@jclambert said in MangoPI:

So, will these be give-a-ways at the next MangoCon? It is not an all-inclusive device, as it will require a carrier board of some type. For somethings this may be ideal.

https://www.techradar.com/news/mysterious-new-raspberry-pi-alternative-is-the-size-of-an-sd-card

That's a great idea!

@voip_n00b said in Internal SMTP Relay:

Anyone have a good guide for setting up a internal smtp relay?

Exchange on-premises?

http://blog.mpecsinc.ca/2018/06/exchange-2013-set-up-receive-connector.html

That's the method we use to allow anonymous relay for devices on the network.

@mr-jones said in "Site not secure" | Self-signed Certificate?:

@pete-s said in "Site not secure" | Self-signed Certificate?:

I'm not sure how you set up CA on Windows AD but I believe you can. Don't know if you can use that for non-Windows appliances.

I ended up using this approach. As usual, it took a bit of reading and research along with poking at the server, but I was able to use this approach.

Awesome! Yeah, I bet it took a bit of research to get it up and running.

I should say, not even a personal customer. It's just a friend who needs support. 🙂

@michiganbb So you thought that necro-posting and whining about a 3yo post would be useful? Give it a try and see if that fixes your issue. You would have to do this anyway. Even if something works for one, doesn't mean there's a guarantee it works for you,. Backup the PC and try the changes. If they don't work...move on to something else.

There was NO resolution here. Client was one of those who was difficult getting payment from so we terminated the relationship before we did anything else.

@dashrender said in Windows send only specific domains to proxy?:

@scottalanmiller said in Windows send only specific domains to proxy?:

Easiest thing is to override DNS for that domain and point to the proxy. Then the proxy can point on to whatever is real.

How do you propose doing that? remember these are laptops to be used from anywhere, I won't be able to control DNS in most places.

Are you suggesting putting an entry in hosts?

But an EASIER answer, I think, is to make your own CNAME.

@JaredBusch yes it's a contact center

Well - this vendor has called me back this morning (last bit of information was passed from the owner from a conversation they had with the vendor).

The vendor knows we are looking for remote access - specifically so we can run reports from home.

rep said - oh, you need that OK sure, fine - give me the user and their home IP and I'll get that added.

me - uh - home ISPs change IPs, sometimes daily - how are we supposed to keep you updated?

rep - oh - they'll have to give us the new IP so we can add it

me - /sigh - does your system support dynamic DNS based OK I screwed up - I should have just asked - Can you put an internet resolvable host name in your list instead of an IP?

rep - oh yeah I know what DDNS is

me - ok do you support it?

rep - well if you're attaching to your server using some type of VPN

me - no, that's not what DDNS is, I explain DDNS

rep - oh, I don't know if our system supports hostnames

me - can you check?

rep - sure

click

Of course this kinda flies in the face of the licensing issue the owner was told, but there's still hope - though very very little.

@dafyre said in NIC issue windows 7:

In the Network Adapter options, disable anything that says power managment.

There's a couple of power management options on the NIC, but IIRC there's some bus-related power management options in the power-profiles. I've seen the NIC-related options take an interface off-line, but where you're saying that it's disappearing completely, I'd be more inclined to look at PCI or chipset drivers and settings.

@pete-s yeah i guess im going to have to do that, it just bugs me that NGINX wont pass though the real IP

Completely defaultedChrome by deleting the entire Default folder. I only copied back the bookmarks file from there.

Other than starting to sign into my daily sites, I signed in for bookmark syncing….

Maybe in three months this won’t happen yet again.

However, all the concerns about licensing should raise red flags about your system. Yes, there are times that having something require licensing is okay or even desired. But you should always see it as a truly huge risk and one that you have to consider carefully. Licensing makes the most sense higher up the stack. For example, the application itself is the most likely object to justify licensing. The cabling is the least. Imagine how ridiculous it would be if your rack, desks, and cables required that you have a special license for each use!! It would be insane and you'd never stand for it (you might have to stand if your chair was licensed only to someone else's butt.)

Your hypervisor and operating system are closer to the cables, rack and desk than they are to the application in this way. These aren't components that you want to have at risk due to a need for licensing. Sometimes you have to, but it is rare and a "have to" would only be caused by an application and if an application puts you in that position for many companies that alone is a reason to question the viability of the developers behind said application.

At a minimum, something like ESXi introduces totally unwarranted complexity and risk and is something that can be quietly, transparently, removed and fixed during this process.

@mr-jones said in Help Sorting out a Firewall Issue:

@scottalanmiller Do you recommend any books that deep dive into this stuff? I know there's always google, but I feel like you would know of some really good reads.

It's been so long. Sadly I don't know a good one anymore. I am sure that there are lots, I just don't know which ones are good today.

@scottalanmiller No example output? 🙂

@garak0410 said in VPN Slowdowns - Anything I Can Do?:

We now have 6 people who work out of state. 4 in Texas, 1 in California and 1 in Maryland. They all have domain connected laptops that I pre-configure with our applications before they get them and they connect to our VPN via the build in VPN connector in Windows 10/11. Our VPN is provided by our Windows Server with port forwarding on our ISP provided Vigor firewall.

I understand issues like internet pipes and the "hops" it takes to get back to our office on VPN but we see some significant drops in speed. Some apps that require a lot of file transfers, are almost unusable.

Is there anything I can do on our end to aid in some speed increases? I'm also willing to spend money if we have to on software or a network appliance.

Thanks!

You should do some basic investigation so you know what you should expect.

For instance:

What is the speed in/out of your internet link to your VPN server? What traffic comes in/goes out over this link besides VPN traffic? Do you have any traffic shaping in the firewall?

It's very possible that low priority internet traffic, from clients in the office, is starving your VPN link of bandwidth.

@syko24 said in MeshCentral - Anyone tried this?:

@scottalanmiller said in MeshCentral - Anyone tried this?:

@pmoncho said in MeshCentral - Anyone tried this?:

@scottalanmiller

I misread that. Yeah only 140 agents.

Apparently I am far behind.

We use it pretty extensively 🙂

@scottalanmiller - Just curious are you still using Tactical or just Mesh these days? I've been playing around with Tactical internally and definitely a great solution. I know you mentioned a while back you were using that and Mesh separate from each other.

We use both. Tactical has been pretty good. Definitely use Mesh 90% of the time and Tactical just 10%. But it has been a good tool and we like it.

@dashrender said in Server 2012 R2 not installing Updates:

@scottalanmiller said in Server 2012 R2 not installing Updates:

@dashrender said in Server 2012 R2 not installing Updates:

Of course though - this thread is about Windows Server, not desktop - where this should be MUCH less of an issue with properly designed code.

Same code, they don't make it twice. Less hardware hotplugging, but probably just as many lines of code in use.

Less desktop apps on the platform, but you're right - the base code is the same.

Fewer desktop apps, maybe. But in the Windows world, server often is treated as a desktop (like 90% of the time) so the reduction is rarely what you'd hope. And there tends to be lots of server-only code too, often running as desktop apps.

@jt1001001 said in Reboot on ping loss:

https://www.amazon.com/dp/B0831T2DYV/ref=cm_sw_r_cp_api_glt_fabc_AVB60TSEZJDG854NV2HD

I use a product from Wattbox for this exact purpose on some comcast modems I use for POTs lines. https://www.snapav.com/shop/en/snapav/search/ip-power?krypto=5%2FcdcXS%2FV0TFwTz8d8FgC3vtSPg%2BpODS