Everything in the home lab is being upgraded tonight.

@JaredBusch said in SIP Extension for Maintenance Staff in Noisy Environment:

@scottalanmiller said in SIP Extension for Maintenance Staff in Noisy Environment:

@pmoncho said in SIP Extension for Maintenance Staff in Noisy Environment:

@JaredBusch said in SIP Extension for Maintenance Staff in Noisy Environment:

I have one of these.
https://www.amazon.com/Sennheiser-SDW-5066-507024-Double-Sided/dp/B07P68C84D

The noise cancellation works really good. I don't know about factory floor good, but real good.

Do you find the (roughly) 500' range to be accurate? I only need 100' but with a few walls in between.

Walls hit Bluetooth pretty hard.

The model I linked is DECT.

Oh okay, those work even better.

@Doyler3000 said in Proxmox in 2022:

I've moved most of our important stuff onto Proxmox over the last 2 to 3 years. It's been great.
I've been using the PBS as well for the backups - it's so much better than manually doing full backups of VMs (which was the case with KVM and it's tools).

So thumbs up for Proxmox from me.

We've been using PBS too for backups more recently.

@scotth yeah, in the past (maybe the long past?) the iLO was a self contained board with its own CPU and RAM!

@Dashrender said in So You Lost Your ERP MSP?:

@scottalanmiller said in So You Lost Your ERP MSP?:

@marcinozga said in So You Lost Your ERP MSP?:

Most software have help -> about menu option and it should list software vendor.

If you can log in 😉

But we know the ERP is Oracle NetSuite. But like everyone, they went through a reseller and lost the more important contacts.

Literally no one has any emails on that at all? have all the people in the company who were involved in that project left the company and their email has been deleted?

Correct. The people involved quit and the powers that be decided to just delete their accounts rather than manage them in some way. So all contact is lost.

@Fredtx said in Multiple Tombstoned DC's:

@JaredBusch said in Multiple Tombstoned DC's:

Mesh of multiple locations like you have is simply asking for crypto to hit all the things.

Exactly what I've been telling them.

VPNs and AD the same. The mesh "should" not pose any threat because there should be nothing exposed over the mesh. But given the rest of the design, we can safely assume there are security holes everywhere and they are just trying to open more.

These are the flags that hackers look for for finding easy targets.

@Dashrender said in Wix Form "Harry Potter" Issue:

@scottalanmiller said in Wix Form "Harry Potter" Issue:

@garak0410 said in Wix Form "Harry Potter" Issue:

@scottalanmiller said in Wix Form "Harry Potter" Issue:

@garak0410 said in Wix Form "Harry Potter" Issue:

@scottalanmiller said in Wix Form "Harry Potter" Issue:

Not familiar with Wix at all, I'm afraid. They don't have a good reputation. The new GeoCities.

Well it does help me as I am still in a SOLO IT shop after 11 years...don't have time to code a website...

Is Wix saving you time? LOL

You don't code websites, you use tools like Hugo or Gatsby if you need something simple, or WordPress if you need a CMS.

One of the reasons those tools are recommended for businesses is the time savings.

It might actually help now, there's every possibility that it might actually be faster to move to something else than to troubleshoot Wix where you are dependent on their support.

Well, it also helps that the owners daughter wants control of website too so this is another reason I did Wix about 5-6 years ago.

That makes sense. WordPress is typically used specifically for that too, but doesn't tie you in to a vendor-only supported product where the host owns the site that you make. WP keeps you from being able to be extorted for support or whatever. That's its purpose (to allow easy editing by a staff of people.) Since WP is the best known tool, it's the one that best allows random third party people to be involved.

Definitely seems odd to pick Wix over WP.

Maybe they already knew it (the daughter). Wix is definitely my #1 platform to avoid. It's been the bane of the web since its inception. Just a totally shit product and lots of people avoid companies that host with it as being similar to using hotmail email instead of your domain.

try putting the switches in the 'arguments' field of the Action tab.

b4560553-30a6-44aa-9926-70959d3ce835-image.png 1.png

@scottalanmiller said in Migrating to xxxxx:

I have a similar situation. There's no more panic. Just "let me do my job and get on with it." People sometimes see that as not taking it seriously when really, I'm just that much more on top of things.

I've definitely walked into a few crisis that way with my old boss. Actually those were the best of work conditions - the confidence to just roll up the sleeves and get shit done. If only more of my life was like that.

Thanks everyone for the input.

I had another play with rclone and got it to work, looks quite useful.

@Dashrender That's what I have to play with as I'm not sure at the channel level how permission inheritance works

Sorry about dragging this old topic back but, it is probably the most relevant to what I'm looking for.

I have been trying to get the ZeroTier FlowRules to work but must be doing something wrong. My ruleset is very close to what @JaredBusch has but, the ZeroTier nodes don't work as expected.

When I leave the final accept statement, ZeroTier passes all traffic. When I comment out that last accept all traffic stops.

# Allow only IPv4, IPv4 ARP # drop not ethertype ipv4 and not ethertype arp # Drop IPv6 Ethernet frames. # and not ethertype ipv6 ; # # # Uncomment to drop non-ZeroTier issued and managed IP addresses. # # This prevents IP spoofing but also blocks manual IP management at the OS level and # bridging unless special rules to exempt certain hosts or traffic are added before # this rule. # #drop # not chr ipauth #; accept ipprotocol tcp and dport 80 ; # Accept anything else. This is required since default is 'drop'. accept;

Any help on what I'm doing wrong will be greatly appreciated.

@WrCombs said in vLANs random question.:

@dashrender said in vLANs random question.:

@scottalanmiller said in vLANs random question.:

@WrCombs said in vLANs random question.:

@scottalanmiller said in vLANs random question.:

@WrCombs said in vLANs random question.:

@scottalanmiller said in vLANs random question.:

@WrCombs said in vLANs random question.:

@dafyre said in vLANs random question.:

The short answer is you would get the Router to route between the two VLANS, and fix it so that only the Payment devices have access to the internet.

if this was an on prem system, that would world. but this is a cloud system so both need access to the internet..

Actually that makes it make more sense. It's minimal value, but that doesn't mean zero. It will improve security and simplify audits if they are both SaaS connected devices like that. Not a big deal, but not bad, either.

So how would you make that work? just using firewall rules, to let the 2 talk to pull transaction information?

If they talk only to the hosted apps, the intercommunications should be on the server, not the client. Is that not correct?

If you need devices on two different LANs (vLANs are just LANs without physical separation) then communications between them is always through a router, and routers are firewalls. So first you have to build a route, then block traffic, then allow the traffic that you want.

in a "normal" IT system, that would be the case, as I'm sure you know.
POS however, the Pin pads talk directly to the Register to pull that transaction data to the Pin Pad - otherwise the pin pad wont know how much to charge the credit card -

Then you need to connect the two VLANs, effectively defeating the purpose. It's not entirely defeated, it is still a secondary firewall but only replicating the vastly more important local firewall.

ROFMAO - like the terminals have firewalls - HAHAHAHAHAHA

on this particular system (which I am the Admin for) Windows firewalls are required to stay on - for all 3 options no matter what.

See!! Firewalls!

@Pete-S said in What do you use as an identity provider?:

@scottalanmiller said in What do you use as an identity provider?:

@Pete-S said in What do you use as an identity provider?:

You mean if you paid for M365 then you're already using Azure AD as your identity provider in which case JumpCloud serves no purpose?

For one thing, Azure AD is lacking connectors for normal things like Linux desktops. Doesn't even WORK in our environment or most of our customers, almost none. At most it works for SOME workloads.

There is another factor as well, which favors an independent identity provider and authentication. When you have everything in one place, you give too much power over your business to a single company. If you have a problem with Microsoft (or Google) all other services will be useless if you tied everything to Azure AD (or Google Identity Services).

Also changing "Office" apps from Microsoft to Google or to Zoho or whatever you might fancy will have far reaching implications. So less freedom to pick whatever is best for your company.

Excellent points.

@WrCombs Thanks!

@gjacobse said in InfoPath Support:

I don't know all of what is needed - as I'm not included in that circle. But I have been told that one of the littlest things needed is changing an email address. That simple. Change from this person to another person (should be a distro / security group to ....never mind).

We need -the quick fix- so that we can address the point that it's EOL and only going to worsen with support falling off.

make a rule in the the email system that checks for something from that machine and forwards it to the desired location... might be a doable workaround for now.

I've been using the Grandstream WiFi phones
http://www.grandstream.com/products/ip-voice-telephony/wifi-cordless

for a year and a half - they have been working well for us. No roaming issues that have been reported either.