Re: [AFMUG] mail servers

[Matt Hopkins]

Do you use any Microsoft products? If you use Windows and care about data
security then you've already failed. I find Microsoft the most deplorable,
but I'm only one guy. I have to pick my battles. I refuse to use Microsoft
(anything) but we use Gmail at work and it's more or less flawless. We have
had some people report they can't reach us but the resolution is always
what has already been mentioned here. Google made DKIM/SPF mandatory I want
to say just a few months ago but many of the smaller mail providers do not
have it set up yet.

On Sat, Mar 11, 2023, 4:49 PM Darin Steffl  wrote:

> Jan,
>
> Most of the links you shared aren't of Google being hacked, but people
> being scammed/phished. Tricking a user into sharing their login info means
> the user was scammed, not that google was hacked. ONE link you shared says
> less than 24 gmails in Iran were hacked somehow. None of your links share
> that google has had a massive data breach at any time. That's not to say it
> can't/won't happen but there's been no big hacks at Google as far as I can
> remember.
>
> I stand by my claim that you're being paranoid. I promise you that
> mail.com or hosting your own email is far less secure and more easily
> hacked than Google is. Do you have thousands of engineers working to keep
> your data secure? That answer is NO. I am not delusional enough to think
> that hosting my own Linux server for email will be more secure than Google.
> There's no way I can outsmart hackers, keep updated on hourly or daily
> updates and patches, etc. Nor do I want to do that when I can outsource to
> a company that does it much better than I do.
>
> I don't host a single server for our WISP in 11 years in business and I
> won't be starting today. The cloud is the future and keeps me hands off on
> servers and software. If there's a problem, it's someone else's job to fix
> it and my only job is to report the issue. What if I'm on vacation and I
> had one or more servers that failed? Now that's my job to fix things while
> I'm supposed to be off the clock. I don't need that kind of stress in my
> life so I refuse to host any servers that are mission critical to my
> business. The only thing resembling a server would be our Preseem appliance
> but we have backup OSPF routes around it in case that fails.
>
> Our billing system is Azotel and they have hosted it in the cloud for us
> since we started 11 years ago. Total downtime in 11 years is under 1 hour.
> Not every cloud service is that reliable. They handle the multiple backups
> and securing of the servers too. Slack, for example, has probably had 12
> hours of downtime or subpar performance in the 5 years we've used it but it
> still was an issue I didn't have to fix myself.
>
> On Sat, Mar 11, 2023 at 2:31 PM Steve Jones 
> wrote:
>
>> I like dmarc since you get to dictate the strictness and get reports on
>> your overall deliverability
>>
>> On Fri, Mar 10, 2023 at 7:44 PM Darin Steffl 
>> wrote:
>>
>>> Jan,
>>>
>>> I don't recall any hacks or data breaches to Google at all. I've seen
>>> plenty of other platforms with breaches like t-mobile but Google is pretty
>>> secure. I think you're acting a little paranoid in protecting your phone
>>> number. I can pay some online service and get your home address, phone
>>> numbers, and social security number if I wanted to. This information that
>>> you think is very secure is almost public knowledge for a fee.
>>>
>>> As others have said, DKIM/SPF are industry standards, not Google, and
>>> they're pretty old at this point. DMARC is newer, to me at least, in the
>>> last several years so not every platform gives much weight to this but DKIM
>>> and SPF is a must nowadays for any email provider.
>>>
>>> On Fri, Mar 10, 2023, 4:03 PM Josh Baird  wrote:
>>>
 DKIM/SPF/DFMARC aren't "made-up standards" from Google.

 On Fri, Mar 10, 2023 at 4:31 PM Jan-GAMs 
 wrote:

> I don't see how you come to the conclusion that my paid for mail
> service is supposed to have recently imposed made-up standards from google
> that comply only with google as some sort of long-standing standard.  It's
> a recent standard imposed by google.  And I'm never going to willingly 
> give
> google my phone number so that when they get hacked again the hackers will
> have my email and my phone number.  Why don't I just broadcast on some
> public website my social security number too?  Yeah, tiktok or twitter,
> give them my phone number, ssi, home address, all my emails along with my
> real name.  Because when you give google your phone number, they now have
> exactly who you are and access to all your private info.  How many times 
> in
> the last couple years has google been hacked?  Constantly!  I am not going
> to freely give this shit to them.
>
> Well, I'm wrong, you're right.  When I bought the phone, google forced
> me into an email address as part of using the phone.  I 

Re: [AFMUG] Business password managers

[Matt Hopkins]

I've been happy with
https://teampasswordmanager.com/

Self hosted, web based, browser extension (if that matters to you),
user/group permission management, and more.


On Thu, Feb 9, 2023 at 11:49 AM Mike Hammett  wrote:

> I can integrate BitWarden with my AD, has groups, a variety of clients,
> etc.?
>
>
>
> -
> Mike Hammett
> Intelligent Computing Solutions 
> 
> 
> 
> 
> Midwest Internet Exchange 
> 
> 
> 
> The Brothers WISP 
> 
>
>
> 
> --
> *From: *"Josh Luthman" 
> *To: *"AnimalFarm Microwave Users Group" 
> *Sent: *Thursday, February 9, 2023 1:10:04 PM
> *Subject: *Re: [AFMUG] Business password managers
>
> Bitwarden.
>
> On Thu, Feb 9, 2023 at 1:33 PM Mike Hammett  wrote:
>
>> It is a bit disheartening, but are there comparable solutions? I haven't
>> heard of any.
>>
>> Also, change your master password and the concerns over leaks goes away.
>> We're actually looking to federate it with our Active Directory, so that
>> it's even easier to manage.
>>
>>
>>
>> -
>> Mike Hammett
>> Intelligent Computing Solutions 
>> 
>> 
>> 
>> 
>> Midwest Internet Exchange 
>> 
>> 
>> 
>> The Brothers WISP 
>> 
>>
>>
>> 
>> --
>> *From: *"Daniel Pautz via AF" 
>> *To: *"AnimalFarm Microwave Users Group" 
>> *Cc: *"Daniel Pautz" 
>> *Sent: *Thursday, February 9, 2023 11:02:01 AM
>> *Subject: *Re: [AFMUG] Business password managers
>>
>> Any worries about their endless hackings?  Seems like they are not giving
>> full disclosure anymore and a few of the last hacks were pretty bad
>> sounding.   We have been using lastpass forever now,  but its getting a big
>> sad that a company that should be securing your PW’s keeps getting nasty
>> hacks.
>>
>>
>>
>>
>>
>> *From:* AF  *On Behalf Of *Mike Hammett
>> *Sent:* Thursday, February 09, 2023 8:48 AM
>> *To:* AnimalFarm Microwave Users Group 
>> *Subject:* Re: [AFMUG] Business password managers
>>
>>
>>
>> We use LastPass Enterprise. It integrates with our Active Directory for
>> provisioning of users and group assignment. I have different groups and
>> folders for different roles in the company. Each user can be in multiple
>> groups.
>>
>>
>>
>> It's mostly headache-free (nothing in IT is totally headache-free).
>>
>>
>>
>> -
>> Mike Hammett
>> Intelligent Computing Solutions 
>> 
>> 
>> 
>> 
>> Midwest Internet Exchange 
>> 
>> 
>> 
>> The Brothers WISP 
>> 
>>
>>
>> 
>> --
>>
>> *From: *"Nate Burke" 
>> *To: *"Animal Farm" 
>> *Sent: *Wednesday, February 8, 2023 4:38:52 PM
>> *Subject: *[AFMUG] Business password managers
>>
>> I'm bringing on some more employees, so some sort of password manager
>> would be nice to have, other than my personal one, and all the passwords
>> I keep up in the old noggin.  This might be like opening up a apple/PC
>> debate, but just curious what others are using.
>>
>> I've looked at Dashlane, 1password, and bitwarden.  And there's always
>> Keepass, but I think that requires access to the central password file
>> at all times, might be hard to share between users.
>>
>> It would be nice to be able to only share certain passwords with certain
>> users.  Like Tech 1 can have Radios and Mikrotiks, but not VMWare.
>> Tech2 has Mikrotik and Vmware, but not radios.
>>
>> --
>> AF mailing list
>> AF@af.afmug.com
>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>>
>>
>>
>> --
>> AF mailing list
>> AF@af.afmug.com
>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>>
>> --
>> 

Re: [AFMUG] Raspberry Pi Shortage

[Matt Hopkins via AF]

I love the SBCs from Hard Kernel. They pack a punch for their price and
have been very reliable so far. (knock on wood) We've done many projects
with them to date. Availability is hit or miss at times lately but they are
pretty good about communicating lead times.
https://www.hardkernel.com/
-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

[AFMUG] Cambium 450 SM throughput key

[Matt Hopkins]

Hello All,

 Am I crazy when I'm remembering that when connecting an original
Cambium 450 SM to a 450M AP the throughput key being overridden to uncapped
as being a feature? I contacted Cambium support and was told that in V20.3
this was removed intentionally. Did anyone else use this feature? I noticed
some speed complaints from a few customers that were affected by this and
that's when I found this issue.
-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] cnMaestro CBRS

[Matt Hopkins]

You can import sector by sector via a spreadsheet in the CBRS Management
Tool. This is how I initially moved from Part 90 to CBRS. Then you have it
for later if you need to redo something too. I have not needed to use this
feature since that transition was finished though.

[image: import.png]

-Matt Hopkins




On Thu, Dec 23, 2021 at 2:23 PM Jason McKemie <
j.mcke...@veloxinetbroadband.com> wrote:

> Yeah, I know I'd have to enter my CPI credentials, I just figured there
> would be a way to copy the rest of the information over.  Guess I'll go
> with Steve's suggestion.
>
> Thanks everyone.
>
> On Thu, Dec 23, 2021 at 1:13 PM Josh Luthman 
> wrote:
>
>> You can't copy from inventory to CBRS because then you wouldn't get your
>> CPI hands on it...
>>
>> Josh Luthman
>> 24/7 Help Desk: 937-552-2340
>> Direct: 937-552-2343
>> 1100 Wayne St
>> Suite 1337
>> Troy, OH 45373
>>
>>
>> On Thu, Dec 23, 2021 at 9:29 AM Steve Jones 
>> wrote:
>>
>>> The easiest thing to do is input into linkplanner and do an export from
>>> there. We keep all our stuff in there. Then when adding the sms you have
>>> all the info you need with a click of a button. I have my 16 year old doing
>>> all our CBRS updates in cnmaestro, it's that simple
>>>
>>> On Wed, Dec 22, 2021, 11:03 PM Jason McKemie <
>>> j.mcke...@veloxinetbroadband.com> wrote:
>>>
>>>> I'm just starting to use cnMaestro, I've onboarded a 450M 3GHz AP and
>>>> input all of the particulars into the inventory section.  Is there any way
>>>> to just copy that information over to the CBRS section or do I have to
>>>> re-enter it?  It really seems like there should be a way to copy it over.
>>>> --
>>>> AF mailing list
>>>> AF@af.afmug.com
>>>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>>>>
>>> --
>>> AF mailing list
>>> AF@af.afmug.com
>>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>>>
>> --
>> AF mailing list
>> AF@af.afmug.com
>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>>
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>
-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] CNMaestro Bulk SM Configuration update

[Matt Hopkins]

>From the tower level you can choose which AP's connected devices you would
like to bulk update the configs on.

On Thu, Apr 8, 2021 at 3:51 PM Nate Burke  wrote:

> I'm sure I'm missing a step.  I want to push out a config update via
> CNMaestro to All Sm's that are attached to an AP, but I can't figure out
> how to batch that.  At the AP level, since the config is only for SM's I
> can't select it from there.  I can do 1 SM at a time, but I can't figure
> out how to do all the SM's on the AP.  How do I select multiple SM's for
> a config update?
>
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>
-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] Microsoft vs Google

[Matt Hopkins]

To be sure this could be a lively debate.

We have been using Google for a few years now and overall am quite happy.
Cloud uptime is phenomenal. I personally steer clear of Microsoft at all
costs. For any use. Thank goodness for Steam's efforts on Linux gaming.
Google is not innocent though, but my view is that they are the lesser of
the two evils probably just because Microsoft has had more time to be more
evil. One issue that we have with Google is that after the fact if you need
to merge domains down the road, you can't. You basically have to delete
accounts in one and create it again in the intended domain. This has only
affected us after acquisitions of other companies.

Google Meets works very well.
Google Drive organization could use a little work in my opinion but it's
still very functional.
Google Domain (admin) controls are great and quite granular.
Gmail works very well.
Google SSO is handy.


I can't speak a ton about the Microsoft Cloud offerings except from the
reports of vulnerabilities and myriad of outages reported in the news.

On Tue, Mar 16, 2021 at 10:46 AM Steven Kenney  wrote:

> You have a choice of moving your office applications, all of its
> documents, email server , video conferencing, project management  and other
> applications from on prem to cloud based.
>
> Which one do you choose?
>
> One will cost more than the other for sure.
> One allows you to join a domain via Azure AD and set policies and remote
> manage computers
> One will be better to bounce SSO and auth off.
> One is more reliable than the other.
> One is more trustworthy than the other (although both are deep in
> government and alphabet agencies).
> One offers a nicer user experience for less technical people.  IE: more
> accessible / user friendly
> One offers a more granular experience for more technical people.
> One is more compatible with a wide variety of hardware and software
> operating systems
>
>
> Consider this for a staff of 40 people half of which are technical half
> which are not as technical.
>
> Which route would you go?
>
>
> [image: logo] 
> 
> 
> 
> 
> 
> * STEVEN KENNEY *
> DIRECTOR OF GLOBAL CONNECTIVITY & CONTINUITY A: 158 Erie St. N |
> Leamington ON
> E: st...@wavedirect.org | P: 519-737-9283
> W: www.wavedirect.net
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>
-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] 450m 3ghz + Packetflux

[Matt Hopkins]

Correct. It will not damage the 450m. That is how we are powering many of
these units. Be mindful that the power scheme is the same for both the DC
connection and the RackInjector. Meaning don't mix + and -48V, I haven't
tried but it seems like a very bad idea.

On Thu, Mar 4, 2021 at 10:09 AM Josh Baird  wrote:

> Just checking here..
>
> 450m is powered by direct DC.
>
> For sync, I have a RackInjector.  To enable Cambium Sync on the
> RackInjector, you have to power the port.  Do I run a cable from the
> RackInjector to the "main" port on the 450m?  This will inject power to
> that port.  Will it damage the 450m?
>
> Thanks,
>
> Josh
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>
-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] Your Own Satellite Internet

[Matt Hopkins]

If I recall correctly it is illegal to aim a 5GHz radio > 3° above the
horizon.

On Thu, Feb 25, 2021 at 9:43 AM Matt Hoppes <
mattli...@rivervalleyinternet.net> wrote:

> So here me out.  I've been to low earth orbit (90,000 feet) with
> equipment I can get in my basement/hardware store.   I've beamed signals
> back from 90,000 feet to a radio in my truck.
>
> I'm familiar with how AmSats work (although have not sent one up myself).
>
> What is preventing a WISP from putting together a solar powered GeoSync
> satellite that has a few Cambium Spots on it to fully cover your
> coverage area?
>
> Yes, you'd have capacity issues if you didn't plan it correctly, but is
> there technically any reason I can't run a 5GHz link to a satellite?
> Do you have to pay a "rental" fee to occupy a space in space to park
> your bird?
>
> Yes, I realize there would be latency, but if you keep the throughput
> there (something Hughes Doesn't Do), the experience wouldn't be half bad
> for most things..
>
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>
-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] Capstan Winch

[Matt Hopkins]

No can do on this one. The AC feed goes into the pedal first and then on to
the winch. The pedal is basically a light switch.

On Mon, Dec 7, 2020 at 1:10 PM Steve Jones 
wrote:

> can you swap pedals? its normally just a polarity reverse int he pedal
>
> On Mon, Dec 7, 2020 at 2:11 PM Matt Hopkins  wrote:
>
>> I just bought a new winch (
>> https://www.gmesupply.com/ab-chance-3000-lb-capacity-capstan-hoist) for
>> tower work but to my surprise it does not have reverse, and it's painfully
>> slow. Our old My-Te had reverse, (
>> https://myte.com/winch-hoist-models/product/300AB/?categories=3) I just
>> thought it was a standard thing. It is really handy for lowering loads and
>> getting them in just the right position. Our My-Te winch is 15 years old
>> and has certainly paid for itself but it is due to be replaced. I would
>> just get another My-Te but I would like a smidge more load capacity. What
>> winch do you use? Any recommendations?
>>
>> --
>> AF mailing list
>> AF@af.afmug.com
>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>>
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>
-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

[AFMUG] Capstan Winch

[Matt Hopkins]

I just bought a new winch (
https://www.gmesupply.com/ab-chance-3000-lb-capacity-capstan-hoist) for
tower work but to my surprise it does not have reverse, and it's painfully
slow. Our old My-Te had reverse, (
https://myte.com/winch-hoist-models/product/300AB/?categories=3) I just
thought it was a standard thing. It is really handy for lowering loads and
getting them in just the right position. Our My-Te winch is 15 years old
and has certainly paid for itself but it is due to be replaced. I would
just get another My-Te but I would like a smidge more load capacity. What
winch do you use? Any recommendations?
-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] Sync 2.5 and 5.0 MS Frames Cambium

[Matt Hopkins]

450m does do 5ms as well. They added it around 16.1 I think.

On Tue, Aug 18, 2020 at 9:41 AM Sean Heskett  wrote:

> everything has to be one or the other.  no way to sync 2.5 and 5 together.
>
> going to 5ms you should see about 10% boost in performance
>
> On Tue, Aug 18, 2020 at 9:44 AM Sam Lambie  wrote:
>
>> I am replacing some 450 AP's with 450i so I can utilize 40mhz channels
>> and a little better throughput. Currently All my 450m AP and 450 and 450i
>> Ap's are synced to 15 miles, 75% and 6 contention slots. Everything is
>> happily humming along with these settings. Easy enough to duplicate at
>> 40mhz And call it good. But I like to try to squeeze as much throughput as
>> I can out my network.
>> With the replacement, I am curious if I were to go to 5 ms frames on the
>> AP's, how the heck do I sync the settings? It seems impossible as the start
>> and end Slots have basically doubled when going to 5.0 ms frames.
>> I have within earshot of this site about 10- 450m AP's spread out over
>> 15-20 miles. They don't do 5.0 ms, so I am wondering if I am going down a
>> rabbit hole...
>> Has anyone colocated AP's with mixed frames? Does it work? I also have 2
>> ePMP 2000 AP's at this site as well to add to the fun...
>>
>> Thanks
>>
>> --
>> --
>> *Sam Lambie*
>> Taosnet Wireless Tech.
>> 575-758-7598 Office
>> www.Taosnet.com 
>> --
>> AF mailing list
>> AF@af.afmug.com
>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>>
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>
-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com