Firewall and SBS 2003

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ smallbiz
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Firewall and SBS 2003 Hello, I've been able to get SBS 2003 to work with all my remote access requirements working just fine on several test machines at home. The problem is that at work, I've inherited a Cisco PIX firewall 506e that I have no idea how to configure. This has been in place for several years with no updates installed on it. There is no GUI interface and I'm not at all familiar enough with Cisco firewalls to update or re-configure it to work with SBS 2003. (Previously, we had NT 4, with no remote access other than OWA configured). My question is, does anyone know of a good basic firewall that SBS can configure through the ICW that will work well with SBS using VPN and OWA. I have several users that need to connect through VPN but they have dynamic IP's so I'd like to allow VPN pass-through and use Windows Authentication to allow access. Is this a good solution for SBS 2003? Thanks, John Tag: Firewall and SBS 2003 Tag: 159885
  - 2
    - chip tuning Quer economizar ganhando Potência? Temos chip de conversão gasolina para álcool trazendo uma boa economia mensal. Para conversão a álcool veja exemplo de Economia: Veiculo: Fiat palio 1.0 8v ano 98 com 78.000 km Media feita com 1.500 km rodados entre cidade e estrada Gasolina:1500km consumo (10km/l)=150lts x r$1.85 = r$ 277,50 Álcool: 1500km consumo (7,5km/l) = 200lts x r$ 0,70 = r$ 140,00 Diferença (economia no bolso!) = r$ 137,50 Preço especial apenas para as 100 primeiras vendas. http://www.tmq.net/chipvix/index.html conversão gnv gasolina alcool gás natural potencia turbo aspirados carros automoveis "chip tuning" chip tuning ( Tag: Firewall and SBS 2003 Tag: 159882
  - 3
    - DHCP Updating DNS Hi All Should I allow DHCP to automatically update my DNS records? Everything is on the same box, SBS 2000. I'm no expert on DNS but it appears that the records are not updating/refreshing and after looking through hundreds of web pages, I stumbled upon the DHCP automatically updating DNS records and thought I might give that a try. Some of the errors I have been getting are. Event Type: Failure Audit Event Source: Security Event Category: Directory Service Access Event ID: 565 Date: 09/06/2004 Time: 15:00:06 User: COMP\COMP14$ Computer: COMPSERVER Description: Object Open: Object Server: DS Object Type: computer Object Name: CN=COMP14,CN=Computers,DC=comp,DC=internal New Handle ID: - Operation ID: {0,123849695} Process ID: 284 Primary User Name: COMPSERVER$ Primary Domain: COMP Primary Logon ID: (0x0,0x3E7) Client User Name: COMP14$ Client Domain: COMP Client Logon ID: (0x0,0x761CBB5) Accesses Write Property Privileges - Properties: Create Child Control Access Public Information servicePrincipalName Event Type: Failure Audit Event Source: Security Event Category: Directory Service Access Event ID: 565 Date: 10/06/2004 Time: 08:55:40 User: COMP\COMP17$ Computer: COMPSERVER Description: Object Open: Object Server: DS Object Type: dnsNode Object Name: DC=86,DC=100.168.192.in- addr.arpa,CN=MicrosoftDNS,CN=System,DC=comp,DC=internal New Handle ID: - Operation ID: {0,135282785} Process ID: 284 Primary User Name: COMPSERVER$ Primary Domain: COMP Primary Logon ID: (0x0,0x3E7) Client User Name: COMP17$ Client Domain: COMP Client Logon ID: (0x0,0x8104053) Accesses Write Self Privileges - Properties: Write Property %{00000000-0000-0000-0000-000000000000} --- dnsRecord ACCESS_SYS_SEC dNSTombstoned I havent actually had any issues from users but they are concerning me a little! thanks Mark Tag: Firewall and SBS 2003 Tag: 159875
  - 4
    - Terminal Service crashing Fax Service My client reports that accessing the server though the Terminal Services Client (in remote administration mode) several times a day will crash the fax service. Does anybody know why that would be happening? They are running SBS 2000 with service pack 4 on a Dell PowerEdge 2600 with a Brooktrout TruFax 200 faxboard. They have all the latest critical updates and device drivers. Tag: Firewall and SBS 2003 Tag: 159874
  - 5
    - Adding ISA to a current SBS2000 installation. Please can someone help. I need to add ISA to an existing SBS2000 installation. When I installed the system originally there was no need for ISA as we already have a firewall in place, however I now need to be able to limit net access for some employees and hence I now need to add it. I have found the setup program under disk 2 but is this the correct way to add it and am I likly to bork the server by doing this. If not is there another way of adding it short of a whole reinstall? Thnaks in advance Jez Tag: Firewall and SBS 2003 Tag: 159872
  - 6
    - Install SBS console I recently installed SBS 2000, and apparently the installation did not complete because I do not have the SBS console, and I need to add user licenses. Microsoft says to install the console, rerun setup and then selet consoles from the components option. If I rerun setup all I get is a message saying SBS is unable to upgrade this operating system. I never even get to the componenet reinstall. Help! Jim... Tag: Firewall and SBS 2003 Tag: 159870
  - 7
    - Symantec Corporate Edition 9.0 Antivirus Notification on SBS2000 Folks, With version 8.0 of Symantec Antivirus Corp Edition, System Center never showed any infections on our server. Now with version 9.0 about 4 times a day our server catches a virus (usually Netsky) with it's Real-time protection. Furthermore, I've experimented when sending an email from a client machine and witnessed briefly the email scanner popup on the server! We use our server as a shared drive for our in-house software apps. Our Antivirus and mail servers are on different machines. On a final note, the SBS2000 application log is filled every few days with tonnes of Symantec alerts. Version 8.0 never did this. I'd appreciate any suggestions about where to start. Plastic Man plastic_man1968@yahoo.dot.co.uk (remove spamtrap) Tag: Firewall and SBS 2003 Tag: 159867
  - 8
    - Trend patch for long virus pattern numbering Trend have released patches to enable their products to recognise longer virus pattern numbers (at present they are 3 digit) We have the previous incarnation of Trend suite, i.e. Scanmail 6.1; OSCE 5.5; ServerProtect 5.5 When I went to autoupdate OSCE 5.5 to 5.58, I followed the instructions to temporarily change the update URL, and then change it back (to an almost identical URL to the original). All seemed to go fine, apart from having to reboot to access the HTML management page from the server. The ServerProtect instructions also mention a change to that upate URL (which I did and whice seemed to update fine) but.... there is no mention of changing the URL back to the original or similar. I guess I'll have to contact Trend, but anyone know if this is correct or not? Don't want ServerProtect to not be updating the pattern files... Although I like Trend as a firm (their support is good and well-intentioned) and their products seem reliable and competively priced, their documentation sometimes seems like it has been badly translated from another language... Tag: Firewall and SBS 2003 Tag: 159864
  - 9
    - vpn ip issuing problem Hi I have just reinstalled my sbs2000 using the ip 10.0.0.2/255.255.255.0. I am now trying to vpn to a remote sbs 2000 with ip 192.168.16.2/255.255.255.0. The problem is that when I am connected, I get an address in the range 192.168.16.x from the remote dhcp but the subnet mask is 255.255.255.255!!! I then have problem in logging in to the terminal services on the remote sbs2000. Are these two connected? What can I do to fix this? Thanks Regards Tag: Firewall and SBS 2003 Tag: 159863
  - 10
    - Exchange Performance we have about 2 Gb of email stored in public folder. When we do searching in outlook, it is very slow. any method to improve the performance? Many thanks in advance Tag: Firewall and SBS 2003 Tag: 159860
  - 11
    - Move Pagefile.Sys Hi all. Server -> SBS 2000 I have 600 MB free space on C: drive. All the backups are running just fine. Could I move the PageFile.sys from C: drive to D:, without any problem? When I move it from C: to D:, SBS tells me that there will be no information for dumping. This situation would be temporary, because we are thinking in buying a new server. Thanks a lot in advance. Best regards, Joaquim. Tag: Firewall and SBS 2003 Tag: 159858
  - 12
    - Microsoft Office? Hi there, Does anyone know what the licence issues are with Microsoft Office 2000 OEM edition, on a corporate network? We are looking at buying about 7 more computers to add to our SBS domain, are we allowed to use the OEM version instead of the retail version on these new computers? Thanks in advance Andy C Tag: Firewall and SBS 2003 Tag: 159856
  - 13
    - SBS-2003 Slooow We have 2 x SBS-2003 (one English and one Dutch) on 2 different locations. Both Pentium IV-2.8 GHz and 512 Mb memory. One is for 2 users and the other for 10 users. With ADSL. The problem is that when the servers are just started they work fine, but in a few days sending e-mail is getting slower. Sending a Word document takes normally a few seconds, but after a few days it takes about one minut. Restarting the server solves this problem. Any ideas ? Marty We think that SBS-2003 is slower than SBS-2000, not only with sending e-mail. Can anyone agree with this ? Tag: Firewall and SBS 2003 Tag: 159854
  - 14
    - Security Failure - Is it a Concern??? Hi all Below is an error that I have been getting in my Security log and it appears for several machines when they log on. Is it something to be worried about?? Event Type: Failure Audit Event Source: Security Event Category: Directory Service Access Event ID: 565 Date: 09/06/2004 Time: 15:00:06 User: COMP\COMP14$ Computer: COMPSERVER Description: Object Open: Object Server: DS Object Type: computer Object Name: CN=COMP14,CN=Computers,DC=comp,DC=internal New Handle ID: - Operation ID: {0,123849695} Process ID: 284 Primary User Name: COMPSERVER$ Primary Domain: COMP Primary Logon ID: (0x0,0x3E7) Client User Name: COMP14$ Client Domain: COMP Client Logon ID: (0x0,0x761CBB5) Accesses Write Property Privileges - Properties: Create Child Control Access Public Information servicePrincipalName Thanks for your help Mark Tag: Firewall and SBS 2003 Tag: 159852
  - 15
    - Exchange Log Possible to commit exchange logs without doing backup? Tag: Firewall and SBS 2003 Tag: 159850
  - 16
    - Local Policy & Remote Desktop Connection Local Policy & Remote Desktop Connection Our Network is composed of a Windows 2000 SBS Server and all Workstations are running Windows 2000 OS ... Recently, we have purchased two workstations with Windows XP Professional and using a VPN connection, and then the Remote Desktop Connection the Windows XP Professional users can log to their Desktop with no problems when they are out-of-office ... I have upgraded a couple of workstations from Windows 2000 to Windows XP Professional ... Then tried to log remotely using a VPN connection and access the upgraded workstions using Remote Desktop Connection, but I get the following message when I try to log to the workstation: "The local policy does not permit you to logon interactively" When I logged as a local Administrator to that specific workstation, I found that under Administrative Tools, Local Security Policy, Local Policies, User Rights Assignment, Log on Locally everything is set correctly in terms of the Users and Groups which are allowed to access this machine (Administrator / Users / Everyone ... etc.) I have also checked the second workstation which I have upgraded to Windows XP Professional and the same problem presist ... Also, I have used NTRights.exe to force the "Log on Locally", but no success ... Kindly help me with that issue as I don't want to go through the route of clean installation of the Wondows XP Pro and all the applications ... Thank you in advance for your cooperation ... Reda Hanna Tag: Firewall and SBS 2003 Tag: 159849
  - 17
    - <<Small Biz Server News the week of June 13, 2004 >> Kevin's song of the week..... news://msnews.microsoft.com/u59UrcMUEHA.3332@tk2msftngp13.phx.gbl KB's of interest.... 834141 - FIX: IP address is revealed in the content-location field in the TCP header in IIS 6.0: http://support.microsoft.com/?kbid=834141 843073 - Non-English language reports contain English text after you install Service Pack 2 in ISA Server 2000: http://support.microsoft.com/?kbid=843073 837019 - Description of the Outlook 2003 hotfix package: March 17, 2004: http://support.microsoft.com/?kbid=837019 837365 - You cannot expand the public folders list in Exchange System Manager on a Windows Small Business Server 2003-based computer: http://support.microsoft.com/?kbid=837365 836413 - You receive an "unexpected error occurred" error message when you try to access resources on a Windows-based network from your Macintosh computer: http://support.microsoft.com/?kbid=836413 840685 - An event ID 1000 error message is logged to the application event log when you restart Windows Small Business Server 2003: http://support.microsoft.com/?kbid=840685 <<SMBnation announces Dr. Tom [Mr. ISA] Shinder and Brian Livingston as Keynoters http://www.smbnation.com/ >> Last week two security patches for Microsoft products - one for DirectX, one for CRM applications. Microsoft Security Bulletin MS04-016: Vulnerability in DirectPlay Could Allow Denial of Service (839643): http://www.microsoft.com/technet/security/Bulletin/MS04-016.mspx Microsoft Security Bulletin MS04-017: Vulnerability in Crystal Reports Web Viewer Could Allow Information Disclosure and Denial of Service (842689): http://www.microsoft.com/technet/security/Bulletin/MS04-017.mspx No patch for this one - take mediation at this time.... (1) HIGH: Internet Explorer Multiple VulnerabilitiesAffected: IE 6.0 and 6.0 SP1 Description: Fully patched versions of Internet Explorer reportedlycontain the following vulnerabilities that are being exploited in thewild to compromise client systems. (a) Internet Explorer successfullyprocesses a webserver response that redirects the location of a resourceto a file on the client system. Note that this file can be accessed inthe security context of the "Local Computer Zone". (b) Internet Explorercontains a cross-domain vulnerability that can be triggered whenhandling a frame, and a "modal dialog box" that is invoked from theframe. These vulnerabilities can be exploited by a malicious website toexecute arbitrary code on a client system. The technical details and theexploits have been publicly posted.Status: Microsoft not confirmed, no patches available.Council Site Actions: Most of the reporting council sites are awaitingthe vendor patches. Some sites plan to roll out the patch during thenormal system update cycle and others plan to expedite the rollout.Several sites have already notified their desktop support teams to beaware of the problem.Referencesosting by Rafel Ivgi http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0031.html Analysis by Jelmer CERT Advisoryhttp://www.kb.cert.org/vuls/id/713878 Modal Dialog Box Referencehttp://msdn.microsoft.com/library/default.asp?url=/workshop/author/dhtml/reference/methods/showmodaldialog.asp SecurityFocus BIDshttp://www.securityfocus.com/bid/10473 http://www.securityfocus.com/bid/10472 UPDATE - YES IT WORKS JUST FINE ON XP WITH IE6 and even works like a champ on XP sp2] So I just kicked my workstation at the office and the workstation at home's Internet explorer to ?high security? settings. What that means is that I've shut down the scripting and active X to be automatically blocked at all times. Then if I have a web site that I really trust and know if an OK site, I add it to ?my trusted site? list. Now this normally is a pain and a bother.... tools, options, security, internet zone, add sites, blah blah... way way way too cumbersome. Well not anymore! My MVP buddies showed me this gem -- http://www.microsoft.com/windows/ie/previous/webaccess/pwrtwks.mspx This little IE addition adds a quick shortcut under ?Tools? for ?add to trusted sites?. I just did this to a couple of people at the office and here at home and showed them all they have to do when they get to a web site that they really ?need? to have working [like a business site] they can add the site to the trusted zone and hit ?refresh? and voila. Very nice. Very much safer out here. I've also adjusted my "trusted zone" to not be "low" and instead is now "medium" so it prompts me instead of automatically scripting. And add sites to the trusted zone SPARINGLY. **************************************************************** (2) MODERATE: Oracle E-Business Suite SQL Injection VulnerabilitiesAffected: Oracle E-Business Suite versions 11i, 11.5.1 to 11.5.8Oracle Applications version 11.0Description: Oracle E-Business suite offers a set of applications toautomate business processes such as marketing, customer services,supply-chain management etc. The pertinent business information istypically stored in a single database, and accessed via the webfront-end offered by the E-Business suite applications. This suitecontains multiple SQL injection vulnerabilities. These flaws can beexploited via malicious HTTP requests to execute arbitrary SQLstatements and procedures against the back-end database, possiblyresulting in the compromise of the entire database. Note that theInternet facing web servers hosting the E-Business suite applicationsface the maximum risk. Very limited technical details regarding how toexploit the flaws have been posted.Status: Vendor confirmed, updates available.Council Site Actions: Only one of the reporting council sites is usingthe affected software; however their Oracle servers are internal facingonly. They plan to install the patches after regression testing.Referencesosting by Integrigy Securityhttp://archives.neohapsis.com/archives/vulnwatch/2004-q2/0032.html Oracle Security Advisoryhttp://otn.oracle.com/deploy/security/pdf/2004alert67.pdf Oracle E-Business Suite Homepagehttp://www.oracle.com/applications/index.html SecurityFocus BIDhttp://www.securityfocus.com/bid/10465 California identity theft law remains low-key Nearly a year after California's landmark SB 1386 identity theft law went into effect, there has been none of the troublesome litigation that had been predicted to come in its wake. But the law has raised overall corporate awareness of the need to have strong privacy protections in place, legal experts said last week. http://computerworld.com/securitytopics/security/privacy/story/0,10801,93667,00.htmlPreventing identity theft focus of regional meetinghttp://www.usatoday.com/tech/news/2004-06-08-id-theft_x.htm Security gaps in Dutch airline and government wireless networksDuring its special on computer attacks on June 3, the Dutch current-affairs programme, Zembla, demonstrated to television viewers just how easy it is to break into wi-fi networks and gain access to confidential information. The networks found to be lacking in security were operated by the Dutch airline, KLM, and the Ministry for Public Works and Water Management (Rijkswaterstaat). http://www.dmeurope.com/default.asp?ArticleID=1984 GAO points to airport security holes http://www.fcw.com/fcw/articles/2004/0607/web-gaotsa-06-08-04.asp - - - - - - - - - - Russia and China 'behind current spam deluge' As hardcore criminals step up their spamming, experts believe that nine out of 10 of all emails may soon be unsolicited junk. Organised criminals based in Russia are fuelling the rise in the amount of spam sent over the Internet, according to a leading opponent of junk mail. http://news.zdnet.co.uk/internet/security/0,39020375,39157120,00.htm - - - - - - - - - - Woman fights for new domain to protect children Three years ago, Mary Conyers was shocked and horrified when her granddaughter accidentally pulled up an adult website on the Internet. ?She finished her homework and was going to look at Teen magazine and bam! there it was,? Conyers, the founder of Protect Every Child, said. A simple spelling error sent Conyers' granddaughter to this pornographic website featuring teenagers. At that moment, Conyers made a promise to her granddaughter that she's still fighting to keep. http://rdu.news14.com/content/headlines/?ArID=48769&SecID=2 - - - - - - - - - - Apple posts second Mac OS X vuln patch Update Apple has posted a second software update intended to fix a vulnerability that exploits the way Mac OS X handles URI links. We installed the update, Security Update 2004-06-07, on a Mac OS X 10.3.4 machine. After restarting the machine, we went straight to Unsanity's web site, the location of a pair of web pages that test the URI vulnerability. Neither tests was blocked by the update, details of which can be found here. http://www.wired.com/news/mac/0,2125,63756,00.html - - - - - - - - - - Microsoft releases monthly security patches Microsoft Corp. released software updates for versions of Windows XP and Windows Server 2003 and warned customers about a security vulnerability in a Windows component called IDirectPlay4, which is used to support multiplayer network games. http://security.itworld.com/4940/040608mssecurity/page_1.html http://zdnet.com.com/2100-1105-5228887.html http://news.com.com/Microsoft+patches+a+pair+of+flaws/2100-1002_3-5228887.html http://computerworld.com/securitytopics/security/story/0,10801,93728,00.html - - - - - - - - - - Symantec: New Virus Deletes All Files Security The virus that "deletes your whole hard drive" has been a staple in dozens of e-mail hoaxes that have circulated the Net in recent years. In the real world, such viruses are few and far between. According to Symantec, the new VBS.Pub is just such a beast. http://news.netcraft.com/archives/2004/06/08/symantec_new_virus_deletes_all_files.html Another Trojan on the attack http://news.zdnet.co.uk/internet/security/0,39020375,39157002,00.htm - - - - - - - - - - Cisco picks Trend to fight network worms Cisco and Trend Micro yesterday extended an existing security alliance with a deal to combine their respective technologies in the fight against network worms and computer viruses. Trend is among three AV companies who signed up to Cisco's Network Admission Control (NAC) program last year, a scheme designed to curtail the spread of computer worms across internal networks. http://www.theregister.co.uk/2004/06/08/cisco_trend_fight_worms/ http://www.newsfactor.com/story.xhtml?story_title=Cisco-Picks-Trend-To-Fight-Worms&story_id=24489 - - - - - - - - - - Intrusion-prevention start-up touts 'memory firewall' The growing speed at which malicious hackers can exploit new vulnerabilities is creating a need for intrusion-prevention technologies capable of proactively detecting and blocking attacks even before software fixes become available for them. With that need in mind, Determina Inc., a Redwood City, Calif.-based start-up being launched today, is introducing new technology that it claims offers a better way to head off attacks than other intrusion-prevention products. http://computerworld.com/securitytopics/security/story/0,10801,93701,00.html - - - - - - - - - - Michigan man pleads guilty to wireless hack into stores A Michigan man pleaded guilty on Friday to four counts of wire fraud and unauthorized access to a computer after he and two accomplices used a vulnerable wireless network at a Lowe's Companies Inc. store in Michigan to attempt to steal credit card numbers from the company's main computer systems in North Carolina and other Lowe's stores in the U.S. Brian Salcedo could face up to 18 years in prison for the crime, which the government claims could have caused more than $2.5 million in damages. http://computerworld.com/securitytopics/security/cybercrime/story/0,10801,93708,00.html http://www.theregister.co.uk/2004/06/07/us_wardriver_guilty_plea/ - - - - - - - - - - New virus cracks credit cards A new computer virus "Korgo" raging now in Europe, Asia and North America decodes numbers of credit cards used in online systems, an Austrian Internet service provider "Vienna Online" informed. Therein virus looks like its predecessor "Sasser" worm, which incurred huge damage to companies and individuals, ISP experts said. http://www.crime-research.org/news/07.06.2004/409/ - - - - - - - - - - UK law firms fall down on security One in 10 UK legal firms has suffered an IT security failure and one in 20 has lost a client because of it, a report claims. Research by NOP, commissioned by security VAR Evolution Systems, also found worryingly high levels of IT insecurity among the 100 legal practitioners it surveyed. http://www.vnunet.com/news/1155655 - - - - - - - - - Virus writers deploy bulk mail software Hackers have used spamming software to distribute thousands of copies of a new Trojan. Email filtering firm MessageLabs alone has intercepted more than 4,000 copies of the Demonize-T Trojan over the last 24 hours. Demonize-T is a multi-stage Trojan that uses an object data exploit in Internet Explorer (patch here) to download and execute an encoded visual basic script from a website. http://www.theregister.co.uk/2004/06/07/demonize_trojan/ - - - - - - - - - - CPU-based security for Windows XP, Red Hat Linux coming Microsoft Windows XP Service Pack 2 and the next version of Red Hat Enterprise Linux 3 will support new CPU-based security protections designed to stop incoming malicious executable code from being triggered. http://computerworld.com/securitytopics/security/story/0,10801,93712,00.html - - - - - - - - - - NIST keeps publishing One way to quantify the growth in importance of computer security work is to count the pages of security guidelines published by the National Institute of Standards and Technology in the past year. The total is 1,200 pages, said Ed Roback, chief of the Computer Security Division. Speaking June 4 in Washington, D.C., at the E-Gov Institute's Annual Government Solutions Forum, Roback said documents on topics as unremarkable sounding as security categorization often generate strong responses. http://www.fcw.com/fcw/articles/2004/0607/web-nist-06-07-04.asp - - - - - - - - - - Data theft detective work begins at the office Intellectual property and other sensitive consumer data are seeping out the doors of corporations at an alarming rate -- and the culprits aren't necessarily a cracker with a broadband connection holed up in his mom's basement, or a wiseguy who's Dumpster diving. Users nestled inside the enterprise firewall with an abundance of unmanaged privileges are most often to blame, according to a soon-to-be-released study conducted by the director of an identity theft program at Michigan State University. http://searchsecurity.techtarget.com/originalContent/0,289142,sid14_gci968920,00.html Passwords can sit on hard disks for years http://www.newscientist.com/news/news.jsp?id=ns99995064 RSA focuses anew on the password problem http://computerworld.com/securitytopics/security/story/0,10801,93711,00.html - - - - - - - - - - The Deadly Duo: Spam and Viruses A small nugget of good news lies buried among the mountains of unsolicited commercial e-mail: the spam volume held steady from April to May, according to two leading e-mail processing firms. Brightmail's Probe Network found that spam leveled at 64 percent, while Postini measured the monthly volume unchanged at 78 percent. According to Brightmail's assessments, the last time the spam volume was unchanged was August 2003 when it maintained a 50 percent level. http://www.internetnews.com/stats/article.php/3364421 - - - - - - - - - - Where, Oh Where Is Windows XP SP2?: http://www.microsoft-watch.com/article2/0,1995,1611161,00.asp RC2 of XP expected any day... stay tuned.... -- http://www.sbslinks.com/really.htm Tag: Firewall and SBS 2003 Tag: 159847
  - 18
    - User Policy Hi I have SBS 2000 Domain controller with windows 2000 pro and windows xp pro clients. I have assigned a group policy for all the users not to access the network properties i.e. the users cannot change the ip address etc. in their systems this is working in windows 2000 clients but in windows xp clients this is not working and in the event log i am getting the error. The error is: Event Type: Error Event Source: Userenv Event Category: None Event ID: 1000 User: NT AUTHORITY\SYSTEM Computer: SLDN220IN Description: The Group Policy client-side extension Security was passed flags (17) and returned a failure status code of (1332). what could be the problem. Please some one help me on this query Thanks Vinod Tag: Firewall and SBS 2003 Tag: 159846
  - 19
    - Remote Access I used to have Remote access to my SBS 2000. But since I installed the service pack 1 no one can log on to the server remotely? Can some one please help me to fix this problem? Thanks Tag: Firewall and SBS 2003 Tag: 159844
  - 20
    - cant connect remotely to sbs 2k3 Hello, i recently installed small business server at work, and I am trying the remote Connect to Small Business Server. I keep getting this Unable to establish the VPN connection. The VPN server may be unreachable, or security parameters may not be configured properly for this connection. (Error 800) For customized troubleshooting information for this connection, click Help. We have a linksys router and I read at the ms site to update the firmware, so I did it, and still no luck. I also opened the port for telnet, but im not sure what port sbs uses. If anyone can help I will appreciate it. Thanks John Tag: Firewall and SBS 2003 Tag: 159842
  - 21
    - SBS20003 Upgrade Problem Have to following issues with SBS Upgrade and need some guidance. 1. The TO DO list contains NO items 2. The POP3 is no longer working and there are NO options in the POP3 Connector feature 3. The CIAEMW wizard asks for an SSL certificate for our server but it is not a web server. I have out in the dnsalias name we have attacyhed to the router IP but it is failing in the Network and Firewall configuration (though the secire website works). Have not been able to set up email at all externally like SBS2K. Internal everything works. Lost here and everyone is back at work tomorrow...HELP!! TIA Tag: Firewall and SBS 2003 Tag: 159831
  - 22
    - Server Crashing...help Our server started crashing last night with the blue screen of death. I don't really understand why. The server hasn't had any changes to it with software or hardware, and has been running flawlessly before this. When I reboot the server after it crashes, the server is not finding he harddrives. I have a RAID card that the harddrives are connected to. No matter how many times I reboot the server, it doesn't find them. I've found that I have to shut the server off, and then turn it back on in order for it to find the drives. Could it be a problem with the hardware RAID card? The only other odd thing that I've seen in the event log are some errors. Here are some of them: The Closed Caption Decoder service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. The previous system shutdown at 4:08:55 AM on 6/13/2004 was unexpected. Then, when the server comes back up, it has these errors: The IPSEC driver service failed to start due to the following error: Insufficient system resources exist to complete the requested service. The BDA MPE Filter service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. The Microsoft Streaming Tee/Sink-to-Sink Converter service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. The NABTS/FEC VBI Codec service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. The BDA Slip De-Framer service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. The BDA IPSink service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. The World Standard Teletext Codec service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. Any ideas? Tag: Firewall and SBS 2003 Tag: 159817
  - 23
    - Remote Desktop Hi All, Have the following situation. Am able to VPN from workstation behind a SBS 2000 Server to another SBS 2000 Server. However, am unable to connect via remote desktop. The error is that the remote computer cannot be found. Saying that I am unable to ping the destination server either. However I am able to successfully do this when I use a connection that is not behind the SBS Server. Setup is as follows dest: router, isa, 2 nics & static ip The setup I am trying to connect from behind router, isa, 2 nic & dynamic ip. I have also tested by removing the router at the end we are trying to connect from & still the same problem. (appears to related to the SBS at the end we are trying to connect from) Any idea's? Thanks Adam Tag: Firewall and SBS 2003 Tag: 159811
  - 24
    - Remote Desktop Hi All, Have the following situation. Am able to VPN from workstation behind a SBS 2000 Server to another SBS 2000 Server. However, am unable to connect via remote desktop. The error is that the remote computer cannot be found. Saying that I am unable to ping the destination server either. However I am able to successfully do this when I use a connection that is not behind the SBS Server. Setup is as follows dest: router, isa, 2 nics & static ip The setup I am trying to connect from behind router, isa, 2 nic & dynamic ip. I have also tested by removing the router at the end we are trying to connect from & still the same problem. (appears to related to the SBS at the end we are trying to connect from) Any idea's? Thanks Adam Tag: Firewall and SBS 2003 Tag: 159810
  - 25
    - Song of the Week - June 12, 2003 Random thoughts before the song ... I'm writing this after spending most of the day driving around the snow capped mountains west of Colorado Springs. So many wonderful scenes of the grandeur of the world we live in. You could just imagine the cowboys on horseback, and the wagons pulling families from the east to the west. Tomorrow I'll be heading back east to home in Florida. While driving, I was thinking of the impact that Ronald Reagan had on the world we live in. Worldwide sentiments seem to echo the same thoughts. I remember growing up in an era where we had regularly scheduled bomb shelter practices. We now have a different enemy. Finally it's my youngest daughter's birthday tomorrow. So I dedicate this song to all those pioneers in eras past, present and future ... Wind Beneath My Wings It must have been cold there in the '50s, (Cold War) to never know freedom from your fears. You were content to hold your ground, that's your way, you always were ready to shed a tear. So we were the ones who lived in freedom, while you were the one that took the blame. A beautiful face without a name -- for so long, a beautiful smile to hide the pain. Chorus Did you ever know that you're my hero, and ev'rything I would like to be? I can fly higher than an eagle, 'cause you are the wind beneath my wings. It might have appeared to go unnoticed, but because of you the world has changed. I want you to know I know the truth, of course I know it, Without you the wall might still remain (Berlin Wall) Chorus Did you ever know that you're my hero, and ev'rything I would like to be? I can fly higher than an eagle, 'cause you are the wind beneath my wings. Fly, fly, fly away, you let me fly so high. Oh, fly, fly, so high against the sky, so high I almost touch the sky. Thank you, thank you, thank God for you, the wind beneath my wings. -- Kevin Weilbacher [SBS-MVP] "The days pass by so quickly now, the nights are seldom long" Tag: Firewall and SBS 2003 Tag: 159807
- Next
  - 1
    - Terminal Services Client Hi All, I have 2 issues, but I'll share only one at a time. SBS2k, dual homed, TS/App mode, working fine. I'm trying to use my laptop to connect to SBS2k/TS, via my MSN(as an ISP only) dialup, but the signal doesn't appear to make to my SBS box. I get "T. S. Client Disconnected", "Because of a network error, the session will be disconnected." error. When I disconnect the phone line, and try to connect again, I get the same message ! If I VPN connect first, then TS connection will work ! I'm sure the issue is on the client side but I'm stumped. I've spent 2 days researching this and haven't found anyone with this issue. Any ideas ? Thanks. Tag: Firewall and SBS 2003 Tag: 159806
  - 2
    - Printing locally from ts - again Hi I am really stump on this problem. We connect remotely to our ts at the head office which is part of a sbs2000 domain. There is an app on the ts that we would like to print reports off to our hp all in one PSC 750 printer connected locally via USB. The problem is that ts does not know about this printer and the printer does not appear in the list of printers available to ts. I have tried to remotely install printer driver on the ts but as the printer is not accessible to ts either locally or via LAN, the printer setup does not complete itself. I have also tried remote desktop connection by ticking 'printers' under "connect to which local resources" option but that hasn't helped either. Could someone please give me step by step instructions to get my local printer working with the remote ts? Thanks Regards Tag: Firewall and SBS 2003 Tag: 159804
  - 3
    - SBS 2003 change IP address problems Hi, I wonder if anyone can help me out, I have had to change the IP address for a recent SBS 200 retail edition installation (the server was 192.168.0.6 but now must be 10.0.0.50). I changed the tcip to the correct setting and I think scope is ok but I cannot access the intranet site nor am I convinced the rest of it is operating correctly. Can anyone help or must I reinstall the software again :-( rgds Kevin Tag: Firewall and SBS 2003 Tag: 159801
  - 4
    - Group Policy for windows xp not working Hi I have SBS 2000 Domain controller with windows 2000 pro and windows xp pro clients. I have assigned a group policy for all the users not to access the network properties i.e. the users cannot change the ip address etc. in their systems this is working in windows 2000 clients but in windows xp clients this is not working and in the event log i am getting the error. The error is: Event Type: Error Event Source: Userenv Event Category: None Event ID: 1000 User: NT AUTHORITY\SYSTEM Computer: SLDN220IN Description: The Group Policy client-side extension Security was passed flags (17) and returned a failure status code of (1332). what could be the problem. Please some one help me on this query Thanks Vinod Tag: Firewall and SBS 2003 Tag: 159794
  - 5
    - Group Policy Hi I have SBS2000 with windows 2000 and xp clients, I have set the group policy rights so that all the users in the domain should not be able to modify the network properties of their system. This is working with windows 2000 but in the win xp system this is not taking place i.e i am still able to change the network settings like changing the ip address. I am not able to get the problem and I am new to the group policy. Please some one help me on this issue I have to implement this on our server soon because some of the users are changing the Ip adress of their system to server ip address and the server will be down Thanks Vinod Tag: Firewall and SBS 2003 Tag: 159784
  - 6
    - Alternate ip Hi Is there an ip address other than from the 192.168.x.x range that I can use for sbs2000? At what stage of installation do I enter this different from default address? Thanks Regards Tag: Firewall and SBS 2003 Tag: 159783
  - 7
    - Pop3 connector Hi, I'm hoping that someone will be able to point me in some direction. I have 2 test servers one with SBS2000 and the other with SBS2003 Both have ISA server installed and use the same router (at different times) I have set up the POP3 connector on both to access my email from my ISP. SBS 2003 works fine - downloads the emails and forwards the to the appropriate mailbox SBS 2000 I get the error 12050 and 12052 - doesn't connect to my ISP I've checked the obvious username and password, as suggest by Ms Knowledge Base but nothing. Please help. Graeme. Tag: Firewall and SBS 2003 Tag: 159778
  - 8
    - IISReset command line options Hi, A quick question about the ciisreset command. KB202013 http://support.microsoft.com/default.aspx?scid=kb;en-us;202013 mentions that "The default behavior if no options are specified is to stop and restart the Web services on the local computer." and with the "/restart" option for "stops, and then restarts all running Internet services." I don't understand the difference. Is there a different to run IISReset without any option and with the "/restart" option? Thanks Tag: Firewall and SBS 2003 Tag: 159776
  - 9
    - imap connection refused I was recently asked to help fix up an SBS 2k box that had some troubles. I didn't do too much on the server, although I did run ICW. After I left, all was working well. Then yesterday I went back, and ended up re-running ICW again. After I ran it, I was told IMAP was no longer working. I noted first of all there was no imap filter in ISA. I added one but then still got a connection refused message. I try to telnet to port 143 locally from the server, and get * BYE Connection refused I restarted the exchange imap service, same problem. Rebooted, same troubles. Any idea where the issue is? My only hint, perhaps, is that since there was no packet filter at all in ISA for port 143, which is interesting, since it used to work for them. I have no idea... Thanks, -Josh Tag: Firewall and SBS 2003 Tag: 159774
  - 10
    - Group Policy Hi I have SBS2000 domain controller and all the users loging on to this domain I want to set the rights for all the users in the domain so that they cannot edit network properties i.e the users should not be able to change the IP address in their systems I dont know how to configure the group policy for this Please some one help me to set the permissions for the user Thanks Vinod Tag: Firewall and SBS 2003 Tag: 159760
  - 11
    - Terminal server licenses Hi all, I am having a problem with a particular user trying to log into our SBS2000 network. I have 2 servers (1 SBS2K and 1 W2K Server in TS APP mode). All my remote users can successfully create a VPN into our network and use Remote Desktop Connection on their XP Pro workstations to access our TS machine except for one employee who can successfully create the VPN but cannot log into the TS. The error I receive in the TS's log is 'The terminal server cannot issue a client license'. He is the only one that gets this error out of all the remote users. His account is setup no differently from any other remote user. Can anyone offer any assistance. He is running XP Pro from his home over a cable modem. Other employees have the same service and have no problem. TR Tag: Firewall and SBS 2003 Tag: 159759
  - 12
    - Authentication time-out in SBS2K RAS connection RAS connections fail to connect from various clients/modems with Event ID 20049: The user connected to port COM4 has been disconnected because the authentication process did not complete within the required amount of time. The connections work fine from ISDN T/A's to the T/A on COM3, but analogue clients fail to the analogue modem on COM4 (above)- a Zoom 56K V92/V90 PCI modem The only client that will work is connecting via mobile phone (at 9600 bps)! It looks like a timing problem as the RD light on the COM4 modem seems to flash slightly before CD comes up I've tried changing FIFO buffers, port speeds etc but no luck ! Anyone got any other ideas? Tag: Firewall and SBS 2003 Tag: 159758
  - 13
    - SBS2003 Modem failing to disconnect Having migrated from a previous version of SBS to SBS2003 we are suffering from the fact that our serial modem will not disconnect when idle. There is no problem with the process from the original connection. But as soon as an on- demand (browser connection) or POP3 mail box check is initiated there appears to be no way of disconnecting the service other than manual intervention. No exactly what is need really. Anybody seen this or got any ideas? Tag: Firewall and SBS 2003 Tag: 159757
  - 14
    - Trend virus wall SMB I am trying to get ISA to send to an upstream proxy which is trend viruswall, I have gone into routing and changed the setting in there to forward to the address of viruswall but then I lose all external web access. If I don't use the upstream proxy method all my ISA settings i.e. blocked sites and time restrictions for certain users or groups are innactive and everyone has full internet access. Any ideas? keith Tag: Firewall and SBS 2003 Tag: 159755
  - 15
    - Java and SBS2000 I am having problems getting java to work and was wondering that other steps I can possible take. I have downloaded the lasest java and allow made sure ie had java enabled but I still cannot get the applets to run. Any ideas? Eddie Tag: Firewall and SBS 2003 Tag: 159750
  - 16
    - pop3 connector install failed I have ru the SBS2000 setup wizard (on an already configured server) and tried to install the pop3 connector as it had never been installed before. It asked for the CD3 and installed all files ok from it but at the end of it, it said the pop3 connector install failed with a big red circle with a wuite X in it. Any clues why? Tag: Firewall and SBS 2003 Tag: 159746
  - 17
    - SBS 2k and Exchange 2003 We currently have SBS 2000 with Exchange and have setup an additional domain controller with Windows 2000 in a remote site. We want to buy Exchange 2003 to install on our new remote DC so that we can move some of the mailboxes so that our remote users get faster access. Is this going to be possible or would we need to buy Exchange 2000? In other words, is Exchange 2003 compatible with Exchange 2000? Thanks in advance Dan Williams. Tag: Firewall and SBS 2003 Tag: 159744
  - 18
    - Disable Folder Move / Change / Rename I work for a very small engineering company, and can use a mouse, so I am the default IT department. This is probably a simple fix, but I can't figure out how to do it. Any help appreciated -------------------------------------------------------------------------------- On my server, I have a project drive with project folders. The folders are named the project numbers, like this 04032. 04032. 04032. 04033. 04034. And so on. What happens is, someone accidentaly drags a folder into another folder, and then some days or weeks later, that project appears to be gone forever and I have to serach for it and replace it What I want to do is set the permissions so that users have full access to the folder contents - including file creation, modification and deletion - but can't change, move delete or rename the project folder (above). So far, any time I try to do that, they can no longer write to the folder Thanks for any insight Tag: Firewall and SBS 2003 Tag: 159743
  - 19
    - SQL Agent Hi, Just recently installed Sophos SBE Antivirus on my SBS2000 and it decided to go pairshaped. However i decided to uninstall the program and try again but it wont let me uninstall the SQL Agent giving me errors of 11729,11725. Cant reinstall until i have deleted the Sophos directory and cant delete the directory because the files are still in use??????????????. Any ideas. TIM Tag: Firewall and SBS 2003 Tag: 159742
  - 20
    - Printing Permissions Problem Hi all A really strange one! A user gets an error message when printing from the sage application "the calling application refused the spooler request" Ive tracked it down to a windows log on problem in that if I log onto her machine and she logs onto Sage, she can print Ok. I have checked her permissions and they are the same as everybody elses. She can print from any other application ok. The only way I can get her to be able to print is by giving her Administrator rights which I don't want to do for too long! Any ideas?? I have recreated her local profile, reimported her machine, I'm clean out of ideas!! She is a new user and was only set up this week using the new user wizard although another user who has been on the system for a while also has the same problem but doesn't need to print from sage as much. Thanks for any help! Mark Tag: Firewall and SBS 2003 Tag: 159740
  - 21
    - ISA in cache mode This is a multi-part message in MIME format. ------=_NextPart_000_0037_01C44F98.E7348A60 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I need to gain some control and monitor internet usage in a SBS2000 50 = user environment. The company pays for internet usage on a per KB = downloaded through its ISP's SAS70 compliant firewall. The company also = uses proprietary client software to connect to a remote server using = http protocol over the same frame relay circuit to the ISP. So all = routes serve two purposes and cannot be segregated. It is also known = that the proprietary client software will not function properly through = a proxy and will not be supported to do so.=20 I was hoping that it might be possible to run ISA in cache mode to = possibly lower the total internet usage by caching commonly used = websites and also gain some control and reporting capabilities. Can ISA = be run in cache mode without the proxy and also control or restrict = internet usage per user or computer and use the web usage reporting = features of ISA? Thanks, Bob Genestet ------=_NextPart_000_0037_01C44F98.E7348A60 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Diso-8859-1"> <META content=3D"MSHTML 6.00.2800.1400" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D#ffffff> <DIV><FONT face=3DArial size=3D2>I need to gain some control and monitor = internet=20 usage in a SBS2000 50 user environment. The company pays for internet = usage on a=20 per KB downloaded through its ISP's SAS70 compliant = firewall. The=20 company also uses proprietary client software to connect to a remote = server=20 using http protocol over the same frame relay circuit to the ISP. = So all=20 routes serve two purposes and cannot be segregated. It is also known = that the=20 proprietary client software will not function properly through = a proxy=20 and will not be supported to do so. </FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>I was hoping that it might be = possible to run=20 ISA in cache mode to possibly lower the total internet usage by caching = commonly=20 used websites and also gain some control and reporting capabilities. Can = ISA be=20 run in cache mode without the proxy and also control or restrict = internet=20 usage per user or computer and use the web usage reporting = features of=20 ISA?</FONT><FONT face=3DArial size=3D2></DIV> <DIV> </DIV> <DIV>Thanks,<BR>Bob Genestet</FONT></DIV></BODY></HTML> ------=_NextPart_000_0037_01C44F98.E7348A60-- Tag: Firewall and SBS 2003 Tag: 159739
  - 22
    - Odd behaviour sbs2000 w/exchange and XP Pro w/Office 2003 time issue ... What a strange thing that is happening. We have an XP Pro box in our office running Office 2003. Everything seems to be working fine, however, when the XP Pro machine sends out a meeting request, it is always an hour ahead. I have checked ALL clock settings and anything i could "find" in Outlook 2003 regarding time. Has anyone seen this behaviour before? email: techsupport_at_shadowbox_dot_ca Travis Kwekkeboom Tag: Firewall and SBS 2003 Tag: 159738
  - 23
    - Hard Disk Upgrade Hi, Does anybody know how to copy the main system partition from a small hard drive to a new larger hard drive. Thanks Tag: Firewall and SBS 2003 Tag: 159737
  - 24
    - Messenger Hi we have SBS2000 with a mix of XP pro, 2K & 98 clients. We want to send quick messages over the lan. As we all know winpop only works on 9x so that's no good. We have been using a freeware called NTsend which is just a GUI for net send on the XP & 2k boxes but for some reason not all clients receive the messages. Is there a better solution for in hose messaging i.e. instant messaging, if so how is that set up on the server and on the clients? Thanx Tag: Firewall and SBS 2003 Tag: 159733
  - 25
    - ISA Server detected an all port scan attack From my own server ip address... I seem to attack myself 10 times a day What would cause this? As it didnt happen till this week Thanks Tag: Firewall and SBS 2003 Tag: 159731

Does anyone know of a good firewall that can be configured through SBS 2003 ICW? I have a D-Link router on my home network and SBS 2003 says that it can configure it automatically, but then generates an error when trying to do so. Configuring it manually, I can get it to work just fine, but not sure if I have it configured in the most secure manner. This is my test server.

At work, we have a Cisco 506e that SBS 2003 ICW says it can configure automaticaly, but then also generates an error. I do not know how to configure this firewall manually, though. This firewall, I inherited and I know it has not been updated in a couple years with OS releases and we don't even have a GUI interface to configure it. I'm sure there are newer firewalls on the market that provide just as secure protection, are much easier to configure and are probably configurable by SBS 2003 itself. Has anyone had success with any?

I'm a networking novice. Just looking for decent intrusion protection, vpn and owa access.

Thanks,

John

Top