Posts made by triple9

@JaredBusch is this SELinux enabled installation? SELinux can cause weird permissions problems

@scottalanmiller Siemens HiPath 3550 is a telephone system, as they call it, and basically it is PBX.
The only way telco could charge for internal calls would be to rent PBX to customer and charge it as part of service.

@scottalanmiller said in Managing Hyper-V:

@DustinB3403 said in Managing Hyper-V:

I'm in the camp of not joining your hypervisors to the domain.

If you get locked (because of domain controls) out of your hypervisors then you're SOL, along with the domain functions.

We all had 5Nine for free till a few days ago.

has anyone tried this product? https://www.probus-it.com/prohvm-hyper-v-manager/
It has free version and pro is not that expensive (€59.00).
I don't have access to Hyper-V server at the moment to try by myself how it works.

@Dashrender said in Hyper-V Manager Unable to connect to Hyper-V Host from Remote Workstation:

Can you manage 2016 Hyper-V from Win 7?

I think @Dashrender is right, you need Win 10 to administer 2012/2016

@jrc https://www.gypthecat.com/how-to-configure-windows-2012-nps-for-radius-authentication-with-ubiquiti-unifi

https://secopsmonkey.com/radius-for-asa-on-windows-server-2012r2.html

@bigbear oh, ok, I didn't know. As I recall, everybody was using term SS7 during that project.

@scottalanmiller @bigbear I was lucky enough not to use FR in production, only in lab while I was studying for my Cisco certs. Nowdays, we don't use FR, and Cisco is less and less present in my work. Fortunatelly

@scottalanmiller said in Twilio as a SIP provider:

@EddieJennings said in Twilio as a SIP provider:

@scottalanmiller said in Twilio as a SIP provider:

@EddieJennings said in Twilio as a SIP provider:

I'm curious as to how significant "Secure Trunking" is: https://www.twilio.com/sip-trunking/pricing It's nice that the traffic from my PBX to Twilio is encrypted, but that seems a bit useless since once the traffic leaves Twilio there's no guarantee of encryption.

The S7 is not encrypted nor at all secure. But it is also not on the Internet.

Forgive my ignorance: S7?

The phone network. S7 is the protocol of the PSTN. All things we refer to as "normal phone calls" go over it no matter where they originate or terminate.

I believe you were referring to SS7 protocol https://en.wikipedia.org/wiki/Signalling_System_No._7
I used it like 10 years ago, when we were doing interconnection to national telco PSTN.

@gjacobse it can be, but it is much easier using unified format. Otherwise you need all files in same place and you have to pay attention if paths are correct.

@gjacobse said in OpenVPN on Android:

@triple9 said in OpenVPN on Android:

@gjacobse said in OpenVPN on Android:

Has anyone used OpenVPN on Android?

I have to add the connection to a client device, but I don't have any (found) documentation on the process.

I have. Basically, you have to import prepared configuration file (profile) into OpenVPN client. I transfer it to Android either via email or via web site. Sometimes, if you copy file from Windows to SD card it gets converted into dos format which causes problems for Android client.
Also, consider using the unified format for OpenVPN profiles which allows all certs and keys to be embedded into the .ovpn file.

Okay - totally not sure about what all that is talking about - BUT - BUT - I think I understand...

I don't have any ovpn files,.. I do have I believe text which could BE the ovpn file. And this information needs to be sent to the tablet and imported to the OpenVPN application - which appears to be pretty straight forward.

sample unified ovpn profile:

client
dev tun
proto udp
remote vpnserver.something.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
verb 1
cipher AES-256-CBC
auth SHA1
dhcp-option DNS 8.8.8.8

# SMB WINS name server if you have one
#dhcp-option WINS 192.168.1.1

# route to multiple networks
route 10.0.0.0 255.255.0.0


# CA cert
<ca>
-----BEGIN CERTIFICATE-----
.... CA content
-----END CERTIFICATE-----
</ca>

# VPN Client Certificate
<cert>
-----BEGIN CERTIFICATE-----
.... client cert
-----END CERTIFICATE-----
</cert>

# key
<key>
-----BEGIN RSA PRIVATE KEY-----
.......key
-----END RSA PRIVATE KEY-----
</key>

it depends on your server setup. Put your CA cert, client cert and private key at appropriate positions. Save it as client.ovpn and import into OpenVPN client.

@gjacobse said in OpenVPN on Android:

Has anyone used OpenVPN on Android?

I have to add the connection to a client device, but I don't have any (found) documentation on the process.

I have. Basically, you have to import prepared configuration file (profile) into OpenVPN client. I transfer it to Android either via email or via web site. Sometimes, if you copy file from Windows to SD card it gets converted into dos format which causes problems for Android client.
Also, consider using the unified format for OpenVPN profiles which allows all certs and keys to be embedded into the .ovpn file.

Tim_G needs 220V input voltage, as it is used in Europe. His adapter is 120V input voltage. I would suggest looking at any EU Amazon site, maybe amazon.de or amazon.co.uk.

@scottalanmiller very true and very well explained, but still I really doubt it will make any difference in the future. Linux name is established as it is, and even Linus doesn't bother to make any difference

Lada?
https://en.wikipedia.org/wiki/Lada

new Chrome has patch for this already.

@scottalanmiller telecoms in Eastern Europe are mostly on Huawei equipment. Our local telco has almost everything running on Huawei (pppoe, firewalls, storage, Openstack cloud, VoIP services like IMS/SBC. Their VoIP platform fits in 10U space of rack, and that is for 2 million subscribers, in HA conf).

I had chance to see Huawei gear at local telco ... I can tell you that is some serious iron. Performant, robust, looks really reliable. Don't know for pricing, but looks very good indeed.

the only reason I had not to virtualize were Asterisk servers using PRI/BRI/POTS cards. It was problem and not supported while ago (I do not know if something changed lately), when those lines where still in majority comparing to SIP. However, thanks God, it is SIP world now

it makes even more sense in virtualized environments. One can easily add more RAM or disk space if required on VM. No need to dedicate partition for it.

@travisdh1 said in Introducing FreeNAS Corral:

@mlnews Are they going to add in a kitchen sink for the next release?

Somehow I don't see this becoming the next @scale.

not yet, for sure

https://www.theregister.co.uk/2017/04/18/freenas_downgrades_latest_release_to_tech_preview/