Feeling a bit lonely it's 11:53 here and there's been no posts

@scottalanmiller said in Capacity Planning for Asterisk PBX:

Fire those reps right now! Bring in some experts. If the phone company doesn't know anything about their own phones, how well could they possible support it?

We did

My day was going well until I get an E-mail stating my Car insurance has been cancelled as of yesterday! (So basically drove to working uninsured)
Phoned them up to ask why to be told they have not received my NCB proof. Funny as I had an E-mail from them stating they have and my account has been updated! Explained this to them and even gave them the date and time the e-mail confirming came in (even said I could get message id numbers if they wanted )
Anyway after 20mins and 2 people all sorted and a very apologetic supervisor car insurance reinstated.

But after this I will not be using them again.

If the files have been encrypted with a "Offline key" you may be able to restore.
See here
https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-puma-djvu-promo-drume-help-support-topic/

Overwise unless you've got a backup your out of luck.

Configuring some Unifi AC Pro units ready for deployment and setting up with a NPS server
Time to bloke all these bloody mobile phones off my network!

Yeah I've been having this too, just been living with it

Did some drone flying Saturday - was a bit too windy to do full fly overs
https://www.youtube.com/watch?v=xE1rgYiPncU
Youtube Video

How do you go about updating the Agents already installed? How are people handling this?

A nice job to do sometime today

I think the common things i've seen so far are -

Password or Password Less Public/Private Keys
Timeouts
Disallow root logon
Harden Firewall
White-list IP's that can access.

Steps I used to connect to my Zabbix Server (CentOS from Win10

created a folder c:\users<username>.ssh
in powershell ran this command

 ssh-keygen -o -a 100 -t ed25519 -C "[email protected] Desktop"

Typed on the password i wanted to use (you can run a different command to have a password less key - see below)
This generated two files in .ssh - id_ed25519 and id_ed25519.pub

still in powershell i ssh'd onto the zabbix server

ssh <user>@<ip>

Once in ran the following commands

sudo mkdir ~/.ssh
sudo nano ~/.ssh/authorized_keys

copy the contents of the .pub file on the windows machine

sudo chown YourUserName:YourUserName ~/.ssh -R
sudo chmod 700 ~/.ssh
sudo chmod 600 ~/.ssh/authorized_keys

Then from powershell ssh <user>@<ip> and it just asked me for the key password and i'm in

Updated - 28/02/2020

First quarter of board looking better

So in a way thinking about just Citrix, we would drop AD and move the devices to local users.

Then either create a "New Local AD" with the users credentials just for Citrix use?
Or use one of those 3rd party VPN things (AppGate)
We have 600+ devices out there, but only 300 odd need Citrix Access.

This would make Citrix LANless/Zero Trust as the user will need to authorize them selves via the "Local AD" credentials or that AppGate thing?

@NattNatt said in Random Thread - Anything Goes:

@hobbit666 board cleaning sorry :')

It for one of these:-

A high speed dot matrix printer, basically the board is showing RAM failed so instead of buying a £200 system board, or £2000 for a printer we thought giving it a good bloody clean might help!

@Dashrender said in VPN hardware suggestions.:

That said you could use other things to test the VPN status - like a ping test.

That's what we do with our MPLS sites just use zabbix to ping all endpoints see if they are "up" and notify when down

Just got back from a 2hr drive to plug a 1m cable between a switch and netgear router

@travisdh1 said in Build or Buy?:

The only way to easily get any sort of graphics card right now is to buy a pre-built. I haven't even looked at prices in months because the market is so crazy right now.

Yeah this is what I'm finding. I've used sites to get a config then looked at buying the parts separate, as i thought it would be good to get her to build it too but just can't find the GTX cards.

That's it I quit!!!!!!!!!!! There is no hope anymore:-

@jaredbusch said in zabbix5.4 https redirect:

@hobbit666 said in zabbix5.4 https redirect:

Please close or Delete just me being a dumb ass lol

More better, tell us how you are a dumbass to prevent another person from being a similar dumb ass later.

Well just check the config file, I just had a typo. Once I spotted it boom off it went
I'll update the post in the morning where it was.

Opened a parcel to find the cutes thing ever:-

@scottalanmiller said in Air Gap Backups:

@hobbit666 said in Air Gap Backups:

How would people define this?

Just send a backup to the cloud, or only achevied by backing up to tape (or other media) and store somewhere?

"Just" sending to the cloud is the opposite, not air gapped at all. That's no different than any other "always attached" media. You have to have a mechanism that makes it so that the system sending the backup cannot alter or remove said backup. From the originating system's perspective, it must be immutable or not even exist.

This is what I've always thought about "cloud" or "replication".
Think the word if been missing I immutable . Now I understand that bit it makes more sense, as to me air gap would be things like tape