Best posts made by dbeato

Check HighFive
https://highfive.com/software/integrations
Logitech
https://www.logitech.com/en-us/video-collaboration/partners.html

@wrx7m said in Pi-Hole Upstream DNS Providers:

@dbeato said in Pi-Hole Upstream DNS Providers:

I use CloudFlare, Google and OPENDNS. I have need to do this when CloudFlare at some moments stops working.

How often does Cloudflare stop working?

I get high spikes on CLoudflares from time to time and DNS stops working randomly so I only find out when I had Cloudflare as my only DNS. Since then I use two or more DNS providers.

@wrx7m I have not found a way to do so, you can create a folder in Outlook to manage it from there. Example here
http://www.expta.com/2015/02/how-to-add-access-to-office-365-eop.html

You also might be able to unify the domains in one Office 365 account instead and have two domains in it.

@scottalanmiller Just to be clear though in the now the can fork posts for this same reason. (Although semi-unrelated in a way to this topic).

You need to setup the EC2 instance with a WAN Dynamic IP (Elastic IP address). Then just go through the Internet gateway and have the security group blocking incoming traffic over the Dynamic IP provided to the EC2 instance.

@wrx7m said in Moving from O365 E3 to Business Premium:

@davide-bonavita said in Moving from O365 E3 to Business Premium:

The mailboxes and their email will migrate automatically (after some minutes of panic where you can't see any mailbox during the migration)

I have switched some mailboxes from BP to E1 and vice versa and haven't really noticed anything. It is not with active users, so I can't say for sure. Test it out, but still do it after hours.

It only takes a license change, the mailbox will continue to be available. Just a licensing change.

@Pete-S said in Content filtering with granular settings:

What's the problem? Just put the workstation groups on different vlans and route their traffic differently. Block either in firewall, http proxy or dns.

Exactly what I am thinking even if it is Squid. @CCWTech what firewall do you have?

@CCWTech said in Content filtering with granular settings:

@dbeato said in Content filtering with granular settings:

@Pete-S said in Content filtering with granular settings:

What's the problem? Just put the workstation groups on different vlans and route their traffic differently. Block either in firewall, http proxy or dns.

Exactly what I am thinking even if it is Squid. @CCWTech what firewall do you have?

Unifi USG

Gotcha, that does not do content filtering.

This are my settings

# General auth
#AUTH_METHOD=standard
AUTH_METHOD=ldap

# LDAP Host
LDAP_SERVER=1.2.3.4:636

# The base DN for users
LDAP_BASE_DN=DC=domain,DC=com

#The full DN and password for binding
LDAP_DN=CN=bookstack,CN=Users,DC=domain,DC=com
LDAP_PASS=S0UP3rS7r0ngP@ssW0rd
#A filter to use when searching for users


LDAP_USER_FILTER=(&(mail=${user}))
LDAP_VERSION=3

# Set the default 'email' attribute. Defaults to 'mail'
LDAP_EMAIL_ATTRIBUTE=mail

# Set the property to use for a user's display name. Defaults to 'cn'
LDAP_DISPLAY_NAME_ATTRIBUTE=cn

# Enable LDAP group sync, Set to 'true' to enable.
LDAP_USER_TO_GROUPS=true

# LDAP user attribute containing groups, Defaults to 'memberOf'.
LDAP_GROUP_ATTRIBUTE="memberOf"

# Remove users from roles that don't match LDAP groups.
LDAP_REMOVE_FROM_GROUPS=false

LDAP_AUTO_CONFIRM_EMAIL=true

# A full list of options can be found in the '.env.example.complete' file.

Make sure to have the local admin logged in and not logged out while you change and save the changes so then you can add yourself as admin tied to AD.

Even the Sophos XG Firewall do the content filtering decently well, not sure if they want to go that route but I am not a salesman.

@wrx7m said in Server 2016 - Force Default Update Server to WSUS Server Via GPO:

@dbeato said in Server 2016 - Force Default Update Server to WSUS Server Via GPO:

This would have happened on Server 2012 R2 as well, dual scan has been around and causes a lot of problems as you noted.

It is strange that I didn't have these issues in 2012 R2. I essentially copied the same GPO for 2012 R2 and made some minor changes to it to convert it for 2016. My 2012 R2 show the correct default service.

Weird, I have various Server 2016and now 2019 with WSUS and while dual scan was an issue for me on Server 2012/ 2012 R2 not anymore.

I see this issue with Graphics card drivers. I would start by upgrading the video card drivers even if it means removing and installing again the package.

@dafyre said in Bookstack Backup to S3:

Set that up in cron to run it on a schedule.

yes, I have that going.

@scottalanmiller said in MSP Helpdesk Options:

@JaredBusch said in MSP Helpdesk Options:

@scottalanmiller said in MSP Helpdesk Options:

@JaredBusch said in MSP Helpdesk Options:

The product development was dropped, but it was never disabled to be used. Now it likely will.

They claimed that they disabled the "remote kill" ability so that their infrastructure was no longer in use. Is the assumption that they broke their terms of service and secretly kept it tied and they can (and will) remote kill people's systems?

I never saw that. So I assumed it was still all tied to the community accounts and such.

they had a massive outage a couple years ago and everyone found out that they had been tying it together (and had no redundancy) so when their ISP failed, every on prem SW failed with it. Then they promised that it was separated and no longer depended no their no-redundancy, no-failover back end. And I'd heard from people who tested that it seemed to actually be done. So my understanding was that they really did it, but they are always pretty suspect, for obvious reasons, they've violated their terms so often that there is a good chance they would have turned it back on later. But they were so exposed when it happened that it seems kind of unlikely that they would risk that happening again.

It is still tied to it at least on the initial setup, same for network monitor. You can set it up offline after that but it does need checkins for the plugins such as warranty check, cloud detection, alien vault alerts, software updates by Zoho and many more.

@Emad-R said in Install OpenVas9 in Ubuntu Server:

@dbeato

the thing is openvas versions is all over the place, dont they have a new version 10 right now, a month ago it was on 8 .

It was 8 then 9 and the 10 version is GVM. I am testing it still but hasn’t been stable for me yet.

@dafyre said in Fix OpenVAS when not starting Scans:

You can also download & install using their ISO. They label it a "Virtual Appliance" for some reason. It's worked on everything I've thrown at it so far.

https://www.greenbone.net/en/install_use_gce/

I don't prefer it due to being harder to troubleshoot... since it is an older OS version and such.

@DustinB3403 said in Jared - OBS:

Because I'm attempting to have a public conversation with @JaredBusch on a piece of software, specifically OBS, that he settled on.

A private conversation regarding some other software you found useful has no relevance to the question and solution at hand.

Someone woke up cranky yesterday...

This is what we need

https://www.apple.com/macos/how-to-upgrade/

Explicit as this

Chrome is known to do this on workstations so I am taking into consideration as Chrome freezes everything on a Windows PC, let's say leave it open for more than 3 days and more than 45 Tabs. Chrome usage of RAM is over the top.