@Dashrender said in Spoofing Caller ID:

@JaredBusch said in Spoofing Caller ID:

@Dashrender WTF does this ahve to do with Caller ID?

Doximity allows licensed medical pros to spoof their outgoing number to that of their office (I'm guessing it's just a softphone into Doximity's system) so it solves the problem I have for my licensed medical personal, but not my none medical staff - like billing personal, or myself.

FFS. You are not spoofing. You own the number. You can send it.

@IRJ said in Running Plex in Multiple Vehicles:

This just seems like a bad idea all-around.

Offering it free Several thousand dollar investment in equipment and labor (free I suppose) Wonky setup that isnt user friendly and doesn't give a good user or driver experience This isn't setup and forget about it. Don't forget to factor in maintenance Relying on celluar data

whats wrong with being free? the equipment listed in this thread are pretty cheap - though frankly, 60 person bus, not sure a R-Pi could handle that many streams (worse case) hard not to agree here - Plex wasn't designed for this. You likely want something like the airlines have, and yeah, it's going to be expensive as hell! yep, will likely require maintenace cellular - well no, OP already said connection for this system will be WiFi to the headquarters only.

But I have some followup -
How much WiFi bandwidth is needed to support 60+ devices for streaming media?
will the media distributing device have enough bandwidth to support 60+ devices?
The OP mentioned that passengers can use the WiFi to get online via the cellular link in the bus - will there be only one WiFi network on the bus, to get to both the internet and the local video streaming? Are there any security concerns with this?

@black3dynamite said in Mesh Central Device on more than one Login:

@scottalanmiller And there's no way to assign a device to multiple device groups or user groups?

No 😞

@Dashrender said in Subnetting help:

@scottalanmiller said in Subnetting help:

s this, but they didn't pay attention to their own example. Because they use the old, silly notation it is less obvious how they

They, the authors, are probably assuming old school classes for the network on 192.168.123.0 of /24... which is horrible writing, and lack of explanation.. but possible.

Right, and if they are, it means they don't know the most basic pieces of IPv4. Classful subnets were replaced in 1993. And even pre-1993, it was still less solid than would make what was presented by the author here accurate.

Given that it has been 27 years, there is really no excuse for the oldest, most out of touch networking person to think in classful terms. For 95% of the industry, classful networking hasn't existed during their careers. For 50% of the industry, it hasn't existed in their lifespans. In "IT generational" terms, it's been like five or more generations of IT pros since classful existed, so the "mentors teaching interns" problem has had five or six generations for people to catch on.

This means that the authors not only aren't doing a good job explaining, but lack the skills required for the A+ and certainly aren't prepared to sit for the Net+. This is the first stuff you have to learn about IP networking, because without it, you can't determine how to document or know what the network addresses of your network are!

@Obsolesce said in ADV200005 | Server Message Block 3.1.1 (SMBv3) Vulnerability & Workaround:

ADV200005 | Microsoft Guidance for Disabling SMBv3 Compression

Microsoft is aware of a remote code execution vulnerability in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target SMB Server or SMB Client.

To exploit the vulnerability against an SMB Server, an unauthenticated attacker could send a specially crafted packet to a targeted SMBv3 Server. To exploit the vulnerability against an SMB Client, an unauthenticated attacker would need to configure a malicious SMBv3 Server and convince a user to connect to it.

Workarounds

The following workaround may be helpful in your situation. In all cases, Microsoft strongly recommends that you install the updates for this vulnerability as soon as they become available even if you plan to leave this workaround in place:

Disable SMBv3 compression

You can disable compression to block unauthenticated attackers from exploiting the vulnerability against an SMBv3 Server with the PowerShell command below.

Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" DisableCompression -Type DWORD -Value 1 -Force

Notes:

No reboot is needed after making the change. This workaround does not prevent exploitation of SMB clients.

You can disable the workaround with the PowerShell command below.

Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" DisableCompression -Type DWORD -Value 0 -Force

Keep in mind that the vulnerability is only listed for Windows 10 1903 and up and Windows Server Semi-Annual Channel 1903 and up.

Folks should have inbound file/print turned off at user endpoints via Group Policy anyway so that eliminates that vector.

We don't deploy containers so no Server SAC anywhere in our stable.

With Appflow you need to make sure you have authentication enabled for the users so it tracks per user. The Data Collection is for sure nice but it is only the top sites and no much information.
https://www.sonicwall.com/support/knowledge-base/help-with-user-level-authentication-settings-like-local-users-ldap-radius/170503274714653/

https://www.sonicwall.com/support/knowledge-base/configuring-app-flow-monitor-to-view-real-time-incoming-and-outgoing-network-data/170505632951042/

https://www.sonicwall.com/support/knowledge-base/how-can-i-track-which-users-or-ip-addresses-are-accessing-a-certain-website-using-appflow/170505832815323/

https://www.sonicwall.com/support/knowledge-base/how-can-i-collect-traffic-details-by-ip-address-on-the-firewall-through-log-reports-and-appflow/170503950787011/

@jt1001001 said in ManageEngine ADSelfService:

We use ServiceDesk at work for ticketing never was able to get SSL to work, gave up and put it behind our Kemp load balancer/reverse proxy

I originally had ServiceDesk working with an imported GoDaddy certificate, no issues.

But there was no good way to do it with Let's Encrypt when I moved to that. Also, I really needed the Reverse Proxy anyway.

@stacksofplates

works exactly as intended, my sincere appreciation.. Now I have to try and understand, the syntax
and what I missed. All I had to do was change prename to rename ( Debian distro)
thanks, kindly

I've seen that a lot. When I import Drupal databases, I learnt to use its Backup and Migrate module instead, it works flawlessly. Downside is you need to do clean Drupal installation first, but that basically is just creating blank database and putting brick on enter key.

@marcinozga said in Chromium memory usage:

@travisdh1 said in Chromium memory usage:

@marcinozga said in Chromium memory usage:

lynx.PNG

Lynx, 1 tab open :face_with_tears_of_joy:

But why as root?

Root is the only user on that server, no need for any additional accounts.

pB43k.jpg

@flaxking said in PowerShell - Using Variables to Delete SMTP Proxy Addresses in AD:

if they do not have previous experience with objects

Describes me. lol

Got it with this.

lpadmin -p Printer-Name -E -v ipp://printer-address -o printer-is-shared=false -o printer-make-and-model="Canon iPR Svr G250 V1.0 US" -P "/Library/Printers/PPDs/Contents/en.lproj/Canon iPR Svr G250 V1.0 US"

@DustinB3403 said in Router Limits Hardware:

Don't use technology as a replacement for being a parent.

Yeah, that is not how that works.

ZeroTier on both devices and use RDP.

https://venturebeat.com/2016/07/13/skype-announces-new-webrtc-alpha-version-for-linux-chromebook-users-can-now-make-voice-calls/

Did they kill it off, maybe?

Hey @JaredBusch if you Google about converting Hyper-V to KVM, this is Google's built in process now! They link this article as the "official" Google chosen reference document for this process!

@stacksofplates said in Terratest:

I wrote a new article on unit testing Terraform modules with Terratest.

https://hooks.technology/2020/03/testing-terraform-with-terratest/

Nice article, I've never played with Teraform yet but its on my list.

Just received a new update fix
eb2a76e2-4b5e-48bf-b0bf-f64df0c270ff-image.png

@CCWTech said in Connectwise Control / Screenconnect recommends you break the law to run their software:

@JasGot said in Connectwise Control / Screenconnect recommends you break the law to run their software:

@scottalanmiller said in Connectwise Control / Screenconnect recommends you break the law to run their software:

spending so much time waiting for ScreenConnect to finally be able to load its device list. We spend just as much time waiting for SC's list to stop flashing from its load problems as it

How many clients?
What list?
SC is very fast in my experience.

2,000 clients and navigation and opening are fairly slow.

Have you used session filtering and subgroup expressions to keep any given window at a reasonable level?

We have thousands of clients sorted into hundreds of sub folders [for lack of a better word]. Our largest folder is 332 clients and it is loaded before I can get my finger off the mouse button.

@JaredBusch said in Create Internal CA for Windows LDAPs and Linux apps:

@pmoncho said in Create Internal CA for Windows LDAPs and Linux apps:

When I export the key, I want to export the private key as well?

That depends. If you are only ever going to have devices using the key to auth against the DC that you created it on, then no.

But if you need to install the cert on a device and then have another device auth to that first device, then that first device needs the private key.

Thank you for the explanation.