neatchee

My point is simply that you’re being fingerprinted and re-banned, rather than these accounts triggering some independent “no 2fa comments” rule and getting individually banned. Whatever the trigger is, the system is recognizing you as an already banned user and re-banning you as soon as you cross their radar

If you’re not rotating your IP every time then you’re getting hit for ban evasion triggered by keyword detection or reports

If you’re not rotating your IP every time then you’re getting hit for ban evasion triggered by keyword detection or reports

Site-to-site and individual client setups are not mutually exclusive. They can co-exist.

I have Wireguard on both my phone and laptop - and tailscale should work the same way - which I only activate when I’m away from my home network.

You could even set it up where each “roaming” device is always connected to their “home” network by VPN, which uses site-to-site to further route the traffic where it needs to go.

I recommend looking into setting up site-to-site VPN configurations between routers at each location. I have this set up between my home network and my parents’ network.

Once you have it properly configured you can simply have the router itself handle routing of specific traffic over the VPN connection, instead of needing each device to connect to the VPN individually.

it’s a bit more complicated to set up and maintain but not anything outrageously complex, and absolutely worth it for your use case IMO

it’s not going to for either of them

it never does lol

I work on software security (not it/infosec) and deal with this constantly. Bad stuff didn’t happen so we can scale back security, right? No, shit for brains, either the bad stuff didn’t happen because we prevented it, or the bad stuff just hasn’t happened yet because the vulnerability wasn’t discovered, or worse still, the bad stuff DID happen and we haven’t been informed yet. Either way, please do not make my job harder.