July 2008 - Blind-sysadmins - lists.hodgsonfamily.org

FW: [program-l] MS Process Monitor + Fast IO disallowed
by Andrew Hodgson 25 Jul '08

25 Jul '08

Hi, Resending as admin - originally sent to the bounce address. Andrew. From: George Bell [mailto:george@techno-vision.co.uk] Sent: 25 July 2008 21:07 To: blind-sysadmins-bounces(a)lists.hodgsonfamily.org Subject: FW: [program-l] MS Process Monitor + Fast IO disallowed I've posted the following on Program-l, but wondered if any of you guys had some ideas here? George. I'm trying to resolve some performance issues with our SAGE Line 50 accounting system. Having installed Microsoft's Process Monitor on my Vista Ultimate system, I can see that during something as mundane as an Invoice date sort, FAST IO DISALLOWED appears. There doesn't seem to be much practical advice around for determining what might turn FAST IO on or off. Some say it could be malware, others that it could be virus checkers and such like. (We do run McAfee here) FWIW, I'm running a Windows Enterprise Server 2003, a plain vanilla Windows Server 2003, one Vista Ultimate workstation, and the rest are XP workstations. Has anybody any thoughts, because I've already lost my part-time bookkeeper due his frustrations over performance? George.

2 3

Symantec Endpoint Protection Manager Console
by Toner, Barry (LIT) 10 Jul '08

10 Jul '08

Guys, Has anyone tried using this with a screenreader? We're slowly rolling it out and I've just tried using the Admin Console. It's a Java app that just will not read at all with either Win Eyes v6.1 or Jaws 8. The title bar will read but it looks as if it's a transparent window to the screenreader. For example when you launch the application there's text fields that the screenreader doesn't' see at all. Keyboard commands appear to work in as much as tab, return etc. However, there's no speech feedback whatsoever. >From what little I know this product is a mix-mash of Symantec and Sygate and they're running on two different servers. Apache for Symantec's, and IIS for Sygate's firewall. It's not possible to log into either server using Putty or the Windows XP console. Comments? Barry. "Tell me and I will hear, show me and I will see, involve me and I will understand. Chinese Proverb" Barry Toner Placement Systems Engineer Liberty Information Technology Direct Line: 02890 167000 Adelaide Exchange Fax: 02890 445511 24-26 Adelaide Street Switchboard: 02890 445500 Belfast BT2 8GD Email: b.toner(a)liberty-it.co.uk

3 3

Exchange deployment
by Andrew Hodgson 09 Jul '08

09 Jul '08

Hi, Have any of you guys out there been involved in an Exchange 2007 deployment? Just going through the options now. It is huge! Andrew. -- allpay.net Limited, Fortis et Fides, Whitestone Business Park, Whitestone, Hereford, HR1 3SE. Registered in England No. 02933191. UK VAT Reg. No. 666 9148 88. Telephone: 0870 243 3434, Fax: 0870 243 6041. Website: www.allpay.net Email: enquiries(a)allpay.net This email, and any files transmitted with it, is confidential and intended solely for the use of the individual or entity to whom it is addressed. If you have received this email in error please notify the allpay.net Information Security Manager at the number above.

1 0

network question?
by romance's prince 05 Jul '08

05 Jul '08

hello members: I've small home network in my home, using it to get DSL connection. we have Conexant router. this is its info: BootCode Version: BC_CX82xxx_4.1.0.21 Firmware Version: CX82xxx_4.1.0.21_S Customer Software Version: 4.1.0.21_ please I've some questions: 1. how can I know the computers that are online now on network? net view command now not working. also when I go to Entire Network, then press Microsoft windows network the computer not talk, and should use end now to be healthy again. why this option not working now? and how I fix this? 2. is there any way make me prevent any virus or spy move from the network to me? am not share any files or folder for anyone. thanks. ibraam.

4 5

Question for you Cisco ASA/router experts out there
by Andrew Hodgson 04 Jul '08

04 Jul '08

Hi all, I am trying to reconfigure my network so that it meets the following requirements: At present I have 2 sets of public IP addresses. I have a block of 2 addresses (/30), which is used for the inside address of the router, and the outside address of the firewall. I have another block of /28 (14 usable addresses), which is the inside of the firewall. There is no NAT. What I want to do is to get rid of the /30, and use one of the IP addresses in the /28 as the inside address of the Internet router, and then the firewall has the rest for the outside network. I will have an internal (inside) IP range of 192.168.1.x, and the firewall will NAT everything going out on that connection to the outside interface (using one IP address). I will have servers (specific IP addresses) on the inside network which I want natted to other static IP addresses on the outside network. There will be static NAT statements which do the same as port forwarding, but I want any connection that these machines make to come from specific external IP addresses. Here is my sketch configuration illustrating this. Will it work, or do I need to use policy NAT with ACLs? Thanks. Andrew. Router (Cisco 837) interface Ethernet0 ip address xx.xx.xx.209 255.255.255.240 interface Dialer0 ip address negotiated (receives WAN static) Firewall (ASA 5505) interface vlan2 nameif outside security-level 0 ip address xx.xx.xx.210 255.255.255.240 interface vlan1 nameif inside ip address 192.168.1.1 255.255.255.0 security-level 100 global (outside) 1 interface global (outside) 2 xx.xx.xx.11-xx.xx.xx.222 netmask 255.255.255.240 nat (inside) 1 0 0 route outside 0.0.0.0 0.0.0.0 xx.xx.xx.209 1 (can this go in the outside interface definition?) access-group outside_access_in in interface outside access-list outside_access_in extended permit tcp any host 192.168.1.10 eq 25 static (inside,outside) xx.xx.xx.211 192.168.1.10 netmask 255.255.255.240 Thanks. Andrew.

3 6