@JaredBusch said in Force USB encryption Windows and Mac:

@Obsolesce said in Force USB encryption Windows and Mac:

@JaredBusch said in Force USB encryption Windows and Mac:

@Obsolesce said in Force USB encryption Windows and Mac:

Another solution for Macs will be required. It's not uncommon to have multiple solutions in place to cover different platforms

That is useless as it means the encrypted media is useless between macOS and Windows.

That's not an issue. There is no requirement to transport data between Mac and Windows devices on USB drives.

The point of wanting to use USB media is for portability. Otherwise, you simply disable it.

I don't know how many users are sticking data on a USB drive from a Mac, then giving it to someone else or marching it over to a Windows device, or vice versa, but if that's the case, there are ways to make it work.
https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-to-go-faq

@Pete-S said in Custom web apps for SMB:

Also how big of an SMB are we talking about? A company with 10 employees is very different from one with 100 employees.

The cost of something custom is the same but a larger company can make more use of it and as such it creates more value for them, hence they are more inclined to invest in it.

I've developed a custom application when working for a 100+ employee company, so that's kind of where my mind heads.

@DustinB3403 said in Syncing massive amounts of changing data to BackBlaze B2 via Linux:

@Pete-S At my workstation I'm getting 225Mbit/s down and 155Mbit/s up (clearly not symmetrical there. . .) but not bad either considering I have nothing special configured for my workstation.

On a second test I noticed this A connection of 152.8 Mbps upload would backup 1,650 GB in a day

So this very well could be feasible to do.

Yes, that's not too bad. It could work. As @dafyre and other mentioned you should give it a try.
$.005 per GB is $5 per TB. So get an account and upload 2TB of random data to see how long it takes. Only going to cost you 10 bucks to find out.

@WLS-ITGuy said in GPO question:

@WLS-ITGuy

alt text

Thanks everyone for the assistance! I forgot that I had disabled the damn thing in the beginning of all this even though I told @dbeato that in a PM.

I wonder what was setting it to 30 days then? Perhaps someone in the past set it to 30, then the GPO was disabled, and the setting just stuck until it was changed again and enabled.

@JasGot said in ChromeBook Tablet with LTE?:

So I started looking for information on an Android tablet could be re-initialized with the Chrome OS at a later date. Not much on that topic out there...

Different hardware, unlikely to be happy trying to do that.

@Danp said in Managing spam posting:

Maybe they're enjoying the extra traffic. :man_shrugging:

23b3e1d4-ad1e-482c-b4ce-84bfe89579af-image.png

@dafyre said in PATH Error with TimeScaleDB-Tune on Fedora 30:

then why are you even using it?

Capacity Planning, for example.

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/logical_volume_manager_administration/lvm_cache_volume_creation

LVM has some of that stuff, too.

@BraswellJay said in FreePBX : Skyetel inbound call "Rejecting unknown SIP connection ...":

Go into your @Skyetel endpoint setting and make sure it is talking to your PBX on port 5160 also.

9e3c2ef7-462b-49f6-ae9f-036c302f4b68-image.png

This seems likely to be my issue then. I had left it at 5060 in the skyetel portal as you showed above and initially had it port forwarded to 5060 on the FreePBX. When I realized that I had set port 5060 up as the chan_sip port instead of the pjsip I changed the firewall to forward 5060 to 5160 on the FreePBX. I'll try making the change in the Skyetel portal directly to 5160 and just direct port forward 5160 in the morning.

As @JaredBusch figured, this fixed my issue. Once I made this change I had two way audio and no call's being taken down prematurely.

Audio issues are always port related. Though mostly because firewalls are fucking things up.

@Dashrender said in Domain Planning: Network shares or ,..:

@dafyre said in Domain Planning: Network shares or ,..:

@notverypunny said in Domain Planning: Network shares or ,..:

Does NC allow exposure of their "file shares" as smb? If you have users that can't / don't want to use a browser-based access they can always mount it in windows explorer via webdav. Alfresco allows (allowed?) access via both, but the last time I played with it the performance was meh, which I attributed to it being built on java...

You can mount NextCloud into a drive letter or folder using WebDav.

The question does become the aforementioned performance issue (if there is one).

I wonder how file locks are handled when using WebDav?

There are a few topics elsewhere here where file locking and cloud hosting were discussed. You do have to give up what we have all come to appreciate in file locking. Here is a response in one of those other topics I spoke about:

@scottalanmiller said in file sharing in the 21st century:

@Donahue said in file sharing in the 21st century:

I am aware of that. It's online locking that I am after. Though, I will concede that any locking scheme has to plan for both online and offline. I like sync because of local performance and offline availability, but it really feels like it is best for non shared files. When you add multiple users into the mix, almost everything goes out the window, especially when and if they go offline.

Everything is best for non-shared files 🙂

SMB shines at "always online, always nearly local" files because it handles offline so poorly. It's a balance. To handle offline or very distant (e.g. high latency) networks well, you have to sacrifice locking.

The benefit (to me) of setting this up like this means that your inbound routing is all just 10 digit numbers.
80b943b7-bc27-4b89-82a3-498dec52b007-image.png

Roflol

New-PSSession -ComputerName Host1
New-PSSession -ComputerName Host2

Get-PSSession will show all sessions you created.

Use Enter-PSSession to enter one of your opened session

@IRJ said in cloud-init verification or logs?:

So I checked journalctl --boot which has a very large output. However I did find some helpful information about cloud-init. I got to see what Amazon does in their portion of the script, and I got to see when packages were installed from my cloud-init. However other commands such as sed or echo did not show up anywhere. Although I can confirm them being run.

This kind of helps, but it isn't 100% what I want.

Ah ok. That's interesting that they don't show up. It might just be stderr for the script portion then? Idk.

@scottalanmiller said in My Misadventures with Cloud At Cost:

I always recommend CloudFlare, it's the best DNS host I have found.

I am more of a ClouDNS + BunnyCDN fan

If this is a terminal server you'll need to create a user based GPO then enable loopback processing so that a user GPO can apply to a computer.

using ssh to tunnel rdp is quite handy as well.

@DustinB3403 said in Question - how to use tar to compress multiple top level folders recursively into discrete zip files:

Supposedly tar -C /Volumes/Parent/Child/Target-folder -cvf Compressed.zip SelectedDirectory works. . . let me test that.

Okay so that does work, just is a pain in the rear to have to do manually.

So how we did it the last place I worked. We used a mix of X2Go, X-11 forwarding/MobaXTerm, and RDP. It depended on the user as to how they wanted to do it.

RDP gave them a full desktop since X2Go couldn't any longer on GNOME 3. X2Go gave them just applications from a menu to pick. People who were used to the cli used X-11 forwarding because it's what they were used to.

@mmicha said in Cyber Liability Insurance:

Just curious what others thoughts and take it on this new form of insurance. Are most starting to carry?

No, several reasons...

Insurance for something like this means that smart, secure, backed up companies pay for companies that don't protect themselves. So if you are competent, you get screwed. On average, the insurer makes money. That means that on average you don't just pay for the damages that happen, but for their profits on top of them. Those that carry insurance are much higher profile targets than those that do not as there is so much more to potentially gain. The likelihood of getting paid even when something happens is insanely low.

For the average company, cyber insurance does more harm than good.