824 reputation
510
bio website fencepost.net
location Schaumburg, IL
age 45
visits member for 5 years
seen Nov 20 at 15:40
Former and occasionally current developer, now working as an IT consultant for small medical practices. Dealing regularly with Windows (servers & workstations), SCO (running Medical Manager), Linux, limited AIX & Macs. Development experience with VB, VB.Net, some C++, small-app Python, small-app PHP, assorted other languages & environments as required. Much of the development work was in the print output industry. Most unusual application was probably the one that rewrote chunks of PostScript code to add dynamically-generated Anoto background patterns to custom forms.

Dec
1
awarded  Yearling
Aug
5
answered What are the best open source tools to stress-test a Linux system?
Apr
9
awarded  Popular Question
Jan
25
comment Keeping mail and website separate on single server
You could also probably set up appropriate .htaccess rules to control access that way - might be useful if there's going to be webmail, etc. running on a separate vhost entry so that mail.domain.net goes to the webmail interface.
Jan
17
comment How can I restrict the java plugin to run only on certain sites in Internet Explorer?
I'll note a couple of writeups possibly of interest on managing Java via GPO (but which I haven't fully followed through yet): darkoperator.com/blog/2013/1/14/… and its predecessor darkoperator.com/blog/2013/1/12/…
Dec
1
awarded  Yearling
May
8
comment How does ping know that my packets are filtered?
Another thing that can cause this is "private" packets (using a private/internal IP) that make it out to the world. I've seen this when a VPN connection dropped and packets going to 10.11.12.13 started getting "packet filtered" responses from an external system that they should never have gone to in the first place. See also en.wikipedia.org/wiki/IP_address#IPv4_private_addresses
Apr
23
comment How do I encrypt SQL Server traffic with IPSEC?
You need to have an IPSEC VPN connection to the network that the SQL server is on. If this is within the same network I'm not sure how you'd go about doing it without causing headaches - I think addressing in that situation could get very ugly and confusing very fast. This article is old, but may be relevant: microsoft.com/download/en/details.aspx?id=18254 . Also relevant? support.microsoft.com/kb/816514
Apr
18
comment Having problems creating a static route
OK, are WAN1 and WAN2 coming into the building on the same wire? Same carrier but separate lines? Separate carriers (e.g. fiber and cable modem)? What I'm basically saying is if they're on separate wires/fiber, they should never even go into the same router. If they're coming in on one wire, put that into a switch and separate the WANs - that switch outside both networks is the first point of contact, and from there the connections go into separate routers. LAN2 communications to LAN1 systems are EXTERNAL as if coming from a coffeeshop - whether it's in your building is irrelevant.
Apr
17
answered Having problems creating a static route
Mar
9
comment Local backup server - what operating system / software to use?
I'm assuming you're going to be backing up to files, then rsyncing the files - don't expect the rsync to save you anything, since each backup file will be effectively unique. If you're really talking about 6GB, that's probably manageable, if it's much larger you may want to look at configuring something to use both that secondary server and an offsite server as direct backup destinations to avoid re-transmitting a lot of rarely-changed data.
Dec
8
comment No outbound mail on SBS 2008
That's not too surprising these days - if you get the block removed you'll still be able to send to some servers, but a large percentage will reject non-authenticated messages coming directly from dynamic IPs. Much the same thing is working itself out with the entire pool of IPs used for Amazon's cloud services. Smart hosting should still be possible - if your web host doesn't allow it I'm sure there are third party servers that do so.
Dec
1
awarded  Yearling
Nov
11
answered No outbound mail on SBS 2008
Nov
7
answered Finding process name that changes windows time
Sep
29
comment How to block SKYPE when it's using port 80 & 443?
@TheLQ, except for specialized situations (network equipment), when's the last time you went to a website by IP? Bear in mind that you won't be able to connect to any site on a server hosting multiple sites. My impression is that these days addressing by IP is long gone except for network equipment and occasional malware.
Sep
28
revised How to block SKYPE when it's using port 80 & 443?
expanded slightly, highlighted.
Sep
28
answered How to block SKYPE when it's using port 80 & 443?
Sep
15
awarded  Scholar
Sep
15
revised Possible to port-forward from a Sonicwall (TZ200 series) WAN side through a VPN tunnel? (Answer: Yes)
Noted in the question title that it's answered with "yes"