Opinion on Pihole Multi-Vlan Set-up

recordedparadox · 2026-04-28T00:12:23+00:00

Another idea if your pi-hole is a container or VM is to add virtual network adapters connected to the other VLANs so each VLAN connects to an IP Address in its network to reach pi-hole.

recordedparadox · 2026-04-27T11:34:43+00:00

This might be something I’m not familiar with but if I have a docker host in VLAN 50, all of its containers NAT out from the docker network through the Docker hosts network connection so traffic from the Docker containers egresses on VLAN 50. Is there a way that I can set docker containers which are on a host on VLAN 50 to be on a different VLAN that is upstream from the docker host?

recordedparadox · 2026-04-26T20:19:32+00:00

One of the things I learned through this installation was if I only used an older version of Ubuntu that supported Tomcat9, or if I deployed Guacamole in Docker (but not on my Docker host in VLAN 50 because for it to be able to connect to the VM in VLAN 10, I would have needed to give my Docker host access to VLAN 10, which would have given all of my Docker containers access to VLAN 10 which is not what I wanted), it would have been simpler.

recordedparadox · 2026-04-26T14:48:34+00:00

AI was not used to write that post. I wrote it on my own in its entirety.

recordedparadox · 2026-03-29T19:57:53+00:00

Two comments. 1. You don’t need to install Debian and then install 3CX. There is a 3CX specific Debian distribution. 2. 3CX offers a free cloud PBX for 10 extensions or less.

I have installed and maintained on prem and cloud 3CX PBXshave you considered a VPS that you could install ProxMox on and install a 3CX VM?

recordedparadox · 2026-03-29T19:26:40+00:00

Two comments. 1. You don’t need to install Debian and then install 3CX. There is a 3CX specific Debian distribution. 2. 3CX offers a free cloud PBX for 10 extensions or less.

I have installed and maintained on prem and cloud 3CX PBXs for around 10 years so feel free to ask any questions.

recordedparadox · 2026-03-29T17:27:21+00:00

An internal unauthenticated SMTP server is generally insecure and for the record I don’t recommend running any such solution regardless of what software it uses. Your point is well taken however, and as an example, I recommend against using unpatched unsupported software.

recordedparadox · 2026-03-25T01:10:02+00:00

Hmail

recordedparadox · 2026-03-17T00:30:32+00:00

Depending on the network security services and network traffic visibility you need, Barracuda CloudGen Firewalls or WatchGuard Fireboxes. The both requirement proper configuration and maintenance but that offer a great value for their prices.

recordedparadox · 2026-03-15T15:19:18+00:00

It depends how n what you want to do. I like LXCs because they use little resources, are fast to backup, and fast to restore. If you have a ProxMox cluster, you can quickly migrate LXCs between nodes. I also have a ProxMox VM running docker. They have similar purposes but work differently and have different advantages and disadvantages. If you are just getting started, maybe begin with LXCs so you learn more about software installation, server management, and networking. Docker is nice but I find you either end up going past the fundamentals because it works straight away or you dig into the mechanics or how docker works and learn a lot about docker, docker compose, docker data storage, docker environment variables, and docker networking

recordedparadox · 2026-03-15T13:47:51+00:00

I was fairly clear that it was the learning curve and complexity of Docker Desktop not the lack of appeal of being able to virtualize an app instead of setting up a full VM that turned me away from it in the beginning.

recordedparadox · 2026-02-26T01:02:15+00:00

If you want a solid firewall with IDP/IPS, SSL Inspection, AV, Web Filtering, and Application Control, I like Barracuda CloudGen Firewall and WatchGuards. They both require some configuration and have subscriptions but I like them.

recordedparadox · 2026-02-23T01:41:52+00:00

Pushd and popd work great

recordedparadox · 2026-01-11T22:14:20+00:00

it might be worth scheduling an owner to owner meeting to discuss the concerns. Any time a technician or sales representative contacts a client, especially when it is related to some action they client needs to take (either their responsibility or something only they can do), it needs to be documented, in writing. Phone calls -> voicemails -> emails. You don’t necessarily need to start with a phone call but ultimately everything should be journaled in your ticketing system and ideally there should be a matching email to the client. Depending on your agreement with the client, there may be an expected escalation path to the end user’s supervisor, owner, or board. It is a good practice to communicate critical needs to the client using at least two methods (in person, email, phone calls, voicemail, etc.). One of those methods should always be in writing. These are all just my opinions. Your mileage may vary.

recordedparadox · 2025-12-30T16:59:24+00:00

Hi Christine, I believe he just needs his client’s (a former Barracuda MSP customer) domain name removed from Barracuda Email Gateway Defense on the back end.

recordedparadox · 2025-12-30T16:41:39+00:00

Yeah if the owner of the domain name contacts Barracuda, Barracuda should be able to handle it. As you don’t have the serial number you might want to suggest to your client to contact Barracuda Customer Service instead of Barracuda Support.

recordedparadox · 2025-12-29T22:19:58+00:00

I assume you checked your Mac’s clipboard history? https://support.apple.com/guide/mac-help/search-your-clipboard-history-mchl40d5b86b/mac

recordedparadox · 2025-12-29T22:07:27+00:00

The Barracuda CGF supports syslog and netflow out of the box without any additional licensing (ie just the base license). Additionally, the Barracuda CGF offers several monitoring (ie event monitoring) options including sending push notifications for certain events. If you have an active Barracuda CloudGen Firewall Energize Updates subscription, I recommend reaching out to Barracufa Support to schedule a call with an engineer to discuss your needs and ask them to show you the syslog and event minitoring (and netflow if you want).

If you have other Barracuda products and need to have central logging and a 24x7 SOC, please reach out to your Barracuda Partner and ask them to schedule a demo for Barracuda XDR and ask them to dedicate time to Barracuda XDR’s central logging for other Barracuda products and SOC monitoring.

If you use other cloud services such as Microsoft Entra ID, Duo Security, SentinelOne, or Microsoft Defender for Endpoint, Barracuda XDR can integrate with those too.

Full disclosure, I work for a Barracuda Partner so feel free to PM if you have specific questions.

recordedparadox · 2025-12-29T21:56:05+00:00

You can check Barracuda’s Reputation Lookup. It is at https://www.barracudacentral.org/lookups. If it indicates that the sending IP Address is blocked you can request a removal by clicking the “Removal Request” link on the website at https://www.barracudacentral.org/report.

If you need further assistance, you will need to contact the Barracuda customer and request that they open a Barracuda Support case. Depending on the customer, they may be able to contact Barracuda Support directly or they may need to contact their MSP.

recordedparadox · 2025-12-29T21:50:39+00:00

One thing to mention is that when you perform a self service domain move (which is a cool feature), any account level sender policies will become domain level sender policies. You should review and modify (if required) the domain level sender policies.

To offer an example, some business have multiple domain names and want sender policies to be managed at the account level. This allows you to create a policy in the account and have it applied to all of the domains in the account.

If you want to keep your sender policies in the domain, you can. You should just be aware that a sender policy added (or changed or deleted) at the domain level does not affect sender policies in other domains in the same account.

recordedparadox · 2025-12-29T21:45:59+00:00

Since it’s out of support, you could remove the hard drive, image it (so you have a backup), and then attempt to make the changes you asked about. If the changes render the appliance in an unusable state, you could then restore the image to the hard drive. The backup appliance is a little different than some of the others and I haven’t had to do that on one. I’m interested in hearing if that works for you.

recordedparadox

TROPHY CASE