Best posts made by triple9

@scottalanmiller @bigbear I was lucky enough not to use FR in production, only in lab while I was studying for my Cisco certs. Nowdays, we don't use FR, and Cisco is less and less present in my work. Fortunatelly

@travisdh1 said in Introducing FreeNAS Corral:

@mlnews Are they going to add in a kitchen sink for the next release?

Somehow I don't see this becoming the next @scale.

not yet, for sure

https://www.theregister.co.uk/2017/04/18/freenas_downgrades_latest_release_to_tech_preview/

new Chrome has patch for this already.

@scottalanmiller said in Did you ever try NethServer ?:

@alefattorini said in Did you ever try NethServer ?:

@triple9 we're working on Asterisk 13 and Freepbx 14. They are going to be available by the summer

A full integration so that the system can be used as a complete PBX? Or just for faxing?

as stated on referenced URL:

*We are working very proudly to have Asterisk 13 and FreePBX 14 on NethServer 7!

They are useful to turn your NethServer 7 into a phone switchboard!*

@alefattorini I tried NethServer, it seems really nice, very polished. I liked OpenVPN part a lot, though I would like to see self-service portal for end users, where they could download ovpn file (or have I missed it?)
I had one problem, not sure if I'm to blame. I wanted to setup server as AD DC, and things went really bad. Installation was stuck in the middle, and I could not stop it or do anything with it. I didn't have time to investigate what happened, but I plan to do it later.

Do you have #!/bin/bash in the scripts? Other thing that could cause problem is missing PATH variable. Put something like

#!/bin/bash
export PATH=/usr/local/sbin:/sbin:/bin:/usr/sbin:/usr/bin

In script itself.

As @StorageNinja said, you should upgrade to something newer. The problem was described at https://kb.vmware.com/s/article/1020214?language=en_US

Cisco has it's own technique on ASA for this - they call it DNS Doctoring.
You would put something like this on your ASA:

object network WEB_SRV_OUTSIDE
 nat (dmz,outside) static X.X.X.X dns

where X.X.X.X is public (external) address and dns keyword is DNS doctoring part. More details is available at:

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/72273-dns-doctoring-3zones.html

http://resources.intenseschool.com/dns-doctoring-on-the-cisco-asa/

@samsmart84 Maybe this Sophos KB article will help?

Personally, I prefer to close RDP if possible and put it into VPN. Keep it open only if client insists, and even then try to limit to certain IPs only. Even though there is no documented case that RDP itself was to blame (other than recently discovered exploit, but for 2003 and XP, which are dead anyway), I just don’t like the idea of having it exposed. As @scottalanmiller said "the product is just believed to be insecure" and I feel that way.
Good read at https://blog.rapid7.com/2017/08/09/remote-desktop-protocol-exposure/

@jaredbusch is it EAP225 AC1350? EAP225 supports both 802.3af PoE and Passive PoE power supply.

it makes even more sense in virtualized environments. One can easily add more RAM or disk space if required on VM. No need to dedicate partition for it.

I had chance to see Huawei gear at local telco ... I can tell you that is some serious iron. Performant, robust, looks really reliable. Don't know for pricing, but looks very good indeed.

Lada?
https://en.wikipedia.org/wiki/Lada

Maybe problem with noowners mount option?
https://www.barryodonovan.com/2012/12/12/apple-os-x-as-an-nfs-server-with-linux-clients

@brandon220 said in What Are You Doing Right Now:

Does anyone have a trick to make FreePBX re-register the voip.ms SIP trunks after an internet outage restores? A cut fiber caused an outage for a few hours yesterday eve. When it was restored, I had to manually get them to register by re-booting the system. I probably could have just disabled and then enabled the trunks for the same result. Seems like it should do this "automagically"....

for chan_sip set registerattempts=0. It will force Asterisk to attempt to re-register until it can (the default is 10 tries)
for chan_pjsip you should set max_retries=0 (default is 10 as well).

@thwr said in 10G Edge Router/Firewall:

@triple9 said in 10G Edge Router/Firewall:

https://routerboard.com/CCR1072-1G-8Splus 3050 USD
https://routerboard.com/CCR1036-8G-2SplusEM 1295 USD

Thanks. Isn't that Mikrotik hardware?

yes, Routerboard if their hw brand, as RouterOS is for software

I would, to start with, check if your DHCP pool has available addresses. Next time you have this situation, check IP settings on computer with problem. If your adapter has IP from 169.x.x.x range you can be pretty sure DHCP is to blame.

Next, I would check if you have another DHCP server in network, eg some WiFi router or something like that. Maybe it hands out IP from another pool or with wrong IP settings.

Also, I would test if I can ping some internal IP - your default gateway and if that works, try to ping 8.8.8.8. This way you can test if you have connectivity at all or DNS server doesn't work.

I used Grandstream GXV3240 and Cisco SPA525G2. It was ok, but not really great. It all depends on quality of wireless network. Interference can be problem. Had better results with DECT phones (base unit on IP)

VirtualBox 5.1.18 on Win 7, installed Tumbleweed, no problems at all.
Used both NET-x86_64-Snapshot20170320 and DVD-x86_64-Snapshot20170320, bridge and NAT mode.