@black3dynamite said in Remote Administration of FreePBX:

@scottalanmiller said in Remote Administration of FreePBX:

Also gives you (if you use GIT like we do) a record of when the port was opened, why and when it was closed again.

How does that work?

You commit your change to your local file system on your workstation. Then you commit it to the GIT repo. When you do this, GIT stores your change as well as the previous state of the system and you add a comment when you commit. This gives you a chance to say "Opening port to work on PBX" or whatever. Then when you are all done, change the firewall back, commit it, comment again saying you are done and closing it and it closes itself.

@emad-r One of the main points of using configuration management tools is that when using them properly you create idempotent operations (getting the same result no matter the number of times the operation is executed).

Instead of using cmd.run to execute the install, you could as others have mentioned the chocolatey module, or if you don't want to install chocolatey on your computers you could use the win_pkg which requries a repo created on the salt-master. Both of those modules are idempotent, so once you reach the desired state no matter how many times you run them they will not make any more changes.

https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.win_pkg.html
https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.chocolatey.html

The software available in the official windows git repo.
https://github.com/saltstack/salt-winrepo-ng

Creating a windows software repository:
On your salt master run

salt-run winrepo.update_git_repos

Sync the repo on your Windows minions

salt -G 'os:windows' pkg.refresh_db

Now you can use the pkg module in your states, or adhoc commands.

//Example adhoc command (remote execution) salt -G 'os:Windows' pkg.install salt-minion

That last command will always install the latest version of the salt-minion you could add the version parameter to specify the one you require.

@dustinb3403 Nope, no webex domain.
I can also get there, just cant sign in. Probably not the only one as ive now been on hold 20 minutes. Oh as i type this i can sign in again.

@bishnitro said in How to backup VMWare VMs?:

Just want to confirm, so up to now Vsphere has no means of backing up the VM's live? I read that i can actually copy it when its powered off. or i maybe wrong. If not then Veeam, Altaro and Unitrends are my options. I will use the cost effective and easy to deploy solution.

Not exactly. Your problem is a lack of knowledge on how virtualization works. Yes, you can power off a VM and then copy the file(s) that represent the hard disk. But that is not a backup. There is more to a VM than that. You can recover from that, but not simply. That type of functionality exists in all hypervisors simply because they are hypervisors.

@nerdydad said in How to backup VMWare VMs?:

Correct. vSphere has no capabilities of backing up natively. Have to use some type of 3rd party software to back up the VMs. Unlike what you can do natively in KVM or XenServer.

KVM and XenServer do not, natively, have anything to fully manage backups either last time I looked.

@emad-r

NVM, forgot about VMware Remote Console (VMRC), which is the optimized way of connection to VM GUI console, download it now.

I think vsphere C# client currently is VMRC in some minimal way. At least one is still actively developed. (You cant connect to an .iso file using webclient flex without uploading the whole .iso file to the host, however with the older C# client and newer method VMRC this can be still done).

That said, we lost the export to .ova or .ovf easier method compared to web ui export which gives you the .vmdk file as is.

@aaronstuder said in Nethserver:

Honestly, I wouldn't use Nethserver for this, I would go straightup CentOS 7

I beg to differ, NethServer IS CentOS 7 + a framework (web interface and automations) on top.
We have already scenarios like that, I would give it a try. If you need support please just ask.

@stuartjordan said in Nethserver:

This looks like a good project, defiantly keep us updated with how it all goes, I think Nethserver is brilliant, haven't tried it with that amount of users though.

Thanks man I appreciate it.

@emad-r said in Automatically Add New Vultr Fedora Minion to Salt Master:

@scottalanmiller said in Automatically Add New Vultr Fedora Minion to Salt Master:

If you are using Vultr as your VPS or Cloud Computing IaaS platform, then you have some simple tools to make automating a Salt Minion installation even easier. Vultr allows for "boot scripts" which run upon initial VM creation, along with their automatically installed system keys. Adding a tiny script can make all of the difference between needing to set up a new VM and having the entire process be totally automated.

Here is an example script that you can use. Notice that this is for Fedora and uses DNF. You will need a similar script for APT, YUM or other package management systems.

#!/bin/sh dnf -y install salt-minion echo "master: you.salt.master" >> /etc/salt/minion systemctl restart salt-minion systemctl enable salt-minion

That's all that it takes. Select the script when building your VM(s) and look for them to auto-populate in your Salt Master's key request list.

But what will be the ID/name of this Fedora instance in salt master ?

LOL, I got confused. Was thinking we were on Sodium, not salt.

It'll be your hostname.

Opened a ticket with Vultr. We'll see what they suggest.

@jaredbusch said in Custom IP tables rules for FreePBX:

@fuznutz04 said in Custom IP tables rules for FreePBX:

@jaredbusch Awesome. I'm going to try this.

I was just about to followup with this, saying that I was able to get it working, by not using any custom rules at all. Since the IP that I want to allow, is my local office, which is where I want to connect to the mySQL data from, it works already. Reason: I have my local office IP listed in the Trusted Network area of the Responsive firewall.

Of course, to get this to work, you have to change the listen address (bind address) in the etc/my.cnf file to listen on your public address, other than the loopback address.

I would probably change it to listen on any to have one thing less to remember just in case something changes, but that is just personal preference.

Oh yeah, I did that actually. Then I created a user with select access to the crdb database. The root user by default, on FreePBX installations, has no password. However, the root user can only log in from the local server, so I don't see a need to implement a password. Unless I'm missing something....

@travisdh1 said in ZOIPER unable to register over cellular:

@dustinb3403 said in ZOIPER unable to register over cellular:

It was apparently a setting under Connectivity > Run in Background

With it disabled I'm able to register the account without WiFi.

That is just so odd.

Yeah, it was the only setting that made any sense under the connectivity option. Might be a bug, but seems odd that with it disabled, you can register the account. With it enabled and WiFi disabled, you can't register the account.

Makes sense. I'll continue using the method of inbound routes.

Thank you very much to all. Camera view is better now, we clean and remove spider webs on the camera.

The solution might be downloading that file and manually move it into place with:

wget 'https://packages.gitlab.com/install/repositories/gitlab/gitlab-ce/config_file.repo?os=fedora&dist=26&name=centauri&source=script'
sudo mv config_file.repo /etc/yum.repos.d/gitlab.repo
sudo restorecon /etc/yum.repos.d/gitlab.repo
sudo dnf makecache
sudo dnf install gitlab

@tim_g
Do you know what tools and scripts that is available when installing hyperv-tools?

According to this non MS article, they aren't supported.

https://docs.menandmice.com/display/MM720/DNS+Resource+Records

@emad-r said in SyncCrypt Uses Graphic File to Cloak Ransomware in ZIP Phishing Payload:

@stus

I always wondered how this step would execute:

Sync.exe is extracted from the attachment

If I put the world nasty virus in .7z file, it is contained and cant get it out. It needs somebody else to take it out.

Same thing for virus in JPG, wont that execute in Windows Photo Viewer, how would that run the virus ?

Something just is missing in my head, I understand users can be dumb but still if your player, file handler does not have security vulnerabilities the virus wont start.

Sadly, many of them do.

@dashrender said in PORT - Rant about unsupported OS connecting to company VPN:

@dustinb3403 said in PORT - Rant about unsupported OS connecting to company VPN:

Why did it take 30+ calls to find out that the doctors personal equipment is running Ubuntu?

It took 30 calls and a 6 hour round trip to discover it was running Ubuntu - because their remote access solution wouldn't work either - likely because local kid didn't want them to know it Ubuntu - he was likely saying - aww, those idiots at the hospital, they don't know anything, Ubuntu will run anything.. LOL

Even if the application that the hospital is using, was built for Windows 2000, has no bearing on the matter of the VPN dropping the client.

Why the vpn server didn't have logging to say it was dropped because it was a blacklisted OS or anything else is the part that is insane. Even Cisco has this functionality. . (lol.. . )

@momurda said in The F*ck, anyone try it?:

"Hey boss, i want you to try out this new software. It is called !@#$. That is the actual name. Totally ready for business use. We should also tell our customers to install it as well. Ill go find a new job now, kthxbai."

This really isn't software that anyone would discuss. Just a command line editing tool.

@matteo-nunziati said in I tried NAS4Free, FreeNAS, OMV, ... Lots of suggestions to move to Linux. I'm willing. Point me please.:

@scottalanmiller said in I tried NAS4Free, FreeNAS, OMV, ... Lots of suggestions to move to Linux. I'm willing. Point me please.:

@matteo-nunziati said in I tried NAS4Free, FreeNAS, OMV, ... Lots of suggestions to move to Linux. I'm willing. Point me please.:

@scotth said in I tried NAS4Free, FreeNAS, OMV, ... Lots of suggestions to move to Linux. I'm willing. Point me please.:

@matteo-nunziati So, CentOS 7 , EXT4, LVM with compression turned on.
After all, I'm using consumer / smb desktop hardware. From what I've read, ZFS would require more resources than I have available if I wanted dedupe. My storage box will only have 8 GB RAM.

Generally go XFS but even ext4 is good. ZFS requires something like 1gb per raw tb of storage but mostrly for raid/compression. It raises up to 5gb per tb if you want dedup.
So 8gb=8tb of raw (pre raid) storage.
ZFS is nice byt you usually can go w/out its features in smb

The memory is for dedupe. It needs very little for compression and RAID. Those use CPU, but not RAM (much).

@scottalanmiller said in I tried NAS4Free, FreeNAS, OMV, ... Lots of suggestions to move to Linux. I'm willing. Point me please.:

@matteo-nunziati said in I tried NAS4Free, FreeNAS, OMV, ... Lots of suggestions to move to Linux. I'm willing. Point me please.:

@scotth said in I tried NAS4Free, FreeNAS, OMV, ... Lots of suggestions to move to Linux. I'm willing. Point me please.:

@matteo-nunziati So, CentOS 7 , EXT4, LVM with compression turned on.
After all, I'm using consumer / smb desktop hardware. From what I've read, ZFS would require more resources than I have available if I wanted dedupe. My storage box will only have 8 GB RAM.

Generally go XFS but even ext4 is good. ZFS requires something like 1gb per raw tb of storage but mostrly for raid/compression. It raises up to 5gb per tb if you want dedup.
So 8gb=8tb of raw (pre raid) storage.
ZFS is nice byt you usually can go w/out its features in smb

The memory is for dedupe. It needs very little for compression and RAID. Those use CPU, but not RAM (much).

No you are right 1gb is for dedup

I do this a lot 😉