@Obsolesce said in Linux: GeoIP Blocking:

Really, the only use for it is to check off a checkbox when you have to follow policy for laws as example. Like how Netflix or news sites do it for licensing or gdpr reasons for example. Then if people VPN to get by its fine, u did ur part.

Aside from the log noise as mentioned already, many systems have no need to be accessed outside of a small subset of addresses. There is no reason not to implement things like a geoblock.

Web servers? Of course not.

@JasGot They are a CDN. By default they will cache static page information to save you the bandwidth. For free.

Moving into paid plans, you get control over things.

@scottalanmiller said in What would be a typical Network Admin Best Practice Cheatsheet...Anyone?:

@MC_Bol is a full time Zabbix admin and master and does some wonders with it.

Guide please? Nothing has been done with Zabbix on ML for a few years now.

Install may be easy, but that doesn't mean anything.

@gjacobse said in Fail2Ban: Failed to access sock path:

suro dnf rei fail2ban -y

Don't use shorthand/abbreviations when you don't know what you are doing.

If the command is not a readable word, it is likely an abbreviated command. Use the tab key. It is your friend.

I've never dug into it, but I know for a fact on my desktop that is I have a terminal open and then open a second, the history is different.

How/why? Never cared to check. Annoying a few times when I wanted to be lazy, but only that.

@scottalanmiller said in Caddy vs. Nginx:

@VoIP_n00b said in Caddy vs. Nginx:

It's nice to only have 1 configuration file compared to the 30 some odd I had with nginx. Plus, it does HTTPS via Let's Encrypt automatically.

Caddy definitely makes config easier. But to be fair, the use of multiple files for nginx is purely a convention and has nothing to do with the system itself. Both Nginx and Caddy will support single or multiple files. Just one's ecosystem encourages one way, and the other encourages another. It's always up to you in the end.

Right, just because you did it one way does not mean that it was the only way.

@VoIP_n00b said in Caddy vs. Nginx:

Plus, it does HTTPS via Let's Encrypt automatically.

That would be fucking horrible. I rarely want LE on anything I am using with a reverse proxy. Most of that should be on a Cloudflare origin certificate.

@scottalanmiller said in Caddy vs. Nginx:

the use of multiple files for nginx is purely a convention

Specific to my guides which I know he followed...

I stated in those that I do it on purpose. I do not like to have one large config file to edit for everything.

Instead I prefer to edit a single small file per site. So if the damned thing does not start, I know which file to quickly remove, restart the service so everything else is not down, and then redo WTF ever I screwed up.

Can you do the same/similar with a single file? Sure. Just have to keep copies, etc. Simply a different process.

Anyone been involved in purchasing?
OM3 multimode fiber, pre-terminated with LC connectors and wrapped with a pulling eye.

Was just quoted this for 4 lengths. This is just the fiber. The empty pipe is in the ground already.

Per foot those runs come out to:
8 strand: $2.80
2 strand: $1.63 / $1.36 / $1.18

@Dashrender said in Trouble with open files/folders on Windows file server?:

but if you have users who leave things open all the time

That is their own damned fault. Stop defending your old boss for her horrible user practices.

@JasGot said in Cloudflare help need re whether to proxy or not:

I am setting up my first cloudflare account.

When I got to the DNS wizard, it pulled most but not all of my zone. (Not sure why it didn't pull all, so I added them to CF)

Here is my question: Since I only want one subdomain (publications.mydomain.com) cached, should I turn off proxy for all the other A, CNAME, and MX records?

Thanks.

What is the technical reason not to proxy?

@stacksofplates said in Virtual appliances?:

This day and age Id just prefer a container. They're so much easier to deploy and manage.

Only when done right, which is still not often, IMO.

@pmoncho said in Drive wiping tools:

The first few were about 10 years ago, but that fun is done. Now its just a PITA, but with HIPAA and all, I figured better safe than sorry...

Check with your shredding company. Many of them will accept drives in the shred truck the comes by.

One of my clients does this. The shredding company jsut wants to know when drives are involved prior to arrival so they can make it first stop or last stop, i forget which. Because hot metal and paper = potential fire.

I think it is last stop. so they can easily extinguish if needed.

@Pete-S said in Headsets for customer service using Yealink phones?:

Also under what circumstances is the EHS36 adapter used?

You need the adapter if you don't want to buy a lifter.

@dmacf10 said in Headsets for customer service using Yealink phones?:

We use the Plantronics CS540 and EHS36 adapter with T4x phones. Have had no issues at all with them.

@Pete-S it is hard to go wrong with these units. they are rock solid. Sennheiser make comparable models.

I've no used any other brand of DECT based wireless headsets yet.

So, looking at Proxmox for a new deployment. I'll be dropping it on a spare laptop tomorrow to kick the tires.

Looking at Proxmox over KVM simply for the GUI backup features.

Anyone have any comments since they have fully released the backup stuff?

@Pete-S unless he changed jobs, I already set their current system up to play a buzzer or wtfever sound on a schedule.

But you are correct. You make it ring. I would have to fuck with settings to verify how.

@scottalanmiller said in Contact for FB Support:

I don't believe that they actually have support.

Same as Google.

At this point, whatever you can find in stock.

@Pete-S said in RHEL 4 not seeing ext3 label:

You could potentially try to install centos4, or rhel4 is even better, so you get to a bootable system.
Then just copy the files from the backup over your installation.

It is an option I have thought about. I'll be on site this morning, and I will be shutting down the host and booting to a Fedora Live to run dd in an effort to get a solid disk image.

I tried their built in process on Tuesday and it failed with sector/block read errors. A little digging through the files on the recovery ISO showed that all they were doing was using dd, so I am hoping to use dd with more intelligent options to continue on and such.