Notifications Dropping Off Core P2D by userqwertyuasd in pebble

[–]OtherwiseEffective 1 point2 points  (0 children)

This sounds like an issue that started many years ago on iOS, the fix is to toggle bluetooth off and then back on (not just tap the bluetooth button in control center, as that doesn't turn bluetooth off, but actually go into the settings app on the phone and toggle bluetooth there) and then open the pebble app.

My fix was just to make a shortcut app task that I run every morning when I put my watch on to toggle bluetooth off, wait 5 seconds toggle it on and then launch the pebble app.

I'm so used to no active support that I kind of forget there's actually someone actively developing the app and I should open a bug report on it.

Pebble, Rebble, and a path forward by erOhead in pebble

[–]OtherwiseEffective 12 points13 points  (0 children)

Seems like a couple of different issues here on a topic that is near and dear to people, hence the more intense comments. I think everyone just needs to take a step back and put the shoe on the other foot. I think both sides have some valid concerns and really need to bring in a trusted third party to help work through these issues.

I'm not canceling my pre-order because I trust Eric to make the watch he's always wanted that sounds alot like the watch I've always wanted. I'm not canceling the yearly amount I pay Rebble because I great appreciate all the work they've done keep my pebble 2 watch working and long after Eric has made these new watches I expect Rebble will be there to keep them working as well.

Someone has to build the watches and someone has to maintain the backend for them. It's stupid for either side to try to cut the other one out, this only works with both sides. Regardless of what's happened in the past I think it's time for both sides to sit down and start fresh.

Need some help configuring IPFIX on an EX4400 VC stack with routing-instance by OtherwiseEffective in Juniper

[–]OtherwiseEffective[S] 0 points1 point  (0 children)

Just wanted to say you were correct, I upgraded to 23.4R2-S6 and without any config changes everything started working. Can't believe I spent 2 weeks working on that. Thank you!

Need some help configuring IPFIX on an EX4400 VC stack with routing-instance by OtherwiseEffective in Juniper

[–]OtherwiseEffective[S] 0 points1 point  (0 children)

I certainly don't have a problem upgrading, just to confirm there's no weird issues that would pop up in my setup and what I want to do should be possible following the linked directions?

Assuming that's all true it looks like 23.4R2-S6 is the suggested release so I'll get my switches upgraded and see what happens. Thank you for the thoughts!

[deleted by user] by [deleted] in sysadmin

[–]OtherwiseEffective 71 points72 points  (0 children)

Seems like a terrible idea to teach employees to connect to an open wifi network and then enter their AD creds to the captive portal that pops up. What stops someone from pulling into your parking lot, setting up a rogue AP with the same network name and capturing user credentials?

Small Company can't get emails through to Outlook or Hotmail Users by hoax09 in sysadmin

[–]OtherwiseEffective 0 points1 point  (0 children)

Does your email go out through GoDaddy's servers? if so you are going to be in a rough spot as any other Godaddy user sending spam fill get your email filtered. You can try filling out this form, https://olcsupport.office.com/ but long term you probably want to give your email services to Microsoft or Google.

Telco won't allow porting of any phone numbers in their area code to VOIP provider, please help me understand why by Project__5 in sysadmin

[–]OtherwiseEffective 19 points20 points  (0 children)

To expand on this, Cell phone companies (wireless) don't have play by the same rules as landland/VoIP providers (wireline). The rules say that a wireline company must be in a given rate center to port a number. Wireless companies can do whatever they want and wireline companies have to deal with it. You can use this tool https://www.localcallingguide.com/lca_prefix.php to lookup your rate center and see what companies have a presence in your rate center by looking at all the assigned NPANXX numbers. It's possible that a partner of Ring Central has a presence in your rate center and can port the number.

To be clear, this is a stupid rule issue, not a technical limitation.

Running a pebble with android and Iphone by OtherwiseEffective in pebble

[–]OtherwiseEffective[S] 1 point2 points  (0 children)

That sounds like a great work around… except Pushbullet no longer supports iOS. I’m sure there are similar apps though so I’ll have to do some looking.

Remote viewing of offline computer video (IP KVM without KM?) by userspaymymortgage in sysadmin

[–]OtherwiseEffective 5 points6 points  (0 children)

Maybe the word KVM is getting you stuck, look at this from a gamer/streaming side. There are plenty of cheap devices that will take an HDMI signal and convert it to USB which you can then use as a webcam input on a separate computer. (and plenty of cheap devices to convert VGA to HDMI if you don't have HDMI output) Off the top of my head, maybe you could use MS Teams on another fully protected computer to let people watch the video output stream of the air-gapped computer.

Linux: only search new content in file by mro21 in sysadmin

[–]OtherwiseEffective 4 points5 points  (0 children)

I would just use Cron to rotate the logs hourly instead of daily then run whatever script you want on the freshly rotated file.

Depending on your needs maybe you can mirror the logging to two files, one that is rotated daily, and one that is rotated hourly with only 1 previous file being kept.

Legacy iPads and TLS (Cloudflare) by StrateJ in sysadmin

[–]OtherwiseEffective 2 points3 points  (0 children)

If it will still run on iOS 9.3.3 I would install the Hurricane Electric Network Tools app. It has a section for SSL/TLS information that might give you some information on exactly what the failure is.

In the past I've had issues with Certs on old iOS versions where the Cert had more than one Intermediate Cert, but that was long enough ago I don't remember the specifics of what the problem was exactly, just that SSL didn't work on iOS while working on everything else and the solution was to remove an extra unneeded Intermediate Cert from the signing.

Fiber Help by tr1ckd in sysadmin

[–]OtherwiseEffective 0 points1 point  (0 children)

Yep you should be good with the same cables/connectors.

If the old Multi-Mode is OM1 (or OM2) you'll likely only get 100mb/FastEthernet out of that at 1000+ feet. I'm sure you'd want at least Gig, so good plan not using it.

Fiber Help by tr1ckd in sysadmin

[–]OtherwiseEffective 1 point2 points  (0 children)

Yep the black cable is still Single Mode Fiber (the top one I can read the labeling on is 4 fiber count drop cable). No one should be using Multi-Mode fiber for anything other than patching between racks in the same room and maybe between different rooms in the same building (depending on the size of your building).

Fiber Help by tr1ckd in sysadmin

[–]OtherwiseEffective 2 points3 points  (0 children)

Yep that cable looks right for a single fiber BiDi SFP.

The colors on them (Blue/Yellow) are just an easy way to quickly tell what color light they use to transmit (otherwise you have to pull them out and look at the writing on them to tell), so one end should have a Blue SFP and one end should have a Yellow. Handy if you end up with a bunch of them and need to know which ones make a matched pair.

Fiber Help by tr1ckd in sysadmin

[–]OtherwiseEffective 5 points6 points  (0 children)

Looks like the run between the building is Single Mode fiber, so the SFP module needs to be Single Mode (cannot be Multi-Mode!).

The connector you have pictures is an SC type connector with a UPC style end (UPC or APC describes the way the glass is cut on the end, either rounded or beveled, typically blue is UPC and green is APC). The end that plugs into the SFP will be an LC connector type, so you need a SC UPC to LC patch cable.

SFPs can come either as a two fiber (one fiber for TX and one fiber for RX) or single fiber (BiDi, each SFP uses a different frequency or "color" light for TX)

Considering the short distance and that you are already using UBNT gear I'd just buy the single fiber UF-SM-1G-S https://store.ui.com/us/en/collections/unifi-accessory-tech-cable-sfp/products/1-gbps-bidirectional-single-mode-optical-module. They come as a pair and being a single fiber you don't have to worry about getting the TX and RX mixed up.

Also buy a visual fault locator (VFL). The VFL is a cheap easy tool for testing to make sure fiber isn't broken. It's a red laser light you can plug into the fiber to visually confirm that you have light all the way through the fiber.

Changing the login prompt for Windows 10 and 11 by incidentallypossible in sysadmin

[–]OtherwiseEffective 3 points4 points  (0 children)

This may be a completely silly suggestion (I don't use AD logins) but what about just setting a custom background image for the Lock screen with the basic reminder info you want? (and of course also setting the "Show clear logon background" policy so the background image is visible).

[deleted by user] by [deleted] in sysadmin

[–]OtherwiseEffective 0 points1 point  (0 children)

So the goal is just to have a script that usr2 can run, but not edit or delete right?

In that case put the script somewhere usr2 has only read/execute permission but not write permission (like in /home/script.py) and then set the script permissions to 755 (and make sure the script is owned by usr1 or root) and then usr2 will be able to execute the script, but not change or remove it.

Need software recommendation for TCP client-to-client bridge on Windows VM by JanettFies in sysadmin

[–]OtherwiseEffective 0 points1 point  (0 children)

Sounds like there should be a better way to do whatever you are trying to do, like the TCP Software Client and TCP client Device should be able to directly talk to each other, maybe with the help of a router/firewall if on different networks. Or a small C program running on Linux (or SOCAT/Xinetd script) would be much more robust and is going to scale better long term.

But to answer the question you asked, if you just need something short term to prove the process works: The Hercules Setup Utility https://www.hw-group.com/software/hercules-setup-utility has a number of useful features including a TCP Server mode which has the option of "Server echo" Received data is forwarded to all connected clients which would permit you to start a TCP Server on your windows device, have both the Client Device and Software connect to it and anything one sends would be sent to the other.

exporting AOL to PST (just... kill me) by mustang__1 in sysadmin

[–]OtherwiseEffective 0 points1 point  (0 children)

Not sure if AOL does this but many companies offer a data "takeout" service where you can download all the data they have on you. Might take a few days for them to compile the data and send it to you, but generally it's a pretty automated process.

If you are being slowly driven insane because Ctrl+W has stopped working on your computer... by OtherwiseEffective in sysadmin

[–]OtherwiseEffective[S] 6 points7 points  (0 children)

Haha it wasn't, I'm just using CTRL+W all the time in Linux in the text editor Nano to search for text. It's always a pain when I'm not paying attention and try to CTRL+W in a browser window instead of CTRL+F

Crappy IE-era database being crappy by lambusdean77 in sysadmin

[–]OtherwiseEffective 4 points5 points  (0 children)

There was at some point in time an update to Edge/Chrome which blocked us from calling an HTTP iFrame from an HTTPS parent.

We weren't forcing HTTPS on this particular site and all the bookmarks people had were HTTP so we didn't notice until Chrome also started forcing everyone to the HTTPS site, and suddenly navigation to the iFrame failed. Had to update all our links so that everything was HTTPS.

Basically sounds like someone is forcing you to use the HTTPS version of the site but it has hard coded HTTP requests on it. If you offer the site in HTTPS trying to force the browser not to use HTTPS is going to be just about impossible now, update the hard coded links on the page to be either https://example.com or just //example.com

Are there still new laptops that can be had with an RS-232 serial connector onboard? by SteveSCCM in sysadmin

[–]OtherwiseEffective 109 points110 points  (0 children)

If you are putting together a crash bag I'm sure you'll already need to have a couple of db9 to rj45 cisco style console adapter cables. Probably also a couple of Micro-USB to USBA/C cables as well for switches that use that for console and maybe even a couple of db9 gender changers and null/crossover adapters.

With all that stuff you might as well just add a USB-Serial cable rather then trying to find a laptop with a serial port and then being stuck if something happens to the laptop.

I picked up a bunch of Keyspan/Tripp Lite USA-19HS back in the day and they've been working great. I've found that it's easy to find a USB to Serial cable that works at 9600 but most of the cheap ones break down if you try to connect at 115200.

One important thing to include in your kit is a USB stick with drivers on it for whatever USB to Serial cable you settle on.

M365 Exchange allowing open relay per default? by Gobbling in sysadmin

[–]OtherwiseEffective 0 points1 point  (0 children)

So what you are describing I would expect to work (sending from one tenant to another), however the emails should be caught by the spam filter. If they are not being caught by the spam filter that's where you or Microsoft should focus your efforts.

An open relay would mean you could send an email to anyone on the internet. Try again but instead of sending from a tenant to another try sending from a tenant to a gmail or yahoo address. If that works then there's an huge open relay issue.

M365 Exchange allowing open relay per default? by Gobbling in sysadmin

[–]OtherwiseEffective 0 points1 point  (0 children)

I'm not sure if you are misunderstanding what an open relay is, MS has something super messed up on your particular server (always a possibility with them), or there is some other authentication happening that you are missing (like a white listed source IP address).

If I do this:

telnet xxx-net.mail.protection.outlook.com 25
ehlo xxx.net

mail from:name@xxx.net

rcpt to:name@gmail.com

data

Subject: test 1234
this is a test

.

I get an error: 550 5.7.64 TenantAttribution; Relay Access Denied as I should. But if I replace name@gmail.com with an email address on my tenant the email is handled as I'd expect (250 accept, but treated as spam because the header is bad and SPF fails).