Sure was! You need to be on top of paid and free and open source software from a security stand point. There's no shortcut no matter what you think you're paying for. Your threat model might be better when the service automates a Web proxy for you, but that's only one facet. You trade problems but should never feel like you can "set and forget". Sometimes it's better for you to do it yourself because there's no lying about responsibilities that way.

100%

Almost like that xkcd joke...

Explains the bird feathers

Who needs 20! Lol. Says more about me than you.

Plex was how last pass got hacked. https://www.howtogeek.com/147554/lastpass-data-breach-shows-why-plex-updates-are-important/

You still need to do stuff even if it is plex.

To back off your post, does anyone have one for Australia?

April first.

I don't think that works on my Samsung TV, or my partners iPad though. :)

Although not especially effective on the YouTube front, it actually increases network security just by blocking api access to ad networks on those kinds of IoT and walled garden devices. Ironically my partner loves it not for YouTube but apparently all her Chinese drama streaming websites. So when we go travel and she's subjected to those ads she's much more frustrated than when she's at home lol.

So the little joke while not strictly true, is pretty true just if you just say 'streaming content provider'.

Go watch "the cost of concordia" by the same guy :)

If you haven't already that is.

Nobody happy. :(

Hey so it seems like you don't really get licensing or 'too expensive' is just business speak for wanting it done free.

Exchange plan 1 licenses are minimally very very small licenses, but you can get even cheaper. You can even get exchange kiosk. Kiosk isn't designed for users, it's designed for things like an MFP then you're allowed to relay with an authenticated startTLS account setup on the MFP to connect to exchange Online.

However, if you don't use an authenticated account, you can still send internally. That way your inevitable compromised device doesn't spam the world with mail throttle Microsoft servers. However you can scan to your own internal staff. And by internal staff I'm guessing at more and more here but I'm betting you have two mail domains. Only domains in your exchange Online Admin centre which are added into the domains, will be 'internal'.

If you wanted hybrid you should do hybrid using the hybrid configuration wizard and it will connect your on premises exchange to your exchange Online using mail transports. You need to fix up a bunch of things to get that connected. But doing so will count the mailboxes which are on premise as 'internal' and unauthenticated mail will be allowed to relay to them.

But 40 exchange online only accounts with exchange plan 1 is hardly a few seconds of wage time per month in costs.

I'm guessing a lot here, but you said you have two different mail servers currently, online and on premise, I can only assume you've either got two different mail domains otherwise MX routing would be dead to one or the other. And I guess that because you said you're getting errors that only happen when you send mail to external users.

So...