Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - wim.cossement

#1
Yes I know but then you need another Windows box and license.

But relaying via Postfix is also easy, once you know how to configure it...  8)

I used this one to test it with G-mail first: https://www.howtoforge.com/tutorial/configure-postfix-to-use-gmail-as-a-mail-relay
This is for OWA 365 but very similar: https://www.informaticapressapochista.com/linux/configure-postfix-use-office365-smtp-relay-ubuntu-16-04/
Microsoft is not as cool as Google when it comes to accepting mails not being sent by the authenticated use so you have to change the headers a bit; they must be the same as the account you'll log in to OWA 365 or your message gets rejected: https://wiki.4psa.com/display/KB/How+to+change+the+From+header+for+messages+sent+by+Postfix

These last 6 weeks have been interesting because I learnt a lot about this nice NetXMS product but now my project's time's up.
#2
Hi, I've just gotten a reply from F-secure and had been falsely flagged.
This has been corrected in their products...

Wim
#3
I have uploaded and created a report with F-Secure about the false positive with the agent installer.

I also tried to install it on some more servers with the package deployment tool in NetXMS and this is the result, the ones where it is still installing also worked out, see the attached image.
#4
I might be jumping the gun here but when I wanted to upgrade some agents on some Windows servers F-Secure server security premium blocked the installer and said it was malware with this link:
https://www.f-secure.com/v-descs/w32_malware.shtml

It's however not happening on all servers, I was able to upgrade it on another one. It's a centrally managed F-secure so all servers have the same version and definitions and so on are updated daily.
It's also happening on various Windows server versions.

I see it's also possible to report false positive malware to F-secure and upload the installer but I must check this with my colleagues first tomorrow.

Holler if you need more info.
#5
Thanks for the tip, I'll give it a try as soon as I have some time.
#6
Hi,

I'm again a bit stuck; now I want to monitor the status of a specific NIC on a Windows box.
I get reports via de default EPP rules at the beginning but I'd like this to happen for a specific NIC on Windows VM's but now I'm testing this on my laptop.

If I work analogue to other metrics that I can get working I take the following steps (like here or here):

- Create new event configuration - or use existing ID's 4 and 5
- Create new data collection configuration for the machine with parameter Net.Interface.OperStatus("Wi-Fi")
- Instance name in threshold is set to Wi-Fi, expression equal to 0 with SYS_IF_DOWN as activation event.
   Wi-Fi is the name of the wireless NIC in Windows.
- Edit the Event processing library and disable rule 4 and 5 and create my own copies of them.

Kind regards,

Wim
#7
I won't be able to use that because this requires a Windows server and I'm running this on a simplevWindows 10 box.
There are other mail relays out there like hMailServer but the configuration seems a bit confusing to me and I haven't gotten it up yet but will keep trying.
Otherwise I'll try to convince them to let me use a Linux box instead for the server...  ;)

Thanks,

Wim
#8
Hello,

Has anyone already been able to use smtp.office365.com as their mail server from a Windows box?

Ive been playing around at home with a Debian client and Debian server and via Postfix I can relay mail alerts to Gmail but now they want me to implement the whole shebang on a Windows only environment for an internship. But sending mails from a Windows machine seems to be a PITA.
I can use a tool to test it that saves it's account settings in an XML file like SwithMail and this works file from the command line as a local user but if I define this (for testing) in the server actions nothing happens.
PowerShell could perhaps be another option but then again, the action needs to be executed so am I missing something?

Thanks,

Wim