@stuartjordan said in Axigen X Released:

...with the backing and support of Microsoft's infrastructure...

LOL, that's why 😉

Duplicate IP or bad switch or local port... possibly driver.

I have a Monster OTG that I want to upgrade by moving to a SBC (rPiZ).. could be fun to try out.

Finding a file or folder without seeing any permission denied texts.
find / -name "filetofind" 2>/dev/null

@jame_s said in FortiOS 6.0.0 upgrade:

upgrade to 6.0.0 is done and was such a non event. can't see any issues with my setup.

Awesome

@danp I didn't see that.

Federate with Azure, turn on multifactor, hit the gym.

For anyone interested, I recently setup Ansible AWX on Fedora 27 using this guide. Running as a local VM so didn't do anything with Nginx / reverse proxy.

@eddiejennings said in System center configuration manager and SQL server:

For those who use SCCM, do you host the database on the same server as the SCCM application, or do you have SQL server as its own VM?

I am replacing SCCM in our test environment, and will be doing the same eventually in our production environment. The current one has SQL server host locally. But since were looking to start over, I figured it would be worth weighing the pros and cons of keeping SQL Server local or having you be on the remote server.

In my last job, we ran SCCM for a while and we had everything on one VM. (Small set up with ~200 PCs). It ran OK.

I'd suggest keeping it to one host for your test environment, and separating them out for your production setup.

@psx_defector said in IIS Security setup:

Best practice isn't up to date.

Set it to PCI 1.2, that disables TLS1.0, all the AES stuff, etc. etc. You can also disable them manually in the first screen.

Great, thanks.

@scottalanmiller said in NAT and Port Forwarding:

@jaredbusch said in NAT and Port Forwarding:

@scottalanmiller said in NAT and Port Forwarding:

@jaredbusch said in NAT and Port Forwarding:

The downside to port forwarding is that it only goes to your primary IP

Yeah, that can be very limiting. Seems like that would be easy to expand on their side.

Does VyOS have this feature?

I always use VyOS directly from the config files, so not sure.

set port-forward

hit tab.

@krisleslie said in Is there a legal age limit to computer systems when HIPPA is concerned?:

It's not the first time I have had bad thought's about this client and their infrastructure but it does make me wonder should we continue to use certain hardware.

Old hardware is almost never a problem until performance or capacity or reliability make it so. And reliability is almost never a concern until you look at servers, and even then, pretty rarely. Unless you need support and the support costs make it no longer viable.

@bnrstnr said in HP iLO3 Local User Name Problem:

@scotth said in HP iLO3 Local User Name Problem:

and should show the login information as well

I don't easily have access to a monitor and keyboard where my server is located. Doing the jumper bit isn't too bad, though.

I'm trying to get the hponcfg utility to work from my Xenserver console in the meantime. I guess I could drag a monitor down there, but it's definitely my last resort.

I'm thinking that the ILO will default to DHCP and UN/PW listed under the cover. You could web page it and reconfigure.

@scottalanmiller said in Fedora 27 and Outgoing Email:

<snip>... and it is a great demonstration of "you don't need a client."

It is also demonstrates a reason to appreciate having a decent client app.

https://serverfault.com/questions/663855/haproxy-for-load-balancing-vsftpd-servers

@black3dynamite said in Firefox 52.7.3(64 Bit)Search Engine Issue:

You might be using the Firefox Extended Support Release (ESR) version.

That's my thought as well.

@dustinb3403 said in Need some help with crontab:

Ok and that is what it was.

Simply needed to make a bash script out of it and have it scheduled to run, rather than using the commands directly in cron.

Problem solved.

Solution:

pwd /usr/bin/local touch expiring-alert.sh vi expiring-alert.sh /usr/bin/php /var/www/html/snipeit/artisan snipeit:expiring-alerts sudo vi /etc/crontab 35 * * * 1 <user> /usr/local/bin/expiring-alert.sh

Presumably changing this to be @daily or @weekly would work as well.

MOst of the time that is how I have it setup on my crontab, same for my certbot scripts too.

@black3dynamite said in Wink Smart Home Controller:

The only open source alternative is called Things Gateway.
https://iot.mozilla.org/gateway/

They also have a list of supported hardware too.
https://github.com/mozilla-iot/wiki/wiki/Supported-Hardware

@black3dynamite This is very neat, i like the extend-ability it seems to offer. The problem with all this IoT stuff to me seems like there is no standards. Every company has their own implementation and their stuff only works with their stuff. This project from Mozilla seems to be trying to expand interoperability and compatibility across manufacturers/brand names.

These are the kind of things you think someone would catch.

Not like it's some random 3rd party app on some 3rd party OS on some 3rd party host.

@tim_g said in Networking and 1U Colocation:

fail2ban

Fail2ban does nothing with key based access. It's denied before fail2ban even sees it.