adopilot's questions

We are using pfSense as Openvpn server / clients. We are have around 20 site to site pfSense clients which connects to main site using Openvpn site to site configuration. On main pfSense (vpn server) we did install multiple wans and we have setup failover site to site connection, by setting server to listen localhost and port forwards vpn ports from multiple wans to 127.0.0.1. On the clients in Custom options we added:

remote serverAlternatieWanIp VpnPort udp

This scenario working OK for us when main link goes down clients established new connection over alternative WAN.

What we do not know is:
How to push clients to switch back (reconnect) to main WAN after main WAN connection get up again ? (Our workaround is now to restart Openvpn client or sometimes to restart whole pfSense to push vpn clients to connect again to main WAN, or to "kill" alternative WAN to push VPN clients to reconnect to main. All of them seems for me is bad way to do that).

We will also love to see which of clients is connected to alternate WAN. Now workaround is to go on each vpn client pfsense and to read remote host address on vpn status of client. We are using Zabbix to monitor our network infrastructure, and we will love to try figure which wan is used for connection in some API way so we can at least trigger error on Zabbix and tell admins to reconnect client to main WAN.

We are planning to switch our environment from workgroup to domain (active Directory services). We are planning to register our top domain at some public register. That domain is going to be used just for ActiveDirectory and internals. We are planing to use simple domain name as possibile mycompany.com

My DNS is going to be at private subnets and private IP addresses. When I do register my domain, registrar is going to ask me for DNS servers. Shodu I give them my local DNS servers for public registers ? Or is better to by some www reachibile DNS like AWS route 66 and point my domain to that DNS after that on that DNS server do redirect to local DNS servers. Or it is OK to do public register domain whit private DNS servers.

I have one public static IP address.
I have my main domain register at local Internet provider and their DNS.

My main router is pfSense and behind it i have my local network.

My WEB server is in local LAN and pfSense doing NAT (port redirect) WEB traffic to local server.
Now I need one more web server inside my LAN (on another local IP address) (etc mail server) and I need another domain or subdomain.

Can I register a new domain pointed to the same public IP address, and tell pfSense to do different redirecting of traffic according to domain? I am planing to use both domains under HTTP (80) port.

Is it possible to pFsense redirect to one local IP when request calling domain.com and to do different port forwarding when request on the same public IP adders calling subdomain.domain.com ?

If this is possible which one of Pfsense modules I should I install and configure, and how?

I have an IBM xSeries x3400 Intel Xeon server which only works while someone holds in the power button.

My server stopped working and I sent it to IBM Service. After a few hours they told me I could backup my data. When I asked how they managed to turn it on, they said that it works while the power button is pressed.

After I asked if there was a way to repair my server they said that they needed to order a completely new motherboard for the server.

Here are my questions.

1. Is this a common problem with IBM servers that they only work while the power button is held in?
2. Is there another way to repair this besides replacement with a new motherboard?
3. May I use my server with the power button glued down while I wait for a new motherboard to come? (Can I destroy my RAID controller and RAID field doing this?)
4. Is there any standard practice for how long I can use server in this way (a few hours, a few days, a few months, a few years)? The people at IBM said to me that after this problem, the server usually works few more months and then stops.

EDIT:

1.5. Could they be wrong? Should I try look for a solution inside something else, maybe change RAM, change power supplies, add non integrated Video Card, disconnect RAID controller, or something else?

My company runs shopping centers around the country and from time to time we receive complaints regarding the music selection playing in the shops.

I'd like to build a centralized music streaming server that the shops will be able connect to using VPN so that I can set up a specific selection of music and commercials.

Multiple channels would be important so that we can provide specialized channels for different situations. For instance, some states may have specific important days, mourning days, etc, where the music and commercial selection may need to be different from those played in shops with different important days.

A web interface and multi-user support is important so that various people can administer the playlists.

Also important would be the ability to customize commercials based on location as the shops are obviously not identical in each location.

It would be best if the endpoint devices were cheap and simple to setup and administer. Sound quality has to be decent, though.

Is there a dedicated server OS that can handle all this, maybe a *nix distro?

Any other advice and help would be appreciated as well.

I am little lost in touch whit few SQL servers regarding to their updates.
Now I want to update these serves and I see that now is actual SP4 for SQL2005 databases.
My question is:
If I skip SQL Service pack 2 or 3 and just install Service pack 4 do I have latests updates for all sql components , also do I need to install and others service packs beside of SP4 ?

I have freeBSD router and it host public IP address, I am using ipnat.rules to configure port forwarding prom public network inside my private network. Now I wondering can I restrict only specific public IP addresses to can pass trough my port forwarding. What I want is to only my specific public IP addresses can walk inside my network on specific ports. Here is how now look like my ipnat.rules file

rdr fxp0 217.199.XXX.XXX/32 port 7900-> 192.168.1.12 port 80 tcp

It is standard story, there is fight between developers and administrators. One denunciation that database design and queries are bad while others says It is lack of hardware and amount of data.
So I am asking You is my IBM x3400 with 2 xenons 2GHz and SCSI raid 5 and 4GB of RAM adequately shaped for MSSQL database of 53 GB with tables main details is around 6,5 million of records in details and 2 million in headers of documents while others is around 100K (such as items).

We are constantly suffering with lack of performance while getting data from SQL, this server is only dedicated to be only SQL server and act as subscriber of Replicated data from other SQL server.

Other question is How does database administrators planing size of hardware for DataBase servers ? Is there some standard approach or it is just experience and sense ?

What is the easiest way to block changing the Time and Date settings on desktop workstations running Windows XP?

Considering this scenario,
At coffee bar you order the drink and get bill for that,
On bill there is key for Wi-Fi network which is going to be valid for next X hours.

I want to try realize something like that. Where to start looking,

Does PfSense have that in box ?
Should I left wireless network open and do authorization on internal site for allowing go users to go out ?
I am confused How I can pull or generate KEY pragmatically by C# (.NET) (that is language I know).

I just accepted that ethernet cables CAT 5 and more must be ended with specific arrangement.

I learned when I ending my cables to take attention that either end must be in same arrangement(568A or 568B ).

Sometime I get stacked with my fellow servant that they claim that Cable should work if just arrangement at both side are same even if it is not in 568A or 568B layouts.

My experience said that it is not true, but I am now looking for some technical argument to prove that.

As I am still fighting with Conficker infection on my Win Server 2003. I will like to temporarily disable scheduled task services on server. Until I can be sure that infection of network is over.

There is great implementation of PuttY for Symbian S60 devices, and last versions of Nokia phones with full QWERTY keyboard offers comfort for using Putty and SSH goodies. I start wondering is there a way to access MSSQL over SSH and send T-SQL commands. I am able to connect my router which running on FreeBSD OS, also other CentOS server with MYSQL are able to me over SSH. I want to try access MS-SQL-2005 from my mobile phone,

Probably this is not going to have daily use, it is just for geeky and justification to myself: why I had to buy so expensive a toy

We have a public IP address assigned to the router in our Company. We also have public domains hosted at our internet service provider. I have access to modify those domains through Plesk. (one is for ASP.NET, another is for PHP). Now I can get an idea of traffic patterns through my router up to my server.

I am at the early stages of making WEB applications and to show others my work I would rather like to give an address with my domain or subdomain to end users

Sample:

1. If someone calls www.mydomain.com he will get my public web site hosted on our internet service provider,
2. If someone calls testapp.mydomain.com, Plesk will redirect the call to my IP address and so on to my server
3. Else if someone calls mydomain.com/testapp, Plesk will also redirect them to my public IP (router)

I am trying to configure asterisk PBX behind my FreeBSD router. To allow other sip clients to call I need to forward ports to my local network asterisk machine. I did it for 5060 and 5061 ports using ipnat and configuring ipnat.rules

rdr fxp0 217.199.MYIP.MYIP/32 port 5061 -> 192.168.1.7 port 5061 udp

But I do not know how I can redirect UDP port range from 60000 to 610000 and also port range UDP Port 10000 - 20000

A few days ago, I noticed that our Windows Server 2003 system has strange scheduled tasks. I do not know where they came from or who set them up. I deleted them and they came up again today. They have names such as "At1","At2", "At3" and the status says that they are running.

When I open their properties, the run command looks like rundll32.exe zfypspqu.u,ygxjgq.

What it could be? Does my server have some virus? I did a scan with nod32 and it didn't report anything. I do not have anything unusual set up on this server - it's only running SQLServer 2005 with ReportServer. Two other servers with similar configuration do not have these strange scheduled tasks.

This is a Canonical Question about Hairpin NAT (Loopback NAT).

The generic form of this question is:

We have a network with clients, a server, and a NAT Router. There is port forwarding on the router to the server so some of it's services are available externally. We have DNS pointing to the external IP. Local network clients fail to connect, but external work.

• Why does this fail?
• How can I create a unified naming scheme (DNS names which work both locally and externally)?

This question has answeres merged from multiple other questions. They originally referenced FreeBSD, D-Link, Microtik, and other equipment. They're all trying to solve the same problem however.

In our administrative building we have a network with around 150 workstations. Till now I used fixed IP address giving the specific department one range in same address.

Etc in marketing I had 192.168.1.2X, in sales 192.168.1.3X, servers are with 192.168.1.20X. Now things are getting knotty as the number of workstations increases. I want to start all over again using DHCP server, but I do not know which device I should use as a DHCP server.

Candidates are as follows: 3X Win 2003 Server, 3X managed switches with web interfaces and DHCP server built in, one FreeBSD router as main router for the entire network, another router as alternative internet link from other ISP, 2X access points for internal wireless network.

Yet for a while I trying to install and run MySql on FreeBSD rooter that We using at office.

I am totally beginner in Linux OS and I do not know what could go wrong on My installation, So please have a patient whit me, Here is some copy and paste text from Putty if someone had similar problems please help

pppp-ac-01# uname -a
FreeBSD pppp-ac-01.robotsarajevo.com 6.1-RELEASE FreeBSD 6.1-RELEASE #0: Sun May  7 04:32:43 UTC 2006     [email protected]:/usr/obj/usr/src/sys/GENERIC  i386

pppp-ac-01# mysql -V
mysql  Ver 14.15 Distrib 6.0.11-alpha, for portbld-freebsd6.1 (i386) using  5.0

pppp-ac-01# mysql -U root
ERROR 2002 (HY000): Can't connect to local MySQL server through socket '/tmp/mysql.sock' (2)

In our company we have around 100 workstations with Internet access, and the day-to-day situation is getting worse and worse from the perspective of using Internet access for the purpose of doing private jobs, and wasting time on social sites.

Open hearted as I am I don't like blocking sites like Facebook, YouTube, and other similar sites but day by day my colleagues do not finish their tasks and any time I look at their monitors they are running Internet Explorer or Mozilla Firefox, chat and things like that. On the other hand I would like to block YouTube when we have a very low Internet access speed.

Here are my questions:

• Do other companies block social sites?
• Do I need a dedicated device for that, like a hardware firewall or a super expensive router? Or can I do that with my existing FreeBSD 6.1 self-made router with two LAN cards and configured NAT to act like a router?

I was trying to do that using ipfw and routerfirewall but without success. My code looks like:

ipfw add 25 deny tcp from 192.168.0.0/20 to www.facebook.com
ipfw add 25 deny udp from 192.168.0.0/20 to www.facebook.
ipfw add 25 deny tcp from 192.168.0.0/20 to www.dernek.
ipfw add 25 deny udp from 192.168.0.0/20 to www.dernek.
ipfw add 25 deny tcp from 192.168.0.0/20 to www.youtube.
ipfw add 25 deny udp from 192.168.0.0/20 to www.youtube.com

What can I do to fix this problem?