There are multiple options, but by far the most likely is what they are saying - that there is something whether a traffic shaping rule, a bad packet size setting, a VPN config, or a proxy / web handler that is mangling things.

If you know that none of those things exist, then TeamCity must have some weird configuration that interacts poorly with the settings of the VPN tunnel that another proxy does not. But that's very, very unlikely.

Can you try moving the IP address of TeamCity to match that of the proxy that works? That's a quick test that, if it gets suddenly fast answers some questions, but if it remains the same tells us nothing.

@DustinB3403 said in MS DART and M.2 NVME Drives:

But if the M.2 is completely dead it won't power up at all.

Right, that's what it is booting from to run DART.

@NashBrydges said in NGINX Just Stop Working:

Wanted to close the loop here. I've recreated the server and refetched all my certs. It's been working well for the last 2 days. Fingers crossed it stays that way.

Thanks to everyone who participated!

Ah, doing things the DevOps way. When it doubt, nuke and rebuild.

@JaredBusch said in UniFi Protect G3 Instant - Unboxing, review, and comparison:

@dbeato said in UniFi Protect G3 Instant - Unboxing, review, and comparison:

@DustinB3403 I gotta tell you, you read way too much into things to the point that is getting ridiculous.

No, he's just an all around dick.

At least I'm keenly aware of how I'm perceived.

@JasGot said in HashCast:

HashCast?

I have always been using HaveIBeenpwned https://haveibeenpwned.com/ but looks similar.

@VoIP_n00b said in DNS Server Lockdown:

@Dashrender Then you just block those domains and/or IP addresses as well as port 853 (DNS-over-TLS) and 784 (DNS-over-QUIC)

Cloudflare: https://developers.cloudflare.com/1.1.1.1/dns-over-https/cloudflared-proxy
Google: https://developers.google.com/speed/public-dns/docs/doh
Quad 9: https://www.quad9.net/doh-quad9-dns-servers/

Browsers fall back to regular DNS when DOH, etc are blocked.

Interesting Read Here: https://www.zdnet.com/article/dns-over-https-causes-more-problems-than-it-solves-experts-say/

That article is terrible. It has a few OK points, but it's horribly written, and absolutely slanted against DOH. I just wish they would have written it from a neutral POV.

@Eatsshootsandleaves said in Setting up a MS 2019 PKI for secure Wifi access - will this break anything in domain??:

Newbie to Certificate Services and while everything in our domain fine I need to refresh our Wifi setup to be more secure and using certs with EAP-TLS seems to be the best way to go.
Introducing a PKI into our domain is there any chance this may break existing functionality - I only want this PKI for Wifi nothing else. Thanks guys

No, you can bring up a PKI such as AD CS without any impact to existing infrastructure.

Once you distribute certificates, and require them for WiFi connection as in your example, only then will it have an obvious impact.

Of course there are many variables at play, but generally speaking, without any major or crazy numbers in any aspect, it won't mess with anything simply by creating a PKI.

Just make sure to use proper planning in every aspect. It's a PITA to revoke, remove, and redistribute certs because you didn't plan for something and need to make a change.

I'm on 0.7.47, I don't see a problem w Windows machines?

@stacksofplates said in Nginx Config Need to Point Folder Reference Without Stripping:

Couldn't you just use a rewrite for this? Not at a computer but like

rewrite ^/api /api

Maybe, I'll try it!

Sangoma has relased an updated (and likely final) statement.

https://www.sangoma.com/press-releases/sangoma-technologies-provides-update-on-ransomware-attack-expects-no-material-impact-on-sales/

The second paragraph has the relevant information from an IT point of view.

00a7b475-033f-4db6-8311-b115d6bb0a47-image.png

@JasGot said in Upgrading Ubuntu 18.04 and see this:

@scottalanmiller Probably. I allowed it to install, and since there were no containers, I let it go. It finished with joy.

Should be fine, even if there are containers, it just changes how that package is deployed.

@gjacobse said in UBNT; Notification of possible unauthorized access.:

I just received this notice:

EF29626D-4F3D-4F1C-A7A1-3EE9C1122BFE.jpeg

I got this email as well. you beat me to it.

@JaredBusch that's usually how shit talking works....

@Dashrender said in Best practice security updates linux servers?:

saying Well - Johnny is just better employee than you, so I choose to pay him more, that isn't going to make people happy, it will likely make them less happy...

You are looking at it from the employer's perspective. Of course it doesn't help the employer. It helps the employee when they can see what X work is worth. If employee 1 makes X for a job, and employee 2 wants to know their own value, they have something to go on. If you don't know what others are paid you have almost nothing to go on.

Remember on Spiceworks when loads of people would claim that $65K was the IT industry cap? Imagine if people (and companies) were able to repeat that without anyone speaking up! People would surmise that if $65K is the top for a CIO, that a system admin must cap out at $50K and a helpdesk tech at $9/hr!

But in the real world, we know that CIOs make well into the seven figure range, admins can get well into the multiple six figures. Even good help desk leads can hit six figures. If we didn't have others to compare against, it's easy to see people misunderstanding the scope of the industry by an order of magnitude.

@bransona said in MS-CHAP on Ubiquiti EdgeRouter:

@scottalanmiller is correct. I have Edgerouter 2.0.9 and it STILL requires PAP in the Windows policy. Under Config Tree, there is no way to make the router use MSCHAP or MSCHAPv2 instead of PAP (cleartext). I went to notify Ubiquiti hoping they can potentially have this included in another firmware release soon, but Ubiquiti Support was apprised of this 5 years ago! https://community.ui.com/questions/Encrypted-Radius-Supported/7857b119-91d8-4365-8c2a-8c21de0937a4

Yup it has been a big issue for a while now on the EdgeSwitches too.

@JaredBusch Thank you for that information 🙂

I'll get pictures of the other side tomorrow. those buildings are locked up. I only have a key to the office.

fiber_deploy_2.png

@krzykat said in Photo Backup And Sharing:

Also - get rid of the duplicates of different sizes, such as when you send a photo over your phone to a friend, it makes a copy that is resized.

That's not a dupe, but a cache. Typically you want those kept so that it doesn't have to recalculate each time. But not always. But that would be a different database mechanism rather than a dupe finder.