@wirestyle22 updates were applied only in the VM's not the host.. everything is ok, just for a vm an error about integration services

@Dashrender said in DNSMessenger malware:

That's all fine and dandy my point was that this hack is currently worthless on its own it requires a previous hack in order to make this one work

The point is not how the infection was started. The point is that the infection itself is completely fileless. Never writing data to the disk.

There are multitudes of ways into a Windows system that an attacker could use to execute the initial code.

Old thread but I just found this out after wasting a few hours last evening trying to get Hyper-V 2016 on my Dell 2950 lab server. Processors need to support SLAT
http://www.nodefinity.net/post/hyper-v-on-poweredge-2900-2950-the-end-of-the-road-is-windows-server-2012-r2

Same here. We do not normally put OpenVPN on endpoints.

LucidCharts?

@flabbergastedFiltch said in Linux: Finding Files:

Yea, Scott's reply led me to:

find . -name "*\ " -print

Not a big leap.

Now I'm all the way down the rabbit hole of xargs, grep, and perhaps sed (?)

Using FreeBSD on EMC Isilon.

I have to do this a lot, but the creative way users name files is ever changing:
filename.
filename. [filename dot space]
file*name

Here's a sample of a real directory:

./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVENEULIGCONOBL.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVENEUBLA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._TIMESEXTBOL.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._GILLSANBOL.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/GILLSANEXTBOL.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVETICA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVETICANEUE3.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVENEUHEACONOBL.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVENEUULTLIG.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVENEUROM.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._ZAPFDINGBATS.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVEBOLOBL.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVETICANEUE1.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._TIMESBOLITA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVETICANEUE2.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVENEULIGCON.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVENEUBLA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVENEUHEACON.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVETICANEUECONDENSED3.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/GILLSANITA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVENEUMEDCONOBL.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._TIMESSEMITA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVENEUTHI.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVETICANEUE3.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/TIMESBOLITA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVETICANEUE1.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/TIMESEXTBOL.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVENEUHEACONOBL.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVENEUHEAITA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/ZAPFDINGBATS.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVENEUULTLIG.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVENEUBLAITA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVENEUMEDCON.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/GILLSANLIGITA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVENEUHEAITA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVENEUTHI.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVENEUHEA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVENEUMEDCONOBL.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVENEUBLAITA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVENEUHEA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVENEUTHIITA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVENEUMEDITA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVENEULIGITA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._GILLSANITA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._GILLSANEXTBOL.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._GILLSANBOLITA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVENEULIGCON.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVENEULIGITA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/TIMESSEMITA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVEBOLOBL.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVENEUMEDCON.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVENEUMEDITA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVENEUBOL.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVENEUULTLIGITA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/GILLSANLIG.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVENEUULTLIGITA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._GILLSANLIG.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVENEUITA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVETICA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/GILLSANBOLITA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVENEULIG.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVENEUMED.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._GILLSANLIGITA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVENEUHEACON.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVENEUMED.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVETICANEUE2.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVENEULIGCONOBL.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/GILLSANBOL.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVENEUTHIITA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVETICANEUECONDENSED3.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/._HELVENEUITA.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVENEUBOL.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVENEULIG.
./WebUploads/FAMILYANDFRIENDS.1/b_Fonts/HELVENEUROM.

One or Two files (even 10) and I'd use mv to rename the files and remove the space or period or add extension, etc... This list represents just one folder out of a few hundred that have some gremlin preventing Windows NT Backup (don't ask) from taking a backup and deleting the originals.

Thanks for the reply and nudge. Now back to it after I change my Job Description on Linkedin to "Frustrated wannabe Software Developer".

As much as I like giant one liners, the best tool for this would be rename.

To remove a period just do

find . -type f -exec rename "." "" {} \;

You don't technically need to use find, but if the files span multiple directories it's easier.

@scottalanmiller said in Meraki MX400 NAT Question:

@dafyre said in Meraki MX400 NAT Question:

The team that is there now are the ones that have to convince the bean counters of the need to change.

It's a tiny cost though, right? We are only talking about a minuscule investment, I think. If it saves a few hours of effort, doesn't that cover the cost?

No you are not. You are neglecting to add in the labor costs and only calculating on the hardware costs.

Physically changing everything will add labor cost. Ordering, configuration, staging, installation.

Yes, something else is cheaper. But not as cheap as you try to make it sound.

The existing solution is in place and already paid for. A simple support call resolved the configuration issue. There is no reason to spend additional capital to change a working solution until you have to plan for new spend on the solution.

If the existing solution was actually not functional, or some other factors were in play to offset things, then it would certainly be worth switching solutions.

@scottalanmiller said in Protecting your business network:

@Dashrender said in Protecting your business network:

This problem does relate to the current IOT nightmare that exists in home networks (and sadly, many business ones too).

The nightmare is that the production network does need access to the IOT network. An example is the Amazon Echo app. I think (though I haven't confirmed), you have to be on the same network to control the Echo. So even opening firewall ports probably won't work since the app finds the device via broadcasts and those of course wouldn't go to the other network normally. I'm not even sure there is a way to make a many to many solution for this type of problem.

The issue is not IoT, though, just crappy products.

Oh, you're absolutely right! Sadly - medical equipment has been shown to be a crappy product!

KVM Networking was set to NAT not Routed 😞

I guess I am learning?........

@scottalanmiller Containers with some exceptions (ESXi Instant Clone, and Photon Fast Boot) are orders of magnitude faster to create than VM's.

Containers running in a shared OS instance also can lower CPU overhead on the scheduler. Until recently Containers also sucked pretty bad at high IO activities (still not amazing, but a bit better).

@AlyRagab said in Zimbra Security:

@scottalanmiller said in Zimbra Security:

Seems like the Zimbra security would be redundancy at that point.

so i can use the two ways at the same time?.

Yes, it's a standard interface between them so you can have as many as you like. Although I'm unsure what the benefit would be unless they are completely different systems.

I use Linux Mint here, still on 17.3 though.

Did you use my instructions for Zimbra with Apache on CentOS?

https://mangolassi.it/topic/8344/installing-zimbra-email-8-6-on-centos-7

@scottalanmiller said in What Linux Are You Running:

CentOS is based on Fedora. But one is about long term support and one is about currency. If Fedora seems weird to you, so would Ubuntu as they both match a six month cycle. Fedora just has the long term support option of CentOS that Ubuntu lacks (they have the name, but not the product.)

The advantage to Fedora or Ubuntu is in currency. Packages are updated every six months, everything from Node to the kernel. So you get new features much earlier. For example PHP7 is standard on Fedora for some time, but nowhere close for CentOS. If you are running modern web apps, like NextCloud, there are some pretty huge benefits from not getting outdated.

Updating every six months instead of every several years (about three or four) means that updates are typically small and incremental rather than large and cumbersome. Updating becomes a normal process and newer security features are available too, just like new stability features. Suse takes this even farther with rolling updates.

The idea behind LTS releases like CentOS is that you can stagnate on a platform and ignore it for a long time. This, of course, has value. But we aren't a stagnant company. We have active support and want the latest features and latest software. We aren't looking for vendors to blame, so long term lock ins to known platforms lacks the value that it might have in a slower moving company.

Yeah, that makes sense.

@RamblingBiped said in I know you're not crazy...:

We use Skype for Business as our primary means of communication within the company, and HipChat for inter-department communications for all things IT. We are going to be canning HipChat here in a couple of weeks when we move to Microsoft Teams

HipChat is buggy and I don't recommend it to anyone; horrible unintuitive user experience. I'm not a Skype fan either, but that decision is outside of our sphere of influence so we have to deal with it. I'm hoping Microsoft Teams offers at least the same functionality as HipChat without the bugs. If that happens I'll be happy enough.

Same. We have on premise skype for business. I never had a big problem with it, but it never wowed me with anything.

It is nice how their status shows up in outlook though.

Faxstation, formerly faxbochs or something of the sort, works flawlessly and gives companies exactly what they really want - the use of a fax machine.

It takes the fax transmission locally, converts to a doc, sends to Sangoma servers then is manually faxes to the receiving party. And vice versa.