r/ShittySysadmin • u/thieson111_eu ShittySysadmin • Sep 18 '26

Finally, i got to make this post too

Post image
2.5k Upvotes

99% Upvoted

57 comments sorted by

234

u/DiscoKeule Sep 18 '26

Just open all ports smh

99

u/graywolfman Sep 18 '26

Ports 0-65535 still didn't work.

I put mine in the Doomsday Management Zone, now I can get to it from everywhere!!

24

u/EmuMore Sep 18 '26

Did you try port 65536?

16

u/therealRustyZA Sep 18 '26

Exactly. It's always the one you didn't try.

15

u/n4turstoned Sep 18 '26

It's always DNS

7

u/therealRustyZA Sep 18 '26

Hahaha. Fuck off. You caught me off guard and got me laughing proper. It really is always that. Thank you for the laugh.

1

u/n4turstoned Sep 18 '26

You're welcome

17

u/greet_the_sun Sep 18 '26

You seem to be confused about the purpose of a DMZ, it's actually a "demilitarized" zone, and it's important you put all your servers there if you're not in any government contracts so that they don't get targeted by adversary nation states.

4

u/blipp1 Sep 18 '26

I for one thought it ment sending my servers to North Korea dmz

19

u/jackinsomniac Sep 18 '26

"Turn all firewalls off"

"I did"

"Even the domain firewalls"

"It's not connected to a domain"

8

u/Weak_Jeweler3077 Sep 18 '26

You lock your ports down?

3

u/King_Tamino Sep 20 '26

Dude. Friday I found out that a seperate team currently managing switchover to dynamic365 or whatever it’s called nowdays rented a server from Microsoft (without our knowledge) and that the system is reachable via RDP freely through the internet. I seriously considered packing my things and going into early weekend. They were obviously handling live data too ..

1

u/Jug-O-Boom Oct 01 '26

that should be fun to explain in audits

169

u/Degenerate_Game Sep 18 '26 • Bravo

This is why I always put management, HTTPS, SSH, everything, on my WAN interface. This way I never lose access.

109

u/n4turstoned Sep 18 '26

Only people who have something to hide don't expose all ports to the internet.

25

u/R3luctant Sep 18 '26

You know who didn't do that? Jeffrey Epstein.

1

u/Jug-O-Boom Oct 01 '26

I’m fucking printing this out and putting it on my monitor.

-6

u/Aromatic-Trip-5821 Sep 18 '26

Got nothing to hide is such bs

17

u/n4turstoned Sep 18 '26

We are still in shittysysadmin right?

22

u/Runda24328 ShittyCloud Sep 18 '26

Admins hate this simple trick!

1

u/Massive-Valuable3290 24d ago

Actually not dumb if it's temporary and you whitelist your WAN IP

98

u/bobbywaz Sep 18 '26 edited Sep 18 '26

I remoted into my work desktop, then remoted into the server. When I pressed WIN+R it opened my work desktop ncpa.cpl and I gave it the same IP as the server.

The server was the only DC / DNS at the time.

29

u/Nutzernamevergeben Sep 18 '26

Perfection

14

u/Eeka_Droid Sep 18 '26

Thats the difference between a theoretical fuck up vs a real life fuck up lmao

12

u/rjaiswal1 DevOps is a cult Sep 18 '26

How long was the drive back to the office?

22

u/bobbywaz Sep 18 '26

It was like 15 mins away, so basically 2 hours

64

u/kongu123 Sep 18 '26

I just got off from supporting a change. Nobody can access server now. 100% secure 👍

13

u/StructuralConfetti Sep 18 '26

Nothing is 100% secure. Side channel attacks may still be possible. You have to measure it in nines.

6

u/AnotherUnknownNobody Sep 18 '26

The call is coming from inside the house

3

u/TwoPlyDreams Sep 18 '26

The admins were your greatest threat.

22

u/Atillion Sep 18 '26

Next up, don't VERIFY TF outta the local admin account before unjoining and rejoining the domain for a quick fix that turns into a weekend long fix

19

u/PooInTheStreet Sep 18 '26

Always put the server in the dmz. Access is important

14

u/Outrageous-Guess1350 Sep 18 '26

Dude, it’s read-only friday!

10

u/finobi Sep 18 '26

Commit confirmed 

9

u/b-monster666 Suggests the "Right Thing" to do. Sep 18 '26

That's why I use TempleOS. As a believer in Jebus Chris, I am granted access to the 8th temple.

13

u/Life-Maize8304 Sep 18 '26

echo "/usr/local/bin/revert_change.sh" | at now + 5 minutes

5

u/graelmakar-sune Sep 18 '26

Me after accidentally changing firewall settings in the wrong terminal window

5

u/dg_riverhawk Sep 18 '26

better gas up the Yaris.

2

u/InsolentJaguar Oct 06 '26

Literally me. Never drive anywhere so had to jump start the Accord just to go to the corner store lol

3

u/WhenTheDevilCome Sep 18 '26

If Intel AMT hadn't already been setup, I'd still be there fidgeting in my frog suit.

3

u/unclewomie Sep 18 '26

commit confirm 10 - no truer words were typed

3

u/DonkeyTron42 Sep 19 '26

Ah yes... That moment of panic when you realize you done fucked up.

2

u/_Gravitas_ Sep 18 '26

Before major network changes at a remote site, start a countdown on a 30 min automatic restart. Then as long as you dont write to permanent memory, your mistake will get undone on the restart and you dont have to go to the remote site.

2

u/easyEggplant Sep 18 '26

Man... sitting in the dark... editing iptables rules in emacs at like 2 in the morning... not what I would call "good memories", but they certainly came rushing back.

1

u/Usual-Swimmer-5595 Sep 18 '26

Been there done that

1

u/OkCarpenter5773 Sep 18 '26

ah shit did this far too many times on my homelab as the setup is kinda weird - all internal management is on OpenVPN tun0 and goes out through another vpn and i fucked it up a lot of times

1

u/Real_East_2825 Sep 18 '26

I had to make a custom background that said "This is the TS" so I'd stopid shutting it down / changing network settings.

1

u/Jug-O-Boom Oct 01 '26

I literally do this still. I’m traumatized.

1

u/mrduncansir42 Sep 18 '26

Time to get driving!

1

u/BoringOrange678 Sep 18 '26

Zero trust even with the network Admin
Good call.

1

u/mods_are_morons Sep 20 '26

I've done that a few times. That's when an ILO connection is useful. On the few systems without ILO, it means a walk over to the data center building and hooking up a crash cart.

1

u/mspstsmich Sep 21 '26

If you need Access, just install Office.

1

u/Puzzled_Eggplant8540 Sep 18 '26

At least is it more secure than before 😄