RE: VPN question

2001-09-27 Thread David Thomas

Can I ask what you did to sort out the problem? I want to start using VPN at
my office but am not sure about how to get it working...as the firewall is
giving me a lot of problems/denial messages

Regards
Davidt


-Original Message-
From: Krueger, Aaron G. - Lonesome [mailto:[EMAIL PROTECTED]]
Sent: 27 September 2001 15:52
To: NT System Admin Issues
Subject: RE: VPN question


I'm coming in the middle here, so forgive me if this has been stated
already...the traffic _does_ need a way to get back to the end user. Port(s)
may need to be opened or reconfigured to allow VPN to function correctly. I
have run into a similar situation before at a small business where the
previous IT person had the firewall far too secure. Just another opinion...

Aaron G. Krueger
Sr. Network Analyst


-Original Message-
From: Michael W. Ellis [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 27, 2001 9:43 AM
To: NT System Admin Issues
Subject: RE: VPN question


Part of the problem is that I have no idea of their configuration.  Most of
my remote users work out of home offices and use dialup for Internet.  This
particular user is in an office building where Internet connectivity is
provided, but I do not have any details on their architecture.  The user is
not network savvy enough to figure out any of the details.

My real question concerns their insistence that he must have a static IP
address and that they need to open _inbound_ ports to allow him to establish
an _outbound_ connection to my corporate LAN.

Michael Ellis


-Original Message-
From: David James [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 27, 2001 8:25 AM
To: NT System Admin Issues
Subject: RE: VPN question


Sounds fishy to me.  What kind of internet access, and what is the
configuration for the remote users internet connection?  Dynamic DSL? They
shouldn't have anything to do with ports unless they are firewalling you on
their end, or they are managing your firewall if you have a firewall onsite.


-Original Message-
From: Michael W. Ellis [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 27, 2001 8:13 AM
To: NT System Admin Issues
Subject: VPN question


I have a remote user who needs to connect to our corporate LAN over his
Internet connection.  The corporate end of the connection has already been
verified by another user in a different remote office.  Thus far the new
user has been unable to connect, and as far as I can tell none of his
packets reach my server.  His office has Internet connectivity provided by a
third party, so I asked him to verify with them that they will allow
outbound PPTP connections.  Their response was that they do not for security
reasons.  To enable this for his office they want to assign a static IP
address (more $ per month) and charge a setup fee (again, more $).  I have
repeatedly stated that he needs to establish an outbound connection, but
they insist that they must open inbound ports (hence the static IP).  I'm no
firewall expert, nor a PPTP expert, but I'm just not buying their line.  Any
comments on this topic are appreciated.

Michael Ellis



Want to unsub? Do that here: http://www.w2knews.com/rd/rd.cfm?id=unsub
Need a good FAQ? Try this one first: http://www.ultratech-llc.com/KB/

Want to unsub? Do that here: http://www.w2knews.com/rd/rd.cfm?id=unsub
Need a good FAQ? Try this one first: http://www.ultratech-llc.com/KB/



Want to unsub? Do that here: http://www.w2knews.com/rd/rd.cfm?id=unsub
Need a good FAQ? Try this one first: http://www.ultratech-llc.com/KB/

Want to unsub? Do that here:
http://www.w2knews.com/rd/rd.cfm?id=unsub
Need a good FAQ? Try this one first:
http://www.ultratech-llc.com/KB/


Want to unsub? Do that here:
http://www.w2knews.com/rd/rd.cfm?id=unsub
Need a good FAQ? Try this one first:
http://www.ultratech-llc.com/KB/




RE: Win 98

2001-09-26 Thread David Thomas
Title: Win 98



I might be wrong 
but Ithought that 10.x addresses came under the class A subnet ? i.e. 
255.0.0.0 but I might well be wrong, we use 10.10.x.x and thats a 255.0.0.0 
subnet
RegardsDavidt 

  -Original Message-From: Kopacko, Jason 
  [mailto:[EMAIL PROTECTED]]Sent: 25 September 2001 
  17:44To: NT System Admin IssuesSubject: Win 
  98
  I got a good one for you guys. I have a NT4 DC 
  server running DHCP/DNS/WINS. I am on a class B private subnet using the 
  10.52.x.x address range. I have a 98 machine that everytime it tries to renew 
  its lease at the half-way point, it changes the subnet mask from a class B 
  255.255.0.0 to a class A 255.0.0.0. Once that happens, of course all it can do 
  is access local machines and will not be able to get passed through my router 
  for internet and corporate access. I have done everything short of reloading 
  the system, which will get upgraded to 2000 soon. But I am curious if any of 
  you guys have bumped into this, since it is only one machine? Please 
  help!
  Thank You,  Jason 
  Kopacko Network 
  Engineer Gold Strike 
  Casino, Tunica, Mississippi (662) 
  357-1305 Want to unsub? Do that 
  here:http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsysadmintext_mode=0lang=english
Want to unsub? Do that here:
http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsysadmintext_mode=0lang=english
Need a good FAQ? Try this one first:
http://www.ultratech-llc.com/KB/





RE: Comments invited on 10 page log in script file

2001-09-25 Thread David Thomas

I thought our login scripts were big by using ten lines...let alone 10
pages...:-)

Regards
Davidt


-Original Message-
From: Mark Pilbeam [mailto:[EMAIL PROTECTED]]
Sent: 25 September 2001 07:14
To: NT System Admin Issues
Subject: Comments invited on 10 page log in script file


Hi,
I've just been sent a ten page log in script file (uses kixtart)
Anyone got a biger one!
Is there a real need for a script file this big?

Mark

Want to unsub? Do that here:
http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsysadmintext_mod
e=0lang=english


Want to unsub? Do that here:
http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsysadmintext_mode=0lang=english




RE: OT : Code name for Win98

2001-09-25 Thread David Thomas

wasnt the code name for it HOS? as in Heap Of Sh*t

Regards
Davidt


-Original Message-
From: Les Bessant [mailto:[EMAIL PROTECTED]]
Sent: 25 September 2001 10:39
To: NT System Admin Issues
Subject: RE: OT : Code name for Win98


If my poor old memory serves, that was Win95.

The other name for Win98 is FDISKitNOW



-Original Message-
From: Stuart Pittwood [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 25, 2001 10:41 AM
To: NT System Admin Issues
Subject: RE: OT : Code name for Win98


wasn't it Chicago?

-Original Message-
From: Les Bessant [mailto:[EMAIL PROTECTED]]
Sent: 25 September 2001 10:25
To: NT System Admin Issues
Subject: RE: OT : Code name for Win98


U, I usually call it Keepthatjunkawayfromme.

-Original Message-
From: David N. Precht [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 24, 2001 8:41 PM
To: NT System Admin Issues
Subject: OT : Code name for Win98


Guys and Gals-
Do you guys remember the code name for Win98 ?

Regards
Dave


_

Do You Yahoo!?

Get your free @yahoo.com address at http://mail.yahoo.com




http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


_
This message has been checked for all known viruses by Star Internet
delivered through the MessageLabs Virus Scanning Service. For further
information visit http://www.star.net.uk/stats.asp or
alternatively call
Star Internet for details on the Virus Scanning Service.



The information in this communication and any attachments is
confidential
and may be legally privileged. It is intended solely for the addressee.
If
you are not the intended recipient any use, review, dissemination,
distribution or copying of this information is strictly prohibited. If
you
have received this communication in error please notify us immediately
on
0191 261 2681 and delete the original message and any copies of it.

Any opinions, conclusions or other information in this message that do
not
relate to the official business of Sanderson Townend  Gilbert are
neither
given nor endorsed by the firm.


_
This message has been checked for all known viruses by Star Internet
delivered through the MessageLabs Virus Scanning Service. For further
information visit http://www.star.net.uk/stats.asp or
alternatively call
Star Internet for details on the Virus Scanning Service.

Want to unsub? Do that here:
http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsysa
dmintext
_mode=0lang=english


Want to unsub? Do that here:
http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsysadmintext_mod
e=0lang=english


_
This message has been checked for all known viruses by Star Internet
delivered through the MessageLabs Virus Scanning Service. For further
information visit http://www.star.net.uk/stats.asp or alternatively call
Star Internet for details on the Virus Scanning Service.


The information in this communication and any attachments is confidential
and may be legally privileged. It is intended solely for the addressee. If
you are not the intended recipient any use, review, dissemination,
distribution or copying of this information is strictly prohibited. If you
have received this communication in error please notify us immediately on
0191 261 2681 and delete the original message and any copies of it.

Any opinions, conclusions or other information in this message that do not
relate to the official business of Sanderson Townend  Gilbert are neither
given nor endorsed by the firm.


_
This message has been checked for all known viruses by Star Internet
delivered through the MessageLabs Virus Scanning Service. For further
information visit http://www.star.net.uk/stats.asp or alternatively call
Star Internet for details on the Virus Scanning Service.

Want to unsub? Do that here:
http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsysadmintext_mod
e=0lang=english


Want to unsub? Do that here:
http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsysadmintext_mode=0lang=english




RE: Scanning ports

2001-09-24 Thread David Thomas



the 
scanners from www.grc.com 
are also pretty good, 

RegardsDavidt 

  -Original 
  Message-From: Garrick Wales 
  [mailto:[EMAIL PROTECTED]]Sent: 24 September 2001 
  12:32To: NT System Admin IssuesSubject: Re: Scanning 
  ports
  Use a dial-up account and run NetScan Tools Pro on your IP 
  address and all ports.
  
  GW
   [EMAIL PROTECTED] 24/09/2001 12:39:51 
  Can anyone tell me how to scan all the ports on an NT or 
  Win-2000 system?Several systems were hit by Nimda (one my Sircam) and 
  I ran the Symanteccleaning utility and it stated it cleaned the systems 
  correctly but I wantto make sure.Thanks for any and all 
  tips/advice.Stephenhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm





RE: Virus scanning on file servers

2001-09-24 Thread David Thomas

The top two have to be Norton and Trends Server Protect, I have used and
done support for both and found them to be extremely good :-) out of
personal choice I would have to go with the Trend products as they gave me
the most T-Shirts ;-)

Regards
Davidt


-Original Message-
From: Martin Blackstone [mailto:[EMAIL PROTECTED]]
Sent: 24 September 2001 15:29
To: NT System Admin Issues
Subject: RE: Virus scanning on file servers


The recommended software? I would recommend a virus scanner. :)

This is a question that you will get a lot of different responses on.
Personally, I am no fan of NAI. Norton is OK. But I really prefer Trend
Server Protect. It hasn't let me down yet.

I have scanned servers that were running NAI with a different scanner
such as Norton, and found tons of Virii that NAI missed.

-Original Message-
From: Craig Sterley [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 24, 2001 7:03 AM
To: NT System Admin Issues
Subject: Virus scanning on file servers


Now that I have NImda cleaned from my servers/network.  what is the
reccomended software for virus protection on file/print servers?(NT4
SP6a)

--

Craig L. Sterley
IS Director
Huizenga Manufacturing Group
[EMAIL PROTECTED]
www.jrauto.com

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Virus scanning on file servers

2001-09-24 Thread David Thomas

Norton's desktop and server version also gives you centralized management
with the client PC's looking to the parent server every hour for updates and
the parent server looking for updfates twice a day although I think that
this is configurable.

Regards
Davidt


-Original Message-
From: Walters, Wade M. [mailto:[EMAIL PROTECTED]]
Sent: 24 September 2001 15:56
To: NT System Admin Issues
Subject: RE: Virus scanning on file servers


We use McAfee's Active Virus Defense (AVD) which includes the NetShield
suite that protects both our NT and Novell file/print servers.  There's an
Exchange component as well.  We found our best advantage with this is what
they call the ePolicy Orchestrator, which allows me to check the DAT status
of all my boxes, including workstations.  I can force updates out to any
machine on the floor.  Saves my group time and energy not having to walk
around.  More than you asked, but there's my 2 cents.

Wade M. Walters
Network Services
GDS Engineers, Inc.
[EMAIL PROTECTED]
713-295-4800


 -Original Message-
From:   Craig Sterley [mailto:[EMAIL PROTECTED]]
Sent:   Monday, September 24, 2001 9:03 AM
To: NT System Admin Issues
Subject:Virus scanning on file servers

Now that I have NImda cleaned from my servers/network.  what is the
reccomended software for virus protection on file/print servers?(NT4 SP6a)

--

Craig L. Sterley
IS Director
Huizenga Manufacturing Group
[EMAIL PROTECTED]
www.jrauto.com

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Nimda - Thought we were protected

2001-09-24 Thread David Thomas

Sounds more like the machine itself is having problems rather than Nimda
causing anything. OSme of our NT workstations have that problem but hit the
restart button and all works well on next reboot.

Regards
Davidt

-Original Message-
From: Steve Kelsay [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 24, 2001 7:35 AM
To: NT System Admin Issues
Subject: Nimda - Thought we were protected


First alert, Maybe nothing.

We just had our developer machines, running NT2000 Server hit with
Nimda.

The strange thing is, we have Nimda protection in our email scanner, and
all the security fixes MS said should be applied. SP2 is installed.

The machines boot up, a log in screen displays, and they login. The
Novell login script begins to run as normal ( we run mixed network, NT
and Novell), then the login script box clears as normal, a blue screen
appears as normal, and nothing further happens.

Could this be a new strain?





Steve Kelsay
Network Administration Group
South Carolina Department of Revenue
301 Gervais Street
Columbia, SC 29201

(803) 898-5522


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Virus scanning on file servers (slightly off topic)

2001-09-24 Thread David Thomas

What issues have you had (just for interest) ?

Regards
Davidt
 

-Original Message-
From: Miranda, Fausto [mailto:[EMAIL PROTECTED]]
Sent: 24 September 2001 15:40
To: NT System Admin Issues
Subject: RE: Virus scanning on file servers


I have issues with TREND.  NAI has worked well for us.

-Original Message-
From: Martin Blackstone [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 24, 2001 10:29 AM
To: NT System Admin Issues
Subject: RE: Virus scanning on file servers


The recommended software? I would recommend a virus scanner. :)

This is a question that you will get a lot of different responses on.
Personally, I am no fan of NAI. Norton is OK. But I really prefer Trend
Server Protect. It hasn't let me down yet.

I have scanned servers that were running NAI with a different scanner
such as Norton, and found tons of Virii that NAI missed.

-Original Message-
From: Craig Sterley [mailto:[EMAIL PROTECTED]] 
Sent: Monday, September 24, 2001 7:03 AM
To: NT System Admin Issues
Subject: Virus scanning on file servers


Now that I have NImda cleaned from my servers/network.  what is the
reccomended software for virus protection on file/print servers?(NT4
SP6a)

--

Craig L. Sterley
IS Director
Huizenga Manufacturing Group
[EMAIL PROTECTED]
www.jrauto.com

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: SirCam Virus Problem Exchange Server

2001-09-24 Thread David Thomas

Is there no way you can bounce the message back to the originator ? or
just reject the messages totally. Most AV Software has an option to send a
message back to the sender with a configurable message to tell the person to
get their AV software sorted out :-)

Regards
Davidt


-Original Message-
From: Murray Freeman [mailto:[EMAIL PROTECTED]]
Sent: 24 September 2001 16:22
To: NT System Admin Issues
Subject: SirCam Virus Problem Exchange Server


Our webmaster seems to have found a friend who apparently doesn't know she
has the SirCam virus. We're being sent hundreds of emails from this one
account to our webmaster. We've set up a rule to forward all these emails to
our webmasters delete folder, but apparently that's creating problems as
well. Our webmaster doesn't want us to shut down that alias, so does anyone
have any other ideas to somehow eliminate the problem. All the email is
coming from an address at HOME.COM.

Murray

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm