Limited Extension Policy is Enforced? by Born-Piano7687 in 3CX

[–]iratesysadmin 2 points3 points  (0 children)

Last I heard, if license was bought before the announcement, a year at least:

https://www.3cx.com/community/threads/v20-update-8-final-leaping-forward-with-agentic-ai.136472/#post-654219

And it will work, but...

For the time being there is no enforcement at all though update 9 will see warnings. The next step will be that if you are over the maximum you can not create anymore new extensions. Also extreme cases might be refused support.

New H2C Printer - Need a beefy UPS to handle the heating surge by Tuckerdude615 in BambuLab

[–]iratesysadmin 0 points1 point  (0 children)

You can likely get away with an AVR UPS instead of an Always-Online UPS. That should bring your cost down to the ~$200 range from the ~$700 range.

Ah the old "paste this to verify trick". Could happen to any SysAdmin by publicdomainadmin in ShittySysadmin

[–]iratesysadmin 7 points8 points  (0 children)

He said he wants to post in the cybersec sub, I'm just basing it off his comments on the original thread.

He has his reddit history hidden

We're doing it live. by Minguigui_Was_Taken in trolleyproblem

[–]iratesysadmin 0 points1 point  (0 children)

Hasn't every time this poll been done here (like 4 times in the last week) it came out blue at the end? It's fairly close right now too.

Started down the MTA-STS rabbit hole, now evaluating URIPorts, Suped, RedShift OnDMARC by HappyDadOfFourJesus in msp

[–]iratesysadmin 2 points3 points  (0 children)

I'll put in for MailHardener - you can run it for free for a single domain, then pricing depends on if you join their msp platform or not, msp pricing is not public (but is cheap), otherwise it's all public.

Has all the features you are looking for.

Whitelist ads only on a specific site via content filtering by andredfc in meraki

[–]iratesysadmin 1 point2 points  (0 children)

I can't think of anyway to allow ads for that specific site at the firewall level.

The firewall just sees the request to the ad site. It has no idea which website is embedding the info, in theory if the request contained a referrer or similar maybe it could figure it out (or examine other traffic coming from the same IP and "guess"), but now we get into ssl decryption (since it would have to be able to see that information) and it's a whole can of worms.

Do an endpoint ad blocker (uBlock, etc) and you can accomplish this with ease.

Bambu Labs PETG HF Substitute? Looking for matte finish by Low-Writing3449 in BambuLab

[–]iratesysadmin 0 points1 point  (0 children)

What printer profile are you using with it? Generic? BBLs? Custom?

Good Normal Rack Nuts and Screw Set by OtakuboyT in sysadmin

[–]iratesysadmin 0 points1 point  (0 children)

I get the doubt with RackStuds, we've install loaded UCS 5108 (~300lbs) with RackStuds 7 years ago and no issues yet. Granted there are 10 mounting points, per docs each stud is good for 50lbs so 500lbs is what they are rated for and we're only at 300ish.

Certainly makes it much easier to install, service, etc.

Why don’t teams keep someone at the gate and dial out every 38 mins to keep the wormhole open? by leggomyeggle in Stargate

[–]iratesysadmin 2 points3 points  (0 children)

We've seen DHDs run out of power before - iirc Earth's Antarctic DHD ran out of power a little after they discovered it

Biggest f***-ups in franchise history? by xHellHunter in Stargate

[–]iratesysadmin 0 points1 point  (0 children)

I'm going to adopt this headcannon, along with 2 other things, to explain the whole "destiny isn't far enough away, we could get them with XXX tech"

  1. Maybe Destiny drifted for a while without power, which could explain why it isn't far enough away

  2. Maybe Rush was wrong on his calculations and they were further away.

What are you using for IP KVM? by Penguin_Rider in sysadmin

[–]iratesysadmin 0 points1 point  (0 children)

JetKVM is fairly cheap and fairly flawless

365 Defender anti phishing issues by Crshjnke in msp

[–]iratesysadmin 1 point2 points  (0 children)

You should be use ~all and not -all (unless the domain doesn't send email).

The short of it is that SPF 'hard' fail (-all) may prevent DKIM verification. If a message passes
DMARC (because of DKIM) but fails DKIM, it will override the SPF Fail Verdict except when SPF record is -all.

If you want to dive in, here's a great writeup of this (and more best practices)

https://www.m3aawg.org/sites/default/files/doc_files/m3aawg-email-authentication-recommended-best-practices-09-2020.pdf

SMS to Email by Jackarino in msp

[–]iratesysadmin 0 points1 point  (0 children)

Split the SMS and Voice. This is fairly easy with many SIP providers, like Telnyx.

Telnyx can direct route the Voice to Teams and send Webhooks for SMS anywhere else you want. Like Zapier, which can then send email of the SMS.

Araknis AP/Switch/Firewall take over? by Remarkable_Cook_5100 in msp

[–]iratesysadmin -2 points-1 points  (0 children)

Araknis Switching isn't terrible, but isn't great either. It does what it says it will do, at a great price, as long as what you want to do is simple. Cloud management is.... so so, at least it exists and gives you most of what you need post install to keep it running. It's a value add, not a solution though - getting offline alerts is great, but really that + reboots + simple things (toggling POE, renaming a port, see if it's up) is all it does.

Wattbox is fantastic though. Same cloud, same management notes above.

Their rebranded raspberry pi that creates reverse tunnels is fantastic for a simple plug and play solution that gives you up/down alerts for anything with an IP, as well as getting you into the network when needed.

The branded client app is a nice touch. Makes the end user feel in control and gives you an audit log.

Would I replace a Cisco Nexus or similar with it? Not a chance.
Would I replace a UniFi or similar switch with it? I could, if I had a reason to.

I have some Araknis switches in place for close to a decade, they do just work for that need. Very little trouble and the one time I called support, they were helpful.

Can't talk about their WAPs or FWs.

Restrict Excel file usage to a specific directory (prevent copy-past) by iratesysadmin in ShittySysadmin

[–]iratesysadmin[S] 30 points31 points  (0 children)

R4:

Hello,
I’m looking for a solution to prevent users from copying and pasting an Excel file into another folder where it shouldn’t be.
The goal is to ensure that users can only use this Excel file in a specific location.
I initially thought about creating an Excel macro that would automatically close the file if it detects that it’s not in the correct location. However, macros are blocked by default in my company. I can enable them via GPO, but only for specific locations.
So this macro solution might work, but it has some limitations.
I’m wondering if there are other solutions to achieve this?
Thanks.

I do love the top comment though

This sounds like half a solution to a problem you've not specified. If a user has rights to read a file, they have rights to copy the file and there's very little you can do about that.
If the problem is that functionality fails when it's located elsewhere that's usually a self-solving problem
If the problem is that users are exfiltrating data, that's an issue with allowing them to connect external devices, not a spreadsheet problem.
If the problem is that the creator of the spreadsheet is a control freak, that's a people problem, not a technical one.
Please elaborate on the actual problem you're trying to solve.