nginx | redirect https://domain to different https://domain without browser cert errors

Standard nginx redirect: server { listen 80; listen 443 ssl; server_name up-eleven.de http://www.domain-a.tld; return 301 https://www.domain-b.tld; } Produces browser ssl errors (wrong cert) cs before executing the redirecting order the https connection is established between your browser and the orig domain. Solution: Run certbot on the orig domain you redirect from: The bot inserts this […]

Postfix vs. outbound.protection.outlook.com

Microsoft has decided that checking senders hostname using HELO and rDNS is really 90’s, not really a rule and only for loosers and cowards: https://docs.microsoft.com/de-de/exchange/troubleshoot/antispam-and-protection/cannot-send-emails-to-external-recipients As an old school admin you have to tune your postfix to let the fluffy cloud mails from visionary early adopter outlook users. To solve the HELO part of the […]

Windows 10 since 21H1 | Failed access to samba guest shares

You can’t connect to a samba server configured with map to guest = Bad User Don’t try this at home: Re-Enable the guest account fallback Your risky solution: Tune your GPO. Computer Configuration\Administrative Templates\Network\LanMan Workstation\Enable Insecure Guest Logons ATTENTION:I’ve had faced situation when this didn’t do the trick. I hat to tune the registy: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters] […]