@scottalanmiller said in Address Selection for New Networks:

Don't use /24. No reason whatsoever to limit like that. Use /23 and get 500+ devices for each customer. You won't be able to change this later without being a big pain because you are making address ranges next to each other.

I use a 23 for a main office, but almost all SMB that I see will not come close to filling up a /24 anyway.

If you properly setup everything as DHCP with reservations for the important things, you will only have a few key systems that need to be manually changed when you need to update your scope.

Granted it is easier if you think you will ever potentially need to expand in the near term to start with a /23.

@scottalanmiller said in Xen Orchestra / Metadata backup?:

Citrix says to not back up the host and it appears that megadata is stored on the SR. Has anyone attempted to restore without the metadata backup to see what would come up as missing? Having done something basically like this, I thought that I got all of the data that you would be looking for (minus logs.)

It restores the VDIs, but doesn't associate them with VMs. Nor does it create VMs.

So you just have a bunch of VDIs.

@RobLewisss said in Linux Iptables Firewall Automation:

@JulianJulian Thanks mate! I just downloaded the agent. I'll let you guys know how it works.

I also downloaded the agent to one of my Linux systems. It was very quick and simple.

The cloud interface picked up the installed agent imediately and I was able to manage it right there.

There are different groups that you can place each agent for different rules.

Definitely worth testing. Up to 5 servers for free!

@JaredBusch said in OpenOffice Contemplates Shutdown Amid Volunteer Drought:

@scottalanmiller said in OpenOffice Contemplates Shutdown Amid Volunteer Drought:

Makes sense. It has been nearly insane that it kept going in the light of LibreOffice all of this time. They should have merged back in long ago. We don't need those two existing side by side, it just hurts the ecosystem.

Is merged back in the right term since Libre is the fork and Open is the original?

But yeah, I agree that there is jut not enough active development for both it seems.

That's always a tough one when the original people do the forking. The code is identical at the time of the split, so one is not more original than the other (unlike cloning an animal) and moving forward the only aspects that make one the original and one the fork is the name and the team. In the case of OO or NC, the original team went with the fork, making it convoluted which is now the original. The original name, OO, went one way and the team went another.

Or, to make it more confusing, if the team makes the "new project", like in this case, one could make the case that OO is the fork of LO, even though it is newer, because ideologically the original project, momentum, team and code changed name to LibreOffice.

Code is a weird thing to think of as one being original and one not.

@scottalanmiller said in Installing a Basic LAMP Stack on CentOS 7:

@NashBrydges said in Installing a Basic LAMP Stack on CentOS 7:

@scottalanmiller I haven't yet. About to give it a try. Stuck to legacy since that was what I was reading everywhere.

Where is everywhere? Technet says to not use legacy.

https://technet.microsoft.com/en-us/windows-server-docs/compute/hyper-v/supported-centos-and-red-hat-enterprise-linux-virtual-machines-on-hyper-v

Legacy is a fallback driver that you never want to use, it's low performance and high overhead. If you needed that for CentOS, it would make Hyper-V a silly, non-production ready platform. But Hyper-V is a good, solid performer.

Not only that, but I install all of my CentOS 7 VM's as Generation 2 when on Hyper-V they work perfectly with default settings for everything except secure boot. Uncheck secure boot. Everything else is 100% default settings.

Bridging issue solved, kind of a Late-Friday-Problem: Promiscuous mode was turned on, but on the wrong interface - the DMZ facing one.

It worked instantly the second I switched it off on the DMZ and instead turned it on on the target network interface.

How to turn on MAC spoofing / Promiscuous mode on Hyper-V using PowerShell

Get-VM -Name XXXXX | Get-VMNetworkAdapter | Where-Object { $_.MacAddress -eq "XXXXXXXX" } | Set-VMNetworkAdapter -MacAddressSpoofing On

Received a few emails from Mozilla myself, about Mozilla Thimble - sadly, only watched the videos so far, but, does look good so far. :nerd:

MangoLassi runs on MongoDB, it's a big part of what makes the site so fast, responsive and flexible.

The way you worded your question it's almost as if you think that if you have your own company you won't have regular pay. As @JaredBusch said if you form a company and write yourself a paycheck every week, you do have regular pay.

Once you have a certain number of customers, you actually have more job security than with a single employer. If you lose one customer, you may lose 10% of your salary, but not everything.

@JaredBusch said in Site Issues Tonight:

I got this from CF just now.
0_1472877605221_upload-b5af2320-10f0-4b96-866d-e1dce8b8d0b8

and direct.mangolassi.it took 15-20 seconds to load.

Pretty sure that is what I got and may be the referenced person @scottalanmiller mentioned.

But as I was having some other issues, I killed Chrome; CCleanered my system the ran a regedit.

@RamblingBiped said in SIP Phone registers no audio...:

Here is the guide I followed to get the Yealink T23G to work with OpenVPN: http://www.sunstatetechnology.com/docs/YealinkOpenVPNGuide.pdf

When I disable NAT on the extension the phone is unable to register.

Something is wrong there, that sounds like the VPN is not working as there is no NAT when there is a VPN.

0_1472922631977_Screenshot from 2016-09-03 13-09-29.png

@scottalanmiller said in How Are You Measured?:

There is only one useful way to measure IT.... Its impact to the way that the CEO is measured. Anything else like SLA, uptime, tickets, etc is misleading, actively undermines the organization and leads to gamification.

RIOC, Average Revenue per customer/whatever the metric of your industry is, IT should be serving improving that metric.

@stacksofplates said in Replication cable:

Finally took some time and Gluster is running on both nodes. I get local speed and network replication :).

Nice

@stacksofplates said in OWA is vulnerable to Phishing:

@scottalanmiller said in OWA is vulnerable to Phishing:

@aidan_walsh said in OWA is vulnerable to Phishing:

@Breffni-Potter said in OWA is vulnerable to Phishing:

Ummm....as an attacker, why can't I just have a next page fake confirmation which forgets the profile photo (easy to overlook in a hurry) and get the password for google anyway?

Same again for the banking website.

Thats exactly what happens. You'd be surprised at what passes for phishing attacks, and how many people fall for them. I've seen ones that have asked people "for security purpose" to enter all 50 4-digit code card entries, something a bank would obviously never do.

And yet...

Partially that's because real banks have done that traditionally.

Like AMEX. I needed a password reset and they asked all of the info on my card, other than my name and expiration.

Yeah, it definitely still happens. And I've had huge security gaps that I've told a bank was not secure and they didn't care. I said... I literally have no means to tell if you are really my bank or not and they are just like "so, we don't care."

CSS an JS highlighting won't do it as the issue isn't markup but getting mangled by the editor.

external adapter