@MichaelHampton Well, I want one that deploys cleanly and doesn't get pwned, and I suspect the people who will be doing the content managing will want one that's usable. So if there's something nicely situated somewhere between those two points, that'd be cool.
@ShaneMadden OK, from an admin perspective. The two big CMSes are Drupal and WordPress. I've been unfortunate enough to admin servers running both of them. Drupal is a big, complicated hog with a massive number of features and modules one can add to it. The Drupal sites I've seen have so much stuff tacked onto them that they need a lot more hardware to serve the same number of requests. And it can get pwned if somebody installs something stupid.
WordPress is fairly small and simple. It's easy enough that most users can deploy it without assistance. It requires creating two pages and one setting change to convert from a blog to a CMS. Its backend is easy enough that most users can publish content themselves. It has the ability to update itself. And it can get pwned if somebody installs something stupid.
@MichaelHampton Gotcha. The thought I'm mulling for the security problems is to have all public access be against static copies of the content that get spat out of a wget spider.. which assumes that there will be no dynamic content/forms/whatever else. We'll see if that flies.
@michael now I'm curious. What Wordpress setting are you referring to for switching to CMS. I been using WP for years and never set up new ones anymore.
@ShaneMadden Mainly I'm thinking what do the users need from it?
@Adrian You can switch the front page from a "blog" display to a "front page" display, which the front page can contain anything you like, CMS-style. You've probably seen many sites like this without even realizing it.
The blog is still there, but it becomes a second-class citizen.
So how badly am I breaking the RFCs if I use the 100.64.0.0/10 network for addresses within my VPN. I can't use RFC1918 since pretty much everything will have conflicts with existing space...
I am certain 99.9% certain that nobody else on the network will be using the carrier grade nat space.
@ShaneMadden Do they need to post anything blog-like, like the aforementioned "press releases" example. (Or do they want actual blogs?) Do they need to be able to edit each other's pages. Does the site need anything unusual (like LDAP/AD integration)?
@Zoredache Gaaa. If we all had IPv6, many of the use cases for OpenVPN would be history. You'd just set up some nice IPSec tunnels and be done with it.
@MichaelHampton Yes on the blog-ish content. I think everyone who's able to edit would be able to edit everything on the site. LDAP integration would be good for editors, but probably not a must-have.
@Zoredache Google's IPV6 stats are just about to hit 1%. At a certain point it'll hit critical mass, and then it'll be all over but convincing the stragglers.
What is the real purpose or advantages to use Hyper-V in Microsoft Server 2008R2? For virtualization I've just used VMWare workstation, and I guess I'm not understanding the real purpose for this technology.
I'm a IT beginnner student, I just want a little explanation to begin to use it.
Thanks ...
@ShaneMadden OK, then do they need multiple blogs? e.g. "press releases" and "special offers for our valued customers" or even per-user blogs? Can you describe in general terms what sorts of content would be posted?
@ShaneMadden My thinking here is, you can deploy something sweet, but if the users don't like it you're going to have a management problem on your hands. :)
So, my ISP unblocked port 25 for my IP, and now my email server is being used for sending spam.
I just need it to work only from my localhost, and thats it.
How do I configure Windows firewall to do that? I don't want outsiders sending emails from my PC.
.
.
.
.
Thanks for closing my valid qu...
@MichaelHampton Haha, fair enough. Basically a bunch of managed static pages (like the wordpress homepage thing you described) plus a couple different sets of blog-esque content.
@ShaneMadden Yeah, doesn't sound like you have sufficiently complex requirements to justify Drupal. I'd go with a basic WordPress installation and set up categories for the blog-content, or if you want things further divided, then a WordPress Multi-site. You can also buy a support contract (it's called VIP Self-Hosted) if you need it.
WP has 3 or 4 plugins that do Active Directory integration, so people can log in to WP with their domain credentials.
BIG HUGE HONKING DISCLAIMER: There are about 20 lines of code in WordPress that I wrote.
@MarkHenderson I'm going to try some LinkedIn ads next month. And yes, word of mouth is good insofar as your existing mouths are good. Existing mouths being bad or cheap kinda ensures that you keep getting cheap clients. =/
$10k/year is easy to afford if you have 10+ people on the software, but we're now trying to get 1-2 person companies
@WesleyDavid Don't expect an "influx" just yet, but scaling out. At the moment just two web servers behind a single haproxy. Ordered our new SAN (sorry @ewwhite we went with the Lefthand)
@WesleyDavid Well we have a large client who has about 1500 small contractors. We're in negotiations with them to make using our product a pre-requisite of doing business with them
I can see why Dell have a field day comparing it to their Equallogic offerings. Compared to Equallogic (which is normally in the same price band), Lefthand is a dogs breakfast
But if you put Lefthand against MD3200i (which is what we did), then the Lefthand comes out in front
@WesleyDavid Shit yeah. If we get 30k/month in revenue I suspect we'll build a whole new rack just to keep up. Our software is quite data heavy. E.g. a 150-user installation we have at the moment grows by about 500Mb/day
@WesleyDavid It depends on how heavy they use it. Those 150/users/day at the moment are hitting it pretty hard. The 3,000 users won't be hitting it nearly as hard, so it might equate to maybe 3-5gb/day
@WesleyDavid Well they can chose to drop off whenever they want and we'll export all their data into XML and blobs and zip it up and give it to them to do whatever with, but if they chose to stay, then we have a few upgrade paths to keep growing with them
So we're talking long term if we treat them right
And by long term, 5+ years
Our oldest client on this software is coming up on 4.5 years
@ewwhite Live demonstration of having the PS4000 and SRM in two DCs, and literally pulling the plug on one DC and having the 2nd DC online within 10 minutes practically made them jizz in their pants
I couldn't replicate that level of jizzworthyness in Nexenta unfortunately
"When you deploy code straight to production, and your customers get 404s, follow this five step plan for DevOps troubleshooting: 1) Do not piss on yourself. 2) Identify which of your buddy's laptops your production website has been deployed to. 3) Piss on it, because that can't be any worse than the nightmare backtracking script you were about to push to Capistrano. 4) Slam your head in a door for thinking your CS degree full of tuple relational calculus theory and Microsoft Access was worth the genital warts and your parents' $60,000.
Whelp, that's enough bitter cynicism for one night. Off to sleepy-bye-land.
I installed facebook comment plugin on my website. In stead of showing the comment box when the page is loaded, is it possible to display a comment BUTTON first, and show the comment box after clicking the button?
I've noticed that most people who /Review a lot of close votes on ServerFault do about 12-20 reviews a day. That seems like a reasonable number, it means they've cast a few votes while reading questions, then the rest when /Reviewing.
But there are a few people who are regularly doing 30+ or 40...
@tombull89 that's the effect of a rejected migration. It's already been decided that it's OT fro the original site, so when the destination site rejects it, the original is marked as closed off topic
@Ward I know there are concerns about people gaming the system by casting do not close votes
It's pretty well established that crappy migrations (mostly originating from Stack Overflow) are a recurring problem here on Stack Exchange.
Some have suggested eliminating migrations completely, while others have suggested banning repeat-crap-migrators from voting to migrate in the future. For ...
Zypher promised that data.SE would "soon" get live data:
How to count the number of times I earned 200 daily reputation?
http://chat.stackexchange.com/transcript/message/5865764#5865764
I realize it's a long weekend, but given that data.SE is now over 2 months out of date, it would be nice if...
I'm seeing A LOT of questionable close votes in the Server Fault queue lately, and I don't see anything wrong with reviewing accordingly. If anything, I'm starting to lament the fact that voting Do Not Close doesn't actually have an effect (like cancelling out a close vote, or something).
If an...
I've used greylisting on my servers for many years, but I don't know how effective it is nowadays.
Is it still good for fighting spam in 2012?
Or is the typical spammer MTA capable of resending greylisted emails now?
@ewwhite Like Alice's friend says, it can help. I'd still prefer a Barracuda appliance (or w/e), but if you don't have one, may as well use it to save load on your spamassassin or etc.
@HopelessN00b In my postmortem to the client... I explained that the software had been installed incorrectly. In order to convert it to use a sidechain from a Cisco ASA firewall, you have to uninstall and reinstall...
Then I started getting errors that SQL Server 2000 or greater was needed.
Then the order in which services are shutdown and restarted...
Shutdown the Websense services in this order:
“ApacheTomcatWebsense”
“Apache2Websense”
“Websense Usage Monitor”
“Websense Reporter Scheduler”
“Websense Log Server”
“Websense Information Service for Explorer”
“Websense Explorer Report Scheduler”
“Websense Logon Agent”
“Websense DC Agent”
“Websense Network Agent”
“Websense Filtering Service”
“Websense User Service”
“Websense Policy Server”
“Websense Policy Broker”
“Websense Policy Database”
Restart in the opposite order.
We use their cloud offerings, not software on a server (and will have one of their appliances), but my main problem has been their support and our ability to... well, administer the thing, in general. Very... high-altitude view, and just not possible to drill down like I'd like.
Graylisting will probably remain effective so long as spammers are only chasing the low-hanging fruit... That's likely to change some day, but I doubt it will be soon.
@ewwhite That's nice - we buy a spec of machine (380 Gen8's maxed out with a P812 and a D2700 full of 900GB 10k's) that we run with ESXi and one of every VM in our platform (kind of a platform in a box) that we send out for people to test their code against (set-top box manufacturers etc.) - we're always a little tight on memory so one of those might really help - don't need the extra CPU to be honest but still a nice box
I just logged in to The Comms Room (ServerFault chat) and noticed this:
Based on comments and quick look at a few rooms, seems to be all sites except Tavern on the meta.
Something seems amiss...
We'll get a blog post up on what the plans are today or tomorrow at the latest for those that are curious, and a heads up to everyone. woop! that's what I wanted.
@MichaelHampton Well, in his defense <shudder>, he's right that greylisting has a lost of pros, if for whatever reason, you're not using a proper anti-spam solution (from a vendor) and have to try to block spam yourself.
Alright, just defended a developer, so I'm off to take a shower on my lunch. BBL.
Greylisting is fine if you're running email for yourself and you can tolerate the delays. The CEO is not going to wait 1-4 hours for an incoming email.
But isn't IT maturing? Things that made sense to maintain on your own in the past don't necessarily make sense now. Didn't @HopelessN00b or @MichaelHampton say that it doesn't make sense to host your own mail these days?
@ChrisS Nothing. It's a PITA, I was referring to a... I guess a "complete" or comprehensive or all-inclusive vendor-provided anti-spam solution with the word proper.
@ewwhite The list of known servers violating RFC is easy to find via Google; and almost everyone plays nice these days anyway (the list is quite short).
@ewwhite Definitely not me, though I am a pretty big proponent of hosted Exchange for smaller organizations. It makes sense to host your own email, but it may well be cheaper and/or "better" to let someone else host email if you use Exchange.
@MichaelHampton So, you're saying to use a "proper" vendor solution, or steal your work for much anti-spam goodness? I guess I could agree with that. =D
To defeat your enemy, you must know your enemy.
What is spam?
For our purposes, spam is any unsolicited commercial electronic message. Spam these days is intended to lure unsuspecting users into visiting a (usually shady) web site where they will be asked to buy products, or have malware delive...
@HopelessN00b It depends on size and your in-house IT's competency level. For small businesses that level is usually approaching 0; so yeah, hosted Exchange makes sense. For larger orgs though, I doubt it's cheaper to outsource, though I'd be interested to read any studies available on the topic.
Depends on where you draw the line, but honestly, if you've got less than 1,000 mailboxes (and have a good hosted Exchange provider where you're located), you might be able to get better service for cheaper going to a hosted Exchange environment.
Once you hit a thousand or so mailboxes, in my experience, you're probably going to be paying more for hosting than by keeping it in-house.
@MichaelHampton Well, since you and ewwhite seem to be borderline, I guess I'll step up and do the right thing.
To defeat your enemy, you must know your enemy.
What is spam?
For our purposes, spam is any unsolicited commercial electronic message. Spam these days is intended to lure unsuspecting users into visiting a (usually shady) web site where they will be asked to buy products, or have malware delive...
@HopelessN00b Most of the Exchange hosting I've seen is around $4/box/month.. That'd be $50,000/year for ~1000 mailboxes (assuming no discount). I'm not trying to argue one way or the other, but my knee jerk reaction is "That sounds mighty expensive".
Yup, it is, but what's the cost of the Exchange infrastructure and administration when done in-house?
Likewise, I don't have a strong opinion on the matter, but for most organizations with up to 1,000 mailboxes, the CapEx and manhours of administering that many mailboxes is usually higher than the cost of hosting. (Or can be). (In my experience).
@voretaq7 I suppose. I thought it sounded more like "Googles didn't respond to my request instantly! How do I get the Googles to jump every time I snap my fingers?"
So, my ISP unblocked port 25 for my IP, and now my email server is being used for sending spam.
I just need it to work only from my localhost, and thats it.
How do I configure Windows firewall to do that? I don't want outsiders sending emails from my PC.
.
.
.
.
Thanks for closing my valid qu...
I installed facebook comment plugin on my website. In stead of showing the comment box when the page is loaded, is it possible to display a comment BUTTON first, and show the comment box after clicking the button?
I've noticed that most people who /Review a lot of close votes on ServerFault do about 12-20 reviews a day. That seems like a reasonable number, it means they've cast a few votes while reading questions, then the rest when /Reviewing.
But there are a few people who are regularly doing 30+ or 40...
I'm seeing A LOT of questionable close votes in the Server Fault queue lately, and I don't see anything wrong with reviewing accordingly. If anything, I'm starting to lament the fact that voting Do Not Close doesn't actually have an effect (like cancelling out a close vote, or something).
If an...
I've used greylisting on my servers for many years, but I don't know how effective it is nowadays.
Is it still good for fighting spam in 2012?
Or is the typical spammer MTA capable of resending greylisted emails now?
