RE: WARNING: Hacker Alert
Or hfnetchk I can send it to you privately if you want Paul Broomfield, Network Administrator and Database Technician Tell Communications Tamar Science Park Derriford Plymouth Devon PL6 8BX Tel: +44 (0) 1752 764242 Fax: +44 (0) 1752 764243 Visit us on the web at: http://www.tell-com.com/ -Original Message- From: Rocky Stefano [mailto:[EMAIL PROTECTED]] Sent: 19 September 2001 06:36 To: NT System Admin Issues Subject: RE: WARNING: Hacker Alert St. Bernard software. -Original Message- From: Bob's Lists [mailto:[EMAIL PROTECTED]] Sent: September 19, 2001 1:29 AM To: NT System Admin Issues Subject: RE: WARNING: Hacker Alert Importance: High This is a real can of super ugly worms and you need a total security policy for your site not just blocking executables via email. Tell me about it. I have 13 servers here, 3 of them *nix. All of them survived except one which got hit, because it had a trust relationship with a web designer's home machine and he got hit. Keeping all these machines up to date is a royal pain in the ass - since Microsloth haven't seen fit to include the hotfixes in their 'windowsupdate' site for NT4 yet. I remember seeing a URL somewhere of a useful gadget for telling you which servers had which patches, and which servers needed which patches but now that I need it, I'll be damned if I can find it... :( Anyone out there with a better memory? Regards Bob http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
disk imaging software
Hi there, Im interested on peoples views on different disk imaging software. I need a piece of software that will take a complete image of a servers (W2K) raid hard disk(s) and allow me to put the image back on to the disks in the event of a complete failure. Has anybody used any software that allows them to say boot from floppy and restore from tape. Thanks Paul Paul Broomfield, Network Administrator and Database Technician Tell Communications Tamar Science Park Derriford Plymouth Devon PL6 8BX Tel: +44 (0) 1752 764242 Fax: +44 (0) 1752 764243 Visit us on the web at: http://www.tell-com.com/ http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: disk imaging software
Thanks Patrick, thanks Andrew Ill look in to these Thanks again Paul Paul Broomfield, Network Administrator and Database Technician Tell Communications Tamar Science Park Derriford Plymouth Devon PL6 8BX Tel: +44 (0) 1752 764242 Fax: +44 (0) 1752 764243 Visit us on the web at: http://www.tell-com.com/ -Original Message- From: Neilson, Andrew [mailto:[EMAIL PROTECTED]] Sent: 06 September 2001 10:11 To: NT System Admin Issues Subject: RE: disk imaging software I know that everyone slates CA but in the past I have successfully used the disaster recovery module for Arcserve. You create5 floppy disks and boot from those with the WinNT cd to restore from the tape in your backup server. If you are recovering your backup server, you only need 4 floppies. Haven't used this for 3 years so don't know how well things work now or whether it works with W2k -Original Message- From: Paul Broomfield [mailto:[EMAIL PROTECTED]] Sent: 06 September 2001 10:03 To: NT System Admin Issues Subject: disk imaging software Hi there, Im interested on peoples views on different disk imaging software. I need a piece of software that will take a complete image of a servers (W2K) raid hard disk(s) and allow me to put the image back on to the disks in the event of a complete failure. Has anybody used any software that allows them to say boot from floppy and restore from tape. Thanks Paul Paul Broomfield, Network Administrator and Database Technician Tell Communications Tamar Science Park Derriford Plymouth Devon PL6 8BX Tel: +44 (0) 1752 764242 Fax: +44 (0) 1752 764243 Visit us on the web at: http://www.tell-com.com/ http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: whats FSO's dll called
Hi, Thanks for getting back to me. The problem we have been experiencing seems to be a little odd. A page that uses FSO seems to work fine until it gets to the point where it uses FSO.GetFolder(Path). Even if Path exists and is valid with correct permissions it causes the ASP pages to stop responding and not load - does even give a timeout, this then causes the rest of the site to respond extremely slwly and eventually die with a full server restart needed to sort it out. We had a problem with Virtual Memory last week and its never been the same since - is there anyway to reinstall FSO (I guess unreg and copy from another work server and re-reg). Or does anyone know what gets affected when an Out of Virtual Memory message pops up? We seemed to loose date formats, everything went to American dates rather than United Kingdom. Thanks Paul Paul Broomfield, Network Administrator and Database Technician Tell Communications Tamar Science Park Derriford Plymouth Devon PL6 8BX Tel: +44 (0) 1752 764242 Fax: +44 (0) 1752 764243 Visit us on the web at: http://www.tell-com.com/ -Original Message- From: John Cesta - Lists [mailto:[EMAIL PROTECTED]] Sent: 04 September 2001 14:23 To: NT System Admin Issues Subject: RE: whats FSO's dll called The FSO is a dll called scrrun.dll It is either available or not, meaning, you can disable it be hacking the registry or you can enable it by registering the dll in the registry. That's about it. What is your problem with the FSO? John Cesta ColdFusion ASP ActiveState PERL Hosting Includes 10 Domains - 100% Browser Based Administration http://www.cybersmarts.net LogFileManager - IIS LogFile Management Tool WebPageChecker - Helps Maintain Server UpTime http://www.serverautomationtools.com -Original Message- From: Paul Broomfield [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 04, 2001 9:07 AM To: NT System Admin Issues Subject: whats FSO's dll called Hello, We are getting problems with FSO on our web servers - does anyone know what the Dll(s) are called for FSO and do they appear in either task manager or PerfMon Our servers are w2k sp2 Thanks Pauk Paul Broomfield, Network Administrator and Database Technician Tell Communications Tamar Science Park Derriford Plymouth Devon PL6 8BX Tel: +44 (0) 1752 764242 Fax: +44 (0) 1752 764243 Visit us on the web at: http://www.tell-com.com/ http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
TCP ports 1025 (blackjack) and 1027 (ICQ)
Hello, Firstly thanks for everyone ones help last week with my web servers that where running slow then crashing due to memory leaks Well theyre still crashing although not as much. Today I did a port scan of the servers and found two new ports 1025 (network blackjack) and 1027 (ICQ), now these certainly shouldnt be on there. 1. Are these ports used by windows (havent seen them b4) and have been miss interpreted as blackjack and ICQ (although I checked a list of TCP ports and they are what they say they are) 2. Where do I start to try and get rid of them thanks Paul Paul Broomfield, Network Administrator and Database Technician Tell Communications Tamar Science Park Derriford Plymouth Devon PL6 8BX Tel: +44 (0) 1752 764242 Fax: +44 (0) 1752 764243 Visit us on the web at: http://www.tell-com.com/ http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Website Slow then falls over
Hi, The web server has: 256mb ram Total Pagefile 384-768mb (2 Drives) DB sever has: 512mb ram Total Pagefile 768-1536 (3 drives) I'll have a play with the pagefile Thanks Paul Paul Broomfield, Network Administrator and Database Technician Tell Communications Tamar Science Park Derriford Plymouth Devon PL6 8BX Tel: +44 (0) 1752 764242 Fax: +44 (0) 1752 764243 Visit us on the web at: http://www.tell-com.com/ -Original Message- From: Kent Spencer [mailto:[EMAIL PROTECTED]] Sent: 30 August 2001 12:26 To: NT System Admin Issues Subject: Re: Website Slow then falls over .. sounds like maybe a memory leak problem. Have you monitored your memory resources? Also, how much RAM and how much pagefile space? Kent --- Paul Broomfield [EMAIL PROTECTED] wrote: Hello, Were getting a problem on one of our web servers. Heres the set-up: Web Server: Dell Power Edge 2450 Win2k SP2 IIS 5 Norton Antivirus set-up to avoid the scanning global.asa, (as opening the global.asa can causing site to stop responding) Database Server Dell Power Edge 2450 Win2k SP1 (Im applying SP2 shortly) SQL 2000 The web server has a direct connection to the web with no firewall. The database server connects to the web server via a secondary network card in the web server and on a separate IP network and hence hiding the DB server from the outside world. The web server has 3 sites on it all running different versions of the same site with 3 different versions of our custom built ActiveX component. The 3 sites include - one Live, one customer trial site and one in-house demo/dev site. The customer is testing new developments on the customer trial site, and their customers are using the live site. The sites work fine and then after a while they will slow and eventually stop responding. The server requires a full restart to get it working again, Inetinfo sits near the bottom of the process list not really doing anything and not using a great deal of memory. I cant see anything in the process list that is battering the servers resources. We have regressed any new developments we put into the trial site before these problems started to happen, in case it was any strange code making the server crash. The last weird thing that happened before the sites started playing up, was the web server reported an out of virtual memory error. The websites stopped working, the server then reallocated memory then came back to life, allowing users to access the sites again. One thing we noticed after this is that all dates changed to American format rather than United Kingdom format so we changed these back and restarted the server for good measure. Looking through the Event Viewer there is nothing too unusual in there apart from an error saying the SSL is screwed, it really says: A fatal error occurred while creating an SSL server credential, although the client has a certificate protected site it is not used. Another error we seem to be getting is script timeouts, but these dont correlate with server crashes. We do get lots of CodeRed hack attempts but I patched the server when the hotfix first came out from MS. Does anybody have any ideas? As I am running out of them. Thanks Paul p.s. if the client had a bad connection to the server that dropped regularly, (due to their overloaded network) could that cause a server not to clear sessions and get confused and eventually fall over Im clutching at straws now. Pps. A virtual luxury apartment anywhere in the world that you want with a virtual keg of beer to anyone that helps. Paul Broomfield, Network Administrator and Database Technician Tell Communications Tamar Science Park Derriford Plymouth Devon PL6 8BX Tel: +44 (0) 1752 764242 Fax: +44 (0) 1752 764243 Visit us on the web at: http://www.tell-com.com/ http://www.sunbelt-software.com/ntsysadmin_list_charter.htm __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Website Slow then falls over
Gopal you are indeed a star, Ill give that a go Thanks for all your help Paul Paul Broomfield, Network Administrator and Database Technician Tell Communications Tamar Science Park Derriford Plymouth Devon PL6 8BX Tel: +44 (0) 1752 764242 Fax: +44 (0) 1752 764243 Visit us on the web at: http://www.tell-com.com/ -Original Message- From: Gopalakrishnan [mailto:[EMAIL PROTECTED]] Sent: 30 August 2001 13:30 To: NT System Admin Issues Subject: Re: Website Slow then falls over Yes running each of the sites isolated would be a good idea.That way even if one goes down, the others would still be up. Also each activeX component should be run isolated(as a package under MTS), at leastuntilyou are sure that they are 100% reliable. If your CPU usage is very low and even then the site is slow, you could try increasing the no. of threads/ processorin IIS. BTW I work in hampshire. good luck Gopal http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Website Slow then falls over
Title: Message Hello Ian, That was one of my first suggestions to the client upgrade the RAM, but they have a limited budget, thats why theres only 256 in there in the first place Ill give them a kick! Thanks for your help Ta ta Paul Paul Broomfield, Network Administrator and Database Technician Tell Communications Tamar Science Park Derriford Plymouth Devon PL6 8BX Tel: +44 (0) 1752 764242 Fax: +44 (0) 1752 764243 Visit us on the web at: http://www.tell-com.com/ -Original Message- From: Ian Kelly [mailto:[EMAIL PROTECTED]] Sent: 30 August 2001 13:29 To: NT System Admin Issues Subject: RE: Website Slow then falls over Paul, Here is what I would check when the problems start: Are all your MTS packages still up and running? (If you're using MTS) What is happening on your SQL machine? I've experienced unresponsive websites and they've usually been caused by problems with MTS packages. The other advantage to Gopal's suggestion is that if one f the sites hangs, you can often recover it by unloading it in IIS rather than restarting the machine. Oh, and tt probably wouldn't hurt to add a bit more RAM if you can afford it ;) HTH Ian mailto:[EMAIL PROTECTED] Things that upset a terrier may pass virtually unnoticed by a Great Dane. -- Smiley Blanton -Original Message- From: Paul Broomfield [mailto:[EMAIL PROTECTED]] Sent: 30 August 2001 08:07 To: NT System Admin Issues Subject: RE: Website Slow then falls over Gopal you are indeed a star, Ill give that a go Thanks for all your help Paul Paul Broomfield, Network Administrator and Database Technician Tell Communications Tamar Science Park Derriford Plymouth Devon PL6 8BX Tel: +44 (0) 1752 764242 Fax: +44 (0) 1752 764243 Visit us on the web at: http://www.tell-com.com/ -Original Message- From: Gopalakrishnan [mailto:[EMAIL PROTECTED]] Sent: 30 August 2001 13:30 To: NT System Admin Issues Subject: Re: Website Slow then falls over Yes running each of the sites isolated would be a good idea.That way even if one goes down, the others would still be up. Also each activeX component should be run isolated(as a package under MTS), at leastuntilyou are sure that they are 100% reliable. If your CPU usage is very low and even then the site is slow, you could try increasing the no. of threads/ processorin IIS. BTW I work in hampshire. good luck Gopal http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
MSProxy, Watchgaurd and ASP Smart Upload
Hi there, I remember a couple of years ago I was developing a site for a client that accessed the internet through MSProxy Server 1 on SBS. Part of the site we developed allowed them to upload images via a web page, using some component (cant remember which one now), but each time the client tried to upload an image it would kill their connection, and hence not upload the image. Im having a similar problem with ASP Smart Upload and Watchguard, the client uploads a spreadsheet they get an unspecified error and it kills their browser and does something funny to IIS4 with eventually falls over and dies. My problem is that I cant remember what the problem was with the first client something to do with allowing HTTP uploads through the proxy, does anyone know if there is a similar tick box on Watch Guard that I can get the IT guy to tick/un tick. Is it something to do with the content type that Watch Guard is allowing through? should it be set to allow multipart/form-data through? BTW its Watch Guard FireBox II using software ver 4.61-b1922 Thanks Paul Paul Broomfield, Network Administrator and Database Technician Tell Communications Tamar Science Park Derriford Plymouth Devon PL6 8BX Tel: +44 (0) 1752 764242 Fax: +44 (0) 1752 764243 Visit us on the web at: http://www.tell-com.com/ http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
