Best posts made by marcinozga

My money is on fake RAID you got there. So use md.

I'm playing with lxd containers and ansible a lot currently. And that would perfectly fit your needs. Creating new container is as simple as running single terminal command:

lxc launch images:centos/7/amd64 centos

And you can easily automate and scale it with ansible, including initial config, extra packages installation, cron setup, updates, etc. And chances are someone has already written a role to do it, so you would only need to include the roles in your playbooks.

@jimmy9008 said in Disk2VHD/SQLServer:

@marcinozga said in Disk2VHD/SQLServer:

Reboot the server, that usually fixes network profile assignment.

That's not the issue. Like I said, the profile sees its self as domain. NOT private/public. Its domain.

I would still reboot. It's Windows after all.

@brandon220 said in Pi Hole:

I was amazed at the stats page and how much was being blocked. Very big difference. There are a ton of sites that balk at using ad-blockers though.

There are ad blockers that block scripts balking at you for blocking ads.

I use Fing app on iPhone all the time. Mostly just to lookup IP address, or sometimes management port some app is listening on. It does the job better than any other tool I ever used, including nmap.

Nuke it from the orbit, it's the only way to be sure. And then you should take a divorce with Windows, at that point you'll eliminate 99.99% of malware.

Or this one, if I read one of your previous comments correctly, where you want users to be asked which share they wanted to mount:

https://www.jamf.com/jamf-nation/discussions/13103/script-to-edit-connect-to-servers-saved-favourites#responseChild78372

Can you put reverse proxy in front of that appliance and automate certs on proxy?

@DustinB3403 you need to source .bash_profile after changing it, so bash picks up modified file. Either

source ~/.bash_profile

or

. ~/.bash_profile

I got few emails from them too, it says somewhere that these audits are voluntary so I basically told them to pound sand and never to call me again. They did about a year later, and they got the same replay. I actually told them they'd have to pay me $300/h to do the audit, I won't do their work for free.

@flomer said in Performance of Intel Xeon Scalable 6146 versus E5-2667 v4 in the real world...:

If I have set something up the wrong way I would be delighted if someone can point this out for me. How can I check if something is wrong? All three systems run the Rocks cluster distribution (CentOS with extras), #1 version 6.1, #2 version 6.2 and #3 version 7.0.

I don't have any experience with HPC, but based on the above it seems that linux kernel version might be the issue. Centos 6 comes with 2.6.32 kernel, and 7 with 3.10. Either test all 3 clusters on same kernel line, or do some research if there was any performance drop between kernel versions above.

@DustinB3403 said in SSH Access to Windows 10 Pro Workstations:

@scottalanmiller said in SSH Access to Windows 10 Pro Workstations:

On Server, no issue. SSH the same as with Linux. SSH on Windows 10 is "single user" just like anything else on Windows 10.

So then why would they have the statement about "usually to correct problems" as to me this would be a two person use. One who is using the desktop and the other administrator who is working on fixing an issue via ssh (presumably while the other user is using said system).

The same statement says to share an active session. 2 users sharing the same session, not 2 users with 2 different sessions.

@Ambarishrh said in Evaluating Defender ATP:

@marcinozga said in Evaluating Defender ATP:

I was about to evaluate it to, I had a webex session with Microsoft sales, and while it looks nice, it doesn't really offer anything special over other solutions. And it's expensive, really expensive. Perthaps sales mislead me but we either had to subscribe to O365 E5 or M365, or get Windows 10 Enterprise licenses. It worked out to being 15-18 times more expensive than 3rd party antivirus solution.

Not sure how did they gave you that info! An average pricing structure as below

And security products straight from O365 admin portal subscriptions page:

These are prices IF you already have one of their subscriptions. If you don't need them or have something else, you're paying $15-$20 per month per endpoint. That's how much it costs per year if you go with other av vendor.

@Emad-R and @Dashrender lol rookies, I've been using FF since it was called Phoenix. And Mozilla Suite before that.

@pmoncho said in Netgear Insight Managed Switches:

@marcinozga said in Netgear Insight Managed Switches:

Gen 2 Unifi switches have SFP+, Edgeswitch Lite have SFP+ too, and Edgeswitch 16 XG has 12 SFP+ ports.

I missed the Gen 2 Unifi as I was only looking at the Edgeswitch line - I will look into those

Edgeswitch only has SFP+ on 48 Port switches. 24 port switches only have SFP unless I missed something.

At this time I don't have a specific need for that many. Although, I could figure out how to use them :winking_face:

If you want 24 port, then I think only Unifi Gen 2 has SFP+ https://switch.ui.com/gen2/
They do have just SFP+ switches, with 12 SFP+, both Edgemax and Unifi.

@shutdown_engineer said in How do you manage internal web proxy with roaming laptop users?:

We put a registry key on users laptops to toggle turning the proxy on and off when they are at home.

What do other people use so that if a user is at home and not connected to our VPN and just wants to surf and check email? Outlook seems to take IE settings so if the proxy is enabled and the user is connected to Wifi only then Outlook will not update and IE won't connect.

Firefox with no proxy set in the browser is a rough and ready workaround that we also use but far from ideal.

Users are mostly Win 10. Our DC is Win 2012 R2 and run Sophos Web Appliance Proxy as a VM.

Thanks

Why is Firefox rough workaround? Why are your users still using IE? It's almost 2020, not 2000 anymore.
2nd issue is proxy. Why would you use one? Most web traffic is encrypted, so web proxies became obsolete, as you cannot use one without doing some man in the middle workarounds. If you need web filtering, then use proper solution like Pi-hole or AdGuard Home.

@G-I-Jones said in ESXi 6.7 Troubleshooting:

@marcinozga Sure thing. Why do you recommend Paravirtual, and VMXNET 3?

Both are paravirtualized, giving you best berformance. LSI SAS and e1000 are generic devices, kind of a fallback, like vga mode for video card when no drivers are installed.

@StuartJordan said in Chromium memory usage:

I keep hearing Brave mentioned by a few people. I have all my passwords and sites synced on all my devices and not looking to change browsers.

You can easily migrate that between browsers, most will offer to import all that info on first launch.

Browser is not the right tool to keep your passwords in. Especially one made by Google. Remember, when product is free, you are the product.

Password managers are the right approach here, Bitwarden would be my choice, although I currently use 1Password. Whenever I get some time, I'm planning to deploy my own Bitwarden server.

Lynx, 1 tab open :face_with_tears_of_joy:

I've seen that a lot. When I import Drupal databases, I learnt to use its Backup and Migrate module instead, it works flawlessly. Downside is you need to do clean Drupal installation first, but that basically is just creating blank database and putting brick on enter key.