@Pete-S said in Getting ready to spec new desktops:

The A chips are probably AMD's A-series desktop chips.
https://www.amd.com/en/processors/athlon-and-a-series

Those are what we use when we say that we use AMD chips. AMD A9 and A10. They are perfect for business desktops that aren't like CAD stations or whatever. I use the A10 myself. I'd really like to move up to the new A12. Ryzen is more for video game or high performance workstation usage, not standard office work. The A series are, IMHO, ideal for the average office worker (which includes IT people.)

@JaredBusch said in Testing bottleneck/speed issues on Linode:

The above does not mean there may not be issues with the network due to hidden traffic shapers and shit. But very few ISPs do that to a significant level.

I think a fair number do. I've had several do it.

@scottalanmiller said in Windows Services not restarting:

@WLS-ITGuy said in Windows Services not restarting:

Veeam is one of them. our print audit software is another. Anything that seems to be attached to a SQL instance seems to not want to start up after a reboot.

Have you tried setting them to delayed start? Maybe SQL Server is taking too long and they are hanging while waiting on it.

I thought I did that but guess not. We'll start there and see what happens.

@WLS-ITGuy said in fwconsole creating many emails through our Barracuda mail filter:

Just ran updates in FreePBX and now the queue buildup is back. Guess I'll have to fix it the right way

Enjoy!

@scottalanmiller said in Let's Encrypt Windows Server:

@WLS-ITGuy said in Let's Encrypt Windows Server:

@JaredBusch you don't have any issues with agents checking in or pushing out updates with the RP?

What would be the concern?

Curious more than anything.

@scottalanmiller said in NGINX vs Apache:

@wrx7m said in NGINX vs Apache:

Does Apache have a paid version? I know that nginx reverse proxy is free, but the web server (at least used to be) a paid product.

Apache is totally free. Nginx is free for all normal purposes, it is advanced features that I've never even thought of wanting that are paid.

Ahh. Ok. I misconstrued those features as being the entire product.

@dafyre I agree that Kaspersky has been getting a bad rap due to the politics of the day . Plus the extras you can get with your higher packages including patch management and light MDM is actually pretty cool.
A shame.

@scottalanmiller said in What tools do you use...:

Some places use RMM in house. It's more logical than it seems at first glance.

Right, if you use one that bills by tech and there are only a few of you, this can be quite effective.

Just ignore the billing part if you want.

Or better, set it up to get costs for all this internal work. Could be useful next time hardware, services, or staffing are discussed.

@WLS-ITGuy

7 years in the Army, most spent over in Germany.

I used to use a barracuda 300 (for about 6 years) in conjunction with their cloud filtering for our on-prem Exchange 2010 server. I think there were 2 times that they had some sort of issue where they let a crap-ton of spam through, unfiltered.

I have moved to Office 365 and am exclusively using their filtering. I think barracuda was better at filtering. Especially, when it comes to phishing messages that pretend to be from Microsoft's services. You'd think that Microsoft would be able to catch those better than anyone. Not in my experience.

@marcinozga said in Linux partitioning:

@travisdh1 said in Linux partitioning:

@marcinozga said in Linux partitioning:

@travisdh1 said in Linux partitioning:

@marcinozga said in Linux partitioning:

@travisdh1 said in Linux partitioning:

@marcinozga said in Linux partitioning:

@JaredBusch said in Linux partitioning:

@marcinozga said in Linux partitioning:

Last option on that screen. Why? Because if your root partition fills up, your system won't boot. Having /var on separate partition reduces that risk. Think of a bad app creating gigabytes of log entries, or writing junk to database.

Better solution, don't use bad apps

You never know if an app or kernel update doesn't go nuts. Here's an example of bad kernel module causing writing gigs of logs in minutes: https://unix.stackexchange.com/questions/195360/my-var-log-is-mysteriously-filling-up-gbs-in-minutes-any-cure-before-i-re-ins

Sure it's possible, but how many times do we see this sort of thing in normal use day to day? This is the first one I've heard of in years.

Used to happen more often because bad programming was more common.

Take Ubuntu for example, it will fill up /boot after a few kernel upgrades, so anything is possible.

That's a known badly implemented system. IE bad programming. Don't use it.

Also, it has nothing to do with /var filling up.

It's just an example of partition filling up, doesn't matter which one. It proves the point that it does happen.

In your example, they are causing a new problem because they've implemented your solution to the problem.

No, it would've had the same outcome if /boot wasn't on separate partition, but under root. Eventually it would've filled up entire disk with old kernel versions. The main point is to prevent root partition from filling up, not any other mount point.

That's not really true. That's making a lot of assumptions. In reality...

It would not likely ever fill up. The scales are so different. This is where creating a separate /boot actually CREATES the risk. The very pattern you are trying to follow is the one causing the issue.

It has lots and lots of chances for humans AND monitoring systems to catch and resolve it long before becoming an issue. This should have years, typically, to be flagged rather than filling up in a day or two.

Our first sites are on it and others are updating today. So far, so good.

@WLS-ITGuy said in Do you ask for permission...:

I guess this question can apply to the MSPs that may be here as well.

Do you always ask for permission to take a server down? Or do you give them a time frame that it will be down? Or do you just reboot at your leisure?

Lately, any time I give anyone warning that at a certain time I will be rebooting a server I get push back. I have become "that guy" and just reboot whenever the F I want now.

Anyone else?

Depends on the client, some client wants you to take care of everything and will not care, some wants reason for everything. Try to identify early on which and which and treat accordingly, however it is best to play safe even if that means staying late and waiting for approvals

@WLS-ITGuy said in Shared Vehicle calendar:

@black3dynamite said in Shared Vehicle calendar:

Something like this won't work because you don't want to have anyone managing it?
https://support.sherweb.com/Faqs/Show/how-to-book-a-resource-equipment-or-room

Then I would need someone to manage it? That would be OK if it has to be done as I can have the buildings and grounds manager handle the requests.

Here's another guide that was created. Looks pretty simple to set up.
http://facilities-intranet.anu.edu.au/__documents/systems-it/how_to_add_shared_calendars_for_vehicles-1.pdf

@scottalanmiller said in ISO Wordpress Developer:

Designer... as in someone who uses WP to make websites?

Or a Deverloper... as in someone who writes code on top of Wordpress for custom "app" functionality there?

Developer.

@JaredBusch Thanks, Did you get your October bill?

@obsolesce said in SSL Certs:

@wls-itguy said in SSL Certs:

OK. So if I have 3 servers that have the following:

pbxserver.site1.org at x.x.x.1
secserv.site1.org at x.x.x.2
weather.site1.org at x.x.x.3

I could use one wildcard cert for all three servers, correct?

IP addresses have nothing to do with it.

I knew that - I was just making sure people knew they were indeed on 3 separate servers.

Webroot here. It has been excellent.

That didn't take long to find a buyer.