crimson/White/White) @ Iowa State (Cardinal/Cardinal/Cardinal) Iowa State Ball
Oklahoma-Iowa State is usually a clusterfuck since both teams kind of wear the same shade of dark red, so it was nice that this year’s edition featured some actual contrast. Oklahoma did their usual road uniforms thing, but Iowa State wore their all-cardinal combo with cardinal facemasks for the first time. I like ISU’s all-cardinal look and I think the cardinal facemasks are perfectly fine, but I’d like to see what this combo would look like with maybe some gold ones instead. A little something to pop on this look, you know? Otherwise this was a pretty good-looking game, all told. OU 34-24 ISU
Texas Ball Texas (White/White/White) @ Texas Tech (Black/Red/Red) Texas Tech Ball
One of my favorite subplots every season is “what do teams wear when Texas plays them at home?” Like, Texas is the conference’s biggest and most financially powerful program, so when teams get to host them, you’d have to think it’s always one of that team’s biggest games of the season. So what do you wear for that occasion? Especially when Texas always comes to town in all-white? Earlier this year, we saw Cal wear their traditional navy/navy/gold and Kansas State wear the home uniforms they wear every week except this one. Oklahoma State took the opportunity to wear all-black. So what did Texas Tech counter with? MAXIMUM COLOR. I wasn’t a huge fan of this look last season (it was worn against Kansas State), but I honestly really liked it this time around against Texas’ all-whites. Black/red/black is technically the better combo, but this was really loud and fun. Five stars for both this combination and this matchup. UT 45-37 TTU
Oklahoma State Ball Oklahoma State (Orange/White/Black) @ Kansas State (Camo/Purple/Silver) Kansas State Ball
KANSAS MOTHERFUCKING STATE WORE A GODDAMN ALTERNATE UNIFORM. On Fort Riley Day in Manhattan, K-State wore alternate white-and-silver camouflage helmets, and while it was relatively subtle, it wasn’t a bad look for KSU. While I would have preferred that Kansas State wear their superior normal uniforms for this game, this was perfectly fine. Good.
I see you Oklahoma State! LAWD HAVE MERCY ya’ll looked good. I really like this combination of uniform parts, as the orange helmets really made the orange number outlines pop and the black numbers were well balanced by the black pants. Can this be a yearly reoccurring uniform combo in this set? Thanks.
This was excellent! If K-State wore their normal helmets, this very well might have been my favorite uniform matchup of this season thus far. Still, though, this will probably still end up in the top five. Great job, everyone! OSU 43-37 KSU
Kansas Ball Kansas (Blue/White/Blue) @ West Virginia (White/Navy/Navy) West Virginia Ball
This is a really good West Virginia combo. Maybe the fan base disagrees, but I’m really a fan of the balance of this look. It’s an extremely “tall” look, but I appreciate the contrast between the white helmet and everything else in this look. It’s really crisp. Last time WVU wore this combo was last season against Texas, and I like it just as much now as I did then. Can we talk real quick about how on point West Virginia has been this season? Take a look at that individual team tracker I throw at the bottom of this post every week. They have a misstep or two, but otherwise this has been an excellent year for WVU, uniforms-wise. Great job!
Kansas was fine. This would have seemed like a really good game to wear some of those dope red uniform parts, but in the end, I really can’t argue with blue/white/blue. Plus, the red chrome facemasks on this iteration were really spot-on, I thought. Not bad.
This one could have been better, but I think it turned out pretty well. WVU 48-21 KU
TCU Ball TCU (White/White/White) @ Baylor (Black/Black/Black) Baylor Ball
TCU 62-22 BAY
Ya’ll, I don’t really want to get into this game and why Baylor wore what they did. I just really fucking don’t. I don’t want to talk about #CAB or “truth” or (right now) the heinous crimes committed by some players and the coaching staff at Baylor University. This damn uniform tracker is one of the few things I look forward to doing every week, and I don’t want to soil that with talking about Baylor’s bullshit this time around.
Instead, here’s what I’ll do. Here is the contact information for the National Sexual Assault Telephone Hotline. And instead of talking about a football game that involved Baylor University, here five of my favorite uniform matchups from this week (one from the other four P5 conferences and a G5 one), not including LSU-Alabama because that’s just cheating:
Louisville Ball ACC: Louisville @ Boston College Boston College Ball
Michigan State Ball Big Ten: Michigan State @ Illinois Illinois Ball
Oregon Ball Pac-12: Oregon @ Southern Cal USC Ball
Vanderbilt Ball SEC: Vanderbilt @ Auburn Auburn Ball
Fresno State G5: Fresno State @ Colorado State Colorado State
And here are the individual team trackers, updated to include this week:
Baylor
Iowa State
Kansas
Kansas State
Oklahoma
Oklahoma State
TCU
Texas
Texas Tech
West Virginia
And that’s it for the Big XII Uniform Tracker this week! Thank you, everyone, for reading this week and every week. All of you regular readers mean the world to me, and if ya’ll ever need anything, I’ll do anything I can to help. Make sure you throw your thoughts and feelings in the comments section below, and if you need me, just me and I’ll be there before too long. Ya’ll be safe out there today, okay? Have a great day, everyone!
Baylor Ball Iowa State Ball Kansas Ball Kansas State Ball Oklahoma Ball
Oklahoma State Ball TCU Ball Texas Ball Texas Tech Ball West Virginia Ball

Ivy League Brown Columbia Cornell Dartmouth Harvard Penn Princeton Yale Ivy League
It has finally come--the Ivy League season is upon us. Unlike other conferences, the teams in Ivy League only play ten games each year--seven in conference and three out-of-conference. This conference doesn't get a ton of play on /cfb, so I figured I'd give a quick preview into each of the teams as they all start their season hoping to take home an Ivy Title.

2015

Recap

Much like the Big 12, the Ivy League believes in one true champion. 2015 embraced that phrase wholly, as the Ivy finished in a three-way tie for first place. Dartmouth, Harvard, and Penn all finished 6-1 in conference play. Penn lost to Dartmouth, who lost to Harvard, who lost to Penn. It was, really, a beautiful circle. Also, for anybody who hasn't seen it, go to the Ivy League Digital Network and watch the Dartmouth-Harvard game from last year. It includes one of the greatest goalline stands (by Dartmouth) you'll ever see.
Elsewhere in the league, Yale and Princeton regressed from winning teams to losing teams (in conference), and Columbia won not just one, but two whole games. Including a conference win over Yale that we all laughed at Yale for. Somehow they still lost to Cornell 3-0, giving the Big Red their lone win of the season. I went to a Cornell game last year, AMA.
The real surprise last year, though, was Penn. The Quakers lost their long time head coach to conference foe Columbia last offseason. Coach Priore came in and, in their second game, upset Villanova, who were ranked #4 in the FCS that week. Just to set the level of shock at Penn's amazing season, here's my preview from last year:

Penn, reeling from the betrayal of their long-time coach Al Bagnoli (see Columbia), has a lot to prove and a lot of room to improve this season. New coach Ray Priore will look to correct where it all went wrong for Penn last year. Luckily for the new coach, junior QB Alex Torgersen returns to the helm of the very good passing offense--it was second only to Yale last year. Coach Priore will have to figure out the running game, though, as it was abysmal last year, with no RB averaging over 37 yards per game. Sophomore Tre Solomon, who suffered a season-ending knee injury in the fourth game of the year, will look to rebound the Penn rushing attack.
Penn's defense was terrible last year, though, and that's the side of the ball they need to most help on. The only team that allowed more yards per game was Columbia, so it's bad company to keep. It will probably take a few years before Coach Priore can get things on track, so I don't expect much from this Quakers team this year.

So, the lesson here is: Don't trust me.

Standings

Team	Conference	Overall
Dartmouth	6-1	8-2
Harvard	6-1	9-1
Penn	6-1	7-3
Yale	3-4	6-4
Brown	3-4	5-5
Princeton	2-5	5-5
Columbia	1-6	2-8
Cornell	1-6	1-9

2016

Preview

Brown Bears

Schedule Roster
The Bears remain the model of Ivy consistency, going 3-4 in conference for the third straight year. The passing game remained impressive, finishing second in the Ivy behind only Harvard. The three-RB committee and the defense didn't get the job done, though. The Bears finished dead last in rushing in the Ivy with 109.8 yards per game.
Senior QB Kyle Moreno takes over the helm at Brown, and Junior Johnny Pena steps up as the go-to RB. On the other side of the ball, the defensive front all returns, but there are big gaps in the linebacker corps and the secondary. This year is probably not the year of the turnaround for Brown's defense.
Biggest Game: @ Cornell, October 22, 12 PM, Fox College Sports

Columbia Lions

Schedule Roster
Last season, new Coach Al Bagnoli, who came over after a long career at conference rival Penn, instituted a new culture at Columbia. The defense was vastly improved, finishing second to only the vaunted Dartmouth defense in total defense. DB Jared Katz and LB Christian Conway return to anchor the defense. The defense led it to two whole victories last year, which, considering they went winless the year before, was nothing to sneeze at.
This year, the offense hopes to improve, and the defense hopes to hold steady. Columbia's moving in the right direction, but it may still be a ways to go before they reach the top of the Ivy League for the first time since 1961.
If that's not exciting enough for you, you can get free beer if you endure a Columbia football game. And that's nothing to sneeze at.
Biggest Game: @ Yale, October 28, 7:00 PM NBC Sports

Cornell Big Red

Schedule Roster
Coach David Archer enters his fourth year in charge high above Cayuga's waters, and he's gone 2-18 in his first two. Neither side of the ball stood out for Cornell, although they were the benefactors of great play from Senior RB Luke Hagy. Now that he's gone, there's a void in the backfield. However, they'll have some stability under center, as now Senior QB Robert Somborn will return for his second full season starting.
Last year had some close games, so perhaps the Big Red can overcome the hurdle. They fell short in a comeback bid against Colgate, and gave away the lead with less than two minutes left to Bucknell. The Schoellkopf faithful will be looking for a sign, any sign, of improvement.
Biggest Game: vs Columbia, November 12, 1:00 PM

Dartmouth Big Green

Schedule Roster
Dartmouth comes into 2016 hungrier than ever to get the undisputed Ivy title. After losing to only Harvard two years in a row, the Big Green are hoping to make 2016 the year of revenge. They'll have to do it with a new QB at the helm, in Junior Jack Heneghan. He'll have some new targets, but Junior RB Ryder Stone was the most prolific RB of the committee last year, and hopes to have a better season this year.
The defense will have to fill in some holes left by departing seniors, but LB Folarin Orimolade hopes to anchor the Ivy's returning best defense for a repeat performance.
As a fun fact, Dartmouth (and Coach Buddy Teevans) is a pioneer of no tackle practices.
Biggest Game: @ Harvard, October 29, 1:30 PM

Harvard Crimson

Schedule Roster
Harvard succeeded in their title defense...sort of. After barely squeaking by Dartmouth in what was, I assure you, a hell of a game, Harvard was free and clear to win the Ivy outright. But, in their penultimate game (pun intended), the Quakers of Pennsylvania came to Boston and shut Harvard stud RB Paul Stanton, Jr. down. In fact, Harvard didn't even score in the second half.
Senior Joe Viviano will take over the Harvard offense that topped the Ivy last year, while the defense returns a ton of talent. There's some real promising young talent on this roster, too, including Sophomore WR Justice Shetlon-Mosley.
Harvard's expectations right now are Ivy Championship or Bust, and for good reason. They'll have stiff competition, but it should be a very entertaining season.
Biggest Game: @ Yale, November 19, 12:30 PM

Penn Quakers

Schedule Roster
It's tough to imagine a better season for Penn this year than what they had last year. Coach Ray Priore took the reins after his longtime boss, Al Bagnoli, absconded for Columbia after several years of disappointment. Immediately, the Quakers shocked the Ivy League by beating Harvard in Boston and claiming their share of the 2015 Ivy League title.
Senior QB Alex Torgersen returns to running the high-powered offense, hoping to improve on his 19TD thrown last year. He also sports an awesome pirate goatee.
Despite Coach Priore's background on the defensive side of the ball, the Penn defense was a bit below Ivy average last year. They hope to improve this year, getting a little older and wiser. They return a good chunk of their defensive corps, and will look to repeat as Ivy champions.
Biggest Game: vs Princeton, November 5, 12 PM

Princeton Tigers

Schedule Roster
Princeton went from mediocre to bad in 2015, and will look to rebound. The line play was sloppy, and whoever said a triple QB system couldn't work? Everybody. Everybody did. But, while their offense was only mediocre in the Ivy League, their defense was just plain dreadful, finishing dead last in the Ivy League.
They return their most prolific passer of the three, Senior Chad Kanoff. Coach Bob Surace hopes to return to at least his glory years of 2013, when the Tigers won a share of the Ivy title. In his seven years at Princeton, he's one 0, 1, 4, 6, 4, and 2 Ivy League games, respectively. It's been a roller coaster in New Jersey.
Biggest Game: @ Penn, November 5, 12 PM

Yale Bulldogs

Schedule Roster
Last year's big question was: Will the Bulldogs be able to live without RB Tyler Varga? At the end of last year, we could definitively say: No. Varga's 1423 yards and 22 TDs were replaced with a committee of RBs that accounted for 1224 yards and 15 TDs.
Yale will have to make a lot of changes on both sides of the ball to be competitive this year. That said, The Game will most likely still be competitive, as all good rivalry games tend to be. After massive regression, though, and even a loss to lowly Columbia, Yale will really need to buckle down to compete in a league very crowded at the top.
Biggest Game: vs Harvard, November 19, 12:30 PM

This Week's Games

Away	Home	Time (EDT)	TV
Rhode Island	Harvard	(Friday) 7:00 PM	American Sports Network
Colgate	Yale	1:00 PM	OneWorld Sports
Brown	Bryant	1:00 PM
St. Francis (PA)	Columbia	1:00 PM
Cornell	Bucknell	3:00 PM
Lehigh	Penn	5:00 PM
Lafayette	Princeton	5:00 PM	ESPN3
UNH	Dartmouth	7:00 PM	FOX College Sports

If you're in the Northeast, you should check one of them out! You can also watch online on the Ivy League Digital Network. The full TV schedule for the year is here.

I can't upload anything to youtube, all other websites work fine. There seems to be a problem with me connecting to the upload server, i can connect trough a webproxy, but using any of my browsers the standard way fails.
I've searched for viruses, turned off my antivirus, checked hosts file... I'm getting really desperate for any help, been waiting a month on the youtube forums for any sign of help but, alas.. no help :(