@scottalanmiller said in What Are You Doing Right Now:

@GUIn00b said in What Are You Doing Right Now:

@scottalanmiller said in What Are You Doing Right Now:

@GUIn00b said in What Are You Doing Right Now:

Contemplating how to leverage 2 ISP's for supplemental bandwidth when needed using 2 separate routers that are both servicing the same LAN.

......So I'm gonna go post a new topic!

Saw the post. It's not a fun thing. What I did when I had this was I just separated things by machine. Some machines used one connection and some the other based on their workloads. It was "static" but let me use both.

You described basically what I want to do. For general user media consumption (YouTube, Facebook, Amazon shopping etc.) it can just be shipped out the Spectrum cable connection. But for my servers I more or less want those bound to the WAN with static IP. However, my static WAN has slower download speeds than the Spectrum cable. (Static WAN is 50Mbps up and down, Spectrum is 300Mbps down). So when it's time to do a giant update or download new ISOs or whatever, the 300Mbps makes a big difference in time spent waiting.

Separating things at each machine that needs the static WAN by giving them static DGW's is worthwhile for me, but it would be nice to have some load balancing intelligence happening so that large downloads come in through the fast pipe no matter the machine.

I've set up a LANcache for my Steam library which helps a lot for 130gig games and whatever. But when there's a 3-4gig update that isn't cached, the request is sent out the client machine's DGW. I think there's a way to do "Split Horizon" or something so I can setup a couple lists of domains that get allocated to one Gateway or another. Like one list of domain/hosts would be like the known Linux repo hosts would definitely be piped over to the fast download cable. But any requests for say some Linode hosted VPS's I'd want trafficked out the slower static pipe.

Yeah, I still haven't made a decision one way or the other and still have them operating with separate LAN's lol! Full disclosure, I enjoy the relationship between my a** and my couch way too much to be bothered. Potato chips not required but quite frequently present. That's just truly my happy place. So the idea of having to bend over to move a cable or something to get all this setup like I want is just a total buzzkill 99% of the time. But that's the key. 99% of the time. Not 100%. So.... someday. Someday....

Realistically for what you want to do you need a router that understands the traffic and is dividing it up. DNS or split horizon can't do the job. Dividing traffic along paths is actually quite difficult. Especially once you add encryption on the traffic.

That is the one and only reason VMWare bought Velocloud, and also the only reason to use their SD-WAN device. They can route traffic to different WAN connections based on pre-defined rules. You can have latency dependent streams (Zoom, SIP, etc) routed differently than "bulk" streams (Google Drive, Dropbox, etc).

Just hope you never have to contact support.

@gjacobse said in Does a script imply Automation?:

Simply thus

Does a script imply automation?

Isn't that the entire point of a script?

Where did that question even bubble up from?

As one of my co-workers quipped "They're not getting any malware now!"

@rojoloco said in RojoLoco needs your Linux brains!!!:

No, we're not switching everything over from Windows... we only need a single VM... to run a single Cyber Recovery application from Dell to manage our fancy new systems. I know, I don't want to hear it, all those decisions were made while I was either still in the hospital, or during the 8 following months when I wanted to die because I couldn't walk. Definitely not looking for a critique of the design or components.

That being said, here are the requirements Dell sent over:

The management host is a physical or VM host. existing hyper-v host

The management host requires the following:

● One of the following operating systems with the latest updates, patches, and security patches:
○ CentOS Linux 7.6, 7.7, 7.8, 7.9, and Stream 8
○ Red Hat Enterprise Linux Version 7.6, 7.7, 7.8, 7.9, and 8.x
○ SUSE Linux Enterprise Server Version 12 SP5

● 4 GB RAM
● 200 GB disk space:
○ 1.5 GB free space to extract the Cyber Recovery software
○ 10 GB or more free space for installation of the Cyber Recovery software no problem

The following Docker components are required to install Cyber Recovery software:

● Docker Version 17.06.0, 18.09.7, 19.03.5, 19.03.8, 19.03.12, 19.03.13, 20.10.2, and 20.10.6
NOTE: Red Hat Linux and SUSE Linux Enterprise Server only support Docker Enterprise Edition (EE). CentOS Linux also
supports Docker Community Edition (CE).

● Docker Compose Version 1.21, 1.24, 1.25.3,1.25.4, 1.26.2, 1.27.4, and 1.29.1

So my main questions are:
Which OS should I choose?

With those options and limitations, I'd use CentOS Stream 8.

Where does Docker go in all this? Pre OS? Post OS?

It's an application you install, so post OS.

Same question for Docker Compose?

Docker Compose gets installed after Docker. Whichever OS you choose, you should be able to use the Docker and Docker Compose included in the standard repository, but double check the version for yourself.

@EddieJennings said in What Are You Doing Right Now:

Practicing installation of Red Hat Identity Manager.

Hrm, I think it's about time I poked at FreeIPA again.

@srsmith Every time I see Dynamics mentined, I cringe. It's such a mishmash of this, that, another thing, why don't we go ahead and throw in the kitchen sink as well? It's worse to attempt to support than even Quickbooks with all of it's known issues.

If nobody is available at the MSP to support it, have them open a ticket with Microsoft. It sucks not being able to interact with Microsoft directly, but with nobody left at the MSP that knows your particular instance of Dynamics there is probably nobody that knows what might have happened where.

@stuartjordan said in KVM or VMWare:

@obsolesce I should of imagined it had something to do with Azure.

Probably has a little something to do with the $10 per core/month fee as well.

@notverypunny said in KVM or VMWare:

@dbeato said in KVM or VMWare:

@jaredbusch It is supported you can either pay for support or run OpenSource.
https://xcp-ng.com/

It has been super stable compared to Xenserver/Citrix XenServer.

Not looking to take over or diverge too much, but what stability issues did you have on Citrix? We're a 95% Citrix shop and rarely have issues with the hypervisor knock wood Just wondering if we're lucky or if there's something else at play.

I never had any issues with stability when running Xenserver. I quit using it because they kept pulling features out of it, or charging licensing fees for features that were once free.

@jasgot said in Understanding STUN???:

@travisdh1 said in Understanding STUN???:

@jasgot said in Understanding STUN???:

@travisdh1 said in Understanding STUN???:

You'll need to open network ports to the UniFi controller on the firewall it sits behind.

Except I'm not certain I even want STUN. If it does not provide a required component for these APS to work (they are working without it now) , I'll likely to leave those ports closed on the controller side.

That's the thing, they'll work in the current configuration, but you can't update any settings.

How so? I can make all kinds of changes and even open a debug terminal to it without STUN working.

Then that makes no sense to me. If the setup is as you describe in your initial post, then there has to be some way they are communicating through both firewalls.

@gjacobse said in HTML Editing:

As I search threads on HTML and specifically HTML editing, why not add one to the mix.

It's been a good while since I've done much HTML editing - most of the time when I was doing HTML editing I at least was editing existing code, or searching code to change one or two things.

I'm trying to clean up some SharePoint HTML that has gotten a bit messing with change of font and formatting. What I would like to be able to do - is strip all of the HTML code, leaving the text and URL for the text (clickable link).

Is there any suggested applications that would do such a thing, or is it likely that I'll need to go link by link?

I've not found any better way than using the search and replace with whitespace like @dave247 already mentioned. Also, the last time I did any actual coding instead of scripting was ~8 years ago now, and I used Dreamweaver to do it shudders

@irj said in KVM or VMWare:

@francesco-provino said in KVM or VMWare:

@WLS-ITGuy I haven’t been in this forum for years, and after years I still see similar questions and the same arguing…

Do yourself a favor and learn something useful like Terraform to automate VMware or similar stuff, the real deal today is not wasting your time reinventing the wheel and doing manual operations, not saving a few bucks on hypervisor’s license.

I agree here. Many on here don't understand the benefits of IaC and proper SDLC because they haven't been exposed to it yet. Penny wise and pound foolish.

Granted many of these one man shops don't have the resources (IT employees) to do it. If you're fixing printers you don't have the bandwidth to do this kind of stuff. Either way there is still pain in the long run for not doing automation, but for them it's just not feasible.

I'm all in favor of automation.

What I question is why you NEED VMWare to automate things? I've done it with XenServer/XCP-NG, and I don't see why anyone couldn't also automate KVM based things as well.

@irj said in ADUC Set Password Expiry:

@gjacobse said in ADUC Set Password Expiry:

It's likely we have all had to address this at some point in the last eighteen months or so; A person sent to work from home for whatever reason has just had their password expire. They don't expect to be back into the office for (x) number of days.

Why are they treated any different compared to any other user? You either need AD access or you don't. Working from home doesn't change that aspect.

If they work from home, authenticate to AD every day, then why can't they reset their password?

If they work from home and don't use AD for 90+ days, then why do they even have AD account at all?

Resetting a password remotely does not work automatically like it does on-site. The users have to manually do it themselves before the password expires. I'll give you one guess how many users even know how to change it manually

My apologies for resurrecting a long dead thread, but I just collected the links today because I've had multiple places I wanted to reference them this week.

https://www.cnet.com/how-to/lenovo-superfish-adware-uninstall-fix/
https://www.pcmag.com/article2/0,2817,2477277,00.asp
http://www.zdnet.com/article/lenovo-reportedly-blocking-linux-on-windows-10-signature-edition-pcs/
https://arstechnica.com/information-technology/2015/02/lenovo-pcs-ship-with-man-in-the-middle-adware-that-breaks-https-connections/
https://mangolassi.it/topic/11320/pentagon-warns-against-using-lenovo-equipment
https://mangolassi.it/topic/7748/lenovo-screws-the-pooch-yet-again-on-the-security-front
https://mangolassi.it/topic/5751/lenovo-accused-of-using-rootkit-like-methods-to-sneak-software-onto-clean-windows-installs
https://threatpost.com/millions-of-pcs-affected-by-mysterious-computrace-backdoor-2/107700/
https://www.theregister.co.uk/2019/08/23/lenovo_solution_centre_cve_2019_6177/

https://mangolassi.it/topic/14538/lenovo-if-it-s-on-your-network-you-are-breached/50

And a few days later, yet another patched version to fix the broken fix. Isn't security so much fun?

https://community.ui.com/releases/UniFi-Network-Application-6-5-55/48c64137-4a4a-41f7-b7e4-3bee505ae16e