RE: VPN's
Title: Message If you are doing NAT at the router before the firewall and Cisco 3005, IPSEC won't work. The problem is that IPSEC doesn't allow you to modify the IP address between the endpoints of the tunnel. -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]]Sent: Monday, September 17, 2001 9:08 AMTo: NT System Admin IssuesSubject: RE: VPN's Speaking of VPN's, we just got a Cisco 3005. I'm setting it up now. One thing I am confused on. I was planning to give the public side a public IP until I discovered that we are doing NAT through our router rather than through the FW. So would I be correct in assuming I will have to give the public side a NAT'd IP then do NAT through the router for it as well? -Original Message-From: Roger Ali [mailto:[EMAIL PROTECTED]] Sent: Monday, September 17, 2001 5:48 AMTo: NT System Admin IssuesSubject: RE: VPN's Hey you can use Netscreen effectively; I've done it for some of our smaller sites with about 15 users per site. It's reliable, but if you have some network heavy apps or anything that relies on the connection a lot I'd be careful in doing this. We've got 2 locations networked with 256K connections via the Netscreen which works but its slow. If you're only aiming on mail and other light apps then it should be fine for you network. Good Luck Roger Ali -Original Message-From: Clark, Steve [mailto:[EMAIL PROTECTED]] Sent: Monday, September 17, 2001 7:37 AMTo: NT System Admin IssuesSubject: RE: VPN's Netscreen's are the easiest that I've seen. Don't know if you can do it over a Frame Relay - don't have any experience on that. Steve Clark Clark Systems Support, LLC AVIEN Charter Member www.clarksupport.com 301-610-9584 voice 240-465-0323 Efax -Original Message-From: SysAdm [mailto:[EMAIL PROTECTED]]Sent: Monday, September 17, 2001 1:44 AMTo: NT System Admin IssuesSubject: VPN's Hi everybody, Very general question. My company is interested in changing from Frame Relay to VPN. It looks very interesting to us, especially since you can save quite a bit of money with it, but Who has made experiences with VPN's, good ones or bad ones. What about security, bandwidth, reliability etc. Am interested in any information. Thanks. Regards,Dagmar NeumannIT Operations Managerphone: (02) 9690 7578mobile: 0402 223 011e-mail: [EMAIL PROTECTED] http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htmhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: DNS Query All
In NSLookup: set type=any (or specify record type) ls -d domain.com (i.e.: internic.net) -Original Message- From: Kevin Lundy [mailto:[EMAIL PROTECTED]] Sent: Monday, September 17, 2001 3:11 PM To: NT System Admin Issues Subject: RE: DNS Query All There is the LS command (from nslookup, simply type ? to see all the options). That will do what you want - MAYBE. Many DNS admins disable LS commands for security (via obscurity) reasons. If this is YOUR domain, print out the named file. -Original Message- From: Paul Armstrong [mailto:[EMAIL PROTECTED]] Sent: Monday, September 17, 2001 3:09 PM To: NT System Admin Issues Subject: DNS Query All Hello All, I am trying to find out if there is a way to perform a DNS Query of all records for a domain. Is this possible? For example, for mydomain.com, if that domain has records for mail, www, etc @ mydomain.com how can I find out all of those records without actually having to know they exist? I tried using the Any type but that only seems to return the NS' for that domain. Is there another way? TIA!! http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: NewYork Terrorist Attack
Us in Jersey City, NJ (just across the water) were evacuated and sent home. Its going to be a long day for all. -Original Message- From: Jeff Pace [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 11, 2001 11:26 AM To: NT System Admin Issues Subject: RE: NewYork Terrorist Attack and it doesn't seem to be over yet. Jeff -Original Message- From: Andrew Baker [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 11, 2001 8:19 AM To: NT System Admin Issues Subject: RE: NewYork Terrorist Attack This is an incredibly tragic day. Probably the most tragic for the US since the assassination of JFK - ASB -Original Message- From: Richard McMahon [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 11, 2001 11:07 AM To: NT System Admin Issues Subject: NewYork Terrorist Attack Check out this link. http://www.skynews.co.uk/skynews/storytemplate/storytoppic/0,,3-1029102, 00.html Hope out all you guys in the New York area are still with us.. Good luck, Richard http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: NewYork Terrorist Attack
Not that I know of, just 1/4 mile by the water. Tall buildings. -Original Message- From: David N. Precht [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 11, 2001 11:31 AM To: NT System Admin Issues Subject: RE: NewYork Terrorist Attack Full evac in Jersey City ? -Original Message- From: Richard Newton Jr. [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 11, 2001 11:24 To: NT System Admin Issues Subject: RE: NewYork Terrorist Attack Us in Jersey City, NJ (just across the water) were evacuated and sent home. Its going to be a long day for all. -Original Message- From: Jeff Pace [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 11, 2001 11:26 AM To: NT System Admin Issues Subject: RE: NewYork Terrorist Attack and it doesn't seem to be over yet. Jeff -Original Message- From: Andrew Baker [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 11, 2001 8:19 AM To: NT System Admin Issues Subject: RE: NewYork Terrorist Attack This is an incredibly tragic day. Probably the most tragic for the US since the assassination of JFK - ASB -Original Message- From: Richard McMahon [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 11, 2001 11:07 AM To: NT System Admin Issues Subject: NewYork Terrorist Attack Check out this link. http://www.skynews.co.uk/skynews/storytemplate/storytoppic/0,,3-1029102, 00.html Hope out all you guys in the New York area are still with us.. Good luck, Richard http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm _ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: IP Justification
Technically the ISP will give you addresses whenever if you have a need. I usually tell them how many computers we have and tell them to give me double. We have about 100 employees, but we are using a class-C. -Original Message- From: David James [mailto:[EMAIL PROTECTED]] Sent: Thursday, September 06, 2001 2:48 PM To: NT System Admin Issues Subject: IP Justification I'm using around 8 IP's right now, but my ISP is going bye bye at the end of this month. I'd like to have a block of IP's from the new ISP, just in case I need more etc. etc. What kind of ammunition do you guys use to justify your need for IP's? We currently have 128, but that's way too many. I can take care of everything I need with less than 32 for now, but you never know as far as the future. Any thoughts or strategies, experiences with this document? DJ http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Exchange 5.5 question
Title: Exchange 5.5 question As you said, GroupShield is blocking those attachments. In Exchange Admin go to Organization - Site - Configuration - Servers - Server - Network Associates GroupShield and select the On-Access tab. You will see an Attachment blocking box. You can modify the blocked attachment file extensions there. -Original Message-From: Rogers, Jeff L (OM) [mailto:[EMAIL PROTECTED]]Sent: Thursday, August 23, 2001 3:24 PMTo: NT System Admin IssuesSubject: Exchange 5.5 question NT 4.0 server/SP 6a Exchange server 5.5, sp3 Groupshiled 4.5.572.104, Engine Version 4.1.40, Dat version 4155 Problem: we keep getting messages with these attachments, almost like the messages are replicating or something, but I don't know this to be the case. We have groupshield set to block message/attachment types, and they simply go to a quarantine folder. But here's the file names: sumf.dll | sumform.exe | avfo.dll | avform.exe | exchange.drv | loform.exe | instform.exe Of course, what happens is I'm sent out constant Alert.TXT messages about groupshield blocking these things, and it all starts over. Is anyone familiar with this? Is it virus-related? I've noticed now that the form we used to view those messages will no longer work, and Outlook will only open them as a straight text-like e-mail message. Any help or insight greatly appreciated. ~ Jeff Rogers, [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] Operation Maintenance Information Technology Services - Room 20 1501 S. Oak Champaign, IL 61820 Desk: 217-244-8013 Pager: 217-265-3682 Work like you don't need the money. Love like you've never been hurt. Dance like nobody is watching. http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: Websense question
Actually, Websense, because it loads its table in memory, likes RAM. We are running a dedicated NT 4.0 Websense box with 256MB RAM for about 100 PCs. If you want to add other application (like Proxy), I would suggest 512MB. Its rather unforgiving (Websense). -Original Message- From: Chris Bodnar [mailto:[EMAIL PROTECTED]] Sent: Wednesday, August 15, 2001 9:30 AM To: NT System Admin Issues Subject: Websense question Is anyone running Websence in conjunction with MS Proxy 2.0 on a low end machine? We are thinking of switching to Websence and I noticed that the minimum system requirements are a PII with 256MB. Anyone successfully running this on a lower end machine? TIA Chris Bodnar The Lehigh Group 610-966-9702 X:134 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
RE: IP addresses
Go to here: https://grc.com/x/ne.dll?bh0bkyd2 And click Test my shields -Original Message- From: Paul Armstrong [mailto:[EMAIL PROTECTED]] Sent: Tuesday, August 14, 2001 4:37 PM To: NT System Admin Issues Subject: IP addresses Does anybody know a site I can use to find out what public IP address I am using to connect to external resources. I used to know one site but don't have the link anymore. TIA! http://www.sunbelt-software.com/ntsysadmin_list_charter.htm http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
