If you do Security (In-House Mgt Console) and buy 25 licenses, it'll be $1,074.75
$25 less than 22 licenses.

Most software need access to the registry one form or another in Windows so I have seen plenty of them.

Here's another thing that helps sort out the issues. This command examines the cbs.log and dumps the results in a text file.

findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >sfcdetails.txt

Google the entries and address the issues one at a time.

@scottalanmiller said in Mangolassi mobile site is very jumpy:

@RojoLoco said in Mangolassi mobile site is very jumpy:

@JaredBusch said in Mangolassi mobile site is very jumpy:

@IRJ said in Mangolassi mobile site is very jumpy:

@scottalanmiller said in Mangolassi mobile site is very jumpy:

@Emad-R said in Mangolassi mobile site is very jumpy:

@IRJ

How easy it is to create a modern android app of an existing website? I think a few lines of code for this. And theoretically, you can put the APK shared somewhere. I think that is the only real solution but is it worth the hassle. I once did this and to MangoLassi site but I was bored and found it not really worth it. Also, what is your phone specs/model ?

making an APK of the site does very little, basically just encapsulates it. I think all the issues carry right on through.

Yeah it is just a wrapper

Like a condom for ML........

You don't know where ML has been, good precaution.

More importantly, ML doesn't know where you've been.

Lies! you have all the infoz!

So, to circle back on this.

First, the number port completed perfectly. All things working.

But my concern about the number being entered and routable was 100% valid.

I received an email about 6pm that the number for port A had a FOC and was now entered into my Skyetel dashboard.

I then dialed said number from my personal Skyetel account and it was terminated to my client's PBX.
From any other service the number still terminated at the losing carrier.

The next day was a repeat of an email near 6pm for port B.

I did not specify an endpoint as @Skyetel describes in post 4 because I didn't know I needed to. But as this was a new turn up to Skyetel I only had one endpoint and it was pointed there by default I assume.

The ports completed as scheduled and calls flowed in as they should.

But during that couple of days it was 100% possible that calls could have went the wrong place if I had multiple endpoint groups setup and such as I wold on a bigger design.

A revamp of this process to include the ability to specify the endpoint group or documentation at the least to instruct users to note an endpoint group on the port request will definitely smooth this bump out.

@jrc said in Snipe-IT Upgrade from 4.6.7 to 4.7.5 not working.:

Cannot create cache directory /home/jcoombes/.composer/cache/repo/https---repo.packagist.org/, or directory is not writable. Proceeding without cache
Cannot create cache directory /home/jcoombes/.composer/cache/files/, or directory is not writable. Proceeding without cache

This is normal. You are running something as the apache user and it has no access to your home directory.

Looks like the problem is with the CDR database. If I remove that from the backup (temporarily), the backup completes as normal.

@PhlipElder said in Protek Support MSP Ransomware Hits Customers in Salt Lake City, Utah:

@Pete-S said in Protek Support MSP Ransomware Hits Customers in Salt Lake City, Utah:

@PhlipElder said in Protek Support MSP Ransomware Hits Customers in Salt Lake City, Utah:

@Dashrender said in Protek Support MSP Ransomware Hits Customers in Salt Lake City, Utah:

@dafyre said in Protek Support MSP Ransomware Hits Customers in Salt Lake City, Utah:

@PhlipElder said in Protek Support MSP Ransomware Hits Customers in Salt Lake City, Utah:

All it takes is one absentminded click or drive-by that's completely shielded from us as we go about the day to day stuff and it's done. Game over. Say, "Bubbye".

There's always going to be that risk or one absentminded click.

Granted an Air-gapped PWA is a good way to handle it.... but so is not saving passwords in RDP files (I don't do this), and if you use an app like MobaXterm that can encrypt the files for you, use a good pass phrase.

However if your admin machine is owned, you have bigger issues to start with.

Well, the idea is that the air-gapped machine won't ever be in a situation to become compromised, is my guess. I haven't had a chance to look at the MS link Philip sent earlier.

There are several ways to implement with the simplest being the main machine having two VMs installed on it. One for day-to-day and one for client/systems management. Nothing is done on the machine itself with all designated tasks being done in their respective VM.

We have a number of laptops that came back from client refreshes. So, we're using them as our dedicated management machines. Asus makes a great external USB3 DisplayLink and DisplayPort external monitor that allows for two screens. That makes the work easier.

There is security leakage between VMs on a client machine for instance over clipboard.

Have a look at Qubes. https://www.qubes-os.org/

It's probably the best implementation of security separation to date.

Using the Hyper-V VM Console without RDS pass-through eliminates any access to the VM beyond console.

Same with KVM or whatever.

@dafyre said in iptables deny taking precedence over accept:

@IRJ said in iptables deny taking precedence over accept:

#Port Range 95000
$IPT --append INPUT --match tcp --protocol tcp --src $somenetwork_1 --sport 95000 --jump ACCEPT
$IPT --append INPUT --match tcp --protocol tcp --src $somenetwork_2 --sport 95000 --jump ACCEPT

I'm assuming this is not support to be a correct number... but --sport can't be > 65536.

Yeah I just randomized port numbers. Not actually using that

I'm not sure what to look for since I don't have anything that has crashed

It is also a free trial weekend for the game on Steam, for anyone wanting to fire it up and see what they think.

@Dashrender said in Server 2008 R2 Standard ISO:

@DustinB3403 said in Server 2008 R2 Standard ISO:

This topic is 3 years old. . . wtf.

I was wondering why this popped back up.

Spammer who got nuked.

This thread is like a honey trap, lol. Works really well.

@IRJ said in Scripting partioning on AWS:

@stacksofplates said in Scripting partioning on AWS:

@IRJ said in Scripting partioning on AWS:

Found this chart on a somebody's project on github. Seems like a reasonable place to start?

ce0c63ba-39ea-47f3-8720-370ff5d73ff6-image.png

Ours would have been more like:

mount size / 12GB /home 1GB /var 10GB /var/log 5GB /var/log/audit 5GB /tmp 1GB

That's a little too liberal for EC2 instances. I could definitely see that working for on prem though.

Yeah. The numbers you had looked fine. Especially if they aren't going to be long living servers.

@Markferron said in PoE powered lighting:

@Kelly Just out of curiosity, were those people in IT or electrical/maintenance? It would be interesting to see what department would pay for what when things go wrong.

It was electrical. They actually manage the day to day function of the lights. IT maintains the software and OS running it, but nothing beyond that.

@Dashrender Yea, it worked.

@Dashrender said in License Hyper-V Virtual Machines...:

@Obsolesce said in License Hyper-V Virtual Machines...:

@Jimmy9008 said in License Hyper-V Virtual Machines...:

@Obsolesce said in License Hyper-V Virtual Machines...:

@Jimmy9008 said in License Hyper-V Virtual Machines...:

Hi folks,

I have Windows Server Datacenter 2019 licenses. If I install Hyper-V server, rather than Windows Server with the role, can I setup AVMA and have the host auto license the VMs?

Or, do I need to login to each VM and add the Datacenter key?

Best,
Jim

Avma does not work on Hyper-V Server.

You'll need to install Hyper-V role on Windows Server DC if that is a must have among any other DC only features.

So, if I have the Hyper-V Server installed only - how do I use my Datacenter license on the VMs? I guess I login to each and enter the key manually?

Correct, or you can do this instead:

https://docs.microsoft.com/en-us/windows-server/get-started/kmsclientkeys

This is the recommended solution.

You have a DC license, so you can spin up a VM that does nothing but act as a KMS for your other server VMs.

Right with DC, you have no issues with quantity of licenses.