@DustinB3403 said in Unifi port blocking on specific networks:

@Dashrender said in Unifi port blocking on specific networks:

he's talking about ports - not URLS.. not sure that Pi-hole fixes this, unless he said the wrong word earlier.

I specifically mean to block ports on a specified wireless network, had I meant URL's I'd be using my pihole.

Assuming
wifi - 192.168.1.x
LAN - 192.168.2.x

You configure the router to not allow said ports on network 192.168.1.x

@iroal said in Migrate to O365 best method:

@Dashrender said in Migrate to O365 best method:

slick

I migrated 66 accounts from Exchange 2003 to O365, uploading the Pst to O365 cloud.

Hard work but worked very well.

I could see time consuming, but I would have expected it to be that hard.

Ok i found this and it looks to be a promising solution with the features I want.

Blogdown

So I set this up again on a new jump box today.

SSH attempts did not log until I changed the mode to ddos

@Pete-S said in Turns Out My New Client Has Colocation At CloudAtCost Datacenter In Waterloo:

@scottalanmiller said in Turns Out My New Client Has Colocation At CloudAtCost Datacenter In Waterloo:

@Pete-S said in Turns Out My New Client Has Colocation At CloudAtCost Datacenter In Waterloo:

But where are the proof for what you said?

Besides their corporate filings and postings online? We aren't claiming anything that they've not announced themselves. It's public info, not something in question or disputed.

Well, if it's truly the datacenter that is shady, then I would strongly urge my customer to move their gear elsewhere as quickly a possible. Locked rack or not.

Exactly, that's what we're thinking. It's the datacenter (aka Cloud@Cost) that is scary here.

@DustinB3403 said in Data Breach: PDL "Enrichment" Company 1.2B Peeps Impacted ... yeah, BILLION:

<s> To be fair, setting up SSL and a login name and password does take extra effort. . give the poor sod a break </s>

Yeah and they weren't even bothered to whitelist IPs.

They should have SSL and strict whitelist preferably to a VPN IP that requires authentication.

@Emad-R said in One Time, Non-Image, Windows Backup Client:

@scottalanmiller said in One Time, Non-Image, Windows Backup Client:

@Emad-R said in One Time, Non-Image, Windows Backup Client:

better to use it on another VM close to that VM

No other VM. If we open the only other VM, ESXi can't work. So that tool, I'd expect, couldn't actually run.

Oh you can run it from any where, as long as you can ping the ESXi or reach it. but i prefer a VM cause its faster

I see. That was a problem for us because we couldn't transfer off of the server, their network wasn't fast enough 😞

@Dashrender said in QoS on Edgerouter Lite:

@Romo said in QoS on Edgerouter Lite:

Just setup a traffic-policy shaper to test:

20% bandwidth for voip guaranteed with a ceiling of 100% bandwidth
30% bandwidth for USERS PC guaranteed with a ceiling of 100% bandwidth
50% bandwidth for ALL others guaranteed with a ceiling of 100% bandwidth

Does this sound reasonable?

if you parse off 50% for those things and they aren't in use, then the bandwidth is just being wasted... I know scott has mentioned that doing this is generally bad in the past because of the waste of resources.

You don't read clearly. He's talking minimum guarantee at 20/30/50 and max possible when available at 100 for all.

@WLS-ITGuy said in O365 & Spam filter:

I thought I read it somewhere. Thanks.

What about backups? I thought I read somewhere that O365 doesn't do backups. So if an end user deletes an email or accidentally deletes/moves a folder there is no way to retrieve that.

Although the backups are for Microsoft themselves see this
https://docs.microsoft.com/en-us/office365/servicedescriptions/exchange-online-service-description/high-availability-and-business-continuity

https://docs.microsoft.com/en-us/exchange/back-up-email

Same as what @JaredBusch said on a user level or even an admin.

@scottalanmiller Yep, I just wanted to share the configuration I use as my daily driver because it makes working in the terminal that much more efficient. The OP mentioned wanting something that was a bit slicker and more powerful, and I think in addition to your choice of terminal, your choice of shell and other tools contributes to having a better experience. I prefer FISH for my shell, and tmux is my terminal multiplexor of choice. ZSH is another great alternative shell as well.

@scottalanmiller
This may also help:
https://blogs.partner.microsoft.com/mpn/myth-busting-software-asset-management-and-compliance-audits/?ln=en-us
https://www.microsoft.com/en-us/licensing/learn-more/compliance-verification-faq

Things like:

Microsoft SAM programs are voluntary services... A compliance audit is a mandatory review of a company’s use of Microsoft’s products and services...
These compliance verifications are initiated across less than 5% of Microsoft’s licensing customers worldwide

But ignoring things like:

We believe that SAM can be a strategic advantage for all our customers

Worth noting that the issue comes back when you upgrade to Fedora 31 as well. Same fix still applies.

It will makes sense of all the alerts and centralize everything

@scottalanmiller said in Looking For Alternate IT roles:

@jmoore said in Looking For Alternate IT roles:

So i saw one vote for specializing in Cloud. Are there any other must learn technologies that would be good for someone with my experience?

The biggest factor will be... what do you enjoy?

I knew someone was going to ask this. Its the reason I havent specialized yet. I have about 30 books I have bought, waiting to read and study, because they were all interesting. They are on the topics of: Powershell, Linux, Advanced C++, 3 different Python books, 2 books on Git, Ansible, Voip(Asterisk cert book), Storage(have my SCSP cert book) and will probably venture to VMWare after that, SQL has been great fun when I use it, MCSA books from microsoft because I know I should and Virtualization. I read constanty from blogs to books on all these topics. I love playing with various tools in several of these categories. I know I'm all over the place lol but thats what I like and could see myself specializing in any of those if I needed too.

@shutdown_engineer said in How do you manage internal web proxy with roaming laptop users?:

We put a registry key on users laptops to toggle turning the proxy on and off when they are at home.

What do other people use so that if a user is at home and not connected to our VPN and just wants to surf and check email? Outlook seems to take IE settings so if the proxy is enabled and the user is connected to Wifi only then Outlook will not update and IE won't connect.

Firefox with no proxy set in the browser is a rough and ready workaround that we also use but far from ideal.

Users are mostly Win 10. Our DC is Win 2012 R2 and run Sophos Web Appliance Proxy as a VM.

Thanks

Why is Firefox rough workaround? Why are your users still using IE? It's almost 2020, not 2000 anymore.
2nd issue is proxy. Why would you use one? Most web traffic is encrypted, so web proxies became obsolete, as you cannot use one without doing some man in the middle workarounds. If you need web filtering, then use proper solution like Pi-hole or AdGuard Home.

@wrx7m said in RDS 2019 Setup and RDS License Role:

When using UPD, is there anyway to access various users profiles' folders and files from the RDS server file system?
Example:
C:\Users\Bob\Desktop

Edit: I found that I can path to it via UNC (\ \server\c$\users\Bob\Desktop), but get permissions error when I go locally, from C:\Users\Bob\Desktop. Also, the Bob folder is only a shortcut (LNK file) in the users directory.

That is what I HATE about roaming folders... they simply do not act the same as local folders!

I typically download things to the desktop and execute from there. But when on a system that has a desktop redirected to the server - that fails 99% of the time, I have to move the executable to something actually local, then execute it.

@black3dynamite said in Converting VMware VMs to KVM:

I haven't been keeping up with Windows Admin Center for awhile. Was that an option to manage Hyper-V?

It will be, but I'm not sure that it is yet. We've tried and not been able to get it working even internally anywhere, let alone externally. Once they figure out stability and authentication, I assume that it will be great for that. Being that this is 2016, it's going to suck hard. And if there is a Hyper-V issue, WAC would be down which is a problem in a small environment like this.

The last time I set up Graylog I had to configured SELinux.

Allow the web server to access the network:
sudo setsebool -P httpd_can_network_connect 1

Graylog REST API and web interface:
sudo semanage port -a -t http_port_t -p tcp 9000

Elasticsearch (only if the HTTP API is being used):
sudo semanage port -a -t http_port_t -p tcp 9200

Allow using MongoDB default port (27017/tcp):
sudo semanage port -a -t mongod_port_t -p tcp 27017

@DustinB3403 yes it's Oracle virtual box.kali linux is guest is.i have installed the drivers as well

@DustinB3403 said in NXLog and Windows for Graylog:

@flaxking said in NXLog and Windows for Graylog:

When I was playing with graylog, I was using Beats

Care to elaborate?

Flexible and made to work with different solutions

https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-overview.html

https://logz.io/blog/filebeat-tutorial/