@scottalanmiller said in Wanna cry Effect??:

@Tim_G said in Wanna cry Effect??:

@scottalanmiller said in Wanna cry Effect??:

@Tim_G and I were on a thread in the last hour of some guy who has now decided that his "mission critical no downtime" servers need to start getting patched.

I was in the process of writing an analogy comparing that to patching holes in a submarine... but it started to get so cheesy I deleted it LOL.

Yeah... SWISS cheesy.

and there was de Brie everywhere

@Dashrender said in What Does Calling an Application Mission Critical Mean:

@scottalanmiller said in What Does Calling an Application Mission Critical Mean:

Knowing that the business was not taking their systems seriously might be the most important thing that he gleaned from this.

While I see what you're saying... I just don't buy it. the chances that a person would read your post and turn around and return to management and instead of being in a panic over patching say - hey, this is your bloody fault.. now what are you going to do about making sure this doesn't happen again? the answer is only SAM would do that, not another person I know personally.

You base the value on what you see as people likely doing, and there is rational to that. I'm basing it off what they are empowered to do. I like to give more options, faster. How they choose to leverage that is then up to them, but the info that they need is in their hands.

@DustinB3403 looks interesting, but not something I have had to look into before.

@marcinozga said in Unknown ESET Uninstall Password:

http://download.eset.com/special/ESETUninstaller.exe
Use it in safe mode. You don't need to know the password. I've used it countless of times, and I never messed up any of the machines.

Thanks for that. The Support Tech I spoke with said the same thing (never message up a machine after the uninstall). I just tried it on a WIndows 7 box, and it worked like a champ.

I believe that your cp.get file should be something like:

salt * cp.get_file salt://test123.txt C:\

You can also do this with the file.managed in a state file.

C:\zabbix_agent\zabbix_agentd.conf: file.managed: - source: - salt://zabbix/zabbix_agentd.conf - user: root - group: root - mode: 644

@JaredBusch said in Wordpress website for non-technical user/manager:

@FATeknollogee said in Wordpress website for non-technical user/manager:

Mail: I have O365 but I want to add a bunch of generic email addresses and avoid paying the $2 -5/mo. What was the solution?

Distribution groups. Someone with a real email has to be a member to get the messages, but that is how you make a bunch of various addresses.

Do the domain's have to be setup at O365?

@msff-amman-Itofficer

I still need to test Nextcloud for the available options in terms of governance and compliance.

@Mike-Davis said in Checking on patch levels with multiple clients. ninite pro?:

For those of you running a WSUS server in the cloud, who should I consider? AWS EC2? Azure? How do I estimate the bandwidth etc that's going to be required each month to keep 140 machines up to date?

If your WSUS server is in the cloud, then you will tell the workstations to download direct from Microsoft. The Cloud instance will have next to no traffic other than checkins.

You setup your clients to talk to your cloud WSUS instance. to know what to update, but tell them to download direct. Why download things twice? Once to WSUS, then once to client.

Your WSUS instance will not download anything except the listings for approval.

Just found this similar project

https://github.com/tomav/docker-mailserver/blob/master/README.md

@Tim_G said in How to Download Hyper-V 2016:

Yay! Finally something real to link to.

That's why I made it, I needed it this morning 🙂

@guyinpv said in [URGENT ALERT] Defend Against This Ransomware WMD NOW:

Has anyone been affected you know of? Make sure them backups are in order!

No one personally or directly. But loads of people on SW.

Not worth the effort for the case.

Thanks for the help guys.

@Farhad-Farahmand said in Elastix Call Back Feature:

only for internal calls . not inbound call or outbound call . simply you are calling my extension number . i am busy on another call . once i get free my extension should call your extension at that time .

Still, it would potentially be ringing people and interrupting them and then have no one calling them. How would that work?

@Breffni-Potter said in Secure Wiki:

@Tim_G said in Secure Wiki:

I feel like WordPress may be a nice option. If the default access control structure doesn't work well for your needs, there are some great addins.

Not to mention the performance of the database over time, the bloating, PHP being a pig, so so many things wrong with it.

I'm not as familiar with this part because the biggest database I've ever had regarding this only consisted of about ~100k forum posts, several thousand users... wordpress articles only a few thousand, with like 50k images. So I can't really comment on wordpress database bloat on an enterprise level. Mine have never grown past like 30-50 meg... or something like that. May have been less I don't remember.

I'm not sure what you mean about what's wrong with WordPress... because it seems to always have worked great and performed very well for me and those I've set it up for.

If it's small things nobody notices, then who cares? Nitpicking? I'm very open minded, so if there's any punch behind this I'll definitely consider moving away from WordPress when using it externally.

If his WAN is strong enough.

@scottalanmiller said in Easier guide to setup Salt Stack/Ansible for Windows environment ?:

@stacksofplates said in Easier guide to setup Salt Stack/Ansible for Windows environment ?:

The other advantage to tower is what Scott mentioned. It will do either a pull or fetch before the run. You don't have to do that manually like if you were just running from anAnsible server.

We use a cron job for that.

Ya you can do that. This is nice though because you don't have to add the logic to keep runs from bumping into each other. And it all goes into the auditing system built into Tower.

@JaredBusch said in SELinux with KVM?:

@NerdyDad said in SELinux with KVM?:

@EddieJennings said in SELinux with KVM?:

@NerdyDad said in SELinux with KVM?:

Would you deploy ClamAV on the host of KVM?
Would you deploy SELinux on the host of KVM?

What little I've learned of SELinux, I thought it was something baked into CentOS. At least it seems to be for me.

It is but needs to be setup.

Umm, no. SELinux is installed and working by default. The only setup you do is for things that need more permissions than SELinux provides by default.

Right. SELinux is installed by default. Some tools aren't (like policycoreutils). Svirt by default handles MLS labels for KVM guests. You shouldnt have to do any work to get all of that functionality.

@black3dynamite said in Problem with Nginx conf file:

Comparing the two configs

CRM under location / does not have this:
proxy_set_header X-Forwarded-Proto $scheme;

That probably went missing when I was troubleshooting. I was copy pasting in pieces and removing them trying to figure out why it was not working.