Home / user-138822

Remy Grandin's questions

Martin Hope
Remy Grandin
Asked: 2020-04-23 00:34:54 +0800 CST
  • 2

I have recently enabled the customer key on my o365 tennant.

I have been able to set my mailboxes DEP with the following :

Get-Mailbox | Set-Mailbox -DataEncryptionPolicy "MyDEPPolicyNmae"

Now I'm trying to set the default DEP for new mailboxes.

I've looked in Set-MailboxPlan and in Set-MailboxCASPlan but i can't find any setting related to the DEP...

How do I define the default DEP on my Exchange online tennant ?

exchange powershell encryption office365
Martin Hope
Remy Grandin
Asked: 2019-03-29 02:50:11 +0800 CST
  • 4

It there a way to make wireguar listen to multiple port ? Like listenning on 80,53,and 4444.

I'm looking to achieve this without running multiple wire guard separate interface, to prevent having to create different subnet for the same thing.

The reason behind this is to ensure maximum reachability of my server when on public network, who sometimes have diferrent port oppened.

If not included in the software, I was thinking of doing something with iptable but i'm not sure how to "redirect" this port.

I have looked in the wireguard documentation but to no avail.

iptables
Martin Hope
Remy Grandin
Asked: 2013-05-16 07:20:29 +0800 CST
  • 0

I have some problem with setting up what i call a "remote entry point" (i'm sure ther is a real name for this) First things First : Here is my setup :

||=============================================================||
||                                                             ||
||                            |----------------------|         ||
||  |------------------|      |SERVER :              |         ||
||  |PC1 : 192.168.0.42|      |   eth0 : 12.34.56.78 |         ||
||  | tun0 : 10.8.0.6  |      |   tun0 : 10.8.0.1/16 |         ||
||  |------------------|      |----------------------|         ||
||           |                          |                      ||
||           |                          |                      ||
||  |~~~~~~~~~~~~~~~~|           |~~~~~~~~~~~~~~|              ||
||  | 192.168.0.0/24 |-----------| THE INTERNET |              ||
||  |~~~~~~~~~~~~~~~~|           |~~~~~~~~~~~~~~|              ||
||                                      |                      ||
||                                      |                      ||
||     |-------------------|     |~~~~~~~~~~~~~~~|             ||
||     |PC2 : 10.34.16.222 |-----| 10.34.16.0/16 |             ||
||     |-------------------|     |~~~~~~~~~~~~~~~|             ||
||                                      |                      ||
||                                      |                      ||
||                           |----------------------|          ||
||                           |SERVER "Client" :     |          ||
||                           |   wlan0 : 10.34.56.78|          ||
||                           |   tun0 : 10.8.0.10   |          ||
||                           |----------------------|          ||
||=============================================================||
  • I want to connect from PC1 to PC2 across the network.
  • PC1 and SERVER "Client" are connected to the OpenVPN SERVER as client.

I've set up all openvpn and i can successfully pin the client server from pc1. Nevertheless, i can't ping PC2 from PC1. I think i must create a bridge between wlan0 and tun0 but i don't have any idea how to do that !

Any ideas ?

openvpn
Martin Hope
Remy Grandin
Asked: 2013-01-03 17:44:12 +0800 CST
  • 2

I'm currently setting up an hosting service and, for now, i'm very concern about security. Here is my situation :

I've set up multiple apache's vhost and for obvious security reason, i don't want to let a user access others' data by moving around via php's system's function.

That's why i've set open_basedir in each of my vhost. Nevertheless, I'm still concerned with one major security leak : exec function.

So after some research, i've found that you can use disable_functions in php.ini to , like his name told us, disable some function. I've foud this list of function to disable who seams pretty complete :

disable_functions = "apache_child_terminate, apache_setenv, define_syslog_variables, 
escapeshellarg, escapeshellcmd, eval, exec, fp, fput, ftp_connect, ftp_exec, ftp_get, 
ftp_login, ftp_nb_fput, ftp_put, ftp_raw, ftp_rawlist, highlight_file, ini_alter, 
ini_get_all, ini_restore, inject_code, mysql_pconnect, openlog, passthru, php_uname, 
phpAds_remoteInfo, phpAds_XmlRpc, phpAds_xmlrpcDecode, phpAds_xmlrpcEncode, popen, 
posix_getpwuid, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, 
posix_setuid, posix_uname, proc_close, proc_get_status, proc_nice, proc_open, 
proc_terminate, shell_exec, syslog, system, xmlrpc_entity_decode"

But, i don't feel right about limiting php for my users. So, two questions :

  • Do you think this is a bloquant situation for most of CMS and other web-application ?
  • If so, is there an other way to isolate each vhost data ?

PS : I've looked for suexec and other's but i think they will not fit beacaus i'm expeting 100 to 200 users on my server and i don't want to create and manage a system account for each one.

apache-2.2
Martin Hope
Remy Grandin
Asked: 2012-09-29 00:22:38 +0800 CST
  • 1

I try to connect remotly to the KVM (console) of an Hyper-V Virtual Machine using vmconnect.exe but I'm dealing with some kind of a problem :

When I connect from a computer within the same AD of my Hyper-V Host, everything work fine but when I try to connect from a computer not within the same AD, wmconnect say that my RCP services is not running on the host

The problem is that it doesn't ask me for any credentials and so, i can't authenticate in the AD

Does someone have any clues ?

active-directory