@Romo said in EdgeRouter L2TP VPN network issue.:

We have a client with an Edge Router Lite FW version 2.0.8 which is having issues with the L2TP VPN. Clients can properly connect to the VPN and get an IP but after the first few seconds of being connected access to the file servers start getting timeouts, web browsing basically either doesn't work or slows so much it's really not usable. A router reboot fixes whatever is causing the issue for some days, but I would really like to figure out how to resolve this without doing a reboot.

I have restarted the vpn services but that doesn't seem to fix the issue.

I can't seem to find anything outside of the ordinary in the logs that would help. Only thing weird is this when the vpn is having the issues ksoftirqd/0 and 1 start using most of the CPU:

Screenshot from 2019-12-12 09-22-16.png

Any ideas?
@scottalanmiller

How long are these users keeping sessions open?

If a reboot fixes, it is likely an issue with the router packages.

I so rarely use my L2TP connection to routers anymore, I have no experience with this issue.

This is how you change the password.

Mine auto updated
8379baa0-4b1b-463c-ab3f-d799daddfa87-image.png

@Pete-S said in deploy iPads - locked down - suggestions?:

Signage displays use vesa mounts so it's easy to find different mounting options. Could have something that could be angled.

I would also consider disinfection when something is used in healthcare by the public.

FTFY

While I would generally agree with that, it feels as if I'm just missing 1 step to this process.

@coliver said in Switch for harsh environment ...:

Ubiquiti has the Toughswitch Carrier as well. It's older tech not sure if they still actively sell it.

https://www.amazon.com/Ubiquiti-TS-16-CARRIER-ToughSwitch-Rackmount-Controllers/dp/B00CXU9ZOC

They still sell it but they get very hot. However they are fan-less so that might be good.

We usually do a Bastion Server when we need to connect to other servers that are only allowed from one IP address, or we just VPN and then connect to the server.

Yep choosing an https mirror seems to be working.

@JasGot said in Windows 10 1809+ Clipboard history:

@Dashrender said in Windows 10 1809+ Clipboard history:

OK, I suppose I can follow that - but you really think that CopyX is somehow more secure than Clipboard history? Don't they both use the clipboard? that thing is pretty much open to anyone, so I don't see how it would be any more or less secure - I would say they are likely both the same level of secure....

Even though they both read the clipboard whenever it changes, ClipX doesn't store the history the same way Windows Clipboard History does. Since Microsoft is a larger target, I still think they will be compromised before ClipX. 😉

what do you mean they don't store it the same way? you know that for sure?

Just had a very large client reach out and ask for LibreOffice again after moving to MS Office because they found Excel too difficult to get data in correctly. So they are going to LibreOffice for exactly the reason that everyone claims that "everyone" chooses MS Office... LO is easier to use and has better compatibility 🙂

They own licenses for both, so purchase cost is not a factor. They've used MS Office more time in the last three years. Given less time with LibreOffice and zero "price" incentive, they've chosen it as the superior product for them - with zero prompting from IT. Out of the blue the managers chose it as the better product.

@DustinB3403 said in Wazuh - operational and can add agents - now what:

@IRJ said in Wazuh - operational and can add agents - now what:

So you already filtered it. Just click discover on top right

Doh that is so easy that I didn't even think that was it.

@DustinB3403

3a8e8726-f742-493d-a2cd-5f54c82ce4fb-image.png

Off top I can think of a few options to help remove the dependence of Excel. This is a short list.

Microsoft Power Apps
Google App maker
Quickbase
Zoho Creator

@Dashrender said in Re-evaluating Local Administrative User Rights:

@Obsolesce said in Re-evaluating Local Administrative User Rights:

@Dashrender said in Re-evaluating Local Administrative User Rights:

@Obsolesce said in Re-evaluating Local Administrative User Rights:

@jmoore said in Re-evaluating Local Administrative User Rights:

I would agree in most situations no user needs to be admin on their own box. I think this is the way to go about things. Of course there are a lot of other factors as others have mentioned. However, if someone at your company tells you to compromise, what about having a seperate admin account that they only use when necessary? Then the rest of the time they use their regular account.

Perhaps. But actually logging into an admin account means they they would be logged in and have admin rights full time while logged on, and that works around the whole thing.

As a compromise, I think sticking to exceptions being able to temporarily obtain local admin rights, with warning, acceptance message, etc. That will force consciousness of the fact.

Are you using a product that allows for this temporary gaining of local admin rights?

Yes you could say that.

Why so coy?

Not intentionally, just wanting to stay on the main discussion.

That will return from the default index. To specify an index add it in the URL:

curl 192.168.1.100:9200/index/_search?pretty'

@Dashrender said in Email Migration Advice::

the IMAP connection goes to the address you setup, not the MX record for the domain in question.

What does an MX record have to do with anything? I think you have no idea WTF you are are talking about.

@Dashrender said in Dropbox and Box - billing issues:

So it was only verbal demands to pay for 600 users? no actual bill sent?

yeah - scummy sales BS.

Sounds like they make it scummy sales BS only after getting caught doing something far more illegal. Don't let them water it down after the fact. It's like getting caught trying to hot wire a car but convincing the cops that they weren't stealing the car, just stealing the Taco Bell food that they saw in the car... still illegal but not grand theft auto that they were actually caught attempting in the beginning.

@black3dynamite said in Spin VMs quickly with KVM + virt-sysprep:

@stacksofplates said in Spin VMs quickly with KVM + virt-sysprep:

I usually use virt-builder to build the image, and then I can clone from that. Then you have nice really small images to build from.

Have you ever created your own repo using virt-builder-repository?

No I've always pulled from upstream. I've honestly never looked into that before.

As above what they are are saying is that using Hybrid AD is fine with a domain name that is not the same as long as you add the UPN in Active Directory Domain Trusts and then you adjust all the users in the domain to match that domain either manually or scripted.
https://docs.microsoft.com/en-us/office365/enterprise/prepare-a-non-routable-domain-for-directory-synchronization

My only concern with this is that you might not need to sync AD but if you are already setup then it is kinda hard to revert.

@biggen said in Getting started with automated provisioning?:

I’m not sure the difference between a clone and a copy. I’ll look that up.

Clones are linked. Copies are discrete.