Then there's no reason to make files.gemequipment.com. Just stick with files.gem.local until you're ready to make that public. Then once you make it public, you can get whoever controls your external DNS to add files along with it's public IP.

@JaredBusch said in Need a cloud hosted PBX provider, looking at Jive:

@magicmarker said in Need a cloud hosted PBX provider, looking at Jive:

@JaredBusch said in Need a cloud hosted PBX provider, looking at Jive:

@magicmarker said in Need a cloud hosted PBX provider, looking at Jive:

@JaredBusch Hi Jared. I will try contacting you today to discuss my options with you.

Was good talking to you. If you have more questions, just ask.

Thanks Jared. I know I will have more questions. FreePBX does seem like the best option for me. Now time for some math.

This might help you. I think I say "math" once or twenty times...

https://www.spiceworks.com/spiceworld/post-event/#it-pros?video=18

Oh wow. Thanks for the video. Great presentation at Spiceworld. My wife is a 6th grade math teacher, may need her help with this excel spreadsheet.

@Pete-S said in Edge Router X OpenVPN Configuration:

Be aware that you might run into some performance issues with that unit and openvpn - depending on the speed of your link and what cipher the openvpn server uses.

Expect to top out around 25 Mbps according to this: https://community.ubnt.com/t5/EdgeRouter/Test-ER-X-OpenVPN-performance/td-p/1615188

The 2.0 firmware will increase that thanks to a community member posting some new configuration changes to the source code.

@mroth911 said in locking down network:

so basically I am helping with my church/School , they need to connect to apple/android store. youtube. but social media sites locked down and p2p networks and anything inappropriate for k-12.

So OpenDNS is doing the trick for now., However there is no cherry picking, and certain users need the ability to connect to facebook as well. Posting via webpage what is going on in school etc.

Thats the situation at hand.

They received a letter that someone on the network was downloading from BitTorrent. and it broke digital media anti-piracy law. etc. So they are naturally freaking out.

This is something I want to setup and walk away.. I am just doing this to help them.

Blocking Bittorrent without an application level firewall isn't that easy. Talking to the tracker happens via DNS, but talking to the other clients normally is just via IP address.

You could block all non needed outbound ports - but again, I think Bittorrent can work over port 80 and 443, so not really that helpful.

@JaredBusch said in Suggested vendor for selling used equipment?:

The local scrappers come and take it all, no charge. Then they spend their time tearing the shit apart for the metals.

I wish I had this. I have to drop it off 20 miles away or they charge to pick it up.

I've run Pi-Hole in Docker, now I have it on Raspbian on Rpi 3+, I might deploy it inside Docker Swarm on my Rpi cluster at some point. I'm also trying out alternative, Adguard Home, on Rpi too, although installation is not as straightforward as Pi-Hole.

@scottalanmiller said in Mitel MiVoice Office 250 Attendant Console won't connect:

@Dashrender said in Mitel MiVoice Office 250 Attendant Console won't connect:

Came in this morning - while still waiting to hear from the vendor for support - and it's working as desired... whatever was hanging it up must have tired itself out.

Weird

It really was - I rebooted both the client PC and the server component for that system, I would have assumed it would have released whatever was locked... but nope. And the other two computers worked just fine that access the same system.

@abdel-hakim-abousrea said in Elastix & Vtiger CRM Integration:

I have VtigerCRM webpage on windows server 2008r2

You should fix this. This is horrible. vTiger is free and runs better on free Linux. Get Fedora, Ubuntu, CentOS, whatever. Get something current. Never use XAMP, it should not exist. Everything about this setup is bad, but can be fixed.

You have two major things to fix here, the web server and the phone system. Both are very high priorities and both can be fixed for free. You aren't trapped with either, so just fix these. Then worry about integration once you've resolved the critical issues.

Ubuntu is the only OS that I know that actually has this option.

Would be nice if other distros had this as well. But I guess it's just a testament to how commercial Ubuntu is.

@DustinB3403 said in With ESXi Licensing what happens if I let it lapse:

Microsoft started pulling Security patches off of their servers after your contract expires but the platform is still supported.

Microsoft no longer provides patches for XP Server 2003 unless you pay them a lot of extra money. It's basically a license with security updates for a fixed interval that can be extended for a ton of money...

@travisdh1 said in NextCloud Talk 5.0.0 Update Error:

I've seen the updater do that sort of thing before with NextCloud updates. The system always puts itself into maintenance mode to actually do the update, so if there is a hitch in it's update, you have to go change it back to normal mode.

I generally complete the update using the command line process if I run into an issue with the web page method.

This was only an app update, though. I've seen it with NC updates.

@scottalanmiller said in NGinx Configuration Block for Zimbra Reverse Proxy:

Someone was looking for this specifically so...

server { client_max_body_size 80M; server_name my.domain.com; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Host $http_host; proxy_set_header X-NginX-Proxy true; proxy_redirect off; location / { proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Host $http_host; proxy_set_header X-NginX-Proxy true; proxy_pass https://myip:443/; proxy_redirect off; # Socket.IO Support proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; } listen 80; ssl_stapling on; ssl_stapling_verify on; ssl_session_cache shared:SSL:10m; add_header Strict-Transport-Security "max-age=31536000; includeSubdomains"; listen 443 ssl; # managed by Certbot ssl_certificate /etc/letsencrypt/live/my.domain.com/fullchain.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/my.domain.com/privkey.pem; # managed by Certbot include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot }

Remember to create one for the Admin console on port 7071.

@Dashrender said in UniFi USG and XG:

Because it's a firewall only - other than a VPN termination point it shouldn't be doing any application filtering, etc - I'm guessing there really isn't a real need for more than 1 GB of RAM that many of them have.

The 16 GB of RAM on the XG is likely there mostly for cacheing the 10 GB connections.

Right, the CPU count and RAM are for the packet throughput.

@coliver said in Is there a Free to Use Java 11 Option?:

https://adoptopenjdk.net/

Nice

Chocolatey has OpenJDK 11, too.

Fight - fight - fight...
🙂

@black3dynamite said in VyOS native Salt Minion:

@scottalanmiller said in VyOS native Salt Minion:

That's great. I'd not played with that yet.

I wonder when they will get one (or this one) running on EdgeOS. Now that would be awesome.

Is EdgeOS a Debian-based Linux system like VyOS?

EdgeOS is a Vyatta fork, just like VyOS. They are extremely close. To the point that people constantly confuse them.

@Pete-S said in Redundancy is building a bridge and an identical one immediately next to it:

Regarding evolution we are probably more geared towards surviving external threats than we are towards surviving internal organ failures by old age and a sedentary lifestyle.

Right, almost certainly. Partially because in the big picture, that's the bigger threat. Not in this particular moment in time, although in parts of the world that remains true. But to get to where we are, we have to be geared towards overall survival and can't change the design quickly when the situation suddenly changes.

@dbeato said in Using Windows 10 Public ISO with VLSC MAK:

Sot it just activated it right?

Yup.