2023 RAV4 XLE: won't start after remote start, and driver door won't open while idling

2023 RAV4 XLE, push button start, remote start through the Toyota app. Two intermittent issues.

1. Won't start after a remote start
I remote start from the app (10 min run). When I get in, either during the 10 minutes or after it times out, sometimes it won't start. Dash says press brake and push start, I do exactly that, nothing happens. Maybe 8 or 9 times out of 100.

Only workaround I've found: get out, remote start again from the app, open the door (which shuts it off), close the door, lock it, unlock it, get back in. Then it starts normally.

2. Driver door won't open while idling (manual start, not remote)
I start it normally and let it idle 5 to 10 min before driving. I get out, close the door, don't lock it, and keep the fob in my pocket (battery is not the issue here). When I come back, every door opens except the driver door.

Anyone seen either of these? Known software update, dealer fix, or a setting I'm missing?

Note: I visit dealer in every 5-8 K miles, ask for any issue to be fixed kinda annoying.

reddit.com
u/Aj_Networks — 6 days ago

How should Trump's "let 'em take out Los Angeles" remark about Iran be interpreted?

At a Monday rally in Grand Island, Nebraska, campaigning for Sen. Pete Ricketts, President Trump defended the Iran war's costs as "a small price to pay for keeping the world safe." He then said: "They can take out a city. Let 'em take out Los Angeles. Let 'em take out San Diego... it's going to be over very soon."

Gov. Newsom called the remarks "deranged and dangerous." LA Mayor Karen Bass said they could compromise the city's safety, and San Diego Mayor Todd Gloria said his city "is not collateral damage." Jim Desmond, a Republican running for a San Diego County House seat, also condemned the comments. The White House had not responded to press requests in early coverage.

Questions:

  1. Is the remark best read as a warning about Iran's potential reach, or as accepting domestic casualties as a cost of war?
  2. Should a president's rally remarks on national security be held to the same standard as formal statements?
reddit.com
u/Aj_Networks — 9 days ago

pfSense with two Mullvad WG tunnels in failover: can the firewall's own DNS leak out WAN when a tunnel drops?

Setup: pfSense 2.8.1 CE, two Mullvad WireGuard tunnels in a failover gateway group. Unbound in forwarding mode. Outbound NAT only on the WG interfaces, so LAN traffic can't exit WAN.

Mullvad's pfSense guide is single-tunnel: forward to 10.64.0.1 bound to the tunnel gateway. With two tunnels that doesn't work cleanly, since 10.64.0.1 is the same address on both and a host route can only point at one interface. I tried 100.64.0.x instead (different IP per tunnel) but pfSense never installed routes for them, so they didn't resolve.

What I ended up with: each gateway's monitor IP doubles as its DNS forwarder.

  • 9.9.9.9 bound to Tier 1 (also its monitor IP)
  • 1.1.1.1 bound to Tier 2 (also its monitor IP)

netstat -rn shows each one host-routed to its own tun_wg. whoami.ds.akahelp.net @ - 9.9.9.9 returns a DataPacket IP, not Quad9, so Mullvad's port 53 hijack is answering, which matches their docs.

What I can't figure out:

  1. When a WG gateway is marked down, does pfSense pull that host route? If it does, queries from the firewall itself would follow the default route out WAN, and since the firewall sources its own traffic from the WAN IP, the NAT-only kill switch wouldn't catch it. Anyone tested this?
  2. Is there a cleaner way to get per-tunnel Mullvad DNS with failover, or is the monitor-IP trick about as good as it gets?

Config screenshot below, IPs and locations redacted.

Also open to general feedback. If this setup is unusual or I'm overcomplicating something, I'd rather hear it now.

u/Aj_Networks — 12 days ago
▲ 45 r/ccna

CCNA now (v1.1) or hold for v2.0 in Feb 2027?

Just passed Security+ and was about to shift focus to CCNA. Then I saw v2.0 lands Feb 3, 2027 (heavier troubleshooting, new AI section, a chunk of old topics removed).

The catch: I don't need this for my job and nothing requires it. Pure good-to-have, no deadline.

So do I:

  • Start v1.1 now and bank the cert (foundations carry over to v2.0 anyway), or
  • Wait ~8 months and learn the current blueprint instead of relearning cut topics?

What would you do and why? Open to all takes. Thanks for your time.

reddit.com
u/Aj_Networks — 4 months ago

Static site on Cloudflare Free, what "always-enable" settings did I probably miss?

First post. IT background, web isn't my lane. Static site behind Cloudflare Free, leaned on docs + AI for the gaps. Looking for the Day-1 settings I haven't hit.

Stack: static HTML/CSS/JS on GitHub Pages, Cloudflare proxy in front. No build, no backend.

Already done (skip these):

  • HSTS + preload (pending list)
  • CSP with SHA-256 hashes, base-uri, object-src 'none', form-action, frame-ancestors 'none', upgrade-insecure-requests
  • COOP / CORP / X-Frame DENY / nosniff / Referrer-Policy
  • Permissions-Policy locked
  • DNSSEC + DS at registrar (AD flag validating)
  • CAA pinned to LE / Google / DigiCert / SSL.com + iodef
  • SPF / DMARC (p=none, monitoring) / DKIM
  • TLS 1.3, A+ at SSL Labs
  • Private repo, minified source, zero third-party scripts

What's on YOUR Day-1 list that's not in there? WAF custom rules, transform vs page rules, Speed-tab toggles, Workers/R2 wins, anything dashboard-side I'd only catch in an audit.

reddit.com
u/Aj_Networks — 4 months ago

Brave Origin's one-time pricing vs the old subscription, worth the switch?

EDIT (title correction): Origin has no "old subscription." It's a one-time $59.99 buy. The VPN/Search/Leo subs are separate products, unrelated to Origin.

Been running Brave as my daily driver for a while and picked up Origin under the new one-time model. So far it's been solid. For others who've moved over, how's it holding up long-term, and is the one-time deal actually better value than the old monthly, or are there features you feel got left behind?

reddit.com
u/Aj_Networks — 4 months ago