I have email that refuses to send to a vendor I use.

I have TLS required on all outbound email. I have a couple of connectors allowing non-TLS to certain people.The recipient mail server accepts TLS according to MXToolbox.

The error message is UntrustedRoot

Reason: [{LED=450 4.4.317 Cannot connect to remote server [Message=UntrustedRoot] [LastAttemptedServerName=snowflakem-d.com] [LastAttemptedIP=66.96.140.92:25] [BN7NAM10FT007.eop-nam10.prod.protection.outlook.com]};{MSG=UntrustedRoot};{FQDN=snowflakem-d.com};{IP=66.96.140.92};{LRT=8/12/2020 8:55:47 PM}]. OutboundProxyTargetIP: 66.96.140.92. OutboundProxyTargetHostName: snowflakem-d.com

I made a connector to not require TLS and I also tried Require TLS but allow any cert (even self signed). But it still gives this error.

The MX Lookup says the IP belongs to the Endurance group which owns things like hostgator https://www.endurance.com/our-brands

For the record, even though I made the above connector and it failed to verify, I did save the connector. Apparently, that was enough as email is sending now.

It is URL rewrite. You can make complex rules just like Apache or Nginx.

https://www.namecheap.com/support/knowledgebase/article.aspx/9953/38/iis-redirect-http-to-https

@scottalanmiller said in FreePBX and changing IPs:

@Dashrender said in FreePBX and changing IPs:

@scottalanmiller said in FreePBX and changing IPs:

@AdamF said in FreePBX and changing IPs:

@Dashrender said in FreePBX and changing IPs:

I'm curious why DuckDNS is picking up on the VPN IP instead of the local one? no split tunneling?

Any possibility that the home user has a router that supports DynDNS? If so, set that up should solve the problem.

Good call on the split tunneling. Checking...

If it doesn't split, then the phone traffic is likely going down the tunnel, too. Or else you are checking from a different location than the phone.

Are you assuming a softphone?
I was assuming a physical phone.

I'm assuming the two on the same network component, regardless of hard or soft.

No, more typical it that the VPN is on the laptop. So only that is affected.

And it is a desk phone as noted someplace above. So not affected by the VPN.

@scottalanmiller said in Multi Stream Video - Demo Recording:

with a set focus

OMFG you need this.. Your phone recordings nauseate me.

@Ambarishrh said in PDQ Link:

The only catch I could see is the mandatory port 443 as per their site

The majority of work for Link is done with our installer, but there is one bit that will have to be done by you or your network team. Your external firewall will need to route incoming TCP 443 to your PDQ Link server. 443 is the only port SSTP can utilize. This configuration is mandatory to allow your external clients to connect.

If you already have another service on 443 with a public IP, we need to use an additional IP for PDQ link.

That is what inbound proxy servers are for.

@AshKetchum said in PBX queries:

Is the VM PBX cheaper that the usual Mitel appliance?

@Dashrender would know as he has looked into it for his existing Mitel solution in the past. My memory of the conversation is not a big difference?

@JasGot said in Hosting a website with Nextcloud?:

Anyone use NextCloud to host a website WITHOUT PicoCMS (which is awful to setup)?

I would be most interested in a standard Apache driven site with PHP access whose content would be housed in Nextcloud on the same server.

I have a customer that uses an offline website generator and then uploads the files to his web host. For a variety of reasons, moving this to a Nextcloud install would be really helpful for him and his other cloud storage/file sharing needs.

Umm Nextcloud runs on Apache (default) or Nginx.

Both are web servers.

So if you want them to serve up something else, you simply tell them to do so.

@JasGot said in Hosting a website with Nextcloud?:

@JaredBusch said in Hosting a website with Nextcloud?:

@JasGot said in Hosting a website with Nextcloud?:

Anyone use NextCloud to host a website WITHOUT PicoCMS (which is awful to setup)?

I would be most interested in a standard Apache driven site with PHP access whose content would be housed in Nextcloud on the same server.

I have a customer that uses an offline website generator and then uploads the files to his web host. For a variety of reasons, moving this to a Nextcloud install would be really helpful for him and his other cloud storage/file sharing needs.

Umm Nextcloud runs on Apache (default) or Nginx.

Both are web servers.

So if you want them to serve up something else, you simply tell them to do so.

I know. I'm looking for a solution inside nextcloud.

That is not what it does, so you won’t find it.

@scottalanmiller said in Fanvil Availability and Suport in the US:

Hopefully doing our first remote provisioning today

Without a device I have not looked closely, but what I did read says it is XML and using some kind of intelligent verbiage. and not just fucking P codes.

There is no sound difference in the CP920 and CP960. Both work well.

I assume the 930 is identical to the 920 just has dect built in.

I have never used the 960 with remote mics.

I have the X4U ordered from Amazon ($77) for delivery on Sunday.For the price point, this could be a very workable "standard" phone for people if it proves out the quality and features.

Fanvil uses an XML or TXT format for the config. I exported them from the GUI to just see what it looks like.

XML

I flashed the firmware back to 1.0.0 and it did reach out to the PBX as per the DHCP options.

So it is possible the unit had some reason to have not done it out of the box. It was an Amazon purchase, so who knows.

I defaulted the phone and exported the XML version. Then I added my extension and changed a few settings and exported again. I grabbed the diff of the files and made a valid XML syntax out of it.

Created 0c383e42480e.cfg and stuck it on my PBX.

Defaulted the phone, still on firmware 1.0.0 and boom.
works.
It only tried to pull the MAC.cfg once since it successfully processed it.

If your XML is invalid, it will try 5 times before giving up.

I was referencing only the machine account expiration stuff.

@siringo Did you allow that IP for incoming connections?

@jmoore said in Virtualbox Issues:

I would mark as solved but I do not see the option where it should be.

because it was never marked as a question first.. hit topic controls

@wscsuperfan said in Hosted DNS questions:

@JaredBusch said in Hosted DNS questions:

@scottalanmiller said in Hosted DNS questions:

@travisdh1 said in Hosted DNS questions:

CF also have certs available to encrypt the traffic between your server and CF, I think they're even free.

They are free.

And I have a guide on here on how to use one

Sweet.....I'll go look for it. Thanks

https://www.mangolassi.it/tags/origin certificate

@ronneyb said in Proxmox Backup Strategy and 'Snapshot' Weirdness:

The snapshot mode confused me because the term snapshot is also used to create what I will call a 'state' snapshot rather than a 'real' backup.

All VM level backup solutions make use of snapshots to backup running machines. This is how it is supposed to work.

No a snapshot by itself is not a backup. But once you copy the virtual disk off that is no longer being written to because of the snapshot process, along with the associated VM settings, now you have a backup.