Topics created by BRRABill

Office 365 has some fairly good builtin filters. I still had to add some domains manually, and filter out using keywords.
Once we ditch o365 and went back to full in-house exchange, you can really fine tune this stuff to keep out most of it. Turn your reject on SCL to 5 or maybe lower then whitelist servers you get legit email from. Add many text pattern filters to remove the worthless contract staffing and industry list emails. Also add an attachment filter to stop lots of types of attachments from coming through. Add a SenderID reject and spf hard fails so people cant send emails purporting to be from your domain to your users.
Went from people getting dozens of spam each day(most users) to maybe 2 messages a day for a handful of people. Once you start this campaign of aggression, it helps to have a quarantine mailbox where mails can be sent if youre not sure they are spam or not. You can then release them if they are not spam, or delte them if they are.

@BRRABill said in DC Interelations:

I don't want to confuse anyone in that other thread...

But if, say, the port the host was plugged into went bad, the host and VMs would still be able to talk to each other right?

He would not be able to connect to any VM on that host.
The fact that the vSphere console sees it hints that this isnot a problem. but it certainly is still possible if they had dedicated management networks. That is uncommon in this size though.

@BRRABill said in Graylog Discovery:

@scottalanmiller said in Graylog Discovery:

@BRRABill said in Graylog Discovery:

@scottalanmiller said in Graylog Discovery:

@BRRABill said in Graylog Discovery:

@scottalanmiller said in Graylog Discovery:

@Romo said in Graylog Discovery:

@scottalanmiller said in Graylog Discovery:

Or... learn to work in UTC like the rest of us 😉

Or build your own Graylog server and it doesn't have this issue.

Is there any specific reason for using UTC?

Because it never has a daylight saving problem, it's standard and universal, every system uses it identically, and it is the only option that doesn't play favourites with a region.

So......you just add (say 5, for NY) to everything you see?

Or just work in UTC. In modern international business you always have to adjust the time. Nothing is easier than using UTC which is stable, as a base.

How do you get everyone to play along? Server support? Desktop support? Etc..

You make it a company policy. Times are in UTC. It's pretty easy, you can set desktops through GP or similar. Set servers to UTC. Works like magic. Some people might adjust their own stuff, but if they miss things it's purely a failure on their part that they have no excuse for. In fact, the excuse might be worse than missing things (intentionally breaking policy to not know when to show up.)

Wait, wait...so you expect all your users to also adapt to UTC?

Easier than have them not be able to figure out timezones. It's LESS adaptation, rather than more.

@scottalanmiller said in Final Call ... XenServer Boot Media:

I added sparse files and lastlog to the SAM Linux guide so that I remember to cover them in a upcoming installment.

You are going to have to make a chapter called BRRABill Questions/Requests.

Okay I tested it out. If you log in as a new user it asks you to sign in but works anyway. So you know that you have not signed in, but you aren't blocked from accessing the application.

@reid-cooper

It's not thattttttttttttttttttttttttttt old.

@hellonadya said in Team Collaboration Tools:

@Veet I've heard of eXo Platform too! Is it good? I also remember that they have OnlyOffice add-on for document editing

Yes, it's amazing, if you like a team-collaboration with a "Social Network" twist to it .. But, don't expect features like the ones you see on Yammer .. Also, if you're doing a on-site installation, then you may find it heavy on the System requirements (4gb ram)

@scottalanmiller said in DC Demotion Question:

@Dashrender said in DC Demotion Question:

@scottalanmiller is NTG using Azure AD for it's Windows 10 machines yet? Is NTG using anything for GPOs?

Yes, we've been on Azure AD for quite a while now. Like since last year.

No GPOs.

Local admin? or at least access to the Local admin account?

@s.hackleman said

Yup, I have 65 devices exactly like this, sent out all over the country. I know exactly what you are going through. Your best bet is to just figure it out. You really need to be familiar with it before you send them to remote offices. You are going down the right road, just keep going. If you get stuck, or have any specific questions tag me or shoot me a message.

As far as what I am doing we developed an internal ad-hoc application for our users to preform tasks, and sign off. They then upload the results back to a database. We had to fight the political battle between people wanting to use the iPads for more than just our app, and locking them down enough that they would still work in a shared device environment. We have a Mac Pro that I setup the devices using Apple Configurator. That gets me wifi, and I add a policy that joins them to Profile Manager. Once there it is like Active Directory. I can assign users, groups, devices. I can lock security settings, add applications, control app updates, etc. Once they go out to the world, they communicate back to my server here. This computer also hosts a website that acts like a internal app store to host the installers for our in house apps. Nothing we work on is available in the Apple app store.

Do you ever have a need to lock parts of the screen down like you can do in Guided Access? Though I'm still not 100% sure I can't use Guided Access along WITH this scenario.

Also, can you change app setting over-the-air?

@wirestyle22 I have about 10 or 20 sites there paying $10 a month and running through serverpilot.io

So here is a quesiton. When you first add a secondary DC/DNS, do you go back to the original DC and update the DNS on the NIC? Or do you leave the original pointing only to 127.0.0.1?

@travisdh1 said in XS Log Question:

@BRRABill said in XS Log Question:

@travisdh1 said in XS Log Question:

messages generally has everything. That's where I'd look first, do a text search in that bad boy. Do you have any error information from the import?

My message was (at the time of this post) and still is zero size.

Really? XenServer must do things much differently than I'm used to in Linux. Try what @Danp said and look in xensource.log then.

I just went and looked, XenServer doesn't use rsyslog by default, yuck.

Ah:
http://discussions.citrix.com/topic/378269-xenserver-7-varlogmessages/

Actually it was:

lvchange -ay <VGname/LVname>

@scottalanmiller said

Look in /etc/fstab and you'll see where the mount details are coming from. Pretty sure that your RAID array just has LVM on it.

LABEL=root-zefrgy / ext3 defaults 1 1 LABEL=swap-zefrgy swap swap defaults 0 0 LABEL=logs-zefrgy /var/log ext3 defaults 0 2 /opt/xensource/packages/iso/XenCenter.iso /var/xen/xc-install iso9660 loop,ro 0 0

@Danp said in Stopping XenServer From Writing To A USB Boot Drive:

Here's one to watch from the Citrix forums: http://discussions.citrix.com/topic/379454-booting-xenserver-off-usb-safe/

P.S. Which one of you guys wrote this? 😉

That was me.

Those guys know the nuts and bolts of XS, though they aren't real responsive to threads all the time.

On ML that would have have 500 posts already and been forked 6 times. 🙂

All operating systems, including Windows, include the base kernel, shell(s) and support applications and, in some cases, extra stuff like Solitaire and such.

Each Linux distro is the same. It is a full operating system on its own and includes all the same kinds of things.

@BRRABill said in What is Linux Mint:

@scottalanmiller said>

Thenstart asking questions!

OK.

So, what is Mint, exactly. I thought the "Mint" part of it was the desktop. Like that is what made Mint "for the masses".

But then you can install all these other desktops. So, what gives?

Could you just install those desktop GUIs on other distributions and get the same thing?

You can basically do everything with every distro. Some distros are specialized in some way, like Kali (based on Debian) SystemRescueCD (based on Gentoo) or Knoppix (also based on Debian) for example. Other distros, like OpenSuSE or Debian are more general purpose distros without much of a focus.

You can use the very same pen testing tools you are using in Kali in Mint without much of an issue for example (expect for dependencies).

Some Desktop-focused distros, like Mint, tend to have more up to date packages regarding the desktop experience and tools like Libre/OpenOffice. On the other hand, you'll find more up to date server packages in distros like Ubuntu or Debian. Gentoo is another special flavor where you have the option to compile everything from source with a package manager in front (portage). It can be optimized to any degree (make flags etc) and they tend to have the most up to date packages.

Linux guys tend to call distros "flavors", because they are just that: flavors. They are all running some customized version of the very same Linux kernel behind the scenes.

@BRRABill said in Remotely Accessing Desktop of GUI-based Linux Clients:

@scottalanmiller said

Linux Mint is a full distro, like CentOS, Fedora, OpenSuse Leap, Ubuntu, etc. It is a distro that focuses on desktop usage rather than server or mixed. But it is a distro. The desktop of Mint is Cinnamon, Mate, LXDE, etc.

How does a distro "focus on desktop usage", exactly?

Well, for example, it includes an office suite instead of a NoSQL database. It has a desktop instead of only a command line. Testing is done of desktop usage rather than server usage.

How do you test a limo differently from a tractor trailer?

@wirestyle22 said in Powerline Adapter Security:

@travisdh1 @aaronstuder What about speed though? I always thought it was super gimped and should only be used in situations where wireless can't be used but you can't run cabling at all.

They've been pretty crazy fast for years now.

NJ here too. Crazy how real to life Mad Max Fury Road was