Pure.Krome's questions

I'm trying to plan for the following Small Office network setup:

• 3x Internet connections
• Things connected to the port in each colour can only get routed through their corresponding internet port.

for example:

Internet 1 (RED) - ports 4, 6, 8, 10 ... 22, 24 only go out via port 1.

I don't care if a device from the RED ports can see a device from another colour.

Is this called VLan segmenting? Do I need to tag each port a VLAN ID?

Yes, I'm new to this so please be kind. Of course, I've got the wrong terminology so I would also be grateful for any help in getting corrected on the terminology used, here.

Further notes: - I'm only using one switch. not two or more than need to joined. - 3x internet connections because it's cheaper in AU to get 3x ADSL connections that 1x 'fast office' internet (like 40/10 or 100/10, etc)... - Each internet connection is doing something unique (eg. voip vs internet vs multimedia)

UPDATE 1:

Also, I'm assuming each colour would have it's own IP range? eg.

• RED : 192.168.0.1/24
• YELLOW: 192.168.1.1/24
• BLUE: 192.168.2.1/24

(and the modem/routers are acting as the DHCP servers for those coloured ports).

UPDATE 2: Switch is a brand spankin' new Ubiquiti Unfi 24port Switch.

I just installed a fresh new Windows 2012 x64 Virtual Machine.

The very first thing I did was install Google Chrome.

When I went to the Dashboard, I get the following error (or it's made to look like an error).

So,

• Anyone know what this error is all about?
• How can i 'fix' this?

Thank you kindly.

EDIT: Please don't suggest I uninstall G-Chrome as a fix.

I've got rewrite module working great for my IIS7.5 site.

Now, I wish to add a number of URLs that all go to an HTTP 410-Gone status.

Eg.

<rule name="Old Site = image1" patternSyntax="ExactMatch" stopProcessing="true">
  <match url="image/loading_large.gif"/>
  <match url="image/aaa.gif"/>
  <match url="image/bbb.gif"/>
  <match url="image/ccc.gif"/>
  <action type="CustomResponse" statusCode="410"
            statusReason="Gone"
            statusDescription="The requested resource is no longer available" />
</rule>

but that's invalid - the website doesn't start saying there's a rewrite config error.

Is there another way I can do this? I don't particularly want define a single URL and ACTION for each URL.

At our office, all of our Windows 7 Clients get this error message when we try and RDP to a remote Windows 2008 Server outside of the office:

Your system administrator does not allow the user of saved credentials to log on to the remote computer XXX because its identity is not fully verified. Please enter new credentials

A quick google search leads to some posts they all suggest I edit group policy, etc.

I'm under the impression, that the common fix for this, is to follow those instructions on every Windows 7 machine.

Is there any way that I can do something via the Active Directory which could update all Windows 7 clients in the office LAN?

i'm using IIS7 express and therefore need to unblock port 80 if I wish to hit the website locally and on the default http port. To do this, i use ..

netsh http add urlacl url=http://my.custom.locahost.domain.com:80/ user=mydomain\myusername

is it possible to say something like

netsh http add urlacl url=*:80/ user=*

so basically, anything going to port 80, by anyone, is allowed?

I've just created a simple AD on our Windows 2008 r2 server. I've added a few employees into that directory.

Now, is it possible to create some aliases for a single account.

eg.

name = [email protected] / contoso\foo.bar

but the user can also log in as

contoso\pewpew

Is this possible?

I'm not sure if our 3 routers, in our wifi network, should be on separate channels (so each can maximize the bandwidth per channel) ?

Our office is networked via WiFi. It is in the shape of a 'L' and is made up of 4 rooms. In 3 of these rooms are 3 routers.

A: Billion BiPAC 7404VNPX. Internet Gateway. VOIP Device. (Firmware: 6.03)

B: Asus RT-N12 (firmware: 1008) Repeater Mode

C: Asus RT-N12 (firmware: 1008) Repeater Mode

 ___
[ A ]
[   ] ______
[ B ][     C]
 ---  ------

The reason why the 'C' device is over on the far end of the room is because we have a few devices that connect via ethernet to the back of that device.

That is the reason why I have 3 routers >> to extend the wifi from device 'A' all the way around the corner to the devices, at location 'C'. Otherwise, anything in room 'C' cannot see the wifi (too much interference).

Anyways, here's a scan of the WiFi network using inSSIDER 2.0.

This screen shot was taken on my MacBook pro a foot or so away from router 'B'.

Now, should I be placing each router on it's own channel? with the end of the each router range touching the next one?

EG.

• Router A on channel 1.
• Router B on channel 9.
• Router C on channel 13.

?

Using: Squid Cache version 2.7.STABLE3 for i686-pc-winnt ...

Whatever I put into the hosts file, it seems to be ignoring it.

here's my configuration :-

...
hosts_file c:\windows\system32\drivers\etc\hosts
...

And yep - i'm restarting squid each time i change (and save) the hosts file and yep, i've 10x checked the hosts file is the same as the one listed in the config file.

Does anyone else have this problem? I'm not even sure how i can debug it. Right now, i'm using the command line squid and squidclient to try and see what's going on, but i keep getting X-Squid-Error: ERR_DNS_FAIL 0.

Please help!

after I make a VPN connection to my work/whatever, I currently have to go into the command prompt and manually add a route.

eg.

ROUTE ADD 10.1.0.0 255.255.0.0 172.16.3.0 METRIC 1 or whatever the command is.

Is it possible to have this automatically happen after I successfully make a VPN connection?

Problem

when I manually set the HTTP Status of my response stream to, say, 404 or 503, IIS renders up the stock IIS content/view, instead of my custom view.

When I do this with the web development server (AKA. Cassini), it works correctly (that is, my content is displayed and the response.statuscode == my entered data).

Is there any way I can override this behaviour?

How To Replicate

Make a default ASP.NET MVC1 web application. Add the following route

public static void RegisterRoutes(RouteCollection routes)
{
    routes.IgnoreRoute("{resource}.axd/{*pathInfo}");

    routes.MapRoute(
        "Default",
        "{*catchall}",
        new { controller = "Home", action = "Index" }
        );

}

Now replace the the HomeController's Index method with...

[HandleError]
public class HomeController : Controller
{
    public ActionResult Index()
    {
        Response.StatusCode = 404;
        return View();
    }
}

I have the following data in my DNS zone file for my domain:

$ORIGIN mydomain.com.
@       IN      A       208.X.Y.Z
mail    IN      A       208.X.Y.Z
... etc..

What does the @ line mean? I know what an A record is.. but a host with an ampersand at sign?

I'm trying to use the Performance Counters so I can log the total RAM usage on a particular machine. I've got a sneaky feeling that it's maxing out (due to some bad code) ... server has a heart attack and it finally recovers a few mins later.

So to confirm this i'm trying to log it's memory usage.

I'm not sure which counter it is.

I'm used to using the Memory Usage graph that's part of the Task Manager.

Any suggestions?

I've got a number of websites on a single IIS7 machine running W2K8.

I'm using Fiddler to help me figure out if something is compressed or not. Nothing is.

So, I've googled for a few things and tried some things out. I have the following ...

C:\Windows\System32\inetsrv>appcmd set config -section:urlCompression /doDynamic
Compression:true
Applied configuration changes to section "system.webServer/urlCompression" for "
MACHINE/WEBROOT/APPHOST" at configuration commit path "MACHINE/WEBROOT/APPHOST"

C:\Windows\System32\inetsrv>appcmd list config -section:urlCompression
<system.webServer>
  <urlCompression doDynamicCompression="true" />
</system.webServer>

C:\Windows\System32\inetsrv>appcmd list config -section:serverRuntime
<system.webServer>
  <serverRuntime frequentHitThreshold="1" />
</system.webServer>

I've made sure that the urlCompression, httpCompression and serverRuntime sections are unlocked.

I've also added the following to my web.config :-

<system.webServer>
    <serverRuntime frequentHitThreshold="1" frequentHitTimePeriod="00:10:00" />
    <!-- NOTE: This requires the following section to be unlocked: appcmd set config -section:urlCompression /doDynamicCompression:true -->
    <urlCompression doDynamicCompression="true" dynamicCompressionBeforeCache="true" />
    <httpCompression noCompressionForHttp10="False" noCompressionForProxies="False">
        <scheme name="gzip" dll="%Windir%\system32\inetsrv\gzip.dll" dynamicCompressionLevel="4" staticCompressionLevel="9" />
        <dynamicTypes>
            <clear />
            <add mimeType="*/*" enabled="true" />
        </dynamicTypes>
        <staticTypes>
            <clear />
            <add mimeType="*/*" enabled="true" />
        </staticTypes>
    </httpCompression>
    <caching>
        <profiles>
            <add extension=".css" policy="CacheUntilChange" kernelCachePolicy="DontCache" duration="07:00:00" location="Any" />
            <add extension=".js" policy="CacheUntilChange" kernelCachePolicy="DontCache" duration="07:00:00" location="Any" />
            <add extension=".png" policy="CacheUntilChange" kernelCachePolicy="DontCache" duration="07:00:00" location="Any" />
            <add extension=".jpg" policy="CacheUntilChange" kernelCachePolicy="DontCache" duration="07:00:00" location="Any" />
            <add extension=".jpeg" policy="CacheUntilChange" kernelCachePolicy="DontCache" duration="07:00:00" location="Any" />
            <add extension=".gif" policy="CacheUntilChange" kernelCachePolicy="DontCache" duration="07:00:00" location="Any" />
            <add extension=".zip" policy="CacheUntilChange" kernelCachePolicy="DontCache" duration="07:00:00" location="Any" />
            <add extension=".htm" policy="CacheUntilChange" kernelCachePolicy="DontCache" duration="07:00:00" location="Any" />
        </profiles>
    </caching>
    <staticContent>
        <clientCache cacheControlMaxAge="31.00:00:00" cacheControlMode="UseMaxAge" />
    </staticContent>
....
</system.webServer>

So checking this, i'm not sure what i've done wrong ... ??? any suggestions? how can i debug this to see what's not getting read it right, etc?

I've also been doing 'force-refresh' when I grab the website content, etc. Definately not getting server-compressed :(

Please help!

Update 1: Browser request does include an Accept-Encoding: gzip, deflate .

This question is in two parts.

Q1.

How does a mobile phone get an IP address over 3G? Like, would it get the same IP for a shortish period of time (Eg. 1 day, etc)? Because my phone is constantly going in and out of buildings and underground car parks, i'm jumping between cell hotspots/receiver towers, so would I be getting a new IP each and every time? I feel like this is back to the old modem days -> every time i 'ring in/jump onto the interwebs' I get allocated a new number.

Or does it have some mac address and the Telco's mobile phone DHCP server keeps reusing the last IP based on the mac, for a specific perioud of time (eg. TTL for an IP, like a normal DHCP which has an expiry setting for the allocated IP).

Q2.

If the previous answer is that mobile's keep getting different IP's, does this mess with google analytics and the unique visitor's value? So if i'm getting 5 IP's for a day on my mobile, would that mean i'm 5 unique visitor's for the website i'm tracking?

I've got an F5 Big-IP that is mangaged by our hosting provider. It's dedicated to our private VLAN, etc. Works great :)

We requested them to add in an X-Forwarded-For HTTP-Header field. They've done that and we can now access that in the code. Awesome :)

But .. for our IIS logs, it's still the IP of the F5 machine. I think I was told that we need to apply an ISAPI filter (cringe!) to the IIS server(s).

1. Can someone confirm this?
2. If #1 == yes, is there a file/instructions how to do this for our IIS7 web servers on windows 2008 machines.

We have a web farm of IIS7 machines which work great. In front of them is an F5 Big-IP hardware load balancer, also working fine :)

_{(source: www.f5.com)}

Currently we're using an ASP.NET State Service to handle our OutProc state. This is required when you have a web farm to maintain any type of session information.

I was wondering if we could have sticky sessions on the F5 Big-IP and therefore change from OutProc back to InProc? If so, what is the downside of this? I know the downside of InProc vs OutProc, so don't worry about explaining that. I'm more interested in the pros/cons of sticky sessions with out F5 Big-IP.

Can anyone shed some light and/or experience?

We're about to hardware upgrade our exisiting Sql 2008 Server. So, I'm checking out some best practices with regards to hardware, like .. RAID levels for the HD and making sure the TempDB is on a different disk than the DB's, etc.

I then stumbled onto these two posts here and here. They chat about making sure our Windows 2008 servers have the correct partition offset size.

I'm a bit confussed after I read those posts. They mention in various places that..

Windows Server 2008 aligns partitions by default.

So, if i wish to have partition sizes of 64K, Do i need to worry about this? Remember, I'll be doing a fresh install of Windows Server 2008 .... and I can't remember seeing any option during the install, when we partition disks, for partition alignments/sizes.

Can anyone shed some light, in layman's terms, please?

**Note: i'm not talking about C:\ == 50Gig size, D:\ == xxxGig, etc. Not that type of partitioning.

we're using the Squid cache in our company. Is there any way we can cache YouTube videos?

cheers :)

i'm using Remote Desktop on Windows 7 RC1, connecting to a Windows 2008 server.

Everytime i start a connection, i get the following popup window :-

The certificate problem makes sense -> it was created from my own server, which is not an offical certificate authority. Sure. So I need to tell my machine that any certificate that comes from my server, can u please accept.

So i View the certificate and install it. I let it determine the best place to install it. eg

Unfortunately, every time i connect, i still get that popup question.

So i tried to manually tell where to install it. I said to install it at eg.

but still i get the warning question.

So .. does anyone have any suggestions?

i trying to see how much electricity is required to power 'x' number of computers. I know it's a vague thing because some computers draw more than others (eg. diff chipsets, HDD, vid cards, PSU's, etc).

So, lets just assume is a mum-and-dad Dell computer with some average run of the mill stuff. Nothing fancy. 20" LCD's.

this is to help calculate the generator power required to keep around 'x' computers running in a LAN. The real figure is in the hundreds .. but i'm assuming i can just figure out the base cost for one machine and then multiple it by the number of seats.

I understand this doesn't include

• Switches
• Servers
• cooling (fans), etc...