Jump to content

ronanian

Members
 View Profile  See their activity

  • Posts

    89

  • Joined

  • Last visited

 Content Type 

Everything posted by ronanian

  1. ronanian
    54 of my users received a scam email from a user at student.bham.ac.uk delivered by sun61.bham.ac.uk, and I can't seem to find an IT contact on their website to report the breached user. Of course I've already responded with appropriate security here, but I know that if one of my users was sending scams or spam through my servers I'd want a fellow sysadmin to notify me. Any suggestions how I can report it to them?
  2. ronanian
    One other question: What is the actual exploit being used for? What kind of damage/payload are we looking at? Is there a known example of the exploit I can test against, as in a URL I can go to and see if I get infected?
  3. ronanian
    So, how about practical discussion of how to protect our networks? Create \\server\share\unregvgx.bat (or .cmd or whatever you like) containing this: "%SystemRoot%\System32\regsvr32.exe" -u -s "%CommonProgramFiles%\Microsoft Shared\VGX\vgx.dll" You all know where to get psexec: http://live.sysinternals.com/psexec.exe -- run this command: psexec -h -u domain\adminUserName \\* \\server\share\unregvgx.bat Quick and dirty and gets it out there to everything that's already booted up and listed in Active Directory. Also add \\server\share\unregvgx.bat to startup and login scripts. There are other ways to do all of this that are more refined but I like quick and dirty for stuff like this. Thoughts? Will that suffice to protect my network until Microsoft releases a patch?
  4. ronanian
    Success! I figured out how to avoid the problem. All I have to do is NOT be an impatient jerk. Normally when Windows says I need to restart I say "You're not the boss of me, I'm in charge! http://allofftopic.com/images/smilies/gorilla_1.gif". This time I disconnected the (virtual) network cables, started Windows on the newly deployed VM, removed it from the domain, and when it asked to restart I actually allowed it to...then once it was restarted I assigned an IP, reconnected the (virtual) network cables, joined it to the domain, and when it asked to restart once again I immediately allowed it to do so.
  5. ronanian
    Bump. Probably nobody knows exactly, but any unsure guesses at least?
  6. ronanian
    I have VMWare ESXi 3.5 and 5.0 vSpheres. When I deploy a template or clone a VM running Windows I expect to see "The trust relationship between this workstation and the primary domain failed." unless I sysprep (and sometimes even then). The cure is to remove from the domain and re-join. Ok, no problem, I do that on the newly deployed VM. I have one Windows Server 2008R2 terminal server template that does something worse. When I deploy it, all existing live VMs based on that template get "The trust relationship between this workstation and the primary domain failed." What am I doing wrong? I have to deploy it again and I'm not looking forward to re-joining all of its siblings again.
  7. ronanian
    OS is Debian Squeeze. Pretty much a default "desktop"-style installation with gnome and such. Out of the box, it successfully auto-mounts drives that I plug in via USB in /media/{UUID} or /media/{Volume name} (depending on if the drive has a volume name or not, I guess). I am very happy with that system and I want to keep it. My only complaint is the permissions. An NTFS filesystem gets mounted drwx------ (with owner and group as my regular user, not root). I want drwxr-xr-x. I've been trying to find out how it works, or how to adjust it. udev notifies udisks and gnome-disk-utility or something like that, I'm not 100% sure and I can't find anywhere to configure a default umask/fmask/dmask for it. Looking in /var/log/ at the time a drive was connected I can find ntfs-3g's entries in daemon.log and syslog telling me what options were passed to it but I can't see what called it. Does anyone know how it works or how I can adjust the default permissions provided by the existing automatic mounting system? I don't want to replace the system with another, I don't want to put stuff in fstab, etc...I want to learn how the existing system works.
  8. ronanian
    Yeah, driver was my first thought too, but there's no way I'm messing with it. That HP Officejet Pro A910 driver is the most finicky, delicate driver ever made. I wish I could just manually assign a static IP to the printer and manually enter that into the driver instead of being required to use auto-detection that occasionally works. Anyway, since it works with everything else (including IE9) I hope eventually to fix what's wrong with IE10.
  9. ronanian
    Went to look at a client's computer this morning. It has Windows 7 Home edition and IE10 (thanks, automatic updates!). It prints fine from OpenOffice, Firefox, Chrome, etc. However, IE doesn't print. You click Print, get the expected behavior, but nothing ever ends up in the print queue. Print Preview works fine. If you right-click and run as administrator it is able to print. If you disable IE's Protected Mode it is able to print. I found plenty of social.technet.microsoft.com results in a google search but they are all unresolved; people post that they can't print, they are asked if running as administrator or turning off protected mode helps, they say it does, then nobody says "ok, so now you need to do {something}". Any thoughts? I placed some bookmarks in Firefox for the user, who was happy enough with that, but the next time I'm there I'd like to fix it correctly.
  10. ronanian
    IE10 seems to have some bugs to work out. I wouldn't go live with it yet...give it time to mature, like any other MS update.
  11. ronanian
    That it works in another browser says that it's either a bug in the software or something messed up in the user profile, such as a setting or add-on. Next step is to run IE without Add-Ons and see if that works. Something like "Start->Programs->Accessories->System Tools->Internet Explorer (No Add-Ons)". If it works without add-ons, then it's just process of elimination. Disable some add-ons, see if it works, if not then enable those and disable some other add-ons, until you've narrowed it down to one. If it's not related to add-ons, it could be some other setting. Try logging in as a different user on that same machine and see if it works. If so, then log in as the original user and use IE's big reset button. Control Panel->Internet Options->Advanced tab->Reset http://ie.microsoft.com/testdrive/ieblog/2006/Jun/12_ResetInternetExplorerSettings_1.jpg What version of IE? I think I found a bug (unrelated to this, but I'm just saying this to point out that they may have released it in an imperfect condition) in IE10 this morning...google produces a few threads on Microsoft support forums but none that were resolved.
  12. ronanian
    You might try NFS. You could mount it on another computer, or mount another computer on it. The other computer could be Windows, you just have to google for instructions on installing MS's NFS support (which works well). Then you could ssh in and use mv, or use a good tool on the destination computer; if Windows I would recommend Karen's Replicator which, while old, is fast and effective, won't waste time copying files that are already there, won't prompt you and wait when there's an error, just keeps a log of what went wrong and continues copying. You could also use SSHFS. SSHFS - Wikipedia, the free encyclopedia However, if WinSCP is almost doing the job, maybe it's worth another try - but use Move instead of Copy? That will eliminate the issue of going back for more. It also has Synchronize and Compare Directories commands that may be helpful. Are you using SCP or SFTP protocol? Could try switching. Make sure "Continue on error" is enabled as well as both "Automatically reconnect session" options, and tweak the "Maximal number of transfers at the same time". For large files you'll want to make sure resume is enabled. Get what's easy to get, make note of what doesn't transfer, then go back and use ssh+NFS with dd or cp (depending on just how bad it is). One more idea: Can the Drobo mount a USB drive or even an extra internal SATA drive? If so, you could do all your rescue locally, just using ssh to log in and execute the commands.
  13. ronanian
    Facebook likes to mess with direct access to image files that they host, but in this case it sounds like a browser issue. Try it in a different browser. If it works in a different browser then you can start to look at the profile on the broken browser. Which browser are you using?
  14. ronanian
    Linux is a rock-solid, no-fuss server OS for my Oracle server, one of my web servers, and a couple other servers. It makes my job easy. In some contexts Windows provides more compatibility, ease of configuration for advanced stuff, features, etc, but Windows is what makes my job busy. It's funny, while my co-workers can handle Windows stuff and know almost nothing about linux, it's really Windows that keeps me in a job -- and modern Windows servers run way better than those of the past. I've been using linux personally since around 1994 and professionally since 1999 or so. I've been in and out of fanaticism and at this point I care little for proselytizing, I just like to use the best tool for the job, so Linux fills certain niches and Windows is used elsewhere.
  15. ronanian
    Does that one look like this? http://cnc.ucr.edu/exchange/images/outlook2010-configure.png If so, they may just need to enter the correct credentials including the correct domain.
  16. ronanian
    Deployment wizard shows only correct certificates, not the expired one. testexchangeconnectivity's Lync test passes with this one warning: I'm completely out of my element working with the TMG, so if you could point me at some basic instructions...no wait, I think I got it: Forefront TMG Management -> Firewall Policy -> Lync Web Services properties -> Listener tab -> Properties button -> Certificates tab -> Select Certificate... button -> Choose certificate (which of course must first have been imported using Certs mmc) -> Ok, Ok, until out of all dialog boxen Click "Apply" at top of Firewall Policy pane Man, that was pretty deep in the bowels of nested dialog boxes. If you had not said "TMG Listeners" I would never have found it. I think that was it. It seems to be working properly now! THANK YOU!!!!! I've been struggling with this for way too long, though at least I learned a lot in the process.
  17. ronanian
    I fear that everybody here is in the same boat as me, woefully undereducated in the inner workings of Lync.
  18. ronanian
    I have a Lync 2010 system with topology as follows: Microsoft Forefront TMG -> Kemp load balancer -> (2) Lync Front End servers, (2) Lync Edge servers, (2) certificate servers, a monitoring server, and of course a few appliances to handle SIP and what not. I've been working on this problem for a while, trying to learn my way through it, but it has become more urgent so now it's time to ask for help. Users attempting to connect to Lync (using the soft client) from outside of our main employee network encounter SSL certificate errors ever since our old certificate expired. Using a web browser to connect to some of our Lync service host names, it is possible to see the old certificate still in place and expired. I cannot find the offending certificate; I believe I've replaced it everywhere with a new one. The Lync Web Service certificate is definitely where the problem is, although I can't say for sure if the problem is anywhere else also. When I run Get-CsCertificate | fl I see only up-to-date certificates. They are listed for Default, WebServicesInternal, and WebServicesExternal. Looking in the Certification Authority MMC and IIS Manager on all my servers and checking in the load balancer I cannot find the expired certificate. Where else should I look for it?
  19. ronanian
    Yup, that's exactly what I said. When it runs badly I bet I'm going to get blamed for it.
  20. ronanian
    We have a Cisco LWAPP system with two WLC-4400 series controllers, 115 access points (mostly LAP1242AG and LAP1131AG), and (as of this moment) 650 clients connected. Clients are mainly students' personal devices. Due to renovations, one of our largest computer labs is moving and my supervisor is depending on wireless to avoid having to run cable. I am highly skeptical. These lab computers are the most heavily used computers on campus. They connect via RDP to a terminal server. They will all end up on one access point, I suspect, even if we put multiple access points within the same range. I think that this will produce severely unsatisfactory performance. It's not merely a WiFi throughput issue, though that's certainly a real issue, it's also a matter of how many clients the AP must process. Has anyone successfully run 25 RDP clients on a single Cisco LWAPP access point? Any thoughts or comments?
  21. ronanian
    Also, I tried the WD format utility that people claim fixes the problem, but it won't touch the Hitachi drive. I emailed Hitachi Touro tech support to ask if they have a similar utility. Just as I finished that I noticed this logo at the top of the support screen: http://www.hgst.com/images/HGST_aWDco_142x49.gif What kind of insult is this? Seriously WD, your utility is so bureaucratic that it won't use a differently branded drive when that brand is "a Western Digital company"?
  22. ronanian
    I have the same problem. Worked fine with Hitachi Touro 3TB. Vendor says that model is discontinued so I went with the next closest thing, Touro 4TB...fail. This is really irritating. Why can't anybody make backup software that's robust, dependable, and has useful error messages?
  23. ronanian
    Back in the early days, you could forward spam to [email protected]. Every time my users get one worth reporting (eg valid headers, legitimately came from that ISP) it is harder and harder to find out how to report it. This week my users have been receiving spam from an AOL user. Headers show that it is definitely coming from an AOL user through AOL's SMTP servers. If the user is doing it on purpose then I would like to see his account closed; and (more likely) if his account is compromised then he probably doesn't even know. All evidence shows that [email protected] is not monitored. Who do I send this to?
  24. ronanian
    Update: I was able to get my users a "Moderate NAT" rating. On the Firewall > VoIP Settings page in SonicOS Standard or VoIP > Settings in SonicOS Enhanced, enable "Consistent NAT". Whatever this VoIP function is, it somehow helps with XBL's NAT rating. I found it buried in a couple Sonicwall forum threads on the issue, although it's also in this KB article: https://www.fuzeqna.com/sonicwallkb/consumer/kbdetail.asp?kbid=3956 ...of course, one gets turned off to that KB article pretty quickly when reading most of the steps which are about assigning an address to the xBox and port-forwarding to it, which doesn't work when you have dozens or hundreds of XBL users and only a few Internet-facing IP addresses. If it didn't have that stuff I might have noticed the one step about "Consistent NAT".
  25. ronanian
    There is no "modem" as such on our T3 and our 100Mb fiber lines. They do not block any ports. The Sonicwall is the internet-facing front end with all of our IPs on it and port-forwarded to our servers as needed. The Sonicwall NSA4500 is an enterprise-class hardware firewall with thousands of configuration options...if it was simple like a home router then this would probably be easier. I was hoping that someone else here supplies internet access to resident students and has dealt with a similar issue. I have hundreds of students and only a few IPs so I can't use port forwarding.
×
×
  • Create New...