Topics created by FATeknollogee

Reporting back: The only tool that I had success with was https://relax-and-recover.org/
F33 desktop is now p2v'd.

Asset Tiger is pretty good in my experience. Hosted and free for 250 assets or less.

@DustinB3403 said in Microsoft Edge for Linux:

@flaxking said in Microsoft Edge for Linux:

I would think the benefit would be for companies all in on M 365.

What does using office 365 effect the browser? I've seen more often that Google chrome works better on O365 web products than IE or Edge (pre Chedg)

The only thing that doesn't work on Chrome and other browsers from Office 365 is the Export to PST option but besides that it works well on the other browsers.

9cff8a60-526c-41c4-8594-c6b35d178f29-image.png

That's awesome.

Must have been a problem with the backend servers.
Yesterday, I re-tried the updates & all is good.

@Obsolesce said in Linux Desktop: what's the "preferred" distro?:

@scottalanmiller said in Linux Desktop: what's the "preferred" distro?:

@notverypunny said in Linux Desktop: what's the "preferred" distro?:

@scottalanmiller said in Linux Desktop: what's the "preferred" distro?:

@biggen said in Linux Desktop: what's the "preferred" distro?:

Getting ready to throw Mint Cinnamon onto a laptop although Pop OS seems to be the new belle of the ball nowadays.

Pop_OS doesn't make their own desktop like Mint does. Mint's focus is making an alternative desktop environment and Mint is just the showcase OS for it. Pop_OS! is a tweaking to Ubuntu used as the default on custom hardware.

Cinnamon is far and away my preferred DE. I just wish that other distro's / spins would integrate it as tightly with the underlying OS as Mint does. The add/remove (install/uninstall) integration right into the main menu is convenient. I just have an extreme dislike for their policy of staying on LTS / Stable packages and package base.

Fedora's Cinnamon spin is pretty much as integrated as Mint.

They are pretty much all integrated once installed. Many DEs have a software manager / software center gui now that is shortcutted.

Yeah, pretty much all DE have that now.

Just received a new update fix
eb2a76e2-4b5e-48bf-b0bf-f64df0c270ff-image.png

@Dashrender

firewall { all-ping enable broadcast-ping disable group { address-group trusted_IPs { address 1.2.3.4 address 5.6.7.8 address 9.10.11.12 description "for remote GUI access" } } ipv6-name WANv6_IN { default-action drop description "WAN inbound traffic forwarded to LAN" enable-default-log rule 10 { action accept description "Allow established/related sessions" state { established enable related enable } } rule 20 { action drop description "Drop invalid state" state { invalid enable } } } ipv6-name WANv6_LOCAL { default-action drop description "WAN inbound traffic to the router" enable-default-log rule 10 { action accept description "Allow established/related sessions" state { established enable related enable } } rule 20 { action drop description "Drop invalid state" state { invalid enable } } rule 30 { action accept description "Allow IPv6 icmp" protocol ipv6-icmp } rule 40 { action accept description "allow dhcpv6" destination { port 546 } protocol udp source { port 547 } } } ipv6-receive-redirects disable ipv6-src-route disable ip-src-route disable log-martians enable name WAN_IN { default-action drop description "WAN to internal" rule 10 { action accept description "Allow established/related" state { established enable related enable } } rule 20 { action drop description "Drop invalid state" state { invalid enable } } } name WAN_LOCAL { default-action drop description "WAN to router" rule 10 { action accept description "remote GUI" destination { port 443 } log disable protocol tcp source { group { address-group trusted_IPs } } } rule 20 { action accept description "Allow established/related" state { established enable related enable } } rule 30 { action accept description ike destination { port 500 } log disable protocol udp state { invalid enable } } rule 40 { action accept description esp log disable protocol esp } rule 50 { action accept description nat-t destination { port 4500 } log disable protocol udp } rule 60 { action accept description l2tp destination { port 1701 } ipsec { match-ipsec } log disable protocol udp } } receive-redirects disable send-redirects enable source-validation disable syn-cookies enable } interfaces { ethernet eth0 { address 10.10.10.10/30 description Internet duplex auto firewall { in { ipv6-name WANv6_IN name WAN_IN } local { ipv6-name WANv6_LOCAL name WAN_LOCAL } } speed auto } ethernet eth1 { address 10.15.20.254/24 description "LAN 1" duplex auto speed auto } ethernet eth2 { address 192.168.2.254/24 description "LAN 2" duplex auto speed auto } ethernet eth3 { duplex auto speed auto } loopback lo { } } port-forward { auto-firewall enable hairpin-nat disable wan-interface eth0 } service { dhcp-server { disabled false hostfile-update disable shared-network-name LAN2 { authoritative enable subnet 192.168.2.0/24 { default-router 192.168.2.254 dns-server 192.168.2.254 lease 86400 start 192.168.2.38 { stop 192.168.2.43 } } } static-arp disable use-dnsmasq disable } dns { forwarding { cache-size 10000 listen-on eth1 listen-on eth2 name-server 1.1.1.1 name-server 9.9.9.9 } } gui { http-port 80 https-port 443 older-ciphers enable } nat { rule 5010 { description "masquerade for WAN" outbound-interface eth0 type masquerade } } ssh { port 22 protocol-version v2 } unms { connection wss:// } } system { domain-name ubnt gateway-address 10.10.10.1 host-name ER4 login { user ubnt { authentication { encrypted-password ubnt } level admin } } name-server 1.1.1.1 name-server 9.9.9.9 ntp { server 0.ubnt.pool.ntp.org { } server 1.ubnt.pool.ntp.org { } server 2.ubnt.pool.ntp.org { } server 3.ubnt.pool.ntp.org { } } offload { hwnat disable ipsec disable } syslog { global { facility all { level notice } facility protocols { level debug } } } time-zone UTC } vpn { ipsec { allow-access-to-local-interface disable auto-firewall-nat-exclude disable ipsec-interfaces { interface eth0 } } l2tp { remote-access { authentication { local-users { username hello { password 1234 } } mode local } client-ip-pool { start 192.168.100.100 stop 192.168.100.110 } dns-servers { server-1 1.1.1.1 server-2 9.9.9.9 } idle 1800 ipsec-settings { authentication { mode pre-shared-secret pre-shared-secret 1234 } ike-lifetime 3600 lifetime 3600 } mtu 1492 outside-address 10.10.10.10 } } }

@Obsolesce said in VMware Community Homelabs:

@Pete-S said in VMware Community Homelabs:

5 billion hits per day is Google type traffic

You are confusing 5 billion hits/searches per day with requests. Not the same thing.

Yes, you're right, I was confused. I read "requests" but thought "page views".

@FATeknollogee said in Hypervisors: revisit your choices!:

One downside to KVM (in virt-manager) is lack of snapshots for UEFI VMs.

yes it is.

@scottalanmiller there is nothign wrong with the 5.2 kernel.
So put this last line, without the semicolon, in your /etc/dnf/dnf.conf

[main] gpgcheck=1 installonly_limit=3 clean_requirements_on_remove=True ; exclude=kernel*

Then remove the kernel so you can't boot to it (assuming 5.3.7):

sudo dnf remove kernel*5.3.7-200.fc30.x86_64

reboot to be sure it all comes up normal.

sudo reboot

Then do the normal upgrade to 31.

sudo su - dnf upgrade --refresh -y && dnf install dnf-plugin-system-upgrade -y && dnf system-upgrade download --releasever=31 -y && dnf system-upgrade reboot

Then you can comment that exclude out and do a normal update.

sudo dnf upgrade -y --refresh

And if it fails to log in still, so what. just select the 5.2 kernel again like you do now.

@FATeknollogee said in UNMS backup question:

@JaredBusch said in UNMS backup question:

If you want to restore an individual unit, that process is already built into the system so what are you trying to get exported?

I'm just asking for info purposes in case of a future restore.

You can download a specific device backup from within UNMS. When you do so, it asks you if you want one for restoring to the same system or a different system (because of the UNMS key negotiation).

Update: this is what I ended up with.
Route based VPN using this guide as a template.

Master site: 1x ER 12 + 1x ER 4
Sites A, B, C & D :1x ER4 each location
Colo: 1x ER4 & 1x pfSense (SM x10SDV-TLN4F+)

@dafyre said in Network routing question:

@dafyre said in Network routing question:

DNS server is at 10.50.235.235

Configure your computer to look to 235.235 for DNS... and configure the DNS server at 235.235 to forward anything it doesn't recognize along to your Meraki?

I added 235.235 as an additional DNS in the 250.254 network.

I tried this yesterday but silly me forgot to "refresh" the NIC so it could grab the new settings.

All is good & working.

We've been using Skyetel as our primary trunks for some time now, and most of our customers are either using them now or porting over to them in the near term. Service has been great, and very easy to use.

@hobbit666 said in HCI vendors: software or hardware:

Or would you still look at another layer of backup/DR

A DR site is not the same as a backup. Generally those things are different.

@FATeknollogee said in HCI (Scale, Starwind etc): vm layout:

@PhlipElder said in HCI (Scale, Starwind etc): vm layout:

I'm not sure what "Hyper-V partition" means.

I meant to say the host o/s partition.

I kinda gathered that is what it meant. Thanks for clarifying.

This is the provider I use to clone KVM guests with Terraform https://github.com/dmacvicar/terraform-provider-libvirt