@anthonyh said in Zimbra, fail2ban, CentOS 7, and firewalld:

@scottalanmiller said in Zimbra, fail2ban, CentOS 7, and firewalld:

https://arstech.net/zimbra-fail2ban-setup/

I came across that article and it's the most promising. Though it's still a iptables based fail2ban configuration. I'm not sure if it's as simple as changing the references to iptables or if tweaking it to work with firewalld is more involved.

I suppose an option is to disable firewalld and install iptables. I've done that before in the past.

Hmm...

That's probably what they did, because you need to disable firewalld to enable iptables.

Conversely, I over-allocated vCPUs across several VMs (ESXi) when I was new to type 1 hypervisors and ran into performance issues associated with high CPU ready times. After scaling down, performance improved dramatically.

@FATeknollogee said in Fedora 29 Server (or 28) install is stuck...?:

Update from SM:
"After we perform more test and use a non-widescreen monitor, we can finish installing Fedora 29 on our 4C version MB."

Very odd.

@bnrstnr said in FreePBX fail2ban or SIP provider whitelist on router?:

@scottalanmiller said in FreePBX fail2ban or SIP provider whitelist on router?:

@bnrstnr SIP-ALG in ISP provided gear is nearly universal.

Guh, who would have thought... Is SIP-ALG purely sabotage or is it useful in certain scenarios?

Actually sabotage. Ubiquiti is the only vendor that I know where it works most of the time.

Most firewall vendors are also either phone companies or in bed with phone companies and have a huge interest in convincing people that other phone products don't work reliably.

This is the sysem that I use for work.
f1ef56be-6669-4c8d-9005-745e991c9894-image.png

We only have 6 active users. All use the Sync Client.

We never have any issues with conflict files.

@scottalanmiller said in What tools do you use...:

Some places use RMM in house. It's more logical than it seems at first glance.

Right, if you use one that bills by tech and there are only a few of you, this can be quite effective.

Just ignore the billing part if you want.

Or better, set it up to get costs for all this internal work. Could be useful next time hardware, services, or staffing are discussed.

d049c01f-e361-4e09-8b35-7e042814f9ad-image.png

@Spiral said in Court Case - Court orders company to produce previous records:

I will look to see if I can find it. I remember reading this issue, and the referenced case from years ago.

This is not an “issue”

This is simply how it works.

If it was in the news it was because some company was stupid.

@flaxking said in Which is easier to learn Ansible or Chef or Puppet:

The whole container/CM thing is kind of at a weird place right now. With containers, we've sort of migrated back to the golden image thing, just with the pressure to create an image using a config file. I don't really like images on docker hub that don't have links to the dockerfile.

Yes, images that can't be tweaked without rebuilding. It's has benefits, and a lot of caveats. Having to deploy new containers for every patch is pretty silly. And so many things can't be immutable, including the platform on which the containers run.

At the end of the day, containers are either mutable, or immutable. The former need CM inside the container, the later need it outside the container.

I just did it. The guide still applies, apart from getting 15 and not 13.

https://techsnips.io/

@DustinB3403 said in MS Visual Studio Update: KB4336999:

@notverypunny said in MS Visual Studio Update: KB4336999:

Haven't put any more time into this, as it seems that my machine is one of the only ones hit. Weirdly enough the KB shows as already installed and needed at the same time..... this is worse than old school linux dependency hell....

Worth noting that Linux has fixed a lot of their issues and will at least tell you, dnf install <something> required before this can proceed.

Oh for sure, I've yet to play with dnf in depth, but yum was pretty stable the last time I had much of anything to do with a RH based distro. apt-get has been rock solid for years now, last time I can recall anything messing up with an apt based distro was on ubuntu 8.something if my memory is correct. zypper seems pretty solid too, but I've never been able to warm up to opensuse.

@JaredBusch said in Unable add plugins and themes to Wordpress:

@EddieJennings said in Unable add plugins and themes to Wordpress:

@JaredBusch said in Unable add plugins and themes to Wordpress:

httpd_can_network_connect

And setsebool -P httpd_can_network_connect on appears to be the answer .

And has nothing to do with contexts

True. That was a point of confusion.

@EddieJennings said in Zimbra Certbot Scripts:

Since acquiring and renewing a certificate can be automated with Certbot, would it make sense to have the cert in two places? HTTP/HTTPS traffic passes through your ngingX VM, which receives its certificate through its own instance of Certbot. And you have a second instance of certbot that functions on the Zimbra server itself, so you have a cert for IMAP and SMTP connections.

Or, for you, does it not matter that IMAP and SMTP connections are unencrypted? Since beyond your own mail server, there's no guarantee that encrypted connections will exist.

You could, but it would still be such a pain to automate as certbot can't renew the certs alone for Zimbra, that you might as well just use one.

@bnrstnr said in Vultr Node Failure - VPS Recovery Unsuccessful:

@JaredBusch said in Vultr Node Failure - VPS Recovery Unsuccessful:

And you have a 2 month credit coming.

If you paid the $1/month for automatic backups you could be online in an hour or less.

Yeah, it was for testing, so I wasn't going to pay more. Not too worried about it.

Just sharing the experience. Not sure if anybody else has encountered this yet with Vultr.

1 host erasure with recovery of my VM (luckier than you) plus a number of networking issues at DC level in 6 months (Amsterdam data center).

@scottalanmiller said in OSX Unix Using Brew to install software remotely:

@DustinB3403 said in OSX Unix Using Brew to install software remotely:

So I can just unpack the dmg file, and have an Copy job, copy the application to the Applications folder for any user. As my admin user account. All via Apple Remote Desktop.

This works without issue.

What I am trying to do is avoid having to locally download the app at all, unpack it and then have a Copy job to run. I'd like to streamline the process.

That's what the script is doing already. Making your own "sudo friendly" script for your install might make sense.

The issue is there is no way AFAIK without adding my local admin account to this group.

Which is more work than it may be worth since the existing solution works but is annoying.

Good note, but horrible formatting.

@Pete-S said in Need a web GUI interface to MySQL:

@jaredbusch said in Need a web GUI interface to MySQL:

@pete-s said in Need a web GUI interface to MySQL:

@jaredbusch said in Need a web GUI interface to MySQL:

@emad-r said in Need a web GUI interface to MySQL:

For admin stuff, most devs uses mysql workbench its 28 MB and has alot of functionality.

@pete-s said in Need a web GUI interface to MySQL:

If it doesn't have to be web based you could use MySQL Workbench - which I think is more capable than the web GUIs.

Overkill and slow.

It's not overkill if you're a DBA or developer.
And if you're smart you install it on the machine you do admin from and not on each server.
And you did ask for the best...

Actually, no I did not. Read the OP again. Don’t forget the title of the thread.

A fat client is almost always overkill and slow. But MySQL Workbench is a total piece of crap.

The web tools you are talking about also requires a web server and a php installation so they're not exactly "thin" but you want something simple on a LAMP server or similar. I get that.

MySQL Workbench has it's place too. It's to MySQL what SQL Developer and Enterprise Manager is to Oracle DB. I find it useful and use it almost daily.

MySQL Workbench has very little use to me as it is such a heavy handed client. Yes it works. No I do not like it.

For a client on Linux, I prefer Azure Data Studio actually. It is lightweight and lets me work without being in my way. It is based on the VSCode backend to my understanding. If it ever gets MySQL connectivity it will be perfect.

@DustinB3403 or planning for a night out on the town, and dressing up, calling all of your friends, pre-paying for drinks and dinner, running on credit card debt to do it, taking an Uber there, and then deciding not to get out of the car while all of your friends are waiting on you.