RE: DHCP reservations explained...

Just ran in to that with Cisco last week when I migrated my DHCP from 03 to 08r2. Only Vlan that could see the server was the one the server was on. Int vlan xx Ip helper-address 192.168.1.x From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Sunday, Jan

RE: DHCP reservations explained...

I believe what Brian was referring to was the "dhcp snooping" command, which is designed to prevent undesired DHCP servers. What you ran into is related to the fact that DHCP stops at the network boundary (router/VLAN) because it is a broadcast. The helper-address command is used to listen and fo

Re: RE: DHCP reservations explained...

+1, Bill is correct. On Jan 24, 2011 8:46 AM, "Mayo, Bill" wrote: > I believe what Brian was referring to was the "dhcp snooping" command, > which is designed to prevent undesired DHCP servers. What you ran into > is related to the fact that DHCP stops at the network boundary > (router/VLAN) becau

Re: USB to Serial interface

+1 – used the RadioShack one for a serial-only vinyl cutter and it worked great. It's insanely long – 5 feet on the minimum. Jack Kramer Computer Systems Specialist University Relations, Michigan State University w: 517-884-1231 / c: 248-635-4955 From: Richard Stovall mailto:rich...@gmail.c

Re: DHCP reservations explained...

I have one addition to this: The helper-address command tells the L3 device to forward ALL UDP broadcasts - DHCP, TFTP, NetBIOS, etc. You would also need to execute these commands to exclude everything that's not DHCP: no ip forward-protocol udp domain no ip forward-protocol udp time no ip forwar

RE: DHCP reservations explained...

Yes I understand, not relevant to this thread I guess. But good information to have when you change servers and your DHCP dies. From: Mayo, Bill [mailto:bem...@pittcountync.gov] Sent: Monday, January 24, 2011 7:45 AM To: NT System Admin Issues Subject: RE: DHCP

RE: DHCP reservations explained...

If your clients are Windows clients can't you set the firewall to only listed to DHCP requests from a given IP? David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 503.548.5229 // (Cell) 503.267.9764 -Original Message- From: Phil Brutsche [mailto:p...@optimumdata.com

Re: RE: DHCP reservations explained...

Don't you mean broadcasts, rather than requests? Jonathan On Jan 24, 2011 10:05 AM, "David Lum" wrote: > If your clients are Windows clients can't you set the firewall to only listed to DHCP requests from a given IP? > > David Lum // SYSTEMS ENGINEER > NORTHWEST EVALUATION ASSOCIATION > (Desk) 50

RE: RE: DHCP reservations explained...

Probably :) From: Jonathan [mailto:ncm...@gmail.com] Sent: Monday, January 24, 2011 7:08 AM To: NT System Admin Issues Subject: Re: RE: DHCP reservations explained... Don't you mean broadcasts, rather than requests? Jonathan On Jan 24, 2011 10:05 AM, "David Lum" mailto:david@nwea.org>> wro

Web filter?

Greetings, We're looking to deploy PCs at several locations that are to be used strictly for access to a couple of our websites. We're looking for a simple, cheap solution to block internet access to all websites, and then add in the handful of sites we'd like them to access. Any one doing ahtyh

RE: Web filter?

Sure, and it depends on strict the blocking must be enforced. I use squid proxy, and if it was ultimately required that the rules not be circumventable, you could place these machines on a subnet without external access and allow internet access via a proxy or simply some acls on a router as you

Re: Web filter?

Simplest? Don't enter DNS Server information, or if it gets it via DHCP, enter an invalid one manually. Then enter the valid hosts into the hostfile. I'm presuming that the users of this won't have admin access to the machine. On Mon, Jan 24, 2011 at 11:28 AM, Joseph L. Casale < jcas...@activene

Re: Web filter?

I don't know if it's appropriate for the situation, but I've used Windows Live Family Safety at home with good success. http://explore.live.com/windows-live-family-safety On Mon, Jan 24, 2011 at 11:33 AM, Jonathan Link wrote: > Simplest? Don't enter DNS Server information, or if it gets it v

Re: DHCP reservations explained...

I use static addresses for my servers. I also have my pool start at say x.x.x.100, so I know the address won't be assigned elsewhere. On Tue, Jan 18, 2011 at 2:14 PM, Jonathan wrote: > Hmmm... interesting concept. I personally prefer static addressing assigned > on each individual server. Though

Simple routing

I've not much experience with Cisco gear, but is it possible to route two different subnets on a Cisco 2950 switch? I want to keep my two networks separate (mostly), but need specific port access between the two. I've been trying to use a Dlink router, and it mostly works, but there is something

RE: Web filter?

+1 Erik Goldoff IT Consultant Systems, Networks, & Security ' Security is an ongoing process, not a one time event ! ' From: Jonathan Link [mailto:jonathan.l...@gmail.com] Sent: Monday, January 24, 2011 11:33 AM To: NT System Admin Issues Subject: Re: Web filter? Simplest? Don't en

Re: Web filter?

Doesn't stop someone from entering an ip address manually… Jack Kramer Computer Systems Specialist University Relations, Michigan State University w: 517-884-1231 / c: 248-635-4955 From: Erik Goldoff mailto:egold...@gmail.com>> Reply-To: NT System Admin Issues mailto:ntsysadmin@lyris.sunbel

RE: Simple routing

In general your Cisco switch is a layer 2 device, and routing takes place at layer 3. I’m not up on the current lines, but unless you have an RSM (route switch module) for a 2900 switch you cannot use the switch to route between layer three networks. Erik Goldoff IT Consultant Systems, Net

RE: Web filter?

No, it is not the most secure since it’s not 100%, but it *is* the simplest method. And not too many people have the IP addresses memorized for their favorite malicious surfing. Erik Goldoff IT Consultant Systems, Networks, & Security ' Security is an ongoing process, not a one time ev

Re: Simple routing

Yah, I thought so much, I will check the exact model, but I thought layer 3 is what we needed. I have a Procurve 2910, which is layer three, and I couldn't find anything in the webgui that would allow this. On a side note, I have an old Sonicwall Pro which needs a config file, the existing one is

RE: Simple routing

Like Erik, I am not sure about the 2950 switch, but layer 3 functionality is also limited to the type of IOS you have licensed/running. I think layer 3 has filtered down to a lot of their switch offerings, but you have to buy a higher version of the IOS. In short, it depends on the switch AND the

Re: Web filter?

OpenDNS.com *ASB *(My Bio via About.Me ) *Exploiting Technology for Business Advantage...* * * On Mon, Jan 24, 2011 at 11:24 AM, Eric Brouwer wrote: > Greetings, > > We're looking to deploy PCs at several locations that are to be used > strictly for acces

Basic Site Analysis of Workstations, Servers, and Network

Hi folks. I was pretty sure this has been discussed on the list before but didn't find the information searching on the old threads. We need to do a base analysis of a client who has 3 sites, 3 servers, and about 20 workstations. The goal would be to check the workstations (sync up the local adm

RE: Web filter?

We've used Microsoft's Windows SteadyState tool to lock down an XP desktop in "kiosk" mode. This has worked well to control what users can do and what web sites they can access through these kiosk machines. In looking up a link for this, though, I notice that Microsoft has pulled the tool as of

Re: Simple routing

Catalyst 2950s are layer 2 only. For a 1U layer 3 switch you are looking at a 3550, 3560 or 3750. If you run the absolute latest a 2960 will route IPv4 between VLANs - static only, no RIP OSPF BGP etc. On 1/24/2011 10:42 AM, Steve Ens wrote: > I've not much experience with Cisco gear, but is it

Re: Web filter?

Very true. However, it is cheap, as in free, and it is simple to do. On Mon, Jan 24, 2011 at 11:49 AM, Kramer, Jack wrote: > Doesn't stop someone from entering an ip address manually… > > > Jack Kramer > Computer Systems Specialist > University Relations, Michigan State University > w: 51

Re: Simple routing

On Mon, Jan 24, 2011 at 11:58 AM, Steve Ens wrote: > I have a Procurve 2910, which is layer three, and I > couldn't find anything in the webgui that would allow this. The web GUI in ProCurve stuff usually doesn't cover everything. You have to go to the CLI for more advanced stuff. I've neve

Re: Web filter?

Thanks to all for the recommendations! It's not "critical" that they can't get out to other sites, but we want to discourage the most basic users. We were originally thinking of going the HOSTS route, but were worried about websites changing IP addresses and blocking our access. It's a solid bac

Internet browsing reporting?

Greetings, I'm looking for another solution, and this list has never steered me wrong. I need to be able to monitor the Internet traffic for specific people for specific times, and report their usage. Basically, I need to be able to say person X was on the web for 15 hours last week. If the solu

RE: Web filter?

Anything you can do to go the free route might be a prudent choice. I don't know your environment but a revolt from the masses and management caving in to their demands could be a possibility. Also the list of 'allowed' sites could grow really fastso a roll your own DNS or hostsfile solution

RE: Internet browsing reporting?

You might take a look at these guys: http://www.paloaltonetworks.com/ From: Eric Brouwer [mailto:ithelp.e...@gmail.com] Sent: Monday, January 24, 2011 10:43 AM To: NT System Admin Issues Subject: Internet browsing reporting? Greetings, I'm looking for another solution, and this lis

Re: Simple routing

I usually use the CLI for initial config, setting up an IP address, name it, etc. But then I turn to the java gui if I need anything else. I'll dig into the CLI a little to see what is possible. I have a 10.0.0.x/24 network that needs to have access to certain ports on a server that is on a 192.

RE: Internet browsing reporting?

You are not going to be able to report that with any real accuracy. Web filters have reports that estimate the time spent on a website, but they are only estimates based upon the 'norm'. You don't know if I spent 5 minutes on the front page of CNN or I spent 2 hours there. As long as I don't cl

RE: Internet browsing reporting?

Barracuda Web Filter does a good job at this. From: Eric Brouwer [mailto:ithelp.e...@gmail.com] Sent: Monday, January 24, 2011 12:43 PM To: NT System Admin Issues Subject: Internet browsing reporting? Greetings, I'm looking for another solution, and this list

Re: Internet browsing reporting?

Thanks. Totally agree this is a people issue, not technology, but I'm not going to win that battle. On Mon, Jan 24, 2011 at 1:49 PM, Kennedy, Jim wrote: > You are not going to be able to report that with any real accuracy. Web > filters have reports that estimate the time spent on a website, bu

Re: Internet browsing reporting?

http://www.burstek.com/ Worked well on our ISA Server and ties into AD so you can report/restrict as needed. You can create custom categories or use the pre-canned ones that are updated frequently. -Jeff Steward On Mon, Jan 24, 2011 at 2:09 PM, Eric Brouwer wrote: > T

RE: Internet browsing reporting?

I think all of us have lost that battle a few million times. From: Eric Brouwer [mailto:ithelp.e...@gmail.com] Sent: Monday, January 24, 2011 2:10 PM To: NT System Admin Issues Subject: Re: Internet browsing reporting? Thanks. Totally agree this is a people issue, not technology, but I'm not go

RE: Internet browsing reporting?

St Bernard iPrism works really well, and is an easy setup. From: Eric Brouwer [mailto:ithelp.e...@gmail.com] Sent: Monday, January 24, 2011 1:43 PM To: NT System Admin Issues Subject: Internet browsing reporting? Greetings, I'm looking for another solution, and this list has never stee

RE: Internet browsing reporting?

+! iPrism It also has a new mobile client that reports and blocks without proxy. It is working really well for us. BF From: David Mazzaccaro [mailto:david.mazzacc...@hudsonmobility.com] Sent: Monday, January 24, 2011 2:47 PM To: NT System Admin Issues Subject: RE: Internet browsing reporting?

RE: Web filter?

iPrism with mobile client. BF From: Eric Brouwer [mailto:ithelp.e...@gmail.com] Sent: Monday, January 24, 2011 11:24 AM To: NT System Admin Issues Subject: Web filter? Greetings, We're looking to deploy PCs at several locations that are to be used strictly for access to a couple of our website

RE: Internet browsing reporting?

Yup, the remote filtering works very well for us too. From: Bob Fronk [mailto:b...@btrfronk.com] Sent: Monday, January 24, 2011 2:59 PM To: NT System Admin Issues Subject: RE: Internet browsing reporting? +! iPrism It also has a new mobile client that reports and blocks without p

Re: Simple routing

If the CLI on your HP 2910 is anything like the other HP products I've used it's pretty straightforward. If you want it to route between VLANs 10 and 11: ip routing vlan 10 ip address 172.30.10.1/24 vlan 11 ip address 172.30.11.1/24 In this case 172.30.10.1 and 172.30.11.1 would be the default g

Way OT - Anyone here had Lasik? How has it impacted your daily work (looking at screens, keyboards, etc)

I'm considering Lasik for my left eye (my right eye is 20/12 uncorrected - I have an astigmatism in my left eye). I've heard great stories, and I've read about not so great experiences. One of my co-workers had Lasik (by the same surgeon who would do my procedure) 8 years ago and claims zero re

RE: Way OT - Anyone here had Lasik? How has it impacted your daily work (looking at screens, keyboards, etc)

I had the full-laser Lasik 2 years ago for the same reason (miscalculated my FSA). Have not regretted it one bit. I play soccer on a regular basis (goal keeper) so I had to sit out for a few weeks to be sure I didn't do any damage while healing, but otherwise I could not be happier. Your Dr.

RE: Way OT - Anyone here had Lasik? How has it impacted your daily work (looking at screens, keyboards, etc)

I went for an initial consultation and the idea of having to go back every so often for possible "adjustments" (along with the associated cost) was a huge turn-off for me. That was a few years ago, so that may have changed. FYI, $2,600 can be blown through in a snap. Remember, you can still buy al

RE: Way OT - Anyone here had Lasik? How has it impacted your daily work (looking at screens, keyboards, etc)

Had mine done 5 1/2 years ago, no regrets and it has made life so much easier. I did lose some of my really up close vision but still don't need reading glasses although they help with really close up work(fast approaching 50 so that's par for the course). Best money I ever spent. John W.

RE: Way OT - Anyone here had Lasik? How has it impacted your daily work (looking at screens, keyboards, etc)

Had it done 3-4 years ago, absolutely wonderful. Was -4 or worse in both eyes with astigmatism and as of last month was still seeing 20/15. -Original Message- From: Raper, Jonathan - Eagle [mailto:jra...@eaglemds.com] Sent: Monday, January 24, 2011 2:35 PM To: NT System Admin Issues Sub

RE: Way OT - Anyone here had Lasik? How has it impacted your daily work (looking at screens, keyboards, etc)

Nope, not here. However, my wife's grandmother had it done and she loves it. -Original Message- From: Jim Holmgren [mailto:jholmg...@xlhealth.com] Sent: Monday, January 24, 2011 3:40 PM To: NT System Admin Issues Subject: RE: Way OT - Anyone here had Lasik? How has it impacted your da

RE: Way OT - Anyone here had Lasik? How has it impacted your daily work (looking at screens, keyboards, etc)

I had Lasik, Note, there is a difference between Lasik and Lasek. You should check your surgeon for an explanation. One heals faster than the other and one is more involved than the other. Do not get both eyes done at once! In spite of the propaganda. My results were mixed. The left eye was perfect

RE: Way OT - Anyone here had Lasik? How has it impacted your daily work (looking at screens, keyboards, etc)

+1 Just over 5 years here. The only downside is I am apparently one of the rare "nighttime starburst" sufferers. Doesn't make nighttime driving unbearable, but low-light conditions aren't as nice as they used to be. Spending endless hours in front of monitors - rock solid. Sure is awesome to

Re: Way OT - Anyone here had Lasik? How has it impacted your daily work (looking at screens, keyboards, etc)

+1 Have had mine done now for 11 years. Best thing I've ever done for myself! - WJR On Mon, Jan 24, 2011 at 14:45, John Cook wrote: > Had mine done 5 1/2 years ago, no regrets and it has made life so much > easier. I did lose some of my really up close vision but still don't need > read

Re: Way OT - Anyone here had Lasik? How has it impacted your daily work (looking at screens, keyboards, etc)

I can't speak for myself, but a buddy of mine had it done about 10 years ago and had to have an adjustment about 2 years ago. He swears by it. On Mon, Jan 24, 2011 at 4:00 PM, William Robbins wrote: > +1 Have had mine done now for 11 years. Best thing I've ever done for > myself! > > - WJR >

Re: DHCP reservations explained...

+1 We had different groups depending on the device. Server, switch, router, sniffer etc. On Mon, Jan 24, 2011 at 5:40 PM, Candee wrote: > I use static addresses for my servers. > I also have my pool start at say x.x.x.100, so I know the address won't be > assigned elsewhere. > > On Tue, Jan 18,

RE: Simple routing

What model of DLink router? If it's your typical Internet router, it's doing NAT and firewall things in addition to routing. Logging will likely reveal what's going on. Carl From: Steve Ens [mailto:stevey...@gmail.com] Sent: Monday, January 24, 2011 11:42 AM To: NT System Admin Issues Su

RE: Way OT - Anyone here had Lasik? How has it impacted your daily work (looking at screens, keyboards, etc)

My Lasik cost $1500 per eye and I did both with no issue. No direct water in the eye for a week but otherwise nothing special. I drove myself home from the Drs office. John W. Cook System Administrator Partnership For Strong Families 5950 NW 1st Place Gainesville, Fl 32607 Cell (352) 215-69

Re: Simple routing

It's just a cheap DIR 604 or something... On Mon, Jan 24, 2011 at 3:12 PM, Carl Houseman wrote: > What model of DLink router? If it's your typical Internet router, it's > doing NAT and firewall things in addition to routing. Logging will likely > reveal what's going on. > > > > Carl > > > > *

RE: DHCP reservations explained...

We always prefer static addresses for servers. One less variable when we're troubleshooting later. Ben M. Schorr Chief Executive Officer __ Roland Schorr & Tower www.rolandschorr.com b...@rolandschorr.com

RE: Way OT - Anyone here had Lasik? How has it impacted your daily work (looking at screens, keyboards, etc)

I've got a question as I too am considering the same procedure. My eye doctor is head of the department at the hospital which is part of a group of hospitals. She told me that there is a new procedure or implant that can eliminate the need for any eyeglasses being needed after the surgery. Has anyo

RE: Simple routing

If the specific ports allowed in the direction of WAN->LAN will only ever go to a single host for each port, then you just set up NAT redirection and it should work. Carl From: Steve Ens [mailto:stevey...@gmail.com] Sent: Monday, January 24, 2011 4:23 PM To: NT System Admin Issues Subject:

Re: Simple routing

I'll give it another look...I did put the machine in the DMZ (figuring that should allow the most access, but it didn't work). On Mon, Jan 24, 2011 at 3:46 PM, Carl Houseman wrote: > If the specific ports allowed in the direction of WAN->LAN will only ever > go to a single host for each port, t

Re: Simple routing

Sorry, it is an EBR-2310. On Mon, Jan 24, 2011 at 3:49 PM, Steve Ens wrote: > I'll give it another look...I did put the machine in the DMZ (figuring that > should allow the most access, but it didn't work). > > On Mon, Jan 24, 2011 at 3:46 PM, Carl Houseman wrote: > >> If the specific ports a

RE: DHCP reservations explained...

I've done both... Assigned a reservation via DHCP, and assigned the address on the server statically. Several benefits to this approach: 1. If you have to reset the machine in some way, it can pick up its' address dynamically. Also allow the server to be PXE booted if you have WDS or some othe

Was Simple routing now is NEEDED - Sonicwall Pro firmware

Corrupted firmware on eight year old Sonicwall...need to test NAT... it is EOL so Sonicwall won't help me. If anyone has an old one kicking around, let me know. Thanks Steve On Mon, Jan 24, 2011 at 3:54 PM, Steve Ens wrote: > Sorry, it is an EBR-2310. > > On Mon, Jan 24, 2011 at 3:49 PM, Steve

Re: Simple routing

On Mon, Jan 24, 2011 at 1:49 PM, Steve Ens wrote: > I have a 10.0.0.x/24 network > that needs to have access to certain ports on a server that is on a > 192.168.1.x/24 network. Again: Please describe the network topology. In particular, we still don't know if those two IP networks are in the s

Re: Simple routing

On Mon, Jan 24, 2011 at 4:54 PM, Steve Ens wrote: > Sorry, it is an EBR-2310. As Carl Houseman suspected, that's a SOHO NAT router. NAT breaks all sorts of things, and it's likely your application is one of them. Some of those boxes let you disable NAT and use it as a plain old router. Look f

Re: Simple routing

Hey Ben Thanks for the info (and the questions). The networks are separate. I will take a look tomorrow what rev that DLINK is, and I've also got a Sonicwall that I can implement as a "real deal" router/firewall. Home time now. Steve On Mon, Jan 24, 2011 at 4:56 PM, Ben Scott wrote: > On Mon,

Re: Internet browsing reporting?

On Mon, Jan 24, 2011 at 1:43 PM, Eric Brouwer wrote: > I'm looking for another solution, and this list has never steered me wrong. > I need to be able to monitor the Internet traffic for specific people for > specific times, and report their usage. We use Squid proxy and Webalizer for this, bot

Re: Was Simple routing now is NEEDED - Sonicwall Pro firmware

I've got a firmware archive for some of those old boxes, do you know exactly which model this is? Steve Ens wrote: > Corrupted firmware on eight year old Sonicwall...need to test NAT... it > is EOL so Sonicwall won't help me. If anyone has an old one kicking > around, let me know. -- Phil Brut

RE: Forcing Adobe Reader and Java updates

Since jre 1.6 r10, old versions are now automatically removed upon installing the current version. Unfortunately, versions older than that are still left. -- Mike Gill From: Terry Dickson [mailto:te...@treasurer.state.ks.us] Sent: Thursday, January 20, 2011 4:57 PM To: NT System Admin Iss

Re: Simple routing

On Mon, Jan 24, 2011 at 5:59 PM, Steve Ens wrote: > Thanks for the info (and the questions).  The networks are separate. "The networks are separate." That's remarkably opaque. For the 3rd time: What does the network topology look like? That is, how do these two different IP networks exist

Verizon Data Services down

About 20% of my users have been without data services, a crippling problem for a company that relies heavily on email for nearly all communications. How is it that after over 3 days there is virtually NO news coverage of this issue??? We have been told by our cell consultant that this is in fact

Re: Verizon Data Services down

Define 'Data Services'. Do you mean, like in, FiOS? DSL? Or do you mean Cell Phone? If Cell Phone, I haven't had any issues. And I am in Southern Indiana. On Mon, Jan 24, 2011 at 11:42 PM, Jeff Brown <2jbr...@gmail.com> wrote: > About 20% of my users have been without data services, a crippling

Re: Verizon Data Services down

Sorry to hear of your frustrations. No issue on the Verizon 3G network in Greensboro, NC. Been receiving emails on my phone all weekend without issue. Jonathan L. Raper, MCSE Thumb-typed from my HTC Incredible (and yes, it really is) Droid. Please excuse brevity & any misspellings. - Reply

RE: Verizon Data Services down

Same here in Tampa FL, All good Greg Sweers CEO ACTS360.com P.O. Box 1193 Brandon, FL  33509 813-657-0849 Office 813-758-6850 Cell 813-341-1270 Fax -Original Message- From: Raper, Jonathan - Eagle [mailto:jra...@eaglemds.com] Sent: Monday, January 24, 2011 11:49 PM To: NT System Admin

Re: Verizon Data Services down

I think you are talking about the BlackBerry data on Verizon Wireless? It's been flaky since Thursday. I have cases opened with both companies, Verizon admits there is an issue and BlackBerry says nothing is wrong. The latest info I have says it should be fixed by Wednesday. On Mon, Jan 24, 2011

Re: Verizon Data Services down

That's more info than I got. Thanks. Seems like an LONG time for a provider like Verizon to have limited services for an unknown number of users. On Mon, Jan 24, 2011 at 10:50 PM, Mike Sullivan wrote: > I think you are talking about the BlackBerry data on Verizon Wireless? > > It's been flaky

Re: Verizon Data Services down

On Mon, Jan 24, 2011 at 11:54 PM, Jeff Brown <2jbr...@gmail.com> wrote: > That's more info than I got.  Thanks.  Seems like an LONG time for a > provider like Verizon to have limited services for an unknown number of > users. Verizon owns its customers, and they know it. "We don't care. We d