Okay - Can we stop now? Going back and forth isn’t healthy.

Why apt-get over apt

Okay, the question stemmed from a Raspberry Pi 3b+ running DietPi. I’m not going to elude that I know how much is or isn’t available in this system, but it’s stripped pretty well from the bits I have read.

It’s what the DietPi Updater used. It isn’t my typing the command ad hoc. So - you can quit the beatings as they aren’t going to help me any.

On my NC instance running 18.04 - I use sudo apt update. So,.. there is that.

apt install man
Could I install this? Yep - you guessed it, - I can. Do I want to, I’m not certain. Will I, again, I’m not certain.

Now - here is a cup of coffee for both you. This topic is closed.

Those aren't even business class companies. Focus on that... consumer service and total lack of support sold at crazy high cost to gullible customers. Verizon, Comcast, Cox, Intermedia... these are the anti-shortlist of companies. The ones no one evaluating anything would talk to. Anyone who knows the vendors and basic business approaches would have ruled these out without having ever talked to them. There are loads of good vendors out there, these are famous as the "never, ever talk to them scammers." Other than Intermedia, famous for having bad support and insane prices, the others are ISPs, which violates basic business common sense.

That's not a rant, that's explaining what your tactics should be based on. Sure they are big, that's not their problem. These are shitting companies preying on the gullible. They have no incentive to make a good product or support the customer. They aren't cost effective, they lack modern (meaning post-2000) protections and flexibility that's just assumed to exist in any real business, they don't have good support, they put the customer at risk.

You clearly stated fail2ban actions not iptables actions. They are not the same thing.

@scottalanmiller said in Fanvil possible firmware issue, non-standard port:

We've seen that kill fail2ban so that it ties up so many CPU cycles that performance drops.

That said, managing iptbales would be the admin's job. Monitoring the bans and jsut blocking entire CIDR would be a normal need.

Preemptive IP blacklisting is also a normal, intelligent thing to do. By geo, common known CIDR, etc.

There is zero reason to leave any PBX system, for a typical American SMB, open to the entire planet by default.

@JaredBusch Yes, I read it, and it appeared to me to be the same issue you described. Don't shoot the messenger just because you didn't like the chosen solution. 🙄 :face_with_raised_eyebrow: :face_with_stuck-out_tongue_winking_eye:

@Dashrender said in Remote VoIP Phone Unifi Network:

@JasGot said in Remote VoIP Phone Unifi Network:

What are your routers? Ubiquiti?

Can you disable SIP ALG on them? (sometimes called SIP transformation on other routers)

He mentioned CONNTRACK - I know that's on USGs.. not sure if it's called that on ER's?

OK the ER does have CONNTRACK.
https://community.ui.com/questions/EdgeRouter-Infinity-conntrack-tuning/efc51d58-8464-41f5-b10e-f7d0fb10968b

All routers have a conntrack table..

Asset Tiger is pretty good in my experience. Hosted and free for 250 assets or less.

@Skyetel said in Skyetel Postcards - What's Needed:

The single login per computer is probably pretty easy to change, and I can add that to the change request.

Seems like this died on the vine 😞
8ef7946f-8922-41b8-93bd-d2fd252f1b73-image.png
2c52ae98-d7b5-46da-9da6-a8576ba99463-image.png

I would love to make use of this if the issues raised above were resolved.

@marcinozga said in Do you add CAA records to your DNS records?:

Yes, but word of caution. If you get certs from multiple different providers, don't forget to add records for all of them. Otherwise getting certs will fail, and it's almost impossible to troubleshoot.

Yes, like this.
caae902b-b24b-46a0-9102-6267aa67770a-image.png

@JasGot

The Xerox line is a work horse. The State pretty much has gone only to them. In the 'new' building I'm assigned to, we have about eight big MFP units per floor set with Follow-You print. It's handy - and yet also some times annoying. More so with being who are WFH and in office - they will some times come up with Printer Offline.

@gjacobse said in How To: for files:

That said, from what you are saying; is my ‘failure’ was omitting the /M which specifies the ‘searchmask’. And because of that omission, it didn’t have the comparative variable, and deleted everything.

There were two things that tripped you up.

The lack of /M to just find *.tmp files Using del *.tmp as the command

First forfiles is a for-loop that executes whatever command you want for each file it finds.
As @JasGot mentioned you will get one hit for each file it will find.

With /D -15 you are specifying that you only want to find files older than 15 days.
With /S you are telling forfiles to look in all subdirectories as well. You may or may not want that.
With /M you can specify a filter which matching filenames you want to search for. Without /Mit will find all the files regardless if it's named 123.tmp or installation.txt

Your initial command would find all files in all subdirectories regardless if it what name it had. That's why you needed /M.

Secondly, forfiles will execute whatever command you want for each and every file it finds.
Since your command was del *.tmp it would delete all tmp files every time it found a file.
What you really wanted was to just delete the file it found.
The @file will have the name of the file so del @file would only delete the file that was found.

Took another look this morning, and it's fixed. No idea what was going on with my account last week.

So, because Veeam reapplied the old snapshot, everything between then and now was lost.

If I keep the old snaphot as current, all the systems have domain trust failure.
I have a backup and there is only a single shared folder on here that will need restored.

Because this site is only 20 Windows computers, and I wanted to stop wasting time after 2 hours, I went brute force.

I disjoined everything from the domain and rejoined them.
With that resolved, I restored the C:\shares folder on the DC from the last Veeam backup.
Site is now working again.
Veeam's replication is now also in the correct state to fall back the replica to the main hyper-v server.

Not fucking touching that tonight.. I R DUN.

Edit: Maybe not the perfectly correct answer, but the answer I went with.

So one of our guys tracked it down. It was a typo in the .htaccess file that we received from the customer.

@Pete-S said in eVetPractice Printing - How it Works and Why Windows & Mac Are Required:

@scottalanmiller said in eVetPractice Printing - How it Works and Why Windows & Mac Are Required:

@Pete-S said in eVetPractice Printing - How it Works and Why Windows & Mac Are Required:

Please share what html function/javascript function/tech/whatever you use to make this happen.

I think we are at cross purposes. I'm not saying that the app can print from INSIDE the browser. I'm saying that the app can present the HTML TO the browser and the browser's print function can print directly without needing a third party application. Straight from browser to printer.

However, JavaScript can do this because the HTML5 DOM allows for it, as well. So no need to HAVE to use the browser's print button. If you want the page itself to do it, this is the DOM call... window.print();

Thanks Scott. We are at cross purposes because I was being very specific when I mentioned where the print is rendered. In a lot of label applications you can't have it rendered in the web browser from html because you need to send special commands to the label printer inside the label. More advanced label printer have lots of special commands, for instance to generate bar codes on the fly (not from graphics) or time of day or a serial number for each label printed.

Dymo doesn't have that. You can print these exact labels directly, nothing special needed. And this software doesn't need that, they have three products that print identically from the same vendor, they all print the same codes and only this one do they not provide a direct print option. But even in the cases that you are giving, that's not printing exactly, it's using a third party application to do some of your work for you. Again, totally nothing wrong with that, but it's a hokie setup and a really bad design to keep basic printing out of your platform agnostic app and require a potentially buggy or discontinued third party and very limited application to do that simple task for you.

Same vendor, but different product, uses MS Word in the same way. Can't be bothered to do basic tasks in their software and actually put in more effort, rather than less, to make Word do it for them.

@scottalanmiller said in What makes a system HCI?:

@DustinB3403 said in What makes a system HCI?:

@scottalanmiller Where in that quote do you see that Hyper-V 2019 is being used?

That's why I stated it, to make sure that it was.

Oh

@JaredBusch said in Anyone have a script I can tweak to reencode my h264 media to hevc:

@Pete-S said in Anyone have a script I can tweak to reencode my h264 media to hevc:

If you have a larger movie collection say 10,000 movies @ 90 minutes runtime, you'll have 30,000 hours of encoding ahead of you before you've finished that job. That will take 3.5 years.

And who would legally have something like that? Anyone who was in that scenario would just ☠ download as needed.

I don't, but had I stayed collecting like I used to, I'd be pretty close at this point.

I just tried out the Android app. It's not terrible on my Galaxy Note 9. There is a significant delay when writing on the screen using either finger or pen. I'm definitely gonna keep my eye on this one.

Figured it out. Both DC's had inconsistencies between configurations and they basically weren't replicating or failing to serve DNS requests because the Interfaces were all over the place.

I used this opportunity to take a crash course on Configuring DNS to understand all of the settings, and I was able to fix it by thoroughly sweeping the settings and correcting as I went.

I've never seen the Security log so empty before. It's a great feeling. Also, I learned a bit about DNS so win-win.

@manxam said in What does Slackbot do?:

@Pete-S said in What does Slackbot do?:

Slackbot-LinkExpanding

When someone pastes a link in Slack it attempts to reach out to the site linked to A. verify that it's a valid link and B. tries to create a small screenshot with a blurb about the page in question.

I.E.
alt text

Awesome, thanks!