Ugh. So I have a Site-to-Site VPN from the sonicwall here to an ASA 5510. I can't access the ASA remotely via its IP address. Is this because of the VPN?
Yes, I gathered that, Captain Obvious. But what's the end game? Does it need to be scripted? How do you need the data? what are you planning on doing with it? You can do Resultant Set of Policy on a DC or End Device. Or, you may be able to use Group Policy Modelling on a DC. — Dan6 hours ago
Also, could "put on hold as unclear what you're asking" be any more of a cumbersome ay of terming that?
Now says "Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking."
@voretaq7 Two days later, from 8% battery life to 7%. Warning messages: "Your mouse will die a complicated and dishonorable death in the immediate future if you do not change batteries!!!" Yeahhhh, I think I'll wait.
@WesleyDavid Buy an actual, real bike. Not a design student's insane idea of what a bike could be, but an actual real bike. Something that thousands of rolled off a production line somewhere and actually pays attention to what we've learned over 150 years about bike design.
I'm thinking of doing my ISO27001 lead auditor certification this year
@voretaq7 the trick about auditing is that most of the time, the people that dislike an auditor end up hiding or producing the largest piles of shit imaginable.
for me that was always an indicator to start poking deeper
@freiheit Ah. For us policies are written by the sponsor, then they have to be approved by the stakeholders, faculty senate, administrative senate, governance committee (if there is one), the executive policy review board, and signed by the president.
@ScottPack Yeah, that sounds about right for our campus policies. Except there's also policies at the system-wide level that go through the chancellor and board of directors.
@LucasKauffman Yes. In order to have our policy regarding "Alarm Installation" become finalized and recognized as official university policy the POTUS must sign off on it. The process is kind of long.
@freiheit I presume, once we have a fully implemented system, that will be the case. As it stands even the Board of Trustees don't get involved in policies. However, they can issue resolutions that trump policy.
@voretaq7 We had a funky Catch-22 situation with our recent ISO27001 certification. In order to obtain certification we needed to secure a customer who was willing to act as a first-mover in our two new DC's ... who wants to sign a contract for ISO27001-compliant hosting services with a company that doesn't have the certification yet?
@LucasKauffman It's impossible to demonstrate full compliance with ISO-13485 without two things: 1) Customers (because you need to show a functional feedback system) 2) Product defects/complaints (because you need to show a functional complaint/adverse-event handling mechanism)
@voretaq7 Not sure if I would call it a mess... More of a monster, it was brutal, took >2 years to implement. From what I hear (my uncle has a 13485 certified factory), they're equally time-consuming
Basically I had to write procedures the FDA never asked for, because the FDA didn't know that they needed them
(and ISO wouldn't require the procedures, except that we need a procedure to comply with individual country regulations, and the FDA has such a regulation in 21CFR11)
@LucasKauffman One thing is to have the procedures and policies in place - another is to actually exercise them in day-to-day operations. They needed a real-life case to audit
@ScottPack I regularly whine to my manager about the few exceptions, to help ensure it's not my fault we're violating that one. And I weekly report that reminds me about the servers that we haven't patched in over 180 days (which happens to include all the unsupported OSes)
@freiheit We adapted our hardening guide from 800-123. We then have a form that requires lots of signatures, and expires after a year, for someone to request exceptions.
To change the topic entirely, I'm off to manage the on-site ERP system at Roskilde Festival these coming 2 weeks... anyone else got some interesting plans for the summer? :-)
@ewwhite We can totally save money if we put the servers in the giant produce fridge... it's perfect, since both servers and lettuce love having 50F ambient temp.
I asked how well integrated the support was to justify the extra price. They said that it's still separate support contracts and that they wouldn't get the vendors to work together.
After a ton of discussion, work and input from the community, we're rolling out the remainder of major closing changes that you've helped us design, as discussed in these prior posts.
They're live, network-wide RIGHT NOW!!! See also: http://blog.stackoverflow.com/2013/06/the-war-of-the-closes/
...
@MichaelHampton Last time I went skiing I wore insulated pants with built in suspenders and a jacket... And I wished I'd just worn a medium-weight sweater instead...
I have a modsecurity rules to prevent bulk mail.
Unfortunaltely, rules has some deprecated arguments.
Can you please help me convert modsecurity 1 rules to version 2?
SecFilter "bcc:"
SecFilter "bcc\x3a"
SecFilter "cc:"
SecFilter "cc\x3a"
SecFilter "bcc:|Bcc:|BCC:" chain
SecFilterSelective POST...
However, running curl webmail.quickmediasolutions.com is returning the contents of webmail.quickmediasolutions.com instead of wmr.quickmediasolutions.com. Why is that?
@NathanOsman The http request is for webmail.quickmediasolutions.com . The webserver wmr has a configured vhost (or equivalent) for webmail and so responds accordingly.
@NathanOsman I suppose it should be redirecting to cwh13.canadianwebhosting.com, where your webmail is. But it isn't. If you don't control this, you need to be yelling at the person who does.
@JoelESalas I'm not convinced. The Supreme Court refused to hear the appeal of California's Prop8 being overturned on procedural grounds. They also only struck a specific section of DOMA, the one regarding spouse rights for federal services.
@JoelESalas They didn't redefine the federal definition of marriage, nor did they require that that the individual state's DOMAs unconstitutional. So it's still up to the states to decide whether or not gays can marry and one state is not required to recognize the same-sex marriage from another state.
@ScottPack That's fine though, gay people will go to the good states where they're welcome and the shit states will continue their downward spiral into irrelevance
@MichaelHampton Feel free to migrate my question over. Even whilst posting it I figured it was probably better for mSO but I'm still passive aggressively fighting the good fight regarding mSE.
@ScottPack Eh, I figured it needed a serious rewrite so that the developers could comprehend it, so I just posted a new question on mSO. I did borrow your image though.
@LucasKauffman It's annoying, sure, but I'm more annoyed that the entire StackExchange network is being obliquely treated as second class citizens. Kind of like the pat on the head while saying, "Here, you can just come here where the big boys work. Just don't get in the way."
@freiheit Didn't the same ruling that struck down DOMA also say that the defendants of Prop 8 didn't have standing, effectively striking it down because it was undefended?
@84104 I haven't had a chance to read the ruling and don't know what the appropriate CA people are doing in response to the ruling, but that sounds right.
@ScottPack "The law in California is that prop 8 is unconstitutional, because prop 8 was overturned in california's highest court before being appealed to the SCOTUS and that appeal got thrown out."
I have a modsecurity rules to prevent bulk mail.
Unfortunaltely, rules has some deprecated arguments.
Can you please help me convert modsecurity 1 rules to version 2?
SecFilter "bcc:"
SecFilter "bcc\x3a"
SecFilter "cc:"
SecFilter "cc\x3a"
SecFilter "bcc:|Bcc:|BCC:" chain
SecFilterSelective POST...
