Topics created by bnrstnr

@JaredBusch said in FreePBX update negated/erased an Asterisk Dial Code we had set?:

@Dashrender said in FreePBX update negated/erased an Asterisk Dial Code we had set?:

yes, this would drive my users insane.

It is a setting. Turn it off.

I wouldn't want it off whole sale. I could definitely do that for most users, but my phone does have a display large enough to tell me I have missed calls - and I call those people back, even if they didn't leave a message. More often than not it's beneficial to call them back and solve whatever problem they were having.

@scottalanmiller said in Webex vs. Microsoft Teams + FreePBX conference:

@bnrstnr said in Webex vs. Microsoft Teams + FreePBX conference:

One thing I didn't like about teams is that you have to install a client to attend the meeting, which is the same for Webex and just about every other major solution if I remember correctly.

Zoho doesn't have a client either. All web based. Same as Rocket and NextCloud.

They all use the WebRTC components in modern browsers.

@JaredBusch said in Server 2012R2 DHCP reservations problem with my VOIP equipment?:

I never use reservations for phones.

Specifically with Yealink phones, I set the DHCP hostname value in the config file.

So when I am on the network, I can easily just ping ext103.domain.local and shit..

Or If I look at the DHCP server lease list, I see the hostnames listed as ext101, ext103, etc.

c1f3dca6-fa20-4b66-9d59-87af092bf42f-image.png

Love this idea

@bnrstnr said in Vultr Node Failure - VPS Recovery Unsuccessful:

@JaredBusch said in Vultr Node Failure - VPS Recovery Unsuccessful:

And you have a 2 month credit coming.

If you paid the $1/month for automatic backups you could be online in an hour or less.

Yeah, it was for testing, so I wasn't going to pay more. Not too worried about it.

Just sharing the experience. Not sure if anybody else has encountered this yet with Vultr.

1 host erasure with recovery of my VM (luckier than you) plus a number of networking issues at DC level in 6 months (Amsterdam data center).

@bnrstnr said in Pi-hole server involved in a 'DNS Amplification' DDOS Attack:

@DustinB3403 didn't you say the method above would only work for devices on the Pi-Hole's LAN?

The method linked by someone else would, yes. As it's impractical to try to do said linked approach for the open internet.

Again, it's what you would do, but isn't practical because of your scale.

Post 18.

@DustinB3403 said in Pi-hole server involved in a 'DNS Amplification' DDOS Attack:

But the reported issue is that these request appear to come from your devices. IE they are spoofed or are legitimately coming from your trusted network.

Can you setup ingress filtering for this?

This is the approach proposed by Curtis.

@Curtis said in Pi-hole server involved in a 'DNS Amplification' DDOS Attack:

https://freek.ws/2017/03/18/blocking-dns-amplification-attacks-using-iptables/

@bnrstnr said in FreePBX fail2ban or SIP provider whitelist on router?:

@scottalanmiller said in FreePBX fail2ban or SIP provider whitelist on router?:

@bnrstnr SIP-ALG in ISP provided gear is nearly universal.

Guh, who would have thought... Is SIP-ALG purely sabotage or is it useful in certain scenarios?

Actually sabotage. Ubiquiti is the only vendor that I know where it works most of the time.

Most firewall vendors are also either phone companies or in bed with phone companies and have a huge interest in convincing people that other phone products don't work reliably.

@DustinB3403 said in NextCloud web interface painfully slow:

Only took the better part of a week to get this resolved. . .

haha I honestly didn't even reply to their message until yesterday. The slow resolution was definitely all on me.

Here's an updated shot of glances
2a4ad1f5-2969-4fd6-aeab-bf6cae0ffd43-image.png

@bnrstnr that's your most likely culprit, having it be SIP aware.

@bnrstnr said in HP iLO3 Local User Name Problem:

@scotth said in HP iLO3 Local User Name Problem:

and should show the login information as well

I don't easily have access to a monitor and keyboard where my server is located. Doing the jumper bit isn't too bad, though.

I'm trying to get the hponcfg utility to work from my Xenserver console in the meantime. I guess I could drag a monitor down there, but it's definitely my last resort.

I'm thinking that the ILO will default to DHCP and UN/PW listed under the cover. You could web page it and reconfigure.

@black3dynamite said in Wink Smart Home Controller:

The only open source alternative is called Things Gateway.
https://iot.mozilla.org/gateway/

They also have a list of supported hardware too.
https://github.com/mozilla-iot/wiki/wiki/Supported-Hardware

@black3dynamite This is very neat, i like the extend-ability it seems to offer. The problem with all this IoT stuff to me seems like there is no standards. Every company has their own implementation and their stuff only works with their stuff. This project from Mozilla seems to be trying to expand interoperability and compatibility across manufacturers/brand names.

I was about to report back that mine worked and send you my Nginx settings, lol.

@bnrstnr said in Lastpass stores all subdomains as entries for the main domain:

So I've set this up and it at least asked if I wanted to save the site for a new subdomain that I haven't already saved (instead of updating existing unrelated sites)... but it wants to save it as example.com still :pouting_face:

EDIT: It saves the "Name" field as example.com, but it gets the "URL" field correct with the proper sub.example.com and no longer suggests the other subs that don't match. So this is definitely a way better start, still not ideal IMO, but it does work correctly

But this is your preference. I don’t want this. I have a lot of internal things on *.domain.com that have the same credentials because of LDAP/AD linked auth.

I do not want all of these to be kept separately.

@dbeato said in KB4074588 breaks USB mouse and keyboard:

Also are your devices with AMD Processors?

No, Intel, different gen on both laptops too

@bnrstnr said in WordPress behind NGINX Reverse Proxy issues:

@scottalanmiller said in WordPress behind NGINX Reverse Proxy issues:

https://mangolassi.it/topic/13062/install-a-basic-wordpress-site-with-wp-cli

Doh, somehow I missed this.

And this one.... 🙂

https://mangolassi.it/topic/16084/installing-fedora-27-lamp-stack-plus-wordpress/

@bnrstnr said in XO behind proxy or exposed directly?:

nly web server I wanted to use, would there be any benefit at all of using a reverse proxy instead of just forwarding 443 directly to XO?

Still it would help for security purposes.

@jaredbusch said in FreePBX Parking and Web Interface not working:

@bnrstnr said in FreePBX Parking and Web Interface not working:

@JaredBusch Do you recommend sticking with Asterisk 13 on the new install or should I go with 15?

Not tested 15 yet, so I cannot answer that from experience. I can say that I’ve never had a problem caused by Asterisk

Same here, using 13 because FreePBX is recommending it right now. But doubt 15 would be an issue.

@bnrstnr said in Windows Server 2012R2 DHCP Server Memory Leak?:

I have some warnings and errors in the event viewer that I'm going through now. Is there any reason to have IPv6 enabled if we're not using it? A lot of warnings in there about IP6 supposed to be static only.

I wouldn't disable ipv6 unless you are unable to find and fix the real root cause of an issue in which disabling ipv6 may mask.

https://blogs.technet.microsoft.com/askpfeplat/2013/06/16/ipv6-for-the-windows-administrator-why-you-need-to-care-about-ipv6/

https://blogs.technet.microsoft.com/jlosey/2011/02/02/why-you-should-leave-ipv6-alone/

https://cwing.wordpress.com/2013/05/20/ipv6/

In a Yealink, it is here. I do not have the config file setting handy.

0_1510847846931_5cf60037-b964-4f7c-ab0b-cb4b076b4735-image.png

@scottalanmiller said in When to use VMWare over free hypervisors?:

@matteo-nunziati said in When to use VMWare over free hypervisors?:

@stacksofplates like let the san use uts own snapshot/backup sw?

Yes, which isn't quite fully offloaded, but a reliable means of communications so that the SAN can do the majority of the work.

Actually vVols is different than SAN Snap-ins in how snapshot offload is done. VMFS snapshots do not exist at all in the case you use them. You also get a management, and command integration so you can set compliance requirements (encryption, retention, replication, performance minimums) and apply policies automatically (using OpenStack, VCD, vRA etc) and it will validate that those configurations are continuously met and alert if not. Nifty stuff.