tom_newton

Your troubleshooting seems sensible. What's your ticket #

I am not sure if I am reading this correctly - but sounds like you have everything working, you just want to stop staff adding arbitrary devices using their username and password? One way to do this would be to go the certificate route, as someone above suggested. however your question is not super clear to me, because on one hand, you say you want them to add any device, and on the other, you say you want to restrict

It can be exacerbated by proxies. If you have a few external IP addresses, moving to a different one might help.

But it was DNS which took out dynamo, I think

Even if you arent on AWS (we're either GCP, or Azure here) you can't escape. Some of the 3rd parties we use have AWS under the hood - including folks like zendesk, and so we haven't had a fully normal day. Luckily super important stuff, like filtering, is designed for mega resilience to this sort of stuff. I had my money on power, but so far DNS seems to be winning as the root cause (but what caused the dns issue?)

Not a sausage. I'm at ietf 124 in a few weeks, I'll see if there are any interesting Google people there

Very briefly. I had it on PS4, and my wife didn't like it, so we didn't play it longer than a few hours. PS4 is currently not set up - might wishlist it on steam, and if it comes up cheap, give it a go. Of the turn-based games I have definitely enjoyed, Divinity was good, but never managed to beat the end boss. Probably do with another playthrough, but also got that on PS. Never really liked Baldur's Gate. Got half way through and got bored. The wasteland games were good, I liked them. There is nothing out there though that is quite as good as Xcom.

I am too old and broken to play games that need reactions, so it's turn based stuff for me. Have put a couple of playthroughs into Xcom, and also the not-as-good-not-a-sequel-but-still-fun Chimera squad. Currently playing Wartales, which is alright. If it counts as games, I also play a couple of the games on Linkedin (theres a few timed daily word game type things on there) where I always get pipped by one D Foulks.

I wonder if this has to do with Encrypted Client Hello... altho asda.com doesnt seem to have ECH turned on...

I believe this has been, or soon will be automatically disabled by us

If you disable the "basic image search" content mod, that will get you working. It looks like google may have finally got around to killing this feature.

It is - or at least was. It was obviously a long time ago when it was used, and I've been arms length from on prem for a while, so I could be wrong

There was an old NTLM trick we used to work around a bug in IE (yes, very old!) that used to cause this. I'd have a look and ditch NTLM - Microsoft wants rid of it anyway!

Have you got a support ticket?

There should certainly have been warning from your CSM that the service was going away over the past few months, but anything that's vanished today is an error

That's likely to be a mistake on our part - there was no intention to delete anything today

that is possibly that your cf traffic is still going via on-prem - if you configure "secret knock" the cf traffic can bypass on-prem, and there'll only be traffic with usernames

They are... try [0-9]+ in case \d isnt supported - and failing that, open a case and ping me the ticket #

OK, so it sounds like your cloud filter is not working at all because it is poorly provisioned. Did you push the corresponding MSI? My suggestion is to contact your CS rep and have our install team help you roll ou CF more effectively.

Hmm, and you are seeing the on-prem blockpage still?

Possibly easier to move away from on-prem filtering these users, and use the cloud filter client?

Sadly when I first contracted with Mailroute it was because nobody else could get the price anywhere near edu requirements. At the time we had a VERY big discount off their list price, but we now have so few anti-spam customers we are under the minimum spend for that product, and it's not financially viable (we are now heavily subsidising those who remain). Most folk manage with Microsoft's anti-spam options I think

I'm told a lot of folk prefer a google sheet or something roughly equivalent! Is that true? There's a degree to which building a company around something this niche is asking for data breach issues

Chuck me your ticket # - I will look into it

Remember for a firewall rule to allow ping you'll need to explicitly add ICMP - so not always a great diagnostic. I'd look at "can you connect in the way the devices need to" - eg can you telnet to the port. I'm not quite able to visualise whats going on to be able to troubleshoot this.