@Emad-R said in Install OpenVas9 in Ubuntu Server:

@dbeato

the thing is openvas versions is all over the place, dont they have a new version 10 right now, a month ago it was on 8 .

It was 8 then 9 and the 10 version is GVM. I am testing it still but hasn’t been stable for me yet.

@scottalanmiller said in Bookstack Backup to S3:

@wrx7m said in Bookstack Backup to S3:

@dbeato said in Bookstack Backup to S3:

@wrx7m said in Bookstack Backup to S3:

@dbeato Are you running bookstack in AWS?

Not at the moment. I am just backing up to S3.

Look at Wasabi for S3 compatible object storage. Significantly cheaper.

Yup, can't think of any reason to use S3 unless you are hosted on AWS and aren't using it for backup but for production storage. And even then, not the majority of the time. S3 is too expensive and doesn't really offer anything except locality that is of any specific value. B2 and Wasabi beat it a lot.

Sorry, I posted this as S3 but I should change it to Wasabi. It is the same Idea for both.

@black3dynamite said in Downloading full Website offline:

@scottalanmiller said in Downloading full Website offline:

@black3dynamite said in Downloading full Website offline:

@dbeato @scottalanmiller

https://github.com/mariomaric/website-size

But does it really not download everything? Websites don't report on the size directly AFAIK.

Using --spider, does not download the pages.
Using --no-directories, tells wget to create empty directories.

So it gets it all from "Content Length"? Interesting. Guess that would work.

@EddieJennings said in Zimbra Certbot Scripts:

Since acquiring and renewing a certificate can be automated with Certbot, would it make sense to have the cert in two places? HTTP/HTTPS traffic passes through your ngingX VM, which receives its certificate through its own instance of Certbot. And you have a second instance of certbot that functions on the Zimbra server itself, so you have a cert for IMAP and SMTP connections.

Or, for you, does it not matter that IMAP and SMTP connections are unencrypted? Since beyond your own mail server, there's no guarantee that encrypted connections will exist.

You could, but it would still be such a pain to automate as certbot can't renew the certs alone for Zimbra, that you might as well just use one.

@JaredBusch said in Zabbix Server Setup on Debian 9.0:

@dbeato said in Zabbix Server Setup on Debian 9.0:

Prior to doing anytighing if you are basing this on a Debian 9 NetInstall you need to install the following packages as root

apt install ufw sudo -y

Then setup the user in the sudo group

sudo adduser username sudo

Technically, you do this if you don't select certain packages during the installation. It has nothing to do with it being a NetInstall ISO or not.

Technically, these packages are selected by default. I believe both sudo and ufw are part of standard system utilities.
8CO2bH3.png

Additionally ufw is not the firewall. That is iptables, but ufw is the simple way to activate and use iptables.

Yes, netinstall has that option as below Figure 1 while though it does not install ufw and sudo on those standard utilities Figure 2 & 3 with the fresh install Figure 4

Figure 1
0_1543334144965_e22c5437-43f1-474c-968f-599d675bb766-image.png
Figure 2
0_1543337768264_aa49f222-93d1-437a-89a6-3dbfc558f1df-image.png
Figure 3
0_1543337818820_cb5a9e3c-8a1b-4022-a373-9f1f41bcba52-image.png
Figure 4
0_1543338000904_b04d0f07-af0f-4ada-9958-8b3dfdd3027d-image.png

All the Z-Push state files are located on /var/lib/z-push. I deleted them all for an user and then boom everything started working.

@aboka said in Setup LetsEncrypt Certbot with CLoudFlare DNS authentication (Ubuntu):

hi, thanks for sharing this guide, would like to ask, what port does ppa:certbot use? im running nginx and its already using 80 & 443. i need to find a way to renew the cert when using Cloudflare as the common way(certbot renew) will not work. thank you.

There are certbot options to use the running server (Nginx in this case.) But I agree with Jared, better to use DNS.

EMC shows it is assigned to all services and the schedule task is there.

Calling this a win.

@black3dynamite said in Microsoft Office New ODT Customization Tool:

So they retire it but provides us with a preview?

Yeah 😞 it is counter productive in my opinion.

The specific package adobereader is a horrible example though.

Because until this month, you installed adobereader-update which also installed adobereader first as part of the package.

But now, suddenly, adobereader is all that is needed.

adobereader history.
0_1537676808803_b9217e22-5cdd-4aa6-9af9-dc93b4387ffe-image.png

adobereader-update history.
0_1537676966787_97d7b185-0c2b-4fd0-83b1-1dc12de16985-image.png

@momurda said in Central File Sharing:

@jaredbusch How long has Windows supported this? I just did this with my NC, and it was easy.

Since Windows 98.

@dafyre said in Fix OpenVAS when not starting Scans:

You can also download & install using their ISO. They label it a "Virtual Appliance" for some reason. It's worked on everything I've thrown at it so far.

https://www.greenbone.net/en/install_use_gce/

I don't prefer it due to being harder to troubleshoot... since it is an older OS version and such.

@irj said in Network Vulnerability Scan with REporting:

@obsolesce said in Network Vulnerability Scan with REporting:

What does everything OpenVAS does, and giving you the same info such as fixes/resolutions, but is faster for larger environments?

Yeah, but OpenVas is a resource pig, and the reporting isnt very good when you are reporting against thousands of systems, and you need to break them up into smaller groups. Also it isnt ideal for enterprise as permissions are a nightmare when you only want certain people to see certain assets.

It is actually much more expensive for a large company to try to use OpenVas

I'm not using it for thousands of systems at once, and permissions are not an issue. At most a scan is against a hundred or two devices at once. Maybe that's why I haven't noticed any slow or clunkyness.

But for in the future, I am curious of what to use that compares to OpenVAS, but is better with speed and permissions?

@networknerd said in Server 2016 Redirected Printer Change:

That's a new one I have not seen. We used Epicor ERP 10, and in that product I did see issues with RemoteApp where from time to time the user would not have a default printer selected in Epicor (sounds weird, I know), which would then crash any report they tried to print with an error that value of -1 was not allowed. Getting the user to change the printer to something in their list was the workaround.

Thanks for capturing this. I bet it will help someone else and looks to be already doing so.

YEah, that is what happens for this case, the RemoteApp shows the printer as a question mark. Once you go to File, Printer Setup and DoubleClick the printer then it is all good for the printer but all reporting shows in Portrait mode instead of Landscape mode.