My old post on the topic.
https://www.mangolassi.it/topic/13020/estimating-sip-trunk-costs

@gjacobse said in UBNT: Disable SSID per AP:

@travisdh1
Version 7.1.66

They probably changed it.

Guess it's time for me to upgrade.

@stacksofplates said in Experience with NDR Solutions:

Why is Sally accessing this service from a non work computer at 3 am her time with a chinese IP address? Sure this request has the password but that doesn't sound valid.

Which means you can automatically perform additional validation with MFA, or straight up deny access.

There's a lot of options really. You can only allow access to certain systems and/or services via company devices enrolled in MDM, with up to date OS, encryption, and endpoint protection. You can verify endpoints and users with passwordless auth via Beyond Identity and in certain cases use additional MFA via Duo or whatever you want to set up.

Sally is trying to log in to her company email. She's authenticated via passwordless auth via Beyond Identity on her work computer. Her work computer passes the health check seamlessly through BYID and allows her to access her email. Maybe she's also prompted for MFA always, or maybe only if she's logging in outside her normal geographic area on her work computer. Maybe (e.g. email) access is denied totally if from a non-company device. Options...

@JaredBusch said in SpiceWorld 2019 Events, Plans, Meetups:

@scottalanmiller said in SpiceWorld 2019 Events, Plans, Meetups:

they hold it in the one country where I have extremely limited time allowed (without paying massive penalties)

That is your choice to avoid taxation. Nothing else.

My choice to avoid an enormous price for visitation. It's not my choice to tax in that way, it's my choice to live within the constrains that cannot be avoided.

Just to make it clear, I'm using rclone sync to do the job on a headless Ubuntu container.

Revisiting this now two years later, as it's been that long since I last synchronized my personal OneDrive photo and video archives to Wasabi.

Most everything is great, except when doing a few --dry-run tests on some already-synchronized source/destination remotes, I noticed a few thousand files in total among several OneDrive archives result in a potential re-sync. Not a huge deal, except it's a slow process to sync.

The files themself didn't change. I verified from both the source and backup that the CRC is the same on a bunch of to-be re-synced files, but perhaps the modification time changed at the source due to other syncs or who knows.

I would like to force RClone to use checksum only when synchronizing. Is that possible with an rclone sync between OneDrive and Wasabi?

@gjacobse said in ManageEngine: Desktop Central - MFA:

@scottalanmiller

It is a gas soaked bonfire waiting for a match.

Fixed that for you.

@Pete-S said in Linux alternative to FreeDOS?:

Maybe Alpine linux would be a good fit. I haven't used it as is though. Just know it has a small footprint, uses busybox which is a favorite for embedded systems and Alpine is also popular for container use.

Ubuntu fits on a stick and is well known. I'd just stick to that because it is easy and has loads of tools.

@Bless said in Help:

improve on my security and when ever he tries to login it affects the connection and the performance of the link

Well in theory you can block the attempted connection earlier, like with IP blocking, but typically that doesn't get you that far. Does the controller need to be on the internet and exposed?

@JaredBusch Yup, and they want to do a audit of devices using a deployment tool that is not even a Microsoft one.

@maxmustermann Since you are openly a vendor we'll keep the post. But as a community we expect vendors to participate generally before posting their solutions where appropriate. These seems like an appropriate place, so not a big deal. And welcome to the community.

We'll add a vendor flag so that it is clear you are a vendor. We normally request that this be done prior to posting any self promotion of products so that people understand when someone is promoting their own solution rather than on they've heard about or tried.

@JasGot why doesn't PJSIP work on them? They should really register just fine using PJSIP. SIP is not supposed to be really anymore on asterisk based systems, its deprecated.

@Dashrender said in ATA on Skyetel???:

@scottalanmiller said in ATA on Skyetel???:

@Dashrender said in ATA on Skyetel???:

@scottalanmiller said in ATA on Skyetel???:

@Dashrender said in ATA on Skyetel???:

@scottalanmiller said in ATA on Skyetel???:

@JasGot said in ATA on Skyetel???:

I have two issues, when the ATA dials out, it is presented with FAX tones. I think Skyetel is doing this.

Try dialing out with a regular SIP phone to test. But Skyetel should never present fax tones outbound.

Well, at least not normally. 🙂
with their fax service they will.

Outbound?

if you buy that service from them - yes. They put a piece of equipment on your network that actually accepts the fax locally, removing the internet from the equation. It then sends a data burst to Skyetel, and then Skyetel puts the call from it's own servers onto the PSTN.

What does that have to do with SIP connections, though?

It doesn't - I was only pointing out - if you get fax service from Skyetel - you can get the fax tones provided by skyetel for outbound faxes... you stated something to the effect that skyetel would never do that - and in fact there are cases where they do.

I did. And they don't. Your example makes no sense because I stated that they'd not provide a fax signal outbound on a call. You then stated something unrelated that doesn't have a fax signal. Their service bypasses the call so the situation we are discussing never happens. So in your example case, they still don't do that.

@notverypunny said in OT / IoT asset management:

My main concern for the present effort is getting an accurate picture of what SCADA / OT etc devices we've got in the environment so that I know if action has to be taken or flagged to the appropriate controls group when vulnerabilities are flagged online.

Sounds like your needs are primarily security centric.

Give cyberx a look then. It's now called Microsoft Defender for IoT but it covers SCADA and other OT tech as well. https://azure.microsoft.com/en-us/services/iot-defender/#features

I do have a lot of experience with documentation of these kinds of system in a variety of industries, like manufacturing industry, pulp and paper, chemical plants etc.

In a lot of cases automatic discovery can be problematic and won't work.

If you have a lot of control systems, most of the manufacturers will have tools that can keep track of their own devices. Especially when it comes to DCS systems that you'll find in larger installations.

You will likely need some kind of hybrid approach.

It all depends. You can inspect the layers of the images. You can also scan with trivy, snyk, etc.

You can also do what @IRJ mentioned. There’sa few ways to handle this.

@xavierdelaraunt said in User Profile handling anno 2022:

I have quite a lot of settings I cannot get into the default settings in any way like that.

I have not ran into any policies, settings, etc that could not be don't through Intune. It would be very hard for me to think of something that I can't do to a device related to those through Intune.

If you are referring to user profile migrations across different devices (old device > new device), most of that can be resolved by better systemic practices prior. That can be a shitty experience regardless of MDM or device management system.

@JaredBusch said in How to find lost phone numbers?:

@Dashrender said in How to find lost phone numbers?:

where are the 100 number I've been paying for for years that are suddenly not showing up on my bill?

They probably haven't been paying for them. They just did not know it. That is the point.

Correct.

@WLS-ITGuy dear lord.

@scottalanmiller said in Windows Server 2022 and Suspect Edge Instability:

Tested the fix of changing nesting to disable. So far, so good. But it'll take time to know.

Another day, no crashes. So far this fix is working and is really easy.

@Dashrender said in Zoho Mail has new secure sending option:

@Pete-S said in Zoho Mail has new secure sending option:

@Dashrender Good to know.

One purpose of the OTP is that you can't forward the email and have another person read it.

Not directly forward - sure, but you could screen shot it and forward that to someone.

I assume the OTP is more so that people don't have to create accounts in the Zoho system.

It looks like Zoho had the forwarding thing specifically in mind since they mentioned that on their website. A lot of people will forward messages without thinking about the sensitive information that is usually longer down in the mail. I've seen that a lot when I get emails forwarded to me with information that is clearly not intended for me.

In the MS system you have to create an account, same goes for Zix, even if you will only ever read this one message on that system.

Yeah, I hate that. It's just to get more users. I love OTP though.

I'll have to check how these secure feature works with sending huge mail attachments as well. Haven't tried it yet.

It finally finished..
5624900b-cb96-41ee-b8f1-29373e262692-image.png

While I was waiting, I looked at pvecm status and found out it thought I had 4 nodes (see expected votes), when I only have 2 nodes.

76a4d9f9-18ba-4fe5-af47-4ea037892bfc-image.png

I used pvecm expected 2 on both and suddenly the updates moved on and I was able to log in to the web interface immediately.
d5ecd18f-8e07-4222-afea-0b04d215775c-image.png

In the web interface, it showed a pve3 and pve4. These were some test setups I did months ago.
I deleted the nodes from the CLI and everything looks clean again.
782c49e5-1457-499d-8c58-5afbc3c2efda-image.png