This exact thing happens to me, I've tried using APC, Tripp-lite, and CyberPower. The laser printer (not directly attached to UPS) but on same circuit warms up the fuser thus causing a brown-out condition on the circuit, then causing the UPS to activate to hold up the PC and other devices.. thus cycling its sealed lead acid 6v battery within a few seconds, causing them to go below 50%. This may work a few times but if it drops below 50% charge it damages the 6v battery.. thus will need to be replaced continually unless you move the laser printer or have the circuit conditioned to handle the greater load.

@stacksofplates said in Office chair suggestions?:

I have this one and I think it's pretty comfortable.

For me, personally, that leans too far back in the normal upright position.

@pete-s said in Gmail on Outlook sending multiple emails with attachment:

@jokoco said in Gmail on Outlook sending multiple emails with attachment:

What I don't understand is why it sends multiple copies.

Because you are going over the maximum allowed attachment size. It's simply not supported.

What you should be asking is why gmail sends it at all. Obviously a bug i their system.

That being said - 25 MB attachment is not a lot. Some places mentions that the limit is actually 25MB total size with attachments being base64 encoded, which means that you will hit the limit somewhere around a 18 MB attachment.

If you send a lot of email attachments maybe it's time to look for another email provider.

@pete-s said in FAX ATA Support - Beta:

@jaredbusch said in FAX ATA Support - Beta:

Just set this up at home using a Grandstream HT704.

Because the kids’ school wanted something mailed, dropped off in a drop box or faxed. No email option.

C66C332A-BE2D-4FDD-AB62-FBB6BF15BF1F.jpeg

Interesting! Didn't you have any email to fax options?

Of course I do. But I have been meaning to get this setup permanently on a device for demo purposes anyway.

@notverypunny said in Deploying firmware updates on servers and testing...:

Yeah, this sounds like a case of the bean-counters having unreasonable expectations.

That's even worse if it isn't management but accountants who don't understand math. That implies that they can't do accounting, either.

@notverypunny said in Wazuh Setup:

@scottalanmiller said in Wazuh Setup:

ElasticSearch is no longer open. I won't touch them. Look at OpenSearch now instead.

Looks like they're already using elasticsearch-oss and opendistroforelasticsearch instead of the closed source stuff. https://documentation.wazuh.com/current/installation-guide/open-distro/distributed-deployment/step-by-step-installation/elasticsearch-cluster/elasticsearch-single-node-cluster.html#elasticsearch-single-node-cluster

That's good.

@notverypunny said in FortiMail 7.0:

Damn, nobody else on here uses these guys?

Nope, why would we? LOL I don't know anyone much running in house email anymore. Those that do just use a mail filtering service, not an appliance. This is a device for a very different era. Not the kind of thing you'd expect to see still deployed.

@ranahashem

Scheduling destruction of SIP dialog ‘401fcf1687ec4601a3a3278d6227db07’ in 6400 ms (Method: SUBSCRIBE)

<— SIP read from UDP:192.168.1.4:55702 —>
SUBSCRIBE sip:[email protected]:5060 SIP/2.0
Via: SIP/2.0/UDP 192.168.1.4:55702;rport;branch=z9hG4bKPj127792c779874087b9e3965 ce1e390c2
Max-Forwards: 70
From: sip:[email protected];tag=8c3eda753e0845bf8ebfa94c8884d64d
To: sip:[email protected]
Contact: sip:[email protected]:55702;ob
Call-ID: 401fcf1687ec4601a3a3278d6227db07
CSeq: 12288 SUBSCRIBE
Event: presence
Expires: 600
Supported: replaces, 100rel, timer, norefersub
Accept: application/pidf+xml, application/xpidf+xml
Allow-Events: presence, message-summary, refer
User-Agent: MicroSIP/3.20.6
Authorization: Digest username=“108”, realm=“asterisk”, nonce=“3f0d59a1”, uri=“s ip:[email protected]:5060”, response=“003e71376f0034f4bcbbc47bd83a0e8a”, algorithm =MD5
Content-Length: 0

<------------->
— (16 headers 0 lines) —
Creating new subscription
Sending to 192.168.1.4:55702 (NAT)
Found peer ‘108’ for ‘108’ from 192.168.1.4:55702
Looking for 101 in from-internal (domain 192.168.1.6)
Scheduling destruction of SIP dialog ‘401fcf1687ec4601a3a3278d6227db07’ in 61000 0 ms (Method: SUBSCRIBE)

<— Transmitting (NAT) to 192.168.1.4:55702 —>
SIP/2.0 200 OK
Via: SIP/2.0/UDP 192.168.1.4:55702;branch=z9hG4bKPj127792c779874087b9e3965ce1e39 0c2;received=192.168.1.4;rport=55702
From: sip:[email protected];tag=8c3eda753e0845bf8ebfa94c8884d64d
To: sip:[email protected];tag=as47f06dc0
Call-ID: 401fcf1687ec4601a3a3278d6227db07
CSeq: 12288 SUBSCRIBE
Server: FPBX-15.0.17.34(17.9.3)
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLIS H, MESSAGE
Supported: replaces, timer
Expires: 600
Contact: sip:[email protected]:5060;expires=600
Content-Length: 0

<------------>
Reliably Transmitting (NAT) to 192.168.1.4:55702:
NOTIFY sip:[email protected]:55702;ob SIP/2.0
Via: SIP/2.0/UDP 192.168.1.6:5060;branch=z9hG4bK12c62c7c;rport
Max-Forwards: 70
From: sip:[email protected];tag=as47f06dc0
To: sip:[email protected];tag=8c3eda753e0845bf8ebfa94c8884d64d
Contact: sip:[email protected]:5060
Call-ID: 401fcf1687ec4601a3a3278d6227db07
CSeq: 102 NOTIFY
User-Agent: FPBX-15.0.17.34(17.9.3)
Subscription-State: active
Event: presence
Content-Type: application/pidf+xml
Content-Length: 524

<?xml version="1.0" encoding="ISO-8859-1"?>

pp:person
ep:activitiesep:away/</ep:activities>
</pp:person>
Unavailable

sip:[email protected]
closed

@pete-s said in DMARC monitoring services/tools?:

Found this as well, but it's $200 to $1500 per month:
https://www.valimail.com/pricing/

Actually searching for the one @VoIP_n00b mentioned and the one above, I found a list. Haven't checked all of them yet, but it's a start.

If anyone has experience using any of these services please share your opinion of it!

https://dmarc.postmarkapp.com/
https://www.valimail.com/
https://report-uri.com/products/dmarc_monitoring
https://mxtoolbox.com/Pro/DmarcSetup/f/RegisterDomain#/
https://uriports.com
https://dmarcian.com/
https://easydmarc.com
https://powerdmarc.com/power-dmarc-pricing-policy/
https://dmarcly.com
https://glockapps.com/dmarc-analyzer/
https://www.dmarcanalyzer.com/
https://ondmarc.com/pricing
https://godmarc.com/
https://250ok.com/tour/dmarc/
https://www.agari.com/products/business-fraud-protection/
https://www.fraudmarc.com/
https://www.barracuda.com/products/sentinel
https://www.symantec.com/products/messaging-gateway
https://www.proofpoint.com/us/products/email-fraud-defense

Could try something like this-

4EF30B75-5AB4-4D00-B246-13FAB7E5E070.jpeg

@ranahashem

sip_general_custom.conf
accept_outofcall_message=yes
outofcall_message_context=dialplan_name
auth_message_requests=yes
…

sip_general_additional.conf
accept_outofcall_message=yes
auth_message_requests=no
outofcall_message_context=dpma_message_context
faxdetect=no
vmexten=*97
useragent=FPBX-15.0.17.34(17.9.3)
language=en
disallow=all
allow=ulaw
allow=alaw
allow=gsm
allow=g726
allow=g722
context=from-sip-external
callerid=Unknown
notifyringing=yes
notifyhold=yes
tos_sip=cs3
tos_audio=ef
tos_video=af41
alwaysauthreject=yes
limitonpeers=yes
accept_outofcall_message=yes
outofcall_message_context=astsms
auth_message_requests=yes
context=from-sip-external
callerid=Unknown
tcpenable=no
callevents=yes
jbenable=no
checkmwi=10
maxexpiry=3600
minexpiry=60
srvlookup=no
tlsenable=no
allowguest=yes
notifyhold=yes
rtptimeout=30
canreinvite=no
tlsbindaddr=[::]:5161
rtpkeepalive=0
videosupport=no
defaultexpiry=120
notifyringing=yes
maxcallbitrate=384
rtpholdtimeout=300
g726nonstandard=no
registertimeout=20
tlsclientmethod=tlsv1
registerattempts=0
nat=force_rport,comedia
ALLOW_SIP_ANON=no
udpbindaddr=0.0.0.0:5060
tlscafile=/etc/pki/tls/certs/ca-bundle.crt
externip=104.145.12.182
localnet=192.168.1.6/24
…

sip_additional.conf
[100]
deny=0.0.0.0/0.0.0.0
secret=12345
dtmfmode=rfc2833
canreinvite=no
context=from-internal
host=dynamic
defaultuser=
trustrpid=yes
user_eq_phone=no
sendrpid=pai
type=friend
session-timers=accept
nat=force_rport,comedia
port=5060
qualify=yes
qualifyfreq=60
transport=udp
avpf=no
force_avp=no
icesupport=no
rtcp_mux=no
encryption=no
namedcallgroup=
namedpickupgroup=
dial=SIP/100
accountcode=
permit=0.0.0.0/0.0.0.0
callerid=Omer RIT <100>
recordonfeature=apprecord
recordofffeature=apprecord
callcounter=yes
faxdetect=no

[101]
deny=0.0.0.0/0.0.0.0
secret=123
dtmfmode=rfc2833
canreinvite=no
context=from-internal
host=dynamic
defaultuser=
trustrpid=yes
user_eq_phone=no
sendrpid=pai
type=friend
session-timers=accept
nat=force_rport,comedia
port=5060
qualify=yes
qualifyfreq=60
transport=udp
avpf=no
force_avp=no
icesupport=no
rtcp_mux=no
encryption=no
namedcallgroup=
namedpickupgroup=
dial=SIP/101
accountcode=
permit=0.0.0.0/0.0.0.0
callerid=Ahmed RIT <101>
recordonfeature=apprecord
recordofffeature=apprecord
callcounter=yes
faxdetect=no

@ranahashem said in linephone softphone file sharing:

@scottalanmiller
I didn't understand why you can't be pampered, is it because you will be restricted to using the linephone as the only soft phone, or is there another reason for that?

Why do you want to use a phone for file sharing? It doesn't make sense to us because there are much better ways to share files.

@wirestyle22 just a thought, but can you remove the out of date version and leave just the current 1.0.1?

@jaredbusch said in Fast/painless remote access:

@scottalanmiller said in Fast/painless remote access:

@wls-itguy said in Fast/painless remote access:

@scottalanmiller I'd be happy just to see the desktop at this point.

Most messaging platforms (Teams, Jitsi, Zoho Cliq, Slack, RocketChat, etc.) are going to do that for you.

Right, just to see? You can do Jitsi so easy. it is all a web page.

But also, almost everyone can use Zoom any more. and it also has screen sharing.

Forgot that is a feature in Zoom. Works for what I needed.

Thanks everyone!

@dashrender said in Local SMTP relay?:

@pete-s said in Local SMTP relay?:

@voip_n00b said in Local SMTP relay?:

@pete-s said in Local SMTP relay?:

Do you have any pointers on how to configure postfix for this?

Lots of guides when googling "postfix smtp relay"

Here is one:
https://www.lisenet.com/2018/configure-postfix-to-relay-mail-to-an-external-smtp-server-on-centos-7/

Thanks! It looks simple enough and I hope it is.

When I looked at the postfix documention it seems like it's a lot more complicated than that.

is CentOS still where people want to be for things like this?

Not generally and never CentOS 7.

Exactly, here in Florida they're right 50% of the time, which is why South America has it figured out. Nobody there cares if its right or wrong, but watching the weather wo-"man" is just very entertaining to watch.

OpenSSH can use host certificates to verify the host (like SSL certs on a webserver). OpenSSH can also use user certificates to verify the user (like passwords or ssh keys).

Both these types of cert to be used independently of each other.

I've tested using user certificates to authorize user login, since that is what most
people do with keys. People never really verify the host identity.

It works great and it's actually very simple. This will be my new SOP going forward.

Before starting to add hosts and users you need to create a Certificate Authority (CA) - which is actually just a key pair. It's a one-liner.

Every time you create a new host, you just need to copy the same file to it - the public key of the CA. And change one line in sshd_config to allow ssh certificates.

Every time you have a new user on your team who need access to servers, you have to generate a certificate for him. It's a one liner. He will copy the certificate to his own machine. And the ssh client will automatically send the certificate when needed.

Generating certificates is the part that could be automated. You could for instance be given a certificate that expires in 5 minutes. That would allow you to login and stay logged in. But if you need to login again, you need to generate a new certificate.

@jaredbusch and now Im running into this as well. Thank You for your steps!