Posts made by openit

Hi there,

I was using ITarian (previously known as Comodo One).

I been there as beta user for longer, but still good with free, due to many features with agent based software.Now not free anymore.

My main concern is Global Software inventory and hardware inventory, would be great if can get more features for free , so I was looking at Spiceworks Connectivity Dashboard which seems fine with agents installed.

Wants to any other options available.

By the way, what happened to Sodium, it was some relevant software I believe?

Thanks!

No plans of Pi-Hole.

Considering to go with Quad9, since:

1. It is free for business (unlike OpenDNS free version)
2. No limit (unlike comodo free version)
3. Have at least default blocking (unlike some other DNS service without blocking)

Only downside is, no visibility of what's on and cannot add our rules/policies, fine for free. Adding one layer for free, if budget allows in future, can go with OpenDNS with good control.

Only thing I wonder is, everywhere I just see configuring Windows/Linux to use Quad9 as DNS, but, how about using office network wide? Do I just need to tell my DNS Server (Windows server) to forward DNS Queries to Quad9 DNS IP (9.9.9.9) ? instead of forwarding the DNS Queries to current ISP?
@scottalanmiller @JaredBusch @Dashrender @black3dynamite @syko24 @marcinozga @dafyre

Hi there,

I am looking to add one more layer for security by securing DNS at our office for free, if possible.

I had a look on OpenDNS (free available only for Home), Quad9 (free for business, but no information on what's going on - reports/dashboard), Comodo Dome Shield (free one is limited for 300k dns queries).....

I'm looking for free, even if there's no control to add black list/policies, default policies are fine, but need little info/dashboard on what's going on through our Network.

Thanks!

I have ran following commands to redirect port 80 and 443, and it is working fine until next reboot:

#!/bin/bash
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 8069
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 443 -j REDIRECT --to-port 8070
iptables-save

So I found one more article is saying to add first two commands to /etc/rc.local file to have rules permanently, but doesn't seems to be, not sure why?
@Pete-S @black3dynamite

@black3dynamite said in Ubuntu firewall sucks, status showing allowed http, but won't:

ERP is not even using port 80, so you shouldn't be able to get a response.

Use the following netcat command on your server, port 80 connection will be refused while port 8069 will connect.

nc -zv 127.0.0.1 80
nc -zv 127.0.0.1 8069

On port 8069, successful
On port 80, failed
So, again what @Pete-S said above is valid?

@Pete-S said in Ubuntu firewall sucks, status showing allowed http, but won't:

For the port to be identified as open there has to be something listening on that port, for instance a webserver. If you open the firewall but there is nothing listening it will say it's closed.

Think of it is if you knock on the door of someones home and they don't answer. Is the door bell blocked or are they not home? How can you tell?

Actually there are two ways to "close" a port - reject or drop incoming packets. But that is another discussion.

Thanks for pointing to right and explanation.

Hi there,

I'm running Odoo erp on Ubuntu 18, it uses 8069 port.

Concern is about firewall, I installed UFW to manage the Ubuntu firewall (iptables), I have to use http and https ports as well, so I have allowed port 80, 443, 8069 etc. while 8069 port is open and running fine, but port 80 is closed. Following is the status of UFW:

My idea is to redirect port 80 traffic to port 8069, before I do that, I need to make sure port 80 is open, and following is the result for port checker:

Please advise!

@scottalanmiller

Hey there,

I want to prepare for CompTIA Linux+ and when I visited the site, I found two course, is one of them is just updated content? I'm trying to choose the right one....

https://certification.comptia.org/certifications/linux#examdetails

image url)

Now I'm focusing on Linux (especially on Ubuntu) since I had to manage few servers on Cloud. I worked on Linux (CentOS) long ago, but posses no certification, so I thought to brush up the skills by training, better to prepare in according to certification, so I can be ready to work , get certificate and display on CV as well.

On other hand, I'm looking for free or cheaper training, in which whole course content matches the updated/latest Linux+ exam, so I can take the certification. I had a look on Cybrary.it but it doesn't seems to be covering all topics from certification syllabus.

Appreciate your suggestions!

@Dashrender said in Needs suggestion on email server/ control panel for Ubuntu to run erp, web n emails.:

Are you looking for an email solution for your company as a whole? or just something for the ERP system to use?

In fact, it is requirement of running odoo erp for someone else, but they are willing to build and run their company website as well with erp, so from there idea came out, what if we run email server as well in pack and above are suggestions.

@scottalanmiller @StuartJordan
Nice.
Do you people have any other suggestions, while running servers on cloud for the first time? might be about security or something else?

@scottalanmiller said in Needs suggestion on email server/ control panel for Ubuntu to run erp, web n emails.:

What email do you want to have? Why not run one VM with Odoo and one with Mailcow or Zimbra and voila, done. Two easy systems that don't mess with each other, no panel problems to deal with.

Oh ok, so your suggestion is:
Server 1: Odoo - erp and website
Server 2: Email server - I need the easiest one to manage

@scottalanmiller said in Needs suggestion on email server/ control panel for Ubuntu to run erp, web n emails.:

@openit said in Needs suggestion on email server/ control panel for Ubuntu to run erp, web n emails.:

Since this erp server itself is a web server as well for the company website, I may want to run email server in this server itself and manage email, records, dns etc. through free Cpanel alternative on Ubuntu, such as Webmin.

That Odoo uses a web interface in no way would make you want to make this leap. In fact, totally the opposite. This should read more like this...

"Since it is bad practice to mix workloads AND since Odoo and email would both use web technologies, it's more important than ever that I avoid putting both on the same machine."

How about option 2 I was asking about? wherein email service will be with GoDoaddy....

Hi,

Requirement is to run Odoo erp on cloud, let's say I spin a Ubuntu server on Digital Ocean or Vultr.

Since this erp server itself is a web server as well for the company website, I may want to run email server in this server itself and manage email, records, dns etc. through free Cpanel alternative on Ubuntu, such as Webmin.

Option 1:Kindly advise, cpanel alternative, email server etc. for above requirement.

Option 2: If I want to run erp, web server (should have control panel), but still wants to use email service of GoDaddy where we have hosting account.

Thanks a lot!

Dear All,

I have been in IT for some 6 years now, following are the areas I am working and I have knowledge. As you know IT is broad, I feel titles like IT support, Desktop Support, Service Desk Analyst, System Administrator will fit for me, but I realised , in big companies titles may vary, so if I need to Google for new jobs, it is necessary for me know more about titles as well.

I understand that, I also need to consider the Job description to understand if I can fit for that position, but still need to know commonly used titles for following skill sets:

• Help Desk Support/ IT Support
• Windows Server Administration (file server, AD)
• Email Administration (O365)
• Virtualization Administration (Hyper-V, VMWare ESXi)
• Storage (NAS)
• Anti-virus Administration
• IP Telephony - Clients and basic knowledge on IP-PBX server
• Basics on Networks
• Network Monitoring
• Remote Desktop Tools
• Printers Administration
• IT Assets Management
• Backup Administration
• Patch Management
• VPN Management

While my current title is "System Administrator", I have to handle all IT stuff, as know in SMBs. Just because my title is SysAdmin, I will not hesitate to go with "IT Support/Service Desk Analyst etc." positions, why not if pay is more than my current one.

Thanks for suggestions.

@DustinB3403
Kudos to You! for prompt response!

@DustinB3403 said in Synology File Server slow compared to QNAP.:

So to ask the question, do any of your systems depend on the "File access time" attribute? If not, you could likely set
"Record file access time" to Never for the best performance.

Which is the last option. But as a stepping stone into troubleshooting this Monthly is my recommendation.

The files are still updated whenever they are changed, so the Monthly option may, at best offer a slight improvement.

While I'm not sure, I believe no for File Access Time depended systems.

Anyway, I will keep in observation with Monthly option selected.

@DustinB3403 said in Synology File Server slow compared to QNAP.:

@openit the snapshot functionality is a feature of using Btrfs. It could cause performance issues for sure (not Btrfs, but snapshots in general require IOPS).

Go into Storage Manager > Volume, select the Btrfs volume containing your replicated targets and set the record file access time frequency to Monthly (Never is also an option but you likely want this performed at least regularly).

See if the performance improves.

I have changed it to "Monthly" now. Hope it resolves the performance issues without impacting the "data protection" functionality through Snapshots.

@DustinB3403 said in Synology File Server slow compared to QNAP.:

@openit the snapshot functionality is a feature of using Btrfs. It could cause performance issues for sure (not Btrfs, but snapshots in general require IOPS).

Go into Storage Manager > Volume, select the Btrfs volume containing your replicated targets and set the record file access time frequency to Monthly (Never is also an option but you likely want this performed at least regularly).

See if the performance improves.

"set the record file access time frequency" why is this exactly? and if I change it, is it going to effect snapshot functionality?

@DustinB3403
Current configuration: