Daily IT Matters [DIM]

I have logged some strange DNS traffic [queries] in my Juniper 5GT firewall. The traffic originates from the same IP and PORT that regular DNS queries are comming from but they are pointed to a completely other set of DNS servers on the internet. I have my windows 2003 server setup to prevent DNS cache pollution. I dont accept DNS queries from outside my local subnet. When my server cant find a name he forwards the request to my ISP dns's And if that fails the roothints take over. I dont see anything strange in my DNS events, I have even enabled DNS Debug info but I can't find the culprit Here are some DNS server my Server queries 209.66.91.13 209.130.187.10 206.165.6.10 64.212.106.87 67.17.215.134 66.231.188.181 66.231.188.229 209.130.187.10 202.96.209.5 216.104.96.11 216.104.96.10 192.5.6.32 61.0.0.5 80.255.35.180 Stay tuned for more info! DNS , Firewall , Cache Pollution , Security

PortQry version 2.0 Displays the state of TCP and UDP ports Command line mode: portqry -n name_to_query [-options] Interactive mode: portqry -i [-n name_to_query] [-options] Local Mode: portqry -local | -wpid pid| -wport port [-options] Command line mode: portqry -n name_to_query [-p protocol] [-e || -r || -o endpoint(s)] [-q] [-l logfile] [-sp source_port] [-sl] [-cn SNMP community name] Command line mode options explained: -n [name_to_query] IP address or name of system to query -p [protocol] TCP or UDP or BOTH (default is TCP) -e [endpoint] single port to query (valid range: 1-65535) -r [end point range] range of ports to query (start:end) -o [end point order] range of ports to query in an order (x,y,z) -l [logfile] name of text log file to create -y overwrites existing text log file without prompting -sp [source port] initial source port to use for query -sl 'slow link delay' waits longer for UDP replies from remote systems -nr by-passes default IP addres...

Well on Friday the 12'th I passed the first of six exams to come this 6 months. I passed with a score of 871. The simulations were a bit akward because they tend to disable some things I normally do, like right clicking my computer. But MS wants you to go to explore and then right click your computer duh! If you need to prepare for this exam be sure to know your stuff about group scopes when and where to use them. Know your backup, whats the difference between differential and incremental. Know that copy backup does not reset the archive bit, so that one should be used if you want to make a quick backup without intefering with your normal backup schedule. I had only WSUS questions not SUS so you can forget about SUS.

If you are facing the task of demoting your domain controller running exchange, because you either have a new dc added to your network and want to move some roles over to that brand new sparkling server. Then you cannot do a dcpromo /demote on the exchange server! This will cause havoc. What you must do is: Add another Exchange server to your network move the mailboxes over and deinstall exchange on the DC. Then do a dcpromo /demote reinstall exchange move mailboxes over again. This is the way with the shortest downtime

Microsoft Corporation Published: August 2006 Version: 3 This document describes problems that you might encounter when installing or using Microsoft Windows Small Business Server 2003 with Service Pack 1 or Windows Small Business Server 2003 R2 (Windows SBS). To view troubleshooting information, click any of the following feature-area links. If this document does not list a solution for the problem you are having, try searching for a solution at the Windows SBS Solutions Center ( http://go.microsoft.com/fwlink/?LinkID=70661) . Troubleshooting Server Setup Troubleshooting Users and Groups Troubleshooting Client Computers Troubleshooting Mobile Devices Troubleshooting E-mail Troubleshooting Monitoring Troubleshooting Backup and Restore Troubleshooting Internet Access Troubleshooting Your Intranet Troubleshooting Shared Network Resources Troubleshooting Remote Connections Troubleshooting Client Computer Licensing © 2006 Microsoft Corporation. All rights reserved. Troubles...

Want to create a complete list of all your email addresses in your domain? And not only the default ones found with dsquery user | dsget user -email   Answer   Ldifde -d "DC=domain,DC=co,DC=uk" -r "(&(mailnickname=*))" -l proxyAddresses -f emailaddresses.txt     SMTP , Email , Exchange 2003 , dsquery , dsget , ldifde

Today I got my first certification of experts-exchange. I achieved the Master Level in the Microsoft Network topic area.   experts-exchange.com , Microsoft Network , Cerified , expert

http://www.microsoft.com/technet/community/columns/secmvp/sv0405.mspx I found this great article because at our company we needed to implement just this! read and weep...   How ISA Server 2004 Provides SSL VPN Functionality for Outlook Web Access and RPC over HTTP Published: April 13, 2005 Remote access to resources hosted on the corporate network has become a requirement for organizations seeking to successfully compete in today’s Internet-connected business landscape. Off-site employees, home workers, traveling executives, and sales people all require anytime, anywhere access to information hosted on the corporate network. Because of these information needs, Microsoft Exchange Server is one of the most critical information resources that companies maintain on their corporate networks. The challenge for IT and security professionals is to enhance the competitive position of their companies by providing remote access to Exchange Server resources in a private, secure, and reliab...