topbanner_forum
  *

avatar image

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
  • Saturday September 19, 2026, 9:36 am
  • Proudly celebrating 15+ years online.
  • Donate now to become a lifetime supporting member of the site and get a non-expiring license key for all of our programs.
  • donate

Recent Posts

Pages: prev1 ... 62 63 64 65 66 [67] 68 69 70 71 72 ... 246next
1651
Non-Windows Software / Re: LINUX: Free book for the Tiny Core Linux distro
« Last post by Stoic Joker on March 13, 2014, 07:17 AM »
May be some hints here?

  http://forum.tinycorelinux.net/index.php/topic,12544.msg68122.html#msg68122

Cool! Thanks man! ...Now all I need is time.. (eek).
1652
client to gateway, of course.  Otherwise it would not be blocked.  :)  ISP's just want to be paid for Business se even if it is only occasionally
As stated:  Users is at HOME.  That is why the issue.  If they were on a business internet, no problem.

Crap, totally missed that bit. Still it shouldn't matter what the ISP blocks with a VPN, as all the LAN protocol requests should be router through the tunnel...not raw through the internet where it could be blocked.

As for the WDN, I haven't had any problems with it lately.  Like for 4 or 5 years?  Should I have?  Of course, I did add the referenced QDN to the matching IP in the Hosts file correctly in both the server and the client systems (I have never known why the Server would need to know its own name but I was told to do that once a long time ago and it solved the problem once and for all).


It's rather sadly common for people to botch the name resolution on a WDN configuration. If AD can't properly identify itself, it can't authenticate its own activities...and tends to self destruct in very creative ways. constant replication errors (even with a single DC), difficulty joining machines to the domain, and slow client logins are common signs of a bad DNS configuration. I've seen workstations take 20min from login to desktop due to improperly configured DNS on a WDN.


As for all the mapped drives, that has always been a complaint of my own.  Technically hese could all be subfolders of the main USERS folder with permissions mapped.  I inherited this mess running on Server 2008 R1 and am just trying not to rock the boat too hard.

File sharing is a very bandwidth intensive activity (lots of status and file information going back and forth) that was designed with a 100Mb LAN in mind. So multiple mappings through a tunnel is a huge performance killer. If the VPN clients are configured properly (e.g. share access is going through tunnel) you may actually be having timeout issue due to the excessive share access traffic. In the past I've used an internal access only FTP to allow access to a file server through a VPN to avoid bottlenecks (but that too has its drawbacks).
1653
Worse, if you run as admin in windows 8,  for some odd reason the drives you create with net use as admin can then only be accessed when logged in as admin 
windows 8 seems to have changed a lot of the way mapped network drives are configured

That's what session isolation does. Running as Admin (or an admin users acct) loads and modifies that users profile only. And drive mappings are of course profile specific, not system global. But you really shouldn't need admin rights to map a drive. Typically use of a login (not start up) script would be the easiest way out. Have the script first delete the mappings and then create them in a non-persistent fashion so any issues that arise can be resolved by simply rebooting.

Another thing to consider is do you really need 5 separate mapped drives?? IIRC and assuming you do have a server server DFS does work in a workgroup and is an excellent way of bringing discontiguous storage locations into a single target.


...This was only a simple workgroup, not a Domain setup.  I never did find out what was IN the ULTIMATE version that was not in the Regular Version but it sure as heck worked that way.

I always laugh before cringing when I hear this. While workgroups are "simple" to setup, they are a complete and total nightmare to maintain because everything has to be done again, and again, and again, and again, and again, and again, and again, and again, and again, and again, and again, and again, and again, and again, and again... (infinity) ...Even for the most tiny and trivial changes. Which is why they are typically not done. Actually nothing is ever done after this "simple" configuration is tossed out of the box until something goes horribly and catastrophically wrong.

Less than 10% if all the workgroup networks I've encountered in the field had properly working NetBIOS name resolution.

While I'm at it, tell me this.  Do you know of any way to set a router such that all traffic originating on port 445 is re routed to another port so that people whose ISP's block 445 can connect their VPN and map to a servers sshared folders?  The SMB protocols require port 445 which many ISP's block.  Supposedly to give you better "security"  yet the same ISP does not bother to be so "protective" if you have a business account.  Then the port is NOT blocked.  What it mostly does is prevent people from working at home on their Home internet unless they pay extra to get Business Internet (or rather pay extra to Unblock those ports)

If this is a gateway to gateway VPN there should be static routes that send all LAN protocols through the tunnel. If this is a client to gateway VPN - you have my sincerest sympathy - it should be a gateway to gateway VPN.
1654
Living Room / Re: What's the name of your car?
« Last post by Stoic Joker on March 12, 2014, 07:07 AM »
I always have, and always will maintain that motorcycles have souls. You must treat them how they want to be treated...or they will kill you.

After much thought my recently acquired 2010 Harley Davidson FLTRX has been named Trixie. While the name is a bit uncreatively a play on the model designation, she's also a bit flashy (more chrome than I'm generally comfortable with), and she loves to play (as long as I don't push too hard).
1655
Non-Windows Software / Re: LINUX: Free book for the Tiny Core Linux distro
« Last post by Stoic Joker on March 12, 2014, 06:58 AM »
Hm... If I could get Samba running on the base core edition/version(?) in a VM. That would be a perfect place to study/play with Linux.

(Don't mind me...I have these moments periodically)
1656
Living Room / Re: What happened?
« Last post by Stoic Joker on March 11, 2014, 03:55 PM »
That a right interesting (or frightening) imagination you have there Iain.
1657
Considering I'd missed it, sure...I'll give'em a point for that.
1658
^Ya know there was one year back when that I did goof up on my taxes, and the IRS actually correct the error and sent an additional $50 in my return check. Granted I'm sure the poor bastard got fired for it ... But it did happen at least once that I know of. ;)
1659
Living Room / Re: Problem with Office 365 and Windows 8
« Last post by Stoic Joker on March 11, 2014, 03:03 PM »
This company uses Outlook like a Giant Filing Cabinet and learning NEW ways here is not a good thing.

Note: Although this doesn't address your question, I can't help but point out that using Outlook as a "giant filing cabinet" is an extremely bad idea for more reasons than I have time to go into. Even Microsoft frowns on using it for that.

Did you wince when you read that too? :D

But seriously man, something here don't sound right. Open/Save defaults to OneDrive?!? That just doesn't strike me as normal at all. I just setup a Office365/Exchange client (in a workgroup (eek)) a few weeks ago and they aren't defaulting to Live/Sky/OneDrive. I'm thinking that maybe they (got screwed) are logging into Windows 8 with a Microsoft account instead of a Local Machine account...and that is forcing everything skyward.

Or have you seen this behavior in a "normal" deployment before?
1660
I'll take this as a sign she's learned something as soon as she applies the same standard to my privacy as her own. After all, some animals are more equal than others.

Ouch!! (Now that's a really sharp stick)  :) But you are indeed right. :Thmbsup:

I just hope congress can put down their golf and yachting magazines long enough to get the ball rolling and push her report through declassification. We need a head - actually a bunch of them - on a stick to put this to bed with.
1661
^Right On Man!!! :D
1662
just for your information:

The message headers are not used for the classification via SpamNet.
-Antispam Sniper
http://antispamsnipe...elp/oewm/spamnet.htm

Hmmm...I'll have to look into that when I get home.  I want to say that's an option, and I think my SpamNet option is disabled.  NOt sure though.

I'm not familiar with the products specified, but judging by the description given it's a weighted keyword (Bayesian) style of filter so it can't alter the message in any fashion without skewing the results. Also any attempt at including the header would just introduce noise in the results due to the normally random information there causing a single (naughty content) message body result to blossom into thousands of sender recipient variations.

So unless the filter is cutting off the header for message analysis, and then stuffing that headerless-ly analyzed copy in the inbox...it would have no reason to be modifying anything.
1663
Living Room / Re: My pop/imap Android experience
« Last post by Stoic Joker on March 05, 2014, 01:00 PM »
So instead of just having three simple buttons which would be "intimidating", we have one button...but with a long press option.  Really?  Is that really that much easier.  end rant.

Only if the button is green and has the words "Don't Panic" next to it.
1664
^More likely easement issues and physical security I'm guessing.

That's what I meant by land use/access issues. How do we get to the land we're allowed to use, who else is going to be there, and who all is going to be shooting at us when we get there? :D
1665
Interesting that some countries were apparently easier to cable around than through. Is the terrain really that bad, or was it just land use/access issues?
1666
Living Room / Re: Netflix Mocks Amazon's Drone Delivery with Video!
« Last post by Stoic Joker on March 04, 2014, 06:56 AM »
Actually I was just drawing attention to the similarities between Ren and the cartoon author's style in the opening line. Not too many people will go there straight out of the gate. But then again I appreciate the somewhat ironically conflicting imagery...as some things really cannot be done "gently".
1667
The cleanest most true to vanilla OEM disks I've ever found were Dell's. I've used them on all brands and never had a problem with anything as long as the COA was still readable.

@40 - I forget which one of the two caught the kernel patch, but neither one takes a long time to run. and both can be run in safe mode with command prompt only.
1668
...Then it's starting to sound more and more like a rootkit. Repairing the install won't necessarily remove the bugg ... So it's best to go with the kill it with fire approach. Run the Kaspersky offline scan of at least the boot sector and recovery partition, then format and reinstall, or do the factory recovery.

--------------------------------------------------------------------------------------------------------------------------------

Damn he's quick today...(round 2)

I already typed this so I'll post it anyway.

In my case, I was able to identify the actual boot target and navigate to the correct boot repair tools. Even with that none of the repair attempts successfully concluded. It would go away for an hour or so, then come back with the helpful news that the repair could not be successfully completed and ask if I wanted to reboot...

In my case, I think killing the rootkit took some important stuff along with it. Repairing partition tables and MBR didn't help. System said successful and all ok. But same deal on reboot. Nada.
 (see attachment in previous post)No joy I'm afraid.

Interestingly, the hidden factory recovery partition was completely trashed. I could see it. But the OEM recovery manager (Sony VAIO) reported it was invalid and couldn't be used. Don't know if the malware did something to it, or possibly Kapersky nuked something on it. But if so, it didn't indicate doing anything to it in the log therefor scratch Kapersky as a possible culprit.

So in this case it was less "scorched earth" and more like "last resort." Especially since the client hadn't made a recovery disk set and I had to order media from Sony. (Which is always great fun. Not.) Normally I won't bill a good client for a basic OS reinstall/recovery as long as they have a working disk set. In this case, I charged them one hour at my full hourly rate.

Show me some consideration - or show me a check. ;)
 8)

I hear ya. Did something much like that to a machine just last week that got hit by CyberLocker. Domain user account/UAC enabled ... Still killed it deader than hell.

Kaspersky said the machine was fine...but it wasn't.

I managed to finally kill the thing with these:
http://www.adlice.co...ller/RogueKiller.exe
http://www.adlice.co...r/RogueKillerX64.exe - For reference only, machines are 32-bit

From: http://www.techsuppo...val-help-305963.html
GMER Rootkit Scanner: http://www2.gmer.net/gmer.zip


Seriously freaky in memory kernel patch GMER finally spotlighted so that the SFC could notice that the kernel was not himself... but it took both the above to get the coffin nailed shut. They had good backups - Yay me - so I got the user files and main db of the Sunday night backups (accounting works weekends).

How the hell the little MF got past Kaspersky ofline I don't know ... but it did it 3 times.
1669
Living Room / Re: Survivorship Bias...an Insidious Enemy
« Last post by Stoic Joker on March 03, 2014, 12:04 PM »
When hurricane Frances/Fay (I forget) hit here we were out of power for 7 days. Many people were complaining about the power being out that long. I however having wandered around a bit to get an idea of the true scope of the damage...was actually impressed that they got the power on as fast as they did. But then again I helped out the situation in my own (it's probably a misdemeanor) way...and consider myself to be lucky ;)
1670
Living Room / Re: Netflix Mocks Amazon's Drone Delivery with Video!
« Last post by Stoic Joker on March 03, 2014, 11:47 AM »
For some reason I started reading that in Walter Cronkite's voice and didn't make it past the first frame before erupting into maniacal laughter - When did Renegade start doing cartoons?
1671
While 40's scorched earth method - which I also use - works too, I already typed this so I'll post it anyway.

-------------------------------------------------------------------------------------------------------

When you get to the mouse only GUI, can you get task manager to run by pushing Ctrl + Shift + Esc? If you can du run new task and try loading either Explorer or cmd to get a shell to work with. I found it rather amazing the number of things that will cause Windows to forget that last - rather critical - give the user an interface to work with step.

If no TM can be had, boot to a Win7 disk of the correct bitness (edition/license is irrelevant for this) look for the easy to miss (I think it says) repair windows link on the bottom left of the install windows window. and get to a command prompt.

(either way you get there) Then use bcdedit /enum to see what the currently configured boot targets are. That way at least you'll know if you're fighting with the correct native OS, or a .vhd virtual OS that is part of a borked dual boot configuration attempt.

Once you're sure you have the correct target the boot repair tools (part of the CD's recovery stuff) should be able to stop whatever update is preventing the shell from loading.

--------------------------------------------------------------------------------------------------------

Note: Method above assumes of course that the machine in question has not been taken over by pure evil and turned into one of Satan's puppy eating zombie whores. :D
1672
General Software Discussion / Re: XP to Windows 7 advice
« Last post by Stoic Joker on March 03, 2014, 07:15 AM »
Oh, and an extra warning related to installing Win7 on a laptop (mine is a Dell Studio). If you have trouble getting it to boot up, unplug all USB devices until after you have installed all updates, even if you have boot from usb disabled, like I did. I started having troubles after installing SP1 and had to unplug my mouse to get it to finish booting, and one of the later updates that was not included in SP1 resolved it. No more issues.

I ran into something like that on a (2008 R2) server awhile back. The RDX removable cartridge backup drive was identified as an internally connected USB device, and it would stall/fail the boot if the server was restarted when a cartridge was inserted - eject the cartridge and it booted just fine. This issue had plagued the (then new) client for years. Disable boot from USB was disabled as you mentioned but it would still fail. What I found was that the seemingly completely unrelated Legacy USB Support was the actual culprit, as disabling it resolved the issue.
1673
Living Room / Re: YouTube finally forces creation of google+ A/C to comment
« Last post by Stoic Joker on February 28, 2014, 03:28 PM »
There have been several times that I've been about to click to reply to something... then it asked me to link a FB account.

 :Thmbsup: - I react to that like a vampire to a garlic flavored wooden cross with a UV light and a pointy end. :D
1674
Screenshot Captor / Re: Black Screen
« Last post by Stoic Joker on February 28, 2014, 02:16 PM »
A quick search on Trusteer Rapport leads me to believe it's probably the culprit.

+1 - After letting the name sink in for a bit I remembered why it sounded so familiar. After freshly deploying a network with brand new equipment. The doctor's machine started crashing randomly in the middle of just about everything. As the doctor - with reasonable credibility - was swearing to having done nothing other than go to their bank's website ... I spent the next week (or so...) with Dell's support troubleshooting a "hardware" problem.

Then there was made the most casual of offhanded comments regarding the bank's "recommended security software" that "had to be installed" (according to the popup window...) ... Before the accounts could be accessed.

Tripple Dipped in Psycho2.jpg

So after said Trusteer Rapport was unceremoniously beaten to death with a hammer, the machine not only suddenly had a miraculous recovery...but has been running flawlessly ever since for some 3 whole years now.

And just for the purpose of belaboring the point. Here is an excerpt from a security article regarding TR from 2010 (I'm sure it's gotten worse):
In these cases, a critical legal question that often arises is whether the thieves compromised the customer’s system or that of the bank’s. I mention this because Trusteer recently built a new component into Rapport called Flashlight, which tries to give partner banks the ability to remotely check to see if their customers’ systems are infected with malicious software. Whether the banks will proactively use that feature to stop online banking fraud is unclear, but such a feature would make it tougher for small and mid-sized businesses that lose money to online bank fraud to claim that their computers weren’t the sole cause of the loss.

Right! So it's quite literally up your ass with a flashlight for the purpose of protecting...who?
1675
Living Room / Re: Knight to queen's bishop 3 - Snowden charged with espionage.
« Last post by Stoic Joker on February 27, 2014, 06:46 AM »
although I would have been happier if the images were bigger

Bottom right button of player makes it full screen - I couldn't see them before that either. ;)
Pages: prev1 ... 62 63 64 65 66 [67] 68 69 70 71 72 ... 246next