Security

WordPress two-step authentication

WordPress two-step authentication

In an effort to keep my personal and business life separate, I have started a second blog about my personal life, though I decided to host it for free on the wordpress.com site.  With this site now up I wanted some more security so I setup the WordPress two-step authentication which requires an app on my smartphone, and involves a security code.

Well it’s very cool but I’ve already blogged about it on my personal blog so instead of repeating myself, I’m just going to provide a link here to the article I’ve already written:

http://itamarcroitoru.wordpress.com/2013/08/09/wordpress-two-step-authentication/

Enjoy,

Hosting and SEO

Open Door Windows and Doors Inc.

Open Door Windows and Doors Inc.

Open Door Windows and Doors Inc. recently chose us to host their new Web Site, redesign it and SEO it from the ground up.

They have also chosen us to provide them with VoIP Services for their business needs.

Web Site Hosting

With their old site being hosted by someone else who would refused to provide them or us any access to anything on the old site except what would be copied and pasted, the entire site had to be rebuilt.

For this project we chose to use WordPress as it allowed us to create some nicely dynamic content for Open Door Windows and Doors Inc but still allows for good SEOing and is easy enough to manage that it allows them to Blog as often as they want without much help from us.

VoIP

With their old VoIP provider now providing a less than expected Quality of Service, we found a small challenge in getting their VoIP Services moved away from their old provider as it was difficult to get all of the necessary information accurately from their old provider and this proved to be a challenge when it came to porting over the phone number.

Eventually we did manage though to get everything we needed and their existing phone number (647) 827 – 1070 was ported over to service without any glitches or downtime of the phone line.

In this case, Open Door Windows and Doors Inc. wanted a phone line which is capable of handling multiple physical phones with advanced features, many voicemail boxes, a Voice Prompt for all inbound calls, and a good rate across Canada and the US, so we went with our standard rates package as seen on our VoIP page and went with a small but powerful Acer mini tower running FreePBX to handle the day-to-day operations of the phone server while providing automated updates and an easy to use Web Site Interface to manage everything.

With our VoIP Services for Home and Business, they now have the ability to check their balance, Call Display Records and rates as well as make payments all online and automatically right from their our own Web Portal.

Scripting

Blackouts and Battery Backups

Blackouts and Battery Backups

With the recent flooding and blackouts here in Toronto, Ontario, Canada, I’ve decided to replace my aged UPS (my computer’s battery backup) with a fresh one from Costco and while there, I was pleasantly surprised to find they had one from what most people consider to be the biggest name in the business, APC, and it turned out to be a good model for the price they asked. They had an APC Back-ups x1300 for under $200.

After bringing it home to protect my AD virtuals on my ESXi tower and my PBX and NAS I found it only allowed my to use and only would talk to, their Personal Edition of their software PowerChute which meant it would only be monitored by a single installation of an OS, in this case Windows 7.

After a little playing with it I found how to make the USB attached detection transfer through ESXi to the virtual Windows 7 and so began my battle to make it shut down everything.

I started with the basics. I wrote a simple batch file to say Hello World and triggered the battery by unplugging the UPS from power for over minute and I found a specific event in the Windows Event Logs ‘174’ was the Event ID and it seemed to happen whenever the UPS switched over to the battery.

So I right-clicked that and was given an option the trigger a Windows task based on this event happening again.

A note to anyone playing with Windows tasks in Vista /2008 or higher. In order to use the option to have the event trigger even if the needed user is not logged in, you will need to play with your Windows Group Policies to give that user the rights to ‘log on as a batch’, otherwise it will just fail with a permissions error.

After spending about on hour playing with the task’s settings to make it run regardless to the user being logged in, I tested it with another pull of the power cable and found it does work to start a program, or batch file in my case, but that nothing shows up on my screen in any case so I had it log output to a file to confirm it was active.

Windows task settings did give me an option to have a message popup on the screen and send out emails first but I could not get either of those to work in a measurable way.

I worked my way through a batch file which would send the ‘shutdown’ command to other Windows systems and for this to work I had to switch the user I was running the task as to a user with that kind of permission on all the Windows VMs. Thankfully they are all on the same Windows domain so a domain administrator was easy enough to use to run the task.

I then put in a 60 second sleep count and used plink.exe from the putty suite to trigger a shell script on my PBX server. This is useful because the Windows 7 virtual running this task during a blackout also needs to shutdown while more happens, so the 60 second sleep timer allows the Windows VMs to finish powering down and then a script to continue everything starts up on my PBX which is on CentOS and on its own Acer Revo hardware. So I finished this batch file up with a simple shutdown now command to Windows and it was ready to test.

The result was the UPS kept things running fine with a 40 minute counter to start and within 2 minutes all the VMs on my ESXi tower had been shutdown including the domain controllers and the WSUS.

So now I started to work from the Linux side of things and I found that from Linux you can just type the command SSH and it works but it always asks you for a password from command line and this made it hard to script so I googled and enable the RSA key authentication between specific hosts internally and no more asking for a password from a specific host to other Linux systems I have.

Now came the fun of trying to script an Ubuntu server to shutdown remotely. I googled how to use sudo over SHH but scripted, it would not work. Then I hit upon the idea of modifying the sudo access on the Ubuntu VM so that my specific user does not need a password to run ‘sudo shutdown’ and every article I found talked about editing the suckers file but not a single one worked. I ended up remembering that I did get the VMware Tools to work on the Ubuntu VM so from SSH to the ESXi host, I was able to script it to send a nice shutdown command to the Ubuntu, then my SmoothWall Firewall/Gateway, then push ESX into maintenance mode (required for the next step), then shutdown ESXi completely.

Then remembering I had already installed SSH on my NAs ( a D-Link DNS-320) I just scripted that shutdown command higher up so it starts sooner.

Following all of this the only device that is left standing is the PBX server itself, so I finished off the script with a simple ‘halt’ command and it was done.

Upon further testing I also noticed that when power gets restored, some of the device boot up automatically and this was wonderful news.

My next project is to automate the startup after a blackout, but that’s a story for another blog post.

VoIP

Fax over VoIP – FreePBX

Fax Over VoIP

I have until now been using VoIP for some time and have been looking for a solid faxing solution which would compliment that, and the idea of putting Fax over VoIP seemed alien some how.

I know that faxing is an old technology, but I do still deal with some companies who offer it, so I’m still looking, while I try to perfect Fax over VoIP.

I’ve also recently noticed that my VoIP server was out of date but chose to do a full wipe and reinstall so that I could also update the underlying Asterisk from v1.6 to v10 which provides a lot more features including integration of inbound fax and Google Voice.  For the rebuild I used the FreePBX Distro and installed FreePBX 2.10 with it and so far I’m really impressed.

With the new automations included, it means that a lot of things I had to manually make work before are now working out of the box, such as my CDR (records the call logs) and inbound faxing.

So I configured a few small settings and now when someone calls my main number, it goes through a SIP based fax detection and if that picks up that the call coming in is a fax (and so far it has) then it receives the fax as a TIFF file and then Emails it to the Email I configured to receive faxes in my extension for my house cordless.TIFF

With the inbound faxing covered, I am now on the hunt for an outbound faxing solution.  If anyone knows a good one please feel free to let me know, otherwise I’ll update again once I’ve found something.

Making IT affordable

spam email