By default Debian comes with iptables. It will allowing everything but a normal Debian install have no services running.

Run iptables -L to see the firewall rules.

On Debian 10 the default is nftables.

@wrx7m said in Configure Nginx as Reverse Proxy for ScreenConnect to Enable Lets Encrypt:

Less to that than I thought there would be.

It's surprisingly simple and basic. It's really just passing one port to another, and using SSL. About the most basic setup you can have.

Updating this thread. I ended up setting up the squid.conf file with the following config to get it to work.

First, at the top of the localnet lines-

acl localnet src 205.205.205.1/32

Then, I added the only domains that I wanted to provide access to. This whitelisted them.

acl GOOD dstdomain .google.com acl Good dstdomain .domain.ca

Followed by, the allow and deny lines

http_access allow GOOD http_access deny all

Finally, "uncommenting" the Safe ports/services for 80 and 443.

@wrx7m said in Sales Person Wants Me to Provide Independent Rep With an Email Account:

@scottalanmiller said in Sales Person Wants Me to Provide Independent Rep With an Email Account:

My second thought is, if having an email account creates a security concern, it is not creating the account that creates the problem, it simply exposes an existing security problem.

Not necessarily security, but accessing features like SFB, OD and Teams. But, as Kelly mentioned, they have Exchange Online P1, which doesn't have any of the other services (different than E1.)

Right, i was assuming that they'd only get email. Even those other things, though, still have security. but no reason to think that you'd provision those, too.

Yes, they have a special audio conferencing license for SFB, and now Teams. It is an add-on license that you assign to specific users. Although, based on your use-case, I can't tell if it would be of any real help. Here is more info on it. As others have said over and over, you should look elsewhere.
https://docs.microsoft.com/en-us/skypeforbusiness/audio-conferencing-in-office-365/try-or-purchase-audio-conferencing-in-office-365

@scottalanmiller said in Disable USB Ports:

@gjacobse said in Disable USB Ports:

I’m sure the likely need is for USB storage or cell phones-

But does disabling USB differentiate between input devices over storage?

No, once a physical port is turned off, it never gets a chance to query the device. It's like asking a person to close their eyes, but then asking them to look to see what they are looking at before deciding what to see... can't work that way.

This is likely not what is wanted. Keyboards and mice are almost exclusively USB now... So assuming you have them, the USB ports need to be enabled for that purpose.

Then toss on the fact that some Laptops only charge via USB-C now days.. so you can't disable that feature either.

When you price systems on their site, they have options to select for this purpose. Although, I don't know if they charge a service fee or subscription on top of the cost of options they list. This is for a Latitude 7400 2-in-1. More info: https://www.dell.com/en-us/work/shop/help-me-choose/cp/hmc-prodeploy-client-suite

081e83b1-3d19-46b5-9a25-95eb302d7c3f-image.png

I used to set up WPS for clients who were used to the ribbon interface because LibreOffice didn't have one. I haven't used it for a long time but it seemed to work fine.

@Scott I went through all of your questions historically and never once have you asked for help with Nginx in this context, or any other. I'm confused as to how we got to the point of abandoning the stock approach to start down a path that was guaranteed to lead to despair, when you didn't even ask for casual community assistance. Had you asked, any number of us could have just posted our "just works" configuration files; which we just did.

I'm not trying to be overly harsh, but it feels like you sabotaged this process from the beginning. You didn't ask the community for guidance on the best approach to take, nor ask how those of us have it working got it working, you didn't ask for help on how to make that process work, and only asked for help once you had decided you wouldn't accept help and "demanded" that only approaches that are extra hard and/or impossible would be considered. You also claimed that getting this working on Windows was easier than Linux, which can only be stated if you at least got it fully working on Windows, but you implied that you could not get it working at all.

So this feels like you posted to disparage the Linux and/or Nginx approaches, but didn't even really try with any earnest. Not even the most casual first step of asking how others had done it. If you were really trying to make this work, why didn't you ask for advice and help? This would have been a really easy thing to have helped with, had you wanted us to find a solution for you. And you glommed really quickly onto the discussion on Linux or Windows, which was unrelated to your issue and affected you not at all, as if it was core to your problem and some kind of frustration - which makes it doubly feel like you were setting us up to look unhelpful, when you never really gave us the slightest option to be of assistance.

Recently posted this...

https://mangolassi.it/topic/20124/has-anyone-got-a-guide-to-installing-screenconnect-on-fedora-30-with-let-s-encrypt/

So anyone that wants to configure Nginx in front of it can do that, too.

@kamidon said in Demo VoIP phone DSS Key programming - What do YOU do?:

Really it just depends on the type of business, people and location. If they're down to earth, well all of what you mentioned would be a great idea to put on.

This is good, all of our customer are down to earth and easy going, so I appreciate you saying this.

Definitely do a directory setup because you want to demo that feature.

Thanks for the confirmation. I was thinking this would be so easy and so impressive. Couldn't NOT do it!

@Skyetel Do you have a blog somewhere that you do rant on STIR/SHAKEN? Even better, post it in a new thread here!

I think the VM could still be migrated so long as I detach the passthrough disks first, move those disks to a new host, migrate the VM to the new host, and then re-attach/passthrough the disks on the new host.

You can indeed. Not very practical but no technical barrier.

I wonder - can you create an NFS mount point in XenServer or XCP-NG? then just share that via loopback?

I don't really see the point of doing that? I had in mind an NFS share mounted directly in the VM. Simple, efficient (if you already have a NAS obviously)

@JaredBusch said in MS SQL on Linux rpm missing in repo:

Good work Microsoft......

4fa92e0a-5451-4bf7-a310-aaad98001f48-image.png

msodbcsql17-17.4.1.1-1.x86_64. FAILED https://packages.microsoft.com/rhel/7/prod/msodbcsql17-17.4.1.1-1.x86_64.rpm: [Errno 14] HTTPS Error 404 - Not Found --:--:-- ETA Trying other mirror. To address this issue please refer to the below wiki article https://wiki.centos.org/yum-errors If above article doesn't help to resolve this issue please use https://bugs.centos.org/. mssql-tools-17.4.1.1-1.x86_64. FAILED https://packages.microsoft.com/rhel/7/prod/mssql-tools-17.4.1.1-1.x86_64.rpm: [Errno 14] HTTPS Error 404 - Not Found --:--:-- ETA Trying other mirror. Error downloading packages: mssql-tools-17.4.1.1-1.x86_64: [Errno 256] No more mirrors to try. msodbcsql17-17.4.1.1-1.x86_64: [Errno 256] No more mirrors to try.

There is no 17.4 in the repo... https://packages.microsoft.com/rhel/7/prod/

Something they released and then pulled, maybe?

@matteo-nunziati said in Deciding Between Hardware and Software RAID in My FreeNAS Deployment:

@saniplastic said in Deciding Between Hardware and Software RAID in My FreeNAS Deployment:

@DustinB3403 said in Deciding Between Hardware and Software RAID in My FreeNAS Deployment:

metadata

metadata?

please explain more.

The config files where the vm is defined. Do not backup the vm disk only. I suppose he referes to this.

I backup with veeam.
whole vm files.

@JaredBusch wow, that is seriously weird.

@scottalanmiller Sounds solid. The speed difference is dramatic. Thanks.

Thank you all.

Turns out for some reason in Remote Desktop I need to use "user" as username and not the account name.

This is not the case on my network, where the actual user name is used.

Looks like Microsoft finally allowing licenses to be used in hosting services in a way that doesn't mean purchasing a license for every server at the host, but only for a select few places. I'll grant you that they are the major hosting providers, but that still leaves out a bunch of our favorites around here.