Thanks all, this has been helpful for me as I'm developing a training on email security for our company.

Note: We need more threads using the "poo lettuce" tag...

So anyways, what features do accountants need for asset purposes?

I was able to download.

I would prefer the phones to go out to 0.us.pool.ntp.org and 1.us.pool.ntp.org for all of their time sync issues but they appear to be having some issue.

Of which I am unable to determine what that could be with the error provided.

@black3dynamite That I haven't tried. It's worth a check!

You might look at the tools that Apple is pushing (and thus supporting). I don't know if Munki will fit your requirements, but it may.

Here is a list of several projects for managing macOS: https://simplemdm.com/2018/07/19/popular-open-source-tools-for-mac-admins/. NoMAD is pretty cool if you're in a Windows-centric environment.

@marcinozga said in Find the character break - sh script:

@DustinB3403 you need to source .bash_profile after changing it, so bash picks up modified file. Either

source ~/.bash_profile

or

. ~/.bash_profile

Thanks for that, I was actually sorting out that bit as you posted.

Short of setting up a few printers via the script I'm back in working order.

Now I'm getting Unexpected end of File

FML. . . what changed!

I got it from here

brew install macosvpn

sudo macosvpn create --l2tp Atlantic --endpoint atlantic.example.com --username ' ' --password ' ' --shared-secret s3same

You can provide ' ' for both the username and password, this allows any user to fill in as required.

@black3dynamite I was digging into it and it appears to be an issue with the host more than brew.

@dustinb3403 said in Do you setup SSL for Intranet websites only:

Near-zero value in someone attacking is what I meant. Not a zero-value in what is provided by the systems. Also there is nothing confidential or needing "security" from a business perspective, which is why I ask is SSL worth it for these types of Intranet sites?

You need SSL for everything period. Even if it's a self-signed cert it's fine... just allow the exception in the web browser and be done, or use an internal certificate if your browsers are set to trust the root... or a domain wildcard cert would work just fine. It's easy to do.

You could set out a reverse proxy for use with Let's Encrypt, and use the reverse proxy for all of your internal-only web servers. On the reverse proxy, you can limit each site config to only pass internal IPs only. That's what I did for a few. For example, if you add this in:

allow 10.0.0.0/8; allow 172.16.0.0/12; allow 192.168.0.0/16; deny all;

It will not proxy anything unless it comes from an internal IP.

Where I work, I dont have control over my colleagues. I am sure most places suffer from those people that are just there to stay in their lane and keep the status quo, at least everywhere I have ever worked. This sometimes applies to department heads and those people that should be taking charge of things like training. Generally, I find myself training users on specific tasks that they need to do their job, but a lot of times it comes down to how to process a specific task within our ERP, or somehow relating to how they use the technology we provide. I dont train our estimators how to make an estimation, but I will show them how to enter that into our ERP, or show then where to put all related documents. In a company our size, if there is no one that will take charge and try and force some sort of consistency and order, there will be chaos. A great example is the idea of a classic file server, whether it is a NAS or something else. Without proper permissions and forethought, you will end up with multiple users trying to share the same resources in multiple ways, that are often mutually exclusive. It also doesnt help, when talking about training, that some 'department managers' or other mid level managers are not really managing as much as they are just the most senior person in that department. We have a lot of these types of managers where their workload is still doing the primary task of the department, instead of managing their workers who do the actual work. It makes it hard to have consistency for training, when no one seems to even have the time to train any properly, let along work up any training materials and document any procedures ahead of time. It pays off in the end when it happens, but its never an organic thing that happens, that's not how entripy works. This is one of the primary struggles for our company, and I have taken on some of this (not all of it mind you), possibly because I happen to be able to find a solution that fits our variables, and other people are not as well suited to the task.

@manxam said in Dumb question - linux dd write 0s to multiples disks at once:

@stacksofplates : Now you're just showing off 🙂

Ha I didn't mean for it to look like that, but you did make me realize I made a mistake so I'll have to fix it. Make has a lot of uses outside of jsut building software. It's a pretty awesome utility.

@dustinb3403

Hi,

You cant but the /boot as raid

However the / or root part can be placed as raid, I did this and I will show you how to do this, but please don't do it.

Here where it gets bad.

You wish to update the system and kernel and all this can affect the RAID/ now the config for the raid is done in the kernel and stored in boot part, so you always updating this and your always keeping the disks busy, even on network packet level. Everything happens will happen on the /

What you want to do is look into purchasing a small reliable drive
Like 64 GB or 128 GB NVMe SSD and using that as your /
or If that is too fancy or expensive, get USB thumb drive and pair it with samsung SD card and install the root part

Then create RAID 10 on the 4 other drives, cause even if the /root fails it wont matter . pop another one and it will auto detect the raid , with cockpit it is very easy to detect the RAID and activate it and mount it

4_1538835763447_2018-10-06 17_18_47-Centos Gi (Ansible 2) - VMware Workstation.png 3_1538835763447_2018-10-06 17_18_38-Centos Gi (Ansible 2) - VMware Workstation.png 2_1538835763447_2018-10-06 17_18_33-Centos Gi (Ansible 2) - VMware Workstation.png 1_1538835763447_2018-10-06 17_17_52-Centos Gi (Ansible 2) - VMware Workstation.png 0_1538835763447_2018-10-06 17_17_43-Centos Gi (Ansible 2) - VMware Workstation.png

@phlipelder said in Dell Perc H710P 1GB:

@dustinb3403 said in Dell Perc H710P 1GB:

Does the Perc H710P 1GB raid controller have a battery backup option I'm just not seeing?

I think all of Dell's PERC series RAID controllers are NVRAM for Cache? Meaning, no need for a cache battery module.

Nowadays, pretty much.

Yeah I tested the smiley.

link text

Not found.

@coliver said in CentOS7 Server Apache Disable old TLS for higher versions:

@jaredbusch said in CentOS7 Server Apache Disable old TLS for higher versions:

@coliver said in CentOS7 Server Apache Disable old TLS for higher versions:

@DustinB3403 I really like this site for information on securing various web servers.

https://cipherli.st/

I just implemented their Nginx setting but getting back that TLSv1 was accepted?

https://www.ssllabs.com/ssltest/analyze.html?d=naggaroth.daerma.com

First line should read TLS1.2 if you don't have a version of Nginx that supports 1.3.

Correct. That is the only change I made to their config. I even reran dhparam

I use Veracrypt.

It's compatible with TrueCrypt but It uses his own encryption mode by default.

This issue is now resolved. I had to issue the command git checkout master before the standard upgrade process would work again.