u/DTDude

Hey all,

I’m a desktop engineering manager for a large university. We’ve got about a thousand Macs. Before I arrived on the scene, our enforcement of macOS minor and major updates was at best a suggestion. We’re got several hundred Macs that are on OS’s that no longer receive security updates (and even more that are going to lose them once Sonoma goes end of life). We’re getting aggressive now, and have notified users of Macs on Ventura and below that they either need to upgrade to a supported OS or replace their Mac this fall. If they fail to do so they will lose access to the University network.

This is all good and well…except I’m wondering how we’re going to implement this. On the Windows side we’re going to use Group Policy to basically force Windows Firewall to block all traffic, in and out. I’m not sure how we’re going to implement this on the Mac side and am looking for suggestions.

My first thought was simply to create a configuration profile in Jamf to turn on Firewall and block all traffic…but it looks like I can only do that for incoming traffic. While this will break some things for users, it won’t actually stop outgoing traffic.

My next thought was to write a script to disable all network cards. This will certainly work…but I’m not so sure we’ll be able to prevent a crafty user from re-enabling them. Our users don’t have admin rights, but we do use Cyberark, which will just temporarily grant them elevated rights to re-enable their network cards.

Could also block MAC addresses at the switch….but all they’d need to do is use someone else’s dock, or a USB Ethernet/wifi adapter.

Any suggestions are greatly appreciated.

Just passed my general exam this afternoon and am eager to use that new temporary AG callsign. New radio and antenna aren't in the budget for a couple months. There's plenty of ways to get on VHF/UFH over the internet (Echolink, Wires-X, etc). Anything similar on the HF side?

I've seen RHR recommended, but holy hell the prices are like an AT&T long distance plan in the 90s.

I'm getting back in to radio after several years. I've been all VHF/UFH so far, but want to change that. Before I even think about the shiny distracting part of buying a transceiver, I want to make sure I have my shack setup to be effective and safe. The hardest part for me to decipher so far has been ground, and I could use some advice.

I've got an awfully small city back yard with a power line right down the middle. I'm considering a vertical antenna with ground radials if I can position it to avoid falling on the power line. Unsure if this type of antenna needs RF grounding. If I can't do vertical I'm going to attempt an inverted V through my giant oak tree, in which case I'm pretty sure it does need RF grounding?

As far as grounding the shack itself, I'm also a little lost. As far as RF ground, I think this should be easy. I can make a bus bar and run copper straight out the window (1 story house) to the back yard. The window in this room is right next to the electrical service ground. Can I use this, or do I need to drive a separate rod? The other challenge is electrical grounding. Old house, no grounded outlets. Getting outlets grounded is not an option right now. Should I worry about this? Something I can safely jury rig? Or is this going to be a matter of just being careful to unplug stuff during storms and not worry about it? I've gotten away with it with VHF so far, but not sure I will be as lucky and interference free with HF.

Thanks in advance!