@JaredBusch said in Fanvil Dual SIP Accounts?:

That does not sound likely. If the second PBX was working already, why would there be some setting that needed changed there? The fail2ban block is understandable if you were failing to log in and caused it to kick in.

For reasons I don't exactly recall (something to do with PJSIP a year and a half ago) the ports were set to 5062 and the phone was set to 5060. Also, it turns out there were two places the port needed to be changed from 5062 to 5060 in the PBX, once that was set correct things started to improve.

Not exactly sure why the fail2ban triggered. I know the user id and password were correct when I was setting it up. But I did, while troubleshooting, change the user id and server ip to another identical pbx, perhaps, during this change, I bumped the original server with the wrong user id too many times while making changes.

Then I had to change the port at Skyetel because it too was 5062.

Everything is on port 5060 now and it is singing right along! One phone, two different systems just like your video clip.

@JaredBusch said in how to push 3rd party software updates to domain clients?:

@scottalanmiller said in how to push 3rd party software updates to domain clients?:

@Dashrender said in how to push 3rd party software updates to domain clients?:

Chocolately - I use the their package choco-upgrade-all-at-start. This will schedule choco to upgrade at every reboot.

There's another package choco-upgrade-all-at that defaults to 4 AM update daily.

You can just make a Scheduled Task,too.

This does that for you.

Yeah, pretty cool. Just if you already have a Scheduled Task process or whatever.

You could look at changing the autosave to 1 min instead of 10.. no idea how that will impact the system.

@NikoleJennes said in Looking for a Remote Web access: Remote Workspace replacement:

Dont even think about onedrive bro, just dont ever install it on your pc

I never suggested OD, I suggested OneDrive for Business... as JB already mentioned, they are supposedly the same on the backend now.. but still.. the old OD is not what I was suggesting.

@scotth said in O365 down for us:

Our O365 is down. I'm getting text blasted. AAaaaAahhHHhhh

Simple Fix: Zoho

😉

There are multiple options, but by far the most likely is what they are saying - that there is something whether a traffic shaping rule, a bad packet size setting, a VPN config, or a proxy / web handler that is mangling things.

If you know that none of those things exist, then TeamCity must have some weird configuration that interacts poorly with the settings of the VPN tunnel that another proxy does not. But that's very, very unlikely.

Can you try moving the IP address of TeamCity to match that of the proxy that works? That's a quick test that, if it gets suddenly fast answers some questions, but if it remains the same tells us nothing.

@DustinB3403 said in MS DART and M.2 NVME Drives:

But if the M.2 is completely dead it won't power up at all.

Right, that's what it is booting from to run DART.

@NashBrydges said in NGINX Just Stop Working:

Wanted to close the loop here. I've recreated the server and refetched all my certs. It's been working well for the last 2 days. Fingers crossed it stays that way.

Thanks to everyone who participated!

Ah, doing things the DevOps way. When it doubt, nuke and rebuild.

@JaredBusch said in UniFi Protect G3 Instant - Unboxing, review, and comparison:

@dbeato said in UniFi Protect G3 Instant - Unboxing, review, and comparison:

@DustinB3403 I gotta tell you, you read way too much into things to the point that is getting ridiculous.

No, he's just an all around dick.

At least I'm keenly aware of how I'm perceived.

@JasGot said in HashCast:

HashCast?

I have always been using HaveIBeenpwned https://haveibeenpwned.com/ but looks similar.

@VoIP_n00b said in DNS Server Lockdown:

@Dashrender Then you just block those domains and/or IP addresses as well as port 853 (DNS-over-TLS) and 784 (DNS-over-QUIC)

Cloudflare: https://developers.cloudflare.com/1.1.1.1/dns-over-https/cloudflared-proxy
Google: https://developers.google.com/speed/public-dns/docs/doh
Quad 9: https://www.quad9.net/doh-quad9-dns-servers/

Browsers fall back to regular DNS when DOH, etc are blocked.

Interesting Read Here: https://www.zdnet.com/article/dns-over-https-causes-more-problems-than-it-solves-experts-say/

That article is terrible. It has a few OK points, but it's horribly written, and absolutely slanted against DOH. I just wish they would have written it from a neutral POV.

@Eatsshootsandleaves said in Setting up a MS 2019 PKI for secure Wifi access - will this break anything in domain??:

Newbie to Certificate Services and while everything in our domain fine I need to refresh our Wifi setup to be more secure and using certs with EAP-TLS seems to be the best way to go.
Introducing a PKI into our domain is there any chance this may break existing functionality - I only want this PKI for Wifi nothing else. Thanks guys

No, you can bring up a PKI such as AD CS without any impact to existing infrastructure.

Once you distribute certificates, and require them for WiFi connection as in your example, only then will it have an obvious impact.

Of course there are many variables at play, but generally speaking, without any major or crazy numbers in any aspect, it won't mess with anything simply by creating a PKI.

Just make sure to use proper planning in every aspect. It's a PITA to revoke, remove, and redistribute certs because you didn't plan for something and need to make a change.

I'm on 0.7.47, I don't see a problem w Windows machines?

@stacksofplates said in Nginx Config Need to Point Folder Reference Without Stripping:

Couldn't you just use a rewrite for this? Not at a computer but like

rewrite ^/api /api

Maybe, I'll try it!

Sangoma has relased an updated (and likely final) statement.

https://www.sangoma.com/press-releases/sangoma-technologies-provides-update-on-ransomware-attack-expects-no-material-impact-on-sales/

The second paragraph has the relevant information from an IT point of view.

00a7b475-033f-4db6-8311-b115d6bb0a47-image.png

@JasGot said in Upgrading Ubuntu 18.04 and see this:

@scottalanmiller Probably. I allowed it to install, and since there were no containers, I let it go. It finished with joy.

Should be fine, even if there are containers, it just changes how that package is deployed.

@gjacobse said in UBNT; Notification of possible unauthorized access.:

I just received this notice:

EF29626D-4F3D-4F1C-A7A1-3EE9C1122BFE.jpeg

I got this email as well. you beat me to it.

@JaredBusch that's usually how shit talking works....