@scottalanmiller said in Trading a VPN for an SSH Tunnel:

@JasGot said in Trading a VPN for an SSH Tunnel:

@scottalanmiller said in Trading a VPN for an SSH Tunnel:

@JasGot said in Trading a VPN for an SSH Tunnel:

Put a RouterBoardOS RB260GS at each house and use a free ddns service. $35each and yo're done.
Or a Ubiquiti Edge Router Lite will work too, just more expensive.
I use the Ubiquiti ERL for IPSec into my house from the office, my phone, and my laptop. Love it.

All more work and more money than easy and free.

Easy is relative. $70 for the two is only $10 more than he is currently paying for one year. Starting with month 15, it is free!

Comparing to a bad decision is misleading. You have to throw money away today, and ignore better options, to them create the "savings" of spending money. That's a false decision matrix.

The real comparison is against something free. That's the baseline to beat. Otherwise, nothing is costly compared to any contrived more expensive decision.

Example: I want a laser light show for my house, I don't need it, I just want it. The free option is to not buy one. Buying one is normally $100. But I could find one that is $200 and then say that the $100 is "free" or even "saving me money." But this is false, it's still costing $100 no matter how many more expensive alternatives we find.

It's like the 'sale' problem. The shirt was on sale for 50% off, I saved 50%!! No, you still bought a shirt you didn't need, money was lost versus the free baseline.

The wife gets mad when I tell her you save 100% if you don't buy anything.

We have a lab set up, I will be using that serial capture that @scotth gave me based on @Pete-S suggestion.
We'll see what we can find and try to fix.
thanks for the input.

Here is what showed up in the unit...

https://assets.curvature.com/sites/default/files/pdf/GLC-SX-MMD-CURV.pdf

If this is a new install, stop now and start over. Ubuntu 16.04 is quite old and should not be being deployed. Zimbra's main install option is CentOS 7 which is current. Those directions are not good, use the actual Zimbra directions, Zimbra installation the correct and current way is plenty easy. There are guides on this site, too.

@scottalanmiller said in Yealink t27g vs t42s:

@BraswellJay said in Yealink t27g vs t42s:

Do you generally use the Endpoint Manager or any of the other commercial modules?

There is no commercial module that we use regularly. But we've got some clients that use many.

There are pretty much zero reasons not to add SysAdmin Pro for $25. Getting the email config in the GUI and the ability to tell the web server to use authentication for the config files saves more time than the cost to do it yourself manually.

So, easy fix, the ca_stag2 was a staging DB that was not needed and was not current. The whole thing appears to have corrupted. So I simply "moved" that entire directory to /tmp (just in case I had to put it back) and then MySQL could fire up.

@Dashrender said in NIC in promiscuous mode - what traffic can it see?:

You can get a switch to give you all traffic on a mirrored port on the switch. This would allow you to see all the traffic on that other port. normally you would mirror the uplink port.

Yepp. That's typically where you'd put your IDS if you didn't have requirements that it be an in-line.

Reset the cache on both browsers.

We have a MicroCenter 5 miles from the office, so it's swing by on the way to the client now that they carry a decent selection of Ubiquiti APs.

@scottalanmiller said in Updating to Fedora 30 Gives Pix Error:

Doing an upgrade from Fedora 29 to Fedora 30 and you get...

Error: Problem: package pix-1.8.2-1.fc29.x86_64 requires libexiv2.so.26()(64bit), but none of the providers can be installed - exiv2-libs-0.26-12.fc29.x86_64 does not belong to a distupgrade repository - problem with installed package pix-1.8.2-1.fc29.x86_64 (try to add '--skip-broken' to skip uninstallable packages)

This seems to happen with most normal workstation installs of Fedora. Easiest thing to do is simply remove Pix.

sudo dnf remove pix -y

Your update should work fine after that.

I don't ever use it. But, yeah it is there by default.

@DustinB3403 said in What is the difference between Dead and Failed for service status?:

@IRJ Did you look at journalctl to see what the logs say?

He doesn't care about why things are failed. He just wants the states. It is for monitoring and automation.

Same every time. Seagate is great because they are cheap, but only in numbers, you need failure protection such as raid.

@Dashrender said in Relationship Pricing:

@JaredBusch said in Relationship Pricing:

But with the second one there, I only perform a lookup once every 30 days for numbers that call me.

Is this because FreePBX caches the info?

Yes, but any system can be setup that way.

@scottalanmiller said in is hosting advertisements directly on your website sly?:

@RojoLoco said in is hosting advertisements directly on your website sly?:

@scottalanmiller said in is hosting advertisements directly on your website sly?:

@black3dynamite said in is hosting advertisements directly on your website sly?:

I see this in Privacy Badger add-on.
14f0f0cf-8716-4833-91b3-db015e1c8c7a-image.png

That's the CDN, fonts, in thread images. No idea what the last ones are.

Then it's smart to block the shit out of those.

Oh, Alamy is a stock image source. It's providing the picture of the gate in the field. NOT something you want blocked, it's a meme in this case.

But the internet would be better without memes

@hobbit666 said in AMD Vs Intel:

Going to wait until we need some more desktops, then re-look at what Ryzens we can see and try

Seriously consider the normal AMDs, too. The A line. That's the line meant for business use. Ryzens are too expensive for normal office use, they are high performance CAD, power user, or gaming procs.

@dbeato looks like I need version 8.8.9 (or newer) in order to use the 2.0 Oauth to sync google calendar.
thanks everybody

@scottalanmiller said in Setting up a Skyetel Trunk on FreePBX:

Don't forget to set your Codec to G722.

But always offer G711 🙂

We do our best to deliver calls over G722 and follow your preferred priority (based on what you put in your SIP), but when we can't get the call delivered over G722, we fall back to G711.

@DustinB3403 said in Cockpit/Spice: connect to VM console:

@JaredBusch said in Cockpit/Spice: connect to VM console:

@DustinB3403 said in Cockpit/Spice: connect to VM console:

@JaredBusch said in Cockpit/Spice: connect to VM console:

@DustinB3403 said in Cockpit/Spice: connect to VM console:

@black3dynamite Can this be set via the CLI of cockpit?

These are not cockpit settings. what good would that do you?

Cockpit is meant to manage the server as a whole, so I would assume with the CLI interface from cockpit you could send the virsh commands to set this.

That is just a terminal session, so of course, not a cockpit CLI (ie a command line for managing cockpit only)

Ah, obviously I didn't explain myself clearly.

I meant using the console to send the virsh commands to set this from within the Cockpit webpage.

Right, that would of course work because it is simply a normal terminal session to the box. Just accessed via the Cockpit GUI instead of SSH or locally.