@scottalanmiller said in Looking for content filter recommendations for a church:

@JaredBusch said in Looking for content filter recommendations for a church:

@dave247 said in Looking for content filter recommendations for a church:

@scottalanmiller looks like I need to install it on something though. I was hoping to not have to purchase any additional hardware. Still an option though.

A full kit Raspberry Pi on amazon is $60-$80

The 1GB board is plenty.

I was thinking about the 3 where htere was not really choice like the 4. Not used to having to specify on a RPi.

@Woti said in Fedora 31 Server Edition filesystem permissions changed to 777:

I see. I am just scared about all those entries. I need to get more knowledge about those stuff.
Need to harden Fedora server 🙂 Found this one here but no response at all 😄
https://mangolassi.it/topic/19719/what-hardening-standards-are-you-using-for-fedora

It's not really Fedora that you are hardening in this case. It's Apache. It's an application that you are looking to limit. What OS it is running on won't matter. Jared's Fail2Ban item is probably your best bet.

I've already used this guide again. LOL, boy this is handy.

@Romo yeah, we want that. The MC Router is Windows only, so not very useful as there isn't any Windows involved 😉

@krisleslie said in Using XCP-NG latest release, Windows 2019 Server VM file copies are pegged at 10 MB/s:

The data is from one of my Ubiquiti UniFi Video (NVR) server. So the files are not really big. So are you proposing like maybe zipping the files into one file then transferring?

If they are pre-compressed, then just tar them, don't zip them.

@Net-Runner said in Windows Server 2012 - Task Scheduler Issue:

There was an issue with US NTP servers multiple users reported during this week. Not sure if it might be the case here but still.

That's why anyone who relies on proper time sync should never use pool.ntp.org servers. They even spell it out on their website but nobody seems to read it.

I just double checked and my phone hasn't received a patch since 2/1/19. I need to get a new phone...

@Obsolesce said in New VM keeps turning off:

Is the OS licensed properly? I thought it shuts down if it's not, not sure if that still happens.

Yea, it's Activated and all that.

Modern laptop batteries are anything but dumb devices. Most of them got an SMBus interface, a bus derived from (and very similar to) I²C.

My guess is that either the firmware on this specific battery is bad, your host driver doesn't like the battery or you just had some dirty contacts and the host just couldn't talk to the battery.

@stacksofplates said in Scripted visudo updates:

@DustinB3403 said in Scripted visudo updates:

Well I managed to get the file created, I had to use visudo to create a custom file with my edits.

I'm testing it now to see if everything works.

Really? It doesn't let you just sudo a file in the dump directory? I wonder how they are enforcing that?

Yeah, not sure why it was having a hissy fit over it, but I've got a good working custom sudoer.d/god file now that can be used for what I have, and I can simply cp that into the appropriate folder and reset the perms on it (if required) to get everything working.

Thanks for the help guys!

I have postponed the laptop/desktop updates in WSUS for a week or so until this stuff is fixed. I don't want to mess with colleagues that complain they are not able to search and find something anymore 🙂

We are a mixed shop, having Mac, Windows and different Linux flavors including some weird ones. IP is the only way for us to get everything working.

But even in a pure Windows environment, I would stick to IP. WSD is crappy. WSD + some HP Devices is a noitmare.

@JasGot said in DHCP Question...:

I guess I am going back subnet school.

I found it, it's in the faded greyed out area under the red rectangle.

There's also a lot more that can be done, especially with the credentials... storing them as an encrypted file and retrieving them for the function (function just for that, functions using other functions), keeping all the parameter data in an object to retrieve, or from CSV, etc....

It depends on how far down the rabbit hole you want to go, and how much time you want to spend making it.

Honestly, I'd do this kind of thing with a different project, but this can work too. There's a lot you can do.

@scottalanmiller said in Blank Screen After Fedora 30 Update to 5.3.5 Kernel on Dell Inspiron Laptop:

Issue returned for the last two weeks even on Fedora 31. Luckily the old F30 kernel was still there because of the lock and continued to work. But the 5.4 kernel came out today and it works again.

I've had no issues again

@stacksofplates said in How to script a process upon wake up on Ubuntu:

You could just modify the bluetooth.service to have this :

[Unit] ... `After=suspend.target hibernate.target hybrid-sleep.target` ... [Install] WantedBy=suspend.target hibernate.target hybrid-sleep.target

What file are you using?

This is what I found /etc/systemd/system/bluetooth.taget.wants/bluetooth.service

b6be4a94-06d8-4b71-9052-a6508b604f6d-image.png

@scottalanmiller said in Group Policy Object - Copy Database frontend from NAS WITH icon:

@G-I-Jones said in Group Policy Object - Copy Database frontend from NAS WITH icon:

I'm looking for an option similar to User Configuration>Preferences>Windows Settings>Files where you can copy a file from a directory directly to C:%userprofile%\Desktop, but I want to be able to include a custom made .ico.
....
Any experience or ideas?

Now if we have figured out that this is a database file, not a front end application component that is stateless, then the need and reason for copying the files makes sense. It's a stateful backend file called a front end, but that isn't a front end (facepalm)...

Then a script is one option that will be decently easy. Or a tool like Salt or Ansible will do this easily. GPO probably can, I just don't know the mechanism that would normally be used outside of just calling a script.

Yea, I'm just going to run a script for the xcopy and then configure the GPO to point to it's location as @Dashrender suggested earlier. Makes sense, and seems pretty straightforward and easy.

Didn't we have one of these threads last year?

tags - please?

@Dashrender said in Comparing a Small Server and a Printer:

The waiting for a response on those LCDs and on the web interface I'm assuming are CPU/RAM bound.

Web, maybe. LCD very unlikely. Can't be RAM bound, if that was a case you'd need swap space but printers don't have hard drives and swap space. So RAM is either enough or not enough, not fast or slow like a desktop.

CPU is possible, but displaying an LCD screen at full speed is trivial for a 486 or an M68000. So it's safe to assume that that is no the case. Web? Possible. But does the web interface impact using the product?

@Dashrender said in Is there a thing as to much security:

@IRJ said in Is there a thing as to much security:

This sounds pretty standard to me.

This is exactly the kind of tasks I would expect PC support team to do. This is pretty standard in an enterprise environment. Your environment may be a bit smaller than the typical enterprise, but still this stuff is pretty standard nowadays.

NAC is standard in enterprises? I don't work in one, and haven't in 20 years... so maybe that's the case.

I'd guess it's more likely that you'd have a LANLess setup and competely distrust the local LAN, seems a lot easier. But that's likely harder to secure when it comes to using AD.

It's all dependent on requirements. I worked in one where it was required and am in one where it isn't now. If it's ISE prob the reason for moving it is because it doesn't have the certificate when PXE booting so it can't verify. However you can override that with MAC assignments.