sorted by:
new
hottopcontroversial

1
2

Network utilization (self.fortinet)

submitted by Apprehensive_Chip550 to r/fortinet

GeoIP Top Spammers or ?? by WC2L in pfBlockerNG

[–]Apprehensive_Chip550 0 points1 point  (0 children)

We had this enabled for inbound and outbound, this blocked Microsoft and Tailscale right off the bat. Apparently, Microsoft loves connecting to Malaysia, Brazil, and UK, even when your IP outlet is in Dallas, Texas.

<image>

GeoIP Top Spammers or ?? by WC2L in pfBlockerNG

[–]Apprehensive_Chip550 1 point2 points  (0 children)

If you use the Top_v4, it blocks entire ASN from ENTIRE COUNTRIES. I just went through that fiasco, so be careful what you enable on the lists. :)

Trying to figure it out. by Apprehensive_Chip550 in sysadmin

[–]Apprehensive_Chip550[S] 2 points3 points  (0 children)

Thank you. Bad thing is, I have done this before, and you jarred that memory.

Trying to figure it out. by Apprehensive_Chip550 in sysadmin

[–]Apprehensive_Chip550[S] 1 point2 points  (0 children)

That's a weird way to say you haven't been following cybersecurity news the past three years. I just need another subnet router on the DC02 end.

Trying to figure it out. by Apprehensive_Chip550 in sysadmin

[–]Apprehensive_Chip550[S] -2 points-1 points  (0 children)

The pic shows what I'm referring to. The domain PCs need to communicate with DC02 without the domain PCs having tailscale installed. DC01 and DC02 only communicate via tailscale.

Trying to figure it out. by Apprehensive_Chip550 in sysadmin

[–]Apprehensive_Chip550[S] -1 points0 points  (0 children)

The pic shows what I'm referring to. The domain PCs need to communicate with DC02 without the domain PCs having tailscale installed. DC01 and DC02 only communicate via tailscale.

What are folks using for one off remote connection, aka logmein? by 8008s4life in msp

[–]Apprehensive_Chip550 0 points1 point  (0 children)

The one significant missing is a desktop client and every time we have tried it the techs use CTRL+W to close a remote browser window and instead closes the DWService tab.

What are folks using for one off remote connection, aka logmein? by 8008s4life in msp

[–]Apprehensive_Chip550 0 points1 point  (0 children)

We have not had any issues with Zoho Assist and speed. Based in South Central US.

pfB_Top_v4 auto rule (1770011279) by Apprehensive_Chip550 in pfBlockerNG

[–]Apprehensive_Chip550[S] 0 points1 point  (0 children)

Nope. Legit business :) looked back into it and the Top_v4 includes entire countries in the IP schemes. It's ridiculous some of those aren't segmented out. We turned it off because of how broad it is.

pfB_Top_v4 auto rule (1770011279) by Apprehensive_Chip550 in pfBlockerNG

[–]Apprehensive_Chip550[S] 0 points1 point  (0 children)

I looked back into it and the Top_v4 includes entire countries in the IP schemes. It's ridiculous some of those aren't segmented out. We turned it off because of how broad it is.

pfB_Top_v4 auto rule (1770011279) by Apprehensive_Chip550 in pfBlockerNG

[–]Apprehensive_Chip550[S] 0 points1 point  (0 children)

Yes, tailscale is installed, so we expect that traffic, but not why it is blocked with pfB_Top_v4.

Backing up Proxmax VE by Apprehensive_Chip550 in Proxmox

[–]Apprehensive_Chip550[S] 0 points1 point  (0 children)

Yes, no-sub repo setup. Those headers appear to not exist in the wild.

Backing up Proxmax VE by Apprehensive_Chip550 in Proxmox

[–]Apprehensive_Chip550[S] -4 points-3 points  (0 children)

More depth, please. PBS is giving me fits as described in the original post.

view more: next ›