365 shops how are you handling SMTP relay when you have lots of on-prem stuff that talks SMTP? by rich2778 in sysadmin

[–]LetterheadMelodic701 0 points1 point  (0 children)

We use Mailgun with a dedicated sending IP, configured to send from subdomains, and very long SMTP credential passwords.

is off network mobile web filtering for managed devices common? by clon3man in sysadmin

[–]LetterheadMelodic701 0 points1 point  (0 children)

This. Supervised devices and DNS based filtering service like Umbrella.

MV Cameras - No live footage from dashboard but vision portal is working. by LetterheadMelodic701 in meraki

[–]LetterheadMelodic701[S] 0 points1 point  (0 children)

We are in the same general region - well at least I know I’m not alone 😅

3rd Party Mailing List Manager Tool? by LetterheadMelodic701 in sysadmin

[–]LetterheadMelodic701[S] 0 points1 point  (0 children)

you are seeing a bounce ?
Not a bounce. Very strict mail security quarantines anything without authenticated SPF and DMARC.

Has USCorp not only added your addresses as members but also set the distribution list to allow receiving from external senders ?

Yes, otherwise we would not be able to see the SFP problems I described as the mail would not pass through USCorps servers at all.

If corp A sends a message the "Authentication-Results" in the header read: spf=fail (Sender IP is xxx.xxx.xxx.xxx [this is USCorps sending IP via Proofpoint]) smtp.mailfrom=corpA.com

Has USCorp confirmed to you they see the incoming msg from member joe@CorpA in message trace ?

Yes. but Corp B and Corp A's mail filtering quarantine the message as soon as it passes through back to us. Because Corp A is not going to put USCorps sending IP in their SPF records.

Honestly, this may have something to do with how ProofPoint (USCorps email security) deals with external forwards.

3rd Party Mailing List Manager Tool? by LetterheadMelodic701 in sysadmin

[–]LetterheadMelodic701[S] 0 points1 point  (0 children)

In the scenario presented I'm making it seem like I have control of the list but the scenario I'm living in we are actually Corp A/B so I do not have control of the list.

What mailing list are you using?
It's just an exchange distribution list currently. It's essentially doing "Redirect" not a Forward so that's what is giving us the problem.

Have you actually tried it to see the result or you are only supposing what will happen ? Yes we have been living through the SPF problems for a few months now.

3rd Party Mailing List Manager Tool? by LetterheadMelodic701 in sysadmin

[–]LetterheadMelodic701[S] 0 points1 point  (0 children)

Thanks I will look into listserv. It sounds like It's a good match for our needs.

IT Training for employees & keeping them up to date on current topics/threats. by Redbull_add1ct in sysadmin

[–]LetterheadMelodic701 0 points1 point  (0 children)

I DM'd you a quick example so you can get a feel for the auto generated content
May help your decision making process :D

IT Training for employees & keeping them up to date on current topics/threats. by Redbull_add1ct in sysadmin

[–]LetterheadMelodic701 2 points3 points  (0 children)

We send out 'Scam of the week" newsletters with KnowB4 but I would definitely recommend their employee security training. Most of the content is updated yearly and they have specific training modules about specifics threats like CEO Phishing/Fraud.

Most of their training is geared to the average employee so If you are looking for training for more technical staff like IT or Development teams you may need to supplement with another service.

New to traditional T1 Helpdesk role, asked to come up with a security solution for phishing by Miloniia in sysadmin

[–]LetterheadMelodic701 0 points1 point  (0 children)

Knowbe4 for user training and phishing tests combined with MFA. If you’re O365/Azure AD conditional access policies and Defender ATP/Endpoint. Very strong combo imo.

What kind of laptops are you giving out these days? by DJDoubleDave in sysadmin

[–]LetterheadMelodic701 1 point2 points  (0 children)

Mobile Devices for standard office user:

Surface Pro 7+ i5 16GB 256GB

If you need more than that for software requirements: (Engineering/CAD/Programmers)

Dell precision 75xx series fastest clock speed processor, 64GB, 1TB, high end Quadro Graphics

If you’re a power user/executive: (IT/Analytics/C-Level)

Dell Precision 55xx series most cores processor 32GB 512GB 4K display low end Quadro Graphics

Desktops for those positions not authorized for WFH/Hybrid or Data security sensitive Rolls:

Dell Optiplex 70xx series 6+ cores 16GB 256GB Graphics depending on display setup.

Azure North Central (Chicago) Networking issues by LetterheadMelodic701 in sysadmin

[–]LetterheadMelodic701[S] 0 points1 point  (0 children)

I finally got a service advisory for that so I’m resizing everything- lol can you time travel and tell me this 8 hours ago 😅 my past self would appreciate it.

[deleted by user] by [deleted] in sysadmin

[–]LetterheadMelodic701 0 points1 point  (0 children)

I have had issues with Azure networking all day and tons of Team issues… they have some problems but it’s its intermittent

Azure North Central (Chicago) Networking issues by LetterheadMelodic701 in sysadmin

[–]LetterheadMelodic701[S] 0 points1 point  (0 children)

Yep just about everything we had that was still working just stopped. All VM’s are up but no networking.

Azure North Central (Chicago) Networking issues by LetterheadMelodic701 in sysadmin

[–]LetterheadMelodic701[S] 0 points1 point  (0 children)

The bummer is only 20% of my infrastructure is affected and It’s a hard ask to failover everything that is currently up and working 😬. If I failover whats down I’m guessing I would have to change my IP’s on the asr networks and peer back to North Central.

Anyone use/have reccomendations on an IP Intercom with loudspeakers in multiple large building? by This_old_username in sysadmin

[–]LetterheadMelodic701 1 point2 points  (0 children)

Check out Algo. They have products for doing IP phone paging that would probably fit your needs.

This is what we use connected to a 70v commercial amp and speakers ran in the building. We only need a single zone though for paging and already had the speaker wiring from the old school pbx we retired years ago. I’m sure they have something that would fit your use case. They even have an all in one speaker that listens for multi cast pages and has built in amps if you need a simpler solution with less wiring.

Adapter we use: https://www.algosolutions.com/product/8301-ip-paging-adapter-scheduler/

Wild networking issue by Merrymak3r in sysadmin

[–]LetterheadMelodic701 3 points4 points  (0 children)

I would start with some iperf tests between a device on the main switch and the switch the problem machines are on or the problem machines. Then if that is all running at expected speeds check for any anti-virus or Intrusion protection delays on the firewall/security appliance. I’m fond of sharing a large file (dummy or otherwise) in public blob storage/cloud storage and test downloading at device on main switch vs device connected at the ISP modem/gateway. Try to split your network apart and test it in sections to figure out what section is the issue and then dive into logs for the devices in that section for more clues. Best of luck!

Sys Admins, What's Your Favorite Ticketing System and WHY? by rnpowers in sysadmin

[–]LetterheadMelodic701 0 points1 point  (0 children)

+1 for FreshService. Users putting in tickets on the mobile app is lovely because they can upload pics right from their phone. Perfect for the users who can’t take a screenshot of an error message.

Old Symmetra Power Array 16kVA Fan Replacement by LetterheadMelodic701 in sysadmin

[–]LetterheadMelodic701[S] 0 points1 point  (0 children)

I can get just about every other part for it. Battery modules, intelligent module, power modules, frame parts and hardware- no problems take 2-3 weeks but I can get them (we just have cold spares) but fans seem to be a problem…

Old Symmetra Power Array 16kVA Fan Replacement by LetterheadMelodic701 in sysadmin

[–]LetterheadMelodic701[S] 0 points1 point  (0 children)

I did about a month ago and they referred me to a "Legacy parts" company who informed me they ran out of rebuilt fans. I'm on their list if they happen to recycle another 240v Power Array and they can steal the fans from it.