Didn't we have one of these threads last year?

tags - please?

@Dashrender said in Comparing a Small Server and a Printer:

The waiting for a response on those LCDs and on the web interface I'm assuming are CPU/RAM bound.

Web, maybe. LCD very unlikely. Can't be RAM bound, if that was a case you'd need swap space but printers don't have hard drives and swap space. So RAM is either enough or not enough, not fast or slow like a desktop.

CPU is possible, but displaying an LCD screen at full speed is trivial for a 486 or an M68000. So it's safe to assume that that is no the case. Web? Possible. But does the web interface impact using the product?

@Dashrender said in Is there a thing as to much security:

@IRJ said in Is there a thing as to much security:

This sounds pretty standard to me.

This is exactly the kind of tasks I would expect PC support team to do. This is pretty standard in an enterprise environment. Your environment may be a bit smaller than the typical enterprise, but still this stuff is pretty standard nowadays.

NAC is standard in enterprises? I don't work in one, and haven't in 20 years... so maybe that's the case.

I'd guess it's more likely that you'd have a LANLess setup and competely distrust the local LAN, seems a lot easier. But that's likely harder to secure when it comes to using AD.

It's all dependent on requirements. I worked in one where it was required and am in one where it isn't now. If it's ISE prob the reason for moving it is because it doesn't have the certificate when PXE booting so it can't verify. However you can override that with MAC assignments.

Congrats

@DustinB3403 said in Looking to create a 20TB RAID5 volume with SSD drives in an R720:

@dave247 said in Looking to create a 20TB RAID5 volume with SSD drives in an R720:

I'm thinking I may just go with 4 of these drives: https://www.newegg.com/micron-5210-ion-7-68tb/p/1Z4-00CB-00035

4 x 7.68TB SSD in RAID10 for 15.36TB of storage

It's SSD, use RAID5 or 6. RAID10 is going to be really expensive per GB.

yeah I just realized that... if I did 4 x 7.68TB SSD drives in a RAID5, that would give me 21TB. This might be my best option!

I like the idea of the web application firewall, and that looks like something that can setup on the same VM as what would be running Nextcloud, etc.

@JasGot said in E-911 When moving to VoIP?:

@Dashrender said in E-911 When moving to VoIP?:

yeah, in this case - if their old PBX doesn't support it - they will be required by law to get a new PBX.

Fortunately, the rules are pretty forgiving for a lot of businesses. (under 7,000sq ft).

I had to inquire about my office - we are 14,500 sqft, definitely have to split the building - at least there is a good dividing line here.

Our other building has two floors, so I'll have to split them by floors.

https://groups.google.com/forum/#!topic/wazuh/qTwOj_MQHNU

Do you have access to any remote management tools like TeamViewer, ScreenConnect, Salt, Ansible, etc.?

@JaredBusch said in I like Edge chromium so far......:

@black3dynamite said in I like Edge chromium so far......:

You can install via Chocolatey.

does this clutter up chocolatey though? because the official down load is a replacement for Edge with Credge and updates come from Windows update like normal.

Yes it would clutter up chocolatey just like Google Chrome or any other applications that can auto updates itself. Also chocolatey uses the MicrosoftEdgeEnterpriseX64.msi installer just like Google Chrome MSI file.

After it's installed, you do see it shows up in Program and Features unlike the installer from https://www.microsoft.com/en-us/edge.
7efd9e9f-7397-4830-8849-e86344c59315-image.png

@ing-joserivera26 said in VitalPBX - exts can't call each other:

@JaredBusch On Next major versions of VitalPBX, the main protocol will be PJSIP instead of SIP, due as you know SIP has been totally deprecated.

Looking forward to that!

I asked if they really had customers who would pay that amount. They said hundreds... Ummm ok, not thousands? Really?

OK peoples. I got this working both ways: LAN > ZT and ZT > LAN. The trick was to configure a source NAT, which you can only do via the command line. Along with destination NAT, a bidirectional NAT is setup. BOOM! Here's my config:

firewall { all-ping enable broadcast-ping disable group { network-group LAN { description "Switch LAN" network 192.168.50.0/24 } network-group Upstream { description "Upstream Network" network 10.1.1.0/24 } network-group ZeroTier { description "ZeroTier Network" network 10.147.20.0/24 } } ipv6-receive-redirects disable ipv6-src-route disable ip-src-route disable log-martians enable receive-redirects disable send-redirects enable source-validation disable syn-cookies enable } interfaces { ethernet eth0 { address 10.1.1.10/24 description "Local Upstream" duplex auto speed auto } ethernet eth1 { description Local duplex auto speed auto } ethernet eth2 { description Local duplex auto speed auto } ethernet eth3 { description Local duplex auto speed auto } ethernet eth4 { description Local duplex auto poe { output off } speed auto } loopback lo { } switch switch0 { address 192.168.50.1/24 description Local mtu 1500 switch-port { interface eth1 { } interface eth2 { } interface eth3 { } vlan-aware disable } } zerotier ztklh3kllj { description ZeroTier } } protocols { static { route 0.0.0.0/0 { next-hop 10.1.1.1 { description "Default Gateway" } } } } service { dhcp-server { disabled false hostfile-update disable shared-network-name LAN2 { authoritative enable subnet 192.168.50.0/24 { default-router 192.168.50.1 dns-server 192.168.50.1 lease 86400 start 192.168.50.38 { stop 192.168.50.243 } } } static-arp disable use-dnsmasq disable } dns { forwarding { cache-size 150 listen-on switch0 name-server 10.1.1.1 } } gui { http-port 80 https-port 443 older-ciphers enable } nat { rule 1 { description "ZeroTier DNAT" destination { group { network-group ZeroTier } } inbound-interface ztklh3kllj inside-address { address 10.1.1.10 } log disable protocol all type destination } rule 5000 { description "ZeroTier SNAT" log disable outbound-interface ztklh3kllj outside-address { address 10.147.20.1 } protocol all source { group { network-group Upstream } } type source } } ssh { port 22 protocol-version v2 } unms { disable } }

@wrx7m said in Microsoft Windows Default Permissions for Fixed and External Drives:

@black3dynamite said in Microsoft Windows Default Permissions for Fixed and External Drives:

And I noticed that they are different on Servers and Desktops

I had no idea they would be different.

On the server one of the permissions that stands out for me is the CREATOR OWNER (full control / subfolders and files only.
From what I can tell, when a user creates a folder on the root drive, that person will be given the permission of full control of that folder only and then CREATOR OWNER on that folder is also added with full control of subfolders and files only.

But for the desktop, on the root drive you are not given any full control of that folder.

[Solved]

After re-configuring the Server setup to run ESXi via USB internal (for now) and completely CLEARING each drive (because I installed ESXi on the RAID 5 array initially and if you do that, it ruins everything and your drives disappear), I re-allocated the drives to RAID 5, and re-installed ESXi DELL OEM 6.7 Update 2 to the USB on host. I was able to build the Guest and everything worked fine except Network Shares. I was back at square one on that front. Turns out it was a bad switch (Netgear 8 port) the host was plugged in to.

@DustinB3403 said in Videowall system:

@wrx7m It's just a SBC with HDMI out that allows you to use software to setup your scene. It'll take a few different files (but they need to be stored locally or on an SD card) for the unit.

It's purely a LAN based device. It can work, but you really need to understand where it's limit is.

They have their cloud service that replaces the local software. Also, it is designed for more than just LAN. At least, since the middle of last year, when I got one.

@JaredBusch said in Bash script to manage file directory by size:

@JaredBusch THis is what it looks like on a run

journalctl -u backup-cleanup -f -- Logs begin at Wed 2020-01-08 22:25:52 CST. -- Jan 31 08:00:39 ftp.domain.local file_cleanup.sh[37655]: Executing cleanup of backup files located in /home/toptech/FolderA. Jan 31 08:00:39 ftp.domain.local file_cleanup.sh[37655]: Checking 20200131, we found 4 files. We are keeping this date, currently we have 1 dates saved. Jan 31 08:00:39 ftp.domain.local file_cleanup.sh[37655]: Checking 20200130, we found 4 files. We are keeping this date, currently we have 2 dates saved. Jan 31 08:00:39 ftp.domain.local file_cleanup.sh[37655]: Checking 20200129, we found 4 files. We are keeping this date, currently we have 3 dates saved. Jan 31 08:00:39 ftp.domain.local file_cleanup.sh[37655]: Checking 20200128, we found 4 files. We are keeping this date, currently we have 4 dates saved. Jan 31 08:00:39 ftp.domain.local file_cleanup.sh[37655]: We have already found 4 full sets of backup files. Removing backup files dated 20200127.

That is nice and clean. Easy to integrate with SIEM if you'd like as well.

I solved this by rekeying the *.domainname.com wildcard SSL to *.local.domainname.com.

@black3dynamite said in Mouse Issues on Windows 2019 on KVM Through Virt-Manager:

EvTouch USB Graphics Tablet is the default when selecting Server 2019 config template.

That's the one.

And the template didn't load properly when we selected it! It kept going back to Alpine!

@thwr said in Disk Manager with No Search in Windows 10:

@dbeato said in Disk Manager with No Search in Windows 10:

@scottalanmiller said in Disk Manager with No Search in Windows 10:

@dbeato said in Disk Manager with No Search in Windows 10:

@scottalanmiller said in Disk Manager with No Search in Windows 10:

@Obsolesce said in Disk Manager with No Search in Windows 10:

@scottalanmiller said in Disk Manager with No Search in Windows 10:

So in our situation, we had to open PowerShell and run diskmgmt.msc and it was able to open it. You have to have the full name.

This came about because someone installed some "Classic Shell" hijack software that removes all of the Windows Vista and later functionality to find tools. So the system is almost entirely broken.

You could also hit the "Windows" key + r, then type that in the run box and hit enter.

Only if you have the full name. diskmgmt.msc will work that way, diskmgmt will not. We tried.

Correct. I am surprised this became a post. However I understand with the whole classicshell situation.

Yeah, like I never have to know the whole name. I figured it was diskmgmt.exe. Nearly every guide only has it without the extension. And I've never had to type it out before.

Yeah, most applications for Windows are .msc or .cpl that control things as below:

Services - services.msc
Programs and Features - appwiz.cpl
Disk Managment - diskmgmt.msc
Computer Management - compmgmt.msc

For Control panel you would open just "control" and that's it so it can be inconsistent.

And so forth.

I usually just start mmc.exe. Three simple characters to type (or seven), no need to remember names (I used to know them, but...) and access to all mmc's in one place.

Well we can do all that, I am just saying after a while regardless of the OS you get to find your own shortcuts. Problem with MMC is that you need to do like 5 mouse clicks to get to something.