aleroot's questions

I'm experiencing a strange problem with a ZyWall USG 100 Firewall, that I can't solve with leaving the firewall enabled on the ZyWall.

I have the main network subnet that is 192.40.192.0/24(LAN1 on the ZyWall) and an access point that allows connection to this network to wifi clients with a main router firewall on IP 192.40.192.1 (ZyWall USG 100) that serves as DHCP client too. Then I have another subnet 192.168.100.0/24 that is behind another router(IP : 192.40.192.254) that is a Linux server. The problem is that if I want to access to a web server on the secondary subnet, for example 192.168.100.200 the HTTP connection is blocked by the ZyWall Firewall to wifi clients .

If I disable the Firewall on the Zywall or if I add a static route to a wifi client, like this :

sudo route -n add 192.168.100.0/24 192.40.192.254

everything works correctly as it works correctly too with a client directly connected to an Ethernet LAN port.

I don't understand why the firewall seems to block the connection since I have a rule like this that should allows all the connections :

Is there something am I missing here in the configuration ? Do I need to add some rule to the Firewall ?

Why it happens to wi-fi clients only ? What could it be the reason ?

I have an openVPN Server that share a network in tun mode, the main network that it share is on the class : 192.40.190.0/24 .

The config file that I have on the Server is like the following :

local 192.40.190.8               ## ip/hostname of server
port 1194                        ## default openvpn port
proto udp
dev tun
server 10.8.0.0 255.255.255.0

#client configuration
client-to-client
client-config-dir /etc/openvpn/clients
persist-key
persist-tun
float

Now I have attached the server to another network card (eth1) where it is connected to another network 192.168.200.0/24 where there is a another gateway(192.168.200.15) to others remote networks 192.168.2.0/24, 192.168.3.0/24, ecc ...

The VPN server that have another IP address(192.168.200.99) on the second NIC, can reach all the others networks because it have a route table that allow it to connect all others networks through 192.168.200.15 gateway.

The question is : How can let the clients of the main VPN server (192.40.190.8, 192.168.200.99 ) connects to the 192.168.200.0/24 subnet and to the other networks behind the 192.168.200.15 gateway ?

I have a SQL Server 2005 Database on a dedicated partition, during the time the database grown and now it have occupied all the space on the partition, now the problem is that the only operation I can do on the database is detach, but i want to remove old data from some tables to save space ...

How can I remove old data from the database if SQL Server interface doesn't allow to run queries on it ?

I want to get your idea on bonding two NICS on a server that is connected to a single subnet with only one IP address in a Gigabit LAN enviroment.

What is the pros and cons of having two teamed Gibit/s NIC card against having only one single NIC card ?

The performance are really doubled ? Can i really have a new bounded interface that work at 2 Gibit/s ? What about load balancing ?

I have an installation of Windows Server 2008 running IIS 6 with a website listening on port 8080, even though I have moved the website to listen on 8080, port 80 is still kept in use by IIS (for truth by the kernel process : System - ProcId : 4).

I want to let another process listen on port 80 without uninstalling or disabling IIS, I want to keep IIS listening on port 8080 and another service on port 80, is there a way to do it?

I saw another similar thread here on serverfault but the solution (using httpcfg.exe delete iplisten -i 0.0.0.0:80 ) can work only in 2003 because in 2008 the utility httpcfg.exe doesn't exist and it seems that it cannot be installed ...

Does anyone have a solution to get rid of the kernel listening on port 80 in Windows Server 2008 with IIS running?

I have a windows Server 2008 that need to automatically autologin on startup, i've added this registry key :

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\DefaultUserName String Administrator
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\DefaultPassword String PASSWORD
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\AutoAdminLogon DWORD 1

but in the key DefaultPassword is stored the Administrator password and a normal user on the server can view this password, i've tried to create a policy on the key Winlogon of the registry but if i deny the permission to view this key to a normal user, the user can't login, receive permission denied ...

Can i insert the encrypted password on the DefaultPassword key ? Can i disable the access to this key to a normal user without broke the windows access of the user ?

I have a main office with a network 192.168.40.0/24 and a subsidiary office that have a network with this address 192.168.1.0/24, i want to link this office :

Allow PC on the main office to access PC in the subsidiary and PC in subsidiary office to access PC on main office; in addition i want to allow some roadwarrior user to connect to main office Network with their notebook.

I want to use OpenVPN, and in subsidiary office i have a router with DD-WRT on board that theorically can connect to VPN Server on main office and distribute connection to each client.

What's the best way to implement a similar VPN?

Do i need to setup a routed or a bridged VPN ?

How to configure VPN serveR ?

I want to install Clonezilla-Server(192.168.1.100) in a network that already have a DHCP Server (dd-wrt with dnsmasq - 192.168.1.1). I've installed Clonezilla-SE on ubuntu Server 10.10, once installed and configured Clonezilla Server i've removed the DHCP-Server and set pxe server address in dnsmasq configuration on DHCP Server :

dhcp-boot=pxelinux.0,,192.168.1.100

When i try to start from PXE a Computer in the network clonezilla start, but give me an error that the ipddress of the machine is not given by the clonezilla server and can't continue ... Someone has already tried to configure Clonezilla-SE in a similar enviroment?

Is there some configuration on DRBL server of Clonezilla that i need to do ?

I need to give administrative privileges to a group of user for a group of a PC in an Active Directory Enviroment.

For Example i have :

• HelpDesk_User : Group of user
• HelpDesk_PC : Group of Computer

I want to give at each member of HelpDesk_User group local administrator priviledges on each computer member of HelpDesk_PC. Can i do this throgh Group policy ? How ?

At the moment i add manually HelpDesk_User group(or each member of this group) to local administrator group for each computer, Is there a way to do it through centralized AD group policy ?

Thanks.

I've been in a office where each workstation(Windows XP) have configured two static IP Address on the same NIC one for net : 192.168.3.0 and another for accessing net : 192.168.200.0 .

Since the IP address for net 192.168.200.0 is given only for accessing an Asterisk VoIP Server that has ip address : 192.168.200.125.

After seeing this type of configuration, i have some doubt ... it's not better adding a server with multiple ip address configured and then set a static route on the default gateway of the main network ?

Can achieve better performance with multiple IP Address or with a static route on default gateway?

When multiple IP Address on single NIC is a better choice ?

I want to setup a VPN between two small office network :

1st Network : ADSL Router with DHCP - 3 Server(Static IP) - 20 WorkStation(DHCP)

2nd Network : ADSL Router with DHCP - 1 Server(Static IP) - 5 WorkStation(DHCP)

I wanna insert in each network a Linux OpenVPN Server for linking this two small network, for this scenario wich type of VPN is better ? Bridged or Routed ?

If i bride this two network, could i have some problem with two DHCP Server ?

I Want that the client of 1st Network get IP Address from DHCP Server located in 1st Network and not also from DHCP Server located in the 2nd Network...

I'm looking for a good antivirus to install on a Windows Server 2008 with Terminal Services enabled and 10 concurrent user that run app on this server through app remote ... This server is in a simply Workgroup network, and i want to install on it a good antivirus compatible with terminal services enviroment.

Some time ago in another similar server i've found installed NOD32 but this antivirus create a process for every terminal services users that log on, i want to avoid this if possible.

I have a client(Windows 7 Pro) that make a connection to Windows terminal server through RDP, i have enabled COM port redirection for both server and client side, but the redirection doesn't happen ...

The client don't have a native mainboard COM port, but have an USB-TO-Serial adapter (Prolific USB-to-Serial), it is possible redirect this USB-TO-Serial COm Port ?

I want to restore a database of postgreSQL, but before do it i need to empty the restore target database.

Is there an option of psql to do it ?

Now i use a command line as the following :

psql -U postgres db_test < testdb.sql

I have an application that i can configure to get data from different kind of SQL database server, for example Postgres, MSSQL, MySQL, Firebird ...

I must install this application and the database server on windows enviroment, before choice the database server i need to do some benchmarking test to this database importend in all of the supported type of database server for define what's the best choice.

I'm writing a perl script for this job: for test writing and reading speed from this database.

What kind of test i should do to really compare what's the best database server for my app ?

Is it possible to have two DHCP Server on the same subnet for address two range of IP? Is it possible to configure one of this DHCP server to serve only a certain range of mac address ?

for example wanna to have the main DHCP Server that serve the range 192.168.1.50 --> 100, and another DHCP with also a TFTP and PXE that server range 192.168.1.220 ---> 250 that accept request only from a given list of range of mac addres ... Cani do this?

Is better to have only one DHCP Server on subnet and another TFTP/PXE Server, and then address the request from a list of given MAc address to this TFTP/PXE Server?

What's the best solution for assigning a range of IP and eventually a TFTP/PXE based on list of mac address ? Is it possible?

I use Linux and dhcp3-server...

Thanks.

Is there a trick for setting an email retention period(for example delete eMail older than 360 days) in google apps standard edition ?

I need to switch to premiere edition ?

I have a local user of a windows Server 2008 that is a member of builtin Users group, a program that run this user need to have write access to a Key located in the HKEY_LOCAL_MACHINE, can i enable this user to have write access in HKLM without adding it to Administrators group ?

Thanks.

I Have an HP Server with a quad core Opteron and 3 Disk 250Gb S-ATA Disk, i'm thinking about what's the best configuration of the disk for performance and reliability.

There is mainly 2 scenario : -RAID 5 with these 3 HD (on the the array 100GB Partition for OS, Other Space for Data Partition) -RAID 1 + 1 Disk for OS (one single Disk OS Installation, RAID 1 Array for a Data Partition)

What's the best configuration ?

In the Server Run MySQL and Small Document File server, the OS to be installed is Windows Server 2008 ...

I need to add a static route on a windows server toward a web server with a service; I need to add a static route with this command on a Windows command prompt:

ROUTE ADD -p IPADREESS GATEWAYIP

Is there a way to do a static route toward a DNS address instead of a IP Address ? How ?

For example:

ROUTE ADD -p DNSServer GATEWAYIP