@Dashrender said in DHCP Question...:

But Windows does allow you to specify things other than the whole subnet, i.e. the whole /24, just like your EdgeRouter does

You can define more than a /24, but not less.
In the following pic, you can see the subnet is /24, in the 192.168.100.0 scope.
The popout is where you define the DHCP scope to be distributed, not the scope of the subnet.

Be sure not to use "Subnet" and "DHCP Scope" interchangeably like M$ does.
MS Has you define a scope when you create a new subnet to be served by DHCP, you don't really do anything with the DHCP Scope until you start filling in the Start IP and End IP. No matter how restrictive you make the DHCP Scope (11 to 50 in this case), you will still have a subnet of 255.255.255.0. If you were to make the DHCP scope 192.168.100.1 to 192.168.101.254, you would see the Subnet automatically change to 255.255.254.0

I guess I am going back subnet school.

So I have now been using Spamhero for 30 hours and I see that they set a Envelope-From header that looks
like this: x2002-jyfsw3duma5djrkx7d5o1kvxvd5a704tybfnqn97fdue5e47pahvvtu3piaroi1gkbrt0njo7qhvvc74vffbj3ef@rspf.mxthunder.net

This makes managing incoming mails with ConfigServer Mail Scanner FE on cPanel quite difficult, all incoming mail from SpamHero shows a the enevelope-from: information in the ui instead of the from: info.

I'm not sure if I can get MSFE to change how it displays or not. Other spam filters (not all others, but some others) do not do this.

I'm still researching this, but if you have any thoughts, I'd like to hear them.

@JasGot said in 3rd party spam filter solution pricing:

I'm still researching this, but if you have any thoughts, I'd like to hear them.

Fixed by turning OFF the SPF Workaround at SpamHero (which is ON by default at setup time).

https://www.spamhero.com/support/108443/How_do_I_Enable_the_SPF_Workaround

We run web browsers from backstage in SC for this. It's "icky" at best.

Having this in in MC would be another very strong reason for us to consider MC over SC.

I appreciate all the very informative and valuable input. I have downloaded Ubuntu 19.10 and Proxmox 6.1

I'll give them both some attention today and see which I prefer.

@scottalanmiller said in Virtualization when there is only one VM?:

@Dashrender said in Virtualization when there is only one VM?:

@DustinB3403 said in Virtualization when there is only one VM?:

@Fredtx said in Virtualization when there is only one VM?:

Although I don't disagree with choosing virtualization over physical install, but what about small Dental or Medical practices who have a local DB where their practice management software resides? I'm guessing clients like that would just require additional training on how to login their hypervisor and into their vm? There's cases where they need to remote software support in their DB for software related issues?

You'd still virtualize, the administrative process is no different from the VM perspective compared to a physical install. Use RDP or whatever remote administrative tool you needed.

The problem @Fredtx is more likely to run into is small offices that are USING the server as a workstation as well as the server. Hyper-V and ESXi don't allow for local access to the VMs via GUI (that I know of). I think you can get there with KVM, as long as the management OS of KVM has a GUI on it. Not sure about anything else.

All that said - forcing the server to become more or less headless is a good thing in my mind. As Dustin mentions - using RDP or ScreenConnect or MeshCentral to manage the server remotely is likely the best option.

Yup, we get this problem, a lot, in medical.

Over the years, we have successfully moved our customers away from this scenario. Our lives (IT Support) are so much better now!

@VoIP_n00b said in Reconsidering ProxMox:

@JasGot Make sure you run updates on the proxmox host.

You have to disable the enterprise repo, and add the no subscription repo first.

https://www.flash2hack.com/?p=416

Sadly, this either didn't Update Virtio, or it didn't solve the problem.

So, I grabbed the latest Virtio-Win driver iso from https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/latest-virtio/virtio-win.iso and attached it to the VM, I loaded the driver during Windows server installation, and all is good now.

Anyone use it? I have questions about it.

@JaredBusch said in Postcards for SMS by Skyetel.:

No, it is on my list of need to get installed and tested though.

I'm bringing up a Centos box right now to install and test.

@krzykat said in Postcards for SMS by Skyetel.:

Row 35 should read: image: jrcs/letsencrypt-nginx-proxy-companion:latest

Well, they listened to you. Line 35 is just as you say it should be.

I have Postcards installed on Ubuntu 19.10, on Hyper-V.

Getting a "503 Service Temporarily unavailable" message when trying to access its https.

Can access http://<ip address> just fine from anywhere.

CANNOT acccess https://<ip address>/backend/admin from anywhere.

Postcards runs inside a docker and I have never worked with docker before.

It is likely a Letsencrypt issue, but I cannot locate it to run a manual fetch.

I'm stumped.

Thanks! We'll go with Zoom.

@NDC said in Public Web Meeting Options:

Anyone have suggestions for that?

Zoom says they can handle 1000 or more, but you need to contact them for pricing.

We used to use that product for redundant monitoring of SCADA system. We would monitor door latches, pumps, water levels, etc. It worked great.

We have since moved to Raspberry Pi to meet the needs of other controls we wanted to include in our management systems.

The control by web device will do what you have asked for above. It's very inexpensive too.

If you have, or plan to add, custom alerts, you may want to consider something like a Raspberry Pi to give you unlimited flexibility when it comes to PLC.

@Dashrender said in RAID - Two Arrays for Server? Array 1 for Windows Host and Array 2 for VMs and Data?:

The hypervisor uses so little resources,

Dash is right, and if you use Hyper-V Server, I'm not sure if the host OS even touches the drives once they are up and in RAM Very little resources and disk usage!

@jmoore said in RAID - Two Arrays for Server? Array 1 for Windows Host and Array 2 for VMs and Data?:

Do you have a real need for separate arrays? If not I would not complicate it ans just do raid 10.

I would agree. One of the only valid reasons for multiple arrays in an environment like this is because you are running on older RAID controllers with size limit. Like the Perc 6i 10TB limit. Go big, or go home!

Great research! Thanks. And now if I can remember this when it happens to us, I'll be all set!

@BraswellJay said in Email phishing attempt against one of our vendors was successful ...:

One other detail is that both of the spoofed domains that were used in the attack were registered through google on the same day approximately 4 weeks ago which would suggest they were anticipating being able to use us and the vendor in a coordinated attack.

Wow! Good work. That's a dedicated scammer. What was his payday? If you don't mind making the story more fun...

@scottalanmiller said in Email phishing attempt against one of our vendors was successful ...:

If they let the email system do the encryption (not end to end) then maybe. But if they were truly encrypting the email end to end, getting into the email system would not provide that info.

True, but knowing users.... they probably decrypted it and sent it to another employee as plain text!

Saw this again this morning. It was in installer for a driver. The wrapper was the problem. With the red error box still on the screen, I went the to temp folder where it had decompressed and copied the actual driver out, then finished with the red box.

When the red box closed the temp folder was deleted, but since I had already copies the actual installer exe out of there, I just ran it and all was fine!