CimmerianX 197 Junior Poster

Are you on a home wifi network or wired network? If you find yourself without DNS, quickly go to CMD prompt and do a ipconfig /all. This will show if you still have an IP address and what your DNS servers should be. Take that DNS server IP and ping it. Can you hit it? Next try an "NSLOOKUP <dns ip>" then type in any site name like www.google.com and see if you get an IP address for resolution.

If your suspect your ISP dns, you can use any pubnlic one like 8.8.8.8 or 4.2.2.2

I would check to see if you have any additiona. devices in your house doing DHCP. PErhaps another device is serving up addresses but has bad dns info. Ipconfig /all will also give you the dhcp server from which you acquired the address.

CimmerianX 197 Junior Poster

If it's a laptop, you probably can't remove the video card. Memory location depends on the laptop model. It's usually behind an screwed on panel on the bottom, or sometime behind the keyboard. However, most laptops (i.e. dell) will come with buitl in diagnostics that you can use when calling tech support. These diags will have a mem test on them making it easy to track down defective modules.

CimmerianX 197 Junior Poster

I captured the HTTP as I just browsed around the site a bit. Most of what we receive is pretty standard:

HTTP/1.1 200 OK

Date: Sat, 19 Jan 2013 19:37:48 GMT

Server: Apache/2.2

X-Powered-By: PHP/5.3.10

Set-Cookie: csrf_cookie=d79d17617ac5f0432075c0a336080fe6; expires=Sat, 19-Jan-2013 21:37:48 GMT; path=/; domain=www.daniweb.com

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 5786

Keep-Alive: timeout=10, max=400

Connection: Keep-Alive

Content-Type: text/html; charset=UTF-8
--followed by the compressed items---

That's just a quick sample. Nothing I saw is screaming "I'm too large" at me. The largest header size was 32,215 when requesting GET /js/FusionCharts/Charts/FusionCharts.js HTTP/1.1.

The real way to look at this would be to try and replicate the failing environment. But we would need to know the version of ISA, patch level, and ideally, a packet capture on that side at client and server level.

CimmerianX 197 Junior Poster

sits below userland and provides services to the hardware or OS

So something more like hardware control or like driver development? What would be an example of something a 'systems programmer' would create?

CimmerianX 197 Junior Poster

For starters, just because it's new doesn't mean it's not defective. I've had tons of new stuff DOA out of the box.

So you did your HW drivers... did you also look for BIOS updates? Worth checking as well.

I would remove and reseat all memory, then run for a while.

Remove & reseat the vid card, then run for a while.

What kinf of Power supply do you have? Is it powerful enough to power all items on the PC? IF you are borderline on power, this could also cause issues like this.

CimmerianX 197 Junior Poster

'Systems' and 'Programmer' sound like 2 separate jobs to me.

Systems may entail Server management, monitoring, deployment, design, etc...
Programmer I would take as a software developer position.

Perhaps they want someone versed in scripting solution for server systems in Bash? Maybe they mean something else related to web site back end processes?

Not sure what direction to give you since the description is very vague.

CimmerianX 197 Junior Poster

IS this a brand new disk or was it formatted in another system with another file system? Sometimes, Windows disk management will flake out with MAC journaled file system or ext4 and the like.

If the disk has nothing on it, you should be able to use any Linux Live CD to boot and format the usb disk or write all 0's to the disk using something like Darren's boot and nuke disk. Just be sure if you do, you are nuking the correct disk and not your local drive.

CimmerianX 197 Junior Poster

Understood that as a web admin, you want to make the site as compatible for as many people as possible. But you will always have issues with end users who don't configure their systems correctly.... but I suppose that's obvious.

The issue here is that the HTTP header is refused by ISA. Nothing in the HTML is causing this. So you would need to look at the fields you have defined and try to reduce the overall data being sent.

Start here, looking at the response fields:
https://en.wikipedia.org/wiki/List_of_HTTP_header_fields

Then you use that knowledge to look at your apache configs and just try to streamline down any unnecessary data...

CimmerianX 197 Junior Poster

Problem here is that the shared location is just a pointer to the location the files are stored. An internal user works fine because, for example, a file share on server1.local that is published in sharepoint can be accessed from the internal network. When you are external, you are clicking on the same sharepoint link for server1.local, but of course you will never be able to access that host while outside the network.

For an external user to access files on sharepoint, the files must be uploaded into sharepoint as a file or list or whatever, so long as the file is loaded to the sharepoint site itself.

CimmerianX 197 Junior Poster

You'll need to be more specific. Sharepoint has tools to check for the validity of many coponents like cert validity, user app license validity, etc....

CimmerianX 197 Junior Poster

Agree from JorgeM. Don't fix their problem by changing your code that works for 99.9% of the visitors out there. The issue is documented to be a misconfigured ISA. I would poilitly point that fix out to them as being "in their best interest to implement".

CimmerianX 197 Junior Poster

The end users are sitting behind an older ISA running as an HTTP proxy. They get this error as a result of a setting in the ISA server.

They can fix their issue by modifying a registry key in the ISA server.

Lookup this key:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3Proxy\Parameters]

Change the entry for MaxRequestHeadersSize to be dword:00032000
Change the entry for MaxResponseHeadersSize to be dword:00032000 as well.

These settings can be increased even more if needed.

Once they do that and restart ISA services, they should be ok.

Or they could just upgrade to a current proxy ;)

CimmerianX 197 Junior Poster

If you have any cisco devices that support it, the devices can export NetFLow Data to a host PC. Very similiar to how it can send logging data to a syslog host. In this case, the netflow data can be analyzed in the fly by certain software to report on the data you want ( i.e. who is using the most traffic to visit a dancing cat video...).

There are some opensource network monitors out there.... look at http://www.ghacks.net/2011/09/08/networktrafficview-network-monitoring-statistics-tool/ this one is fairly decent.

CimmerianX 197 Junior Poster

rch is correct. You will need a usb to serial adapter. They are very cheap and all techs should have one handy.

You connect it to usb, load the driver software, and it shows up as a high number com port.

Once connected, it's a fully functional com port you can use for RS232.

CimmerianX 197 Junior Poster

If your email server keeps mails permanantly, you can just make a backup or then delete the OST and outlook will recreate it from the current exchange mailbox contents.

If your email was stored in a local PST, and exchange no longer has these messages, then you need to try the repair tool or find a backup of the PST.

CimmerianX 197 Junior Poster

I use no-ip.org for my home's dynamic IP address so I can VPNin easily. It works well enough, just don't like the annoyance of having to verify I use the service every month or loose the name).

The static IP would be set at the router/modem, as JorgeM indicated. If you opt for dynamic DNS service, then you can run the dyn dns client from anywhere in the internal network to register the dynamic address (i.e. no-ip.org).

Either way, you need to configure either a port forward for http and ftp to the internal host, or use the consumer router's DMZ ip which forwards all packets to a single internal host. Then it's up to the internal host to handle blocking unwanted ports via firewall or iptables or whatever.

CimmerianX 197 Junior Poster

"The Cake is".

CimmerianX 197 Junior Poster

Welcome to the forums.

CimmerianX 197 Junior Poster

20 years of IT exp behind me. And even though the tech may change, the base job stays the same.

It's a thankless job. Most of the time, the only communication you get from the employees are complaints. So you must have this customer service mindset that the end users are customers and your job is to ensure that they have the tools needed to do their jobs.

Most big companies look for certain prereqs when hiring, (BA, X years experience, MCSE). But smaller and mid size companies without brainless managers tend to hire based on ability to perform.

When I hire, I don't ask for credentials. I lay out the responsibilities of the position entail, then grill the candidates to see if they really know what they are talking about, or are just noobs and paper MCSEs. As a rookie, you'll probably want to look for any entry level position like Jr admin or help desk technician. LEarn as much as possible from these positions. IF you have the ability, you will get more responsibility added to your job.

HAving the skill set is important. No one want to teach a rookie how to tail a log to look for errors. But more important than tech ability is overall compentence. I've known many briliant tech who know linux backwards and forwards, but would fail miserably when expected to work in a team with gasp other humans. I've also known excellent and dedicated employees who may not be the best …

CimmerianX 197 Junior Poster

In backtrack (or any linux distro), a directory with a . as first character is hidden.

You can list all files, including hidden files, with ls -la

CimmerianX 197 Junior Poster

If you look in your device manager, do you see any devices with a yellow symbol, any device saying unknown hardware, or any devices under audio devices?

Trying to establish if you have a sound device installed.

Also, the dell's have a tag# on the device. You can hit the dell support site, enter the tag, and get the downloads for the latest drivers for your system.

CimmerianX 197 Junior Poster

Seems like your system is not checking the hosts file and thus can't resolve localhost to 127.0.0.1

Look at /etc/nsswitch.conf. This file should have certain permissions 644. If not, then use:

chmod 644 /etc/nsswitch.conf

Cat nsswitch.conf and make sure have the following:

hosts: files dns
CimmerianX 197 Junior Poster

A common mistake I see is that the Power supply power control lead to the motherboard isn't seated on the right pins, or +/- are reversed.

Remove the reset control lead to the MB as well. No need for it at this point.

Do what JorgeM said and remove all peripherals and extra equipment. Just get CPU/MEM and boot it to Bios.

CimmerianX 197 Junior Poster

Most ethernet attached HP printers are SNMP enabled. So even if the onboard mgmt software is lacking, potentially you could watch these items via NAgios and have a Nagios-Alert sent to your email when toner level runs low.

CimmerianX 197 Junior Poster

Another thought, most modern Bios will provide a "Press F12 for bootup menu" or somehting similar which provides the option to select the boot device manually. It also gives you a nice listing of bootable devices. If it does, do you see your drive there?

CimmerianX 197 Junior Poster

Cloud networking can mean many different things:

1)the use of a cluster of servers for virtual machines (like VMware, KVM, Xen)
2)The use of a 3rd party server for file storage (iCloud, Dropbox)
3)The use of external database servers (or servers for any purpose for that matter) (Amazon EC2)
4)The use of virtual workspace regardless of location.

The 'cloud' is a marketing term that I personally hate. The ability to run services independent of physical hardware, however, is the shit. And I say that with 20+ years of networking expertise behind me.

http://www.pcmag.com/article2/0,2817,2372163,00.asp

CimmerianX 197 Junior Poster

cat /etc/hosts

You should see the lines similiar to:

    127.0.0.1      localhost
    127.0.0.1      servername.domain.local

Do you have this?

CimmerianX 197 Junior Poster

You need a mail parser. And there are many to choose from based on your Distro or language of choice. A qoogle search for 'email parser' + your distro will get you a list of results. STart with that.

I've seen windows based parsers also, but they are seldom opensource.

CimmerianX 197 Junior Poster

Unless I'm missing something.... It doesn't matter what tool you are using, ultimately, you are still trying to establish a secure ldap session using the fqdn on the cert.

A few things to remember, you need to trust the root CA (your CA Server). If your php solution doesn't take this into account, you will get warnings.

Also, the php solution must use the name on the cert. IP addresses or netbios names will not work.

bornie21 commented: thanks for the reply. Apart from compiling PHP with ldap enabled on Apache is there something that I am supposed to do +0
CimmerianX 197 Junior Poster

Dell support is excellent. I have hundreds of machines and servers with their protective care and never have had an issue getting parts or replacements.

AFAIK, the serial number in the MB is programmable via some tech utility, which I have yet to get a copy of, to match the tag # of the unit.

CimmerianX 197 Junior Poster

I don't think there is a way to determine the uniqueness of the MB without opening the unit...

However, that PS warning message is common enough. I've seen it when I use a 60W charger in a dell model requiring 90W, or when using inferior 3rd party chargers that don't 'speak' to the Laptop correctly.

Are you still using the 90W that came with the laptop?

CimmerianX 197 Junior Poster

JorgeM is correct.

The times I've needed a 3rd party DHCP on win7, I've used TFTP http://tftpd32.jounin.net/ with success. (the app is called tftp, but included tftp, dhcp, and syslog)

CimmerianX 197 Junior Poster

Did you run the GP modeling wizard on the server for thie user and workstation? What did results show. Are your changes applied?

Also, what 'restrictions' are you implementing?

CimmerianX 197 Junior Poster

Right, I was thinking 'permissions'. But rch1231 is correct. It's more likely the environment variables.

If you could post the cron entry and any important errors in the logs, that would be a big help.

CimmerianX 197 Junior Poster

Believe it or not, a lot of the push back comes from management, not the real I T people. Many times its the open source tag and no cost that is the issue. It just 'looks' better when you budget for 500k worth of stuff and people for a project. 'If its free, its probably not good' is the misguided mentality

CimmerianX 197 Junior Poster

When you run the command, do you get an error? What do you see?

CimmerianX 197 Junior Poster

Most online games use very little bandwidth. 2mbps is more than enough to play any online game. The real factor is the latency between you and the other players. High Latency equates to lag which can really hurt online competitiveness.

Any online speedtest should give you a good indication of your speed, but latency is determined by many more factors, the most important of which is the number of hops bewteen you and the server/peer and the time it takes packets to make it back and forth.

CimmerianX 197 Junior Poster

Each manufacturer would have their own method for assigning IPs.

Usually, you create a VLAN interface and assign the IP to the VLAN.

You'd need to provide a lot more info, especially, what kind of switches you are using.

Along with that, you need to show us what you've tried.

CimmerianX 197 Junior Poster

What is the error code on the BSOD?

Does it happen consistently? If yes, at what point? Startup, running an app, playing sound?

Were there any recent changes done just before BSODs started? NEw hardware, Updates, new app? IF yes, revert that 1 change and retest.

Can you get into safe mode, run MSCONFIG, and turn off all services and startup items, then boot. Does the issue happen again?

CimmerianX 197 Junior Poster

If it's a gaming center, most LAN games are designed to run on very little bandwidth to support internet play.

Any modern center should have at least gig to the desktop. Alot depends on the specifics. Will you host servers, multiple types of games, will you provide internet access to desktops as well. Will it be a BYOD style center? Do you have a startup budget?

CimmerianX 197 Junior Poster

1st post an all.... here's what we need.

Tell us what you need help with. A description or summary. i.e. I have 2 computers running windows 7 and I need to share files.

Give us some details on the equipment or software. Versions are always good.

HAve an error? post the test or a log sample.

CimmerianX 197 Junior Poster

Once you introduce layer 3 routing between R1 and R2, your VLANs are done.

In S1-VLAN10 and S2-Vlan10, I assume both are using the same subnet. IF so, any communication between PCs on the same subnet will happen over ARP then direct communication. No traffic destined for the same subnet will ever hit the gateway.

For this to work, S1-VLAN10 and S2-Vlan10 must each have a unique subnet and R! to R2 must route properly.

CimmerianX 197 Junior Poster

Robocopy is just 1 tool in the toolbox. It's great to keep a mirrored/secondary copy of data, but no good way to do historicals....

And the correct Net use syntax is

NET USE Z: \Servername\sharename /USER:username

CimmerianX 197 Junior Poster

I agree. Backtrack can be run from a USB drive if needed. I have a usb stick I use for pen testing only when needed. Boot up with it, all settings are still saved, and I'm good to go.

Backtrack has a pretty small footprint, you could always just dual boot it alongside your ubuntu desktop.

The Backtrack install CD gives you some nice install options. Any reason not to use one of those?

CimmerianX 197 Junior Poster

Using "Disallow: /foo/" would block the foo directory and everything in it.

Technically, without the trailing slash, Disallow blocks the 1 item, such as a single file. I would assume this would indicate a disallow on a single file named foo not the directory /foo/.

You can also use "Disallow: /foo*/" to block any subdirectory that began with "foo".

BTW, google has some webmaster tools available that will test the robots.txt file and report on the results. http://www.google.com/webmasters/

Dani commented: Thanks! +15
CimmerianX 197 Junior Poster

Like JorgeM said, try opera or firefox and see if you get the same result.

Can you telnet to an internet host on port 80? Does that connection get through? If it does, that rules out network stuff and you can concentrate on the PC/browser/OS.

Is your perimeter router set to filter traffic on 80 for some reason? Maybe QOS or something is set and misconfigured?

CimmerianX 197 Junior Poster

IP routers are typically layer 3 devices, but certain models can route based on higher levels of the protocol stack.....

CimmerianX 197 Junior Poster

Yeah, that's like asking, "Tell me about Laptops"...

What info are you looking to get?

CimmerianX 197 Junior Poster

I doubt he means actually writing code on a tablet. That would be crazy. He might mean a tablet that allows for testing of the code he wrote. At least I hope that's what he means.

So what market are you after? I assume you are looking for an android tablet right?

CimmerianX 197 Junior Poster

Sounds like you need a consultant.....

Here's my 2 cents if you are planning on doing this yourself.

  1. Isolate the workstation traffic away from the render farm traffic. Do this by physical separation and/or vlan separation.
  2. Create separate subnets for both the Server farm and Workstations. (192.168.10.0/24 and 192.168.20.0/24). This will help limit broadcasts.
  3. Setup something like this:

    Internet
        | 
        Switch1 (routes traffic and defines VLANS)
        /      \
        Sw 2     Sw 3
        Servers   Workstations
    
  4. SW 1 uses a trunk port to sw 2 and sw 3 over the etherchannels restricting traffic to the allowed VLANs for each side. Further reducing traffic.

  5. Finally, use a 3rd subnet and vlan for the outbound internet trraffic.