Make a request:
c:\PROGRA~1\AHSAYO~1\conf>c:\progra~1\ahsayo~1\java\bin\keytool -certreq -keyalg
RSA -alias tomcat -file MyDom.csr -keystore keystore.2012

Import root cert:
c:\PROGRA~1\AHSAYO~1\conf>c:\progra~1\ahsayo~1\java\bin\keytool -import -alias r
oot -keystore keystore.2012 -trustcacerts -file root.crt

Import intermediate cert:
c:\PROGRA~1\AHSAYO~1\conf>c:\progra~1\ahsayo~1\java\bin\keytool -import -alias i
ntermed -keystore keystore.2012 -trustcacerts -file intermediate.crt

Import the trusted SSL cert:
c:\PROGRA~1\AHSAYO~1\conf>c:\progra~1\ahsayo~1\java\bin\keytool -import -alias t
omcat -keystore keystore.2012 -trustcacerts -file MyDom.crt

More info

If the file is from the Internet / Outlook, it is blocked by default.

You can unblock in the file properties or make a GP
Goto: User Configuration > Administrative Templates > Windows Components > Attachment Manager Enable: Do not preserve zone information in file attachments

sc.exe config lanmanserver depand= msisci
(the space before msisci has to be there)

Fix with this command:
Update-MailboxDatabaseCopy -Identity “[type in your DB]\[Your Exchange server]” -CatalogOnly

Resource Calender:
Add-MailboxPermission –Identity testresource -User all-usersgroup -AccessRights FullAccess -InheritanceType All

Public folders:
Get-PublicFolderClientPermission -Identity “\firm1\firm1 calender”

Add-PublicFolderClientPermission -Identity “\firm1\firm1 calender” -AccessRights PublishingEditor -User testuser

Create new
New-RoleAssignmentPolicy -Name “Restricted Role Assignment Policy” -Description “Only base options.” -Roles MyBaseOptions -IsDefault:$True

If created grafical, you need to set it default this way:
Set-RoleAssignmentPolicy -identity “Restricted Role Assignment Policy” -IsDefault:$True

All new users get the new policy, but you need to run this command on everyone else:
set-mailbox usertest -RoleAssignmentPolicy “Restricted Role Assignment Policy”

more info

Remove global address list: remove-GlobalAddressList -identity “Firm 4 – GAL”

Show global address list: get-globaladdresslist

Download regfile

add this to the vmx:
ethernet0.virtualDev=”e1000″
ethernet1.virtualDev=”e1000″

Monowall 1.33

ASA

access-list outside_20_cryptomap extended permit ip 10.1.1.0 255.255.255.0 192.168.36.0 255.255.255.0
access-list inside_nat0_outbound extended permit ip 10.1.1.0 255.255.255.0 192.168.36.0 255.255.255.0
nat (inside) 0 access-list inside_nat0_outbound

crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000

crypto map outside_map 20 match address outside_20_cryptomap
crypto map outside_map 20 set pfs
crypto map outside_map 20 set peer 234.234.234.234
crypto map outside_map 20 set transform-set ESP-3DES-MD5
crypto map outside_map 20 set security-association lifetime seconds 28800
crypto map outside_map 20 set security-association lifetime kilobytes 4608000
crypto map outside_map interface outside
crypto isakmp enable outside
crypto isakmp policy 10
authentication pre-share
encryption 3des
hash md5
group 2
lifetime 86400

tunnel-group 234.234.234.234 type ipsec-l2l
tunnel-group 234.234.234.234 ipsec-attributes
pre-shared-key securepass

Below is “HP LaserJet 4″ the default.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd]
“FallbackPclDriver”=”HP LaserJet 4″
“FallbackPsDriver”=”HP Color LaserJet 5/5M PS”

Download regfile

“Win32 error code returned by the print processor: 5. Access is denied”

Give the users trying to print write access to thsi folder on the terminal server:
C:\Windows\System32\spool

“please provide a path to windows media x86″

All you have to do is finding ntprint.inf from a 32 bit Windows 7 and give it that file and folders.
From a Windows 7 find this folders:

C:\Windows\winsxs\x86_ntprint.inf.*

Move it to your Windows 2008 server, and point the wizard to this files.

Get-ExchangeCertificate |FL

object-group service PassiveFTP tcp
port-object range 60000 60015
static (inside,outside) tcp interface ftp 192.168.1.20 ftp netmask 255.255.255.255
access-list allow_inbound extended permit tcp host host object-group PassiveFTP
access-list allow_inbound extended permit tcp host interface outside eq ftp

static (inside,outside) tcp interface 60000 192.168.1.20 60000 netmask 255.255.255.255
static (inside,outside) tcp interface 60001 192.168.1.20 60001 netmask 255.255.255.255
static (inside,outside) tcp interface 60002 192.168.1.20 60002 netmask 255.255.255.255
static (inside,outside) tcp interface 60003 192.168.1.20 60003 netmask 255.255.255.255
static (inside,outside) tcp interface 60004 192.168.1.20 60004 netmask 255.255.255.255
static (inside,outside) tcp interface 60005 192.168.1.20 60005 netmask 255.255.255.255
static (inside,outside) tcp interface 60006 192.168.1.20 60006 netmask 255.255.255.255
static (inside,outside) tcp interface 60007 192.168.1.20 60007 netmask 255.255.255.255
static (inside,outside) tcp interface 60008 192.168.1.20 60008 netmask 255.255.255.255
static (inside,outside) tcp interface 60009 192.168.1.20 60009 netmask 255.255.255.255
static (inside,outside) tcp interface 60010 192.168.1.20 60010 netmask 255.255.255.255
static (inside,outside) tcp interface 60011 192.168.1.20 60011 netmask 255.255.255.255
static (inside,outside) tcp interface 60012 192.168.1.20 60012 netmask 255.255.255.255
static (inside,outside) tcp interface 60013 192.168.1.20 60013 netmask 255.255.255.255
static (inside,outside) tcp interface 60014 192.168.1.20 60014 netmask 255.255.255.255
static (inside,outside) tcp interface 60015 192.168.1.20 60015 netmask 255.255.255.255

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\FileValidation]
“EnableOnLoad”=dword:00000000

—

Group Policy:
“Options\Security\Trust Center\Protected View”

—

Reg file:
bProtectedMode.reg

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Citrix]
“InitialClientDrive”=”x:”
Type REG_SZ

REG ADD “HKCU\SOFTWARE\Adobe\Acrobat Reader\10.0\Privileged” /v bProtectedMode /t REG_DWORD /d 0 /f

Show the dll’s:
tasklist /m /fi “imagename eq svchost.exe

Sysinternals Process Explorer

XX.X indicates your version of Outlook:
14.0 – Microsoft Office 2010
12.0 – Microsoft Office 2007
11.0 – Microsoft Office 2003
10.0 – Microsoft Office 2002
9.0 – Microsoft Office 2000

Add a new string value key in that location:
Level1Remove
Add the extensions: .lnk;.com;.exe

Download a Reg file

Featues –> modify user setting –> Microsoft office 2010 system –> Privacy –> Trust center
Disable Opt-in Wizard on first run (enabled)
Enable customer Exoerience improvement program (Disabled)
Save the MSP file

Setup.exe /adminfile office.MSP
(Runs the installation)

GPedit:
User –> Administrative Temp. –> Microsoft Office 2010 system –> Privacy –> Trust center
Disable Opt-in Wizard on first run (enabled)
Enable customer Exoerience improvement program (Disabled)

User –> Administrative Temp, –> Microsoft Office 2007 –> tools account settings –> rss feeds
Turn off RSS feature

> set type=all
> _autodiscover._tcp.internetdom.dk
Server:   domc.mydom.dk
Address:  192.168.0.9

Ikke-autoritativt svar:
_autodiscover._tcp.internetdom.dk        SRV service location:
priority       = 0
weight         = 0
port           = 443
svr hostname   = server01.exchangeserver.dk
>

Test here: www.testexchangeconnectivity.com

Set-Service NetTcpPortSharing -StartupType Automatic

Install:

http://www.microsoft.com/downloads/da-dk/details.aspx?displaylang=da&FamilyID=60c92a37-719c-4077-b5c6-cac34f4227cc

http://www.microsoft.com/downloads/en/details.aspx?FamilyID=5cd4dcd7-d3e6-4970-875e-aba93459fbee&displaylang=en

Get-OabVirtualDirectory -server EXCH | Set-OabVirtualDirectory -InternalUrl https://exch.DOM.local/OAB -ExternalUrl https://webmail.Mydom.dk/OAB

Get-WebServicesVirtualDirectory -server EXCH | Set-WebServicesVirtualDirectory -InternalUrl https://exch.DOM.local/EWS/Exchange.asmx -ExternalUrl https://webmail.Mydom.dk/EWS/Exchange.asmx

Get-OwaVirtualDirectory -server EXCH | Set-OwaVirtualDirectory -InternalUrl https://exch.DOM.local/owa -ExternalUrl https://webmail.Mydom.dk/owa

Get-EcpVirtualDirectory -server EXCH | Set-EcpVirtualDirectory -InternalUrl https://exch.DOM.local/ecp -ExternalUrl https://webmail.Mydom.dk/ecp

Get-ActiveSyncVirtualDirectory -server EXCH | Set-ActiveSyncVirtualDirectory -InternalUrl https://exch.DOM.local/Microsoft-Server-ActiveSync -ExternalUrl https://webmail.Mydom.dk/Microsoft-Server-ActiveSync

Get-ClientAccessServer EXCH | Set-ClientAccessServer -AutoDiscoverServiceInternalUri https://exch.DOM.local/Autodiscover/Autodiscover.xml

enable-OutlookAnywhere -Server ‘EXCH’ -ExternalHostname ‘webmail.Mydom.dk’ -DefaultAuthenticationMethod ‘Basic’ -SSLOffloading $false

Remember to use a SSL SAN Certificate.
(With alternative names)
exch
exch.dom.local
autodiscover.Mydom.dk

If you have alot of domains you can setup a SRV record on every domain: _autodiscover._tcp.info-Mydom.dk exch01.hostingprovider.dk

Set external EWS url:
Set-WebServicesVirtualDirectory -identity “CAS1\EWS (Default Web Site)” -externalurl https://outlook.dom.com/EWS/Exchange.asmx
Set-WebServicesVirtualDirectory -identity “CAS2\EWS (Default Web Site)” -externalurl https://outlook.dom.com/EWS/Exchange.asmx
Get-WebServicesVirtualDirectory | select name, *url* |fl

https://outlook.dom.com/EWS/Exchange.asmx

Vista boot screen
bcdedit /set bootux basic

More info

Create VLAN script

Before you make changes, schedue an restart and then if everything works out, cancel the restart.

Commands:
reload in 10
(Reboot in 10 min)

reload cancel

redircmp ou=NewComputers,DC=mydom,dc=local

You can try this commands i “Run”.
Outlook.exe /resetnavpane
Or:
Outlook.exe /cleanprofile

wait_timeout=60 (1 min)

max_connections = 2000

AuthUserFile /www/site.com/www/homepage/.htpasswd
AuthType Basic
AuthName “Password Protected Area”
require valid-user
order deny,allow
deny from all
allow from 123.123.123.123 122.122.122.122
Satisfy Any

Examples:
44 13 * * * /etc/webmin/cron/tempdelete.pl
00 3  * * * /root/restartMySQL.sh
First line runs script every day at 13:44
second line runs script every day at 3:00

restartMySQL.sh
#! /bin/sh
/etc/init.d/mysql restart

Remember execute right
dos2unix restartMySQL.sh
apt-get install tofrodos

esxcfg-vswitch -l
esxcfg-vmknic -l

Change MTU on vSwitch
esxcfg-vswitch -m 9000 vSwitch1

Add vmk with MTU 9000 support
esxcfg-vswitch -A ISCSI vSwitch1
esxcfg-vmknic -a -i 172.16.0.32 -n 255.255.255.0 -m 9000 ISCSI

Jumbo frames MTU 9000 test to an iscsi target
vmkping 172.16.0.10 -s 9000

esxcfg-vswitch -l
esxcfg-vmknic -l

Or make a backup of this file:
/etc/vmware/esx.conf

echo “#!/bin/sh” >> S99-eth0.sh
echo “ethtool -s eth0 speed 100 duplex full autoneg off” >> S99-eth0.sh

echo “#!/bin/sh” >> S99-eth1.sh
echo “ethtool -s eth1 speed 100 duplex full autoneg off” >> S99-eth1.sh

chmod +x S99-eth*
——–
ethtool eth0 

Change
/NoExecute=OptIn
to:
/NoExecute=AlwaysOff
And reboot

iptables -t nat -I PREROUTING -s 85.x.x.2 -p tcp –dport 3389 -j DNAT –to 192.168.1.20
iptables -I FORWARD -d 192.168.1.20 -p tcp –dport 3389 -j ACCEPT
iptables -t nat -I PREROUTING -s 85.x.x.2 -p tcp –dport 60000:61000 -j DNAT –to 192.168.1.20
iptables -I FORWARD -d 192.168.1.20 -p tcp –dport 60000:61000 -j ACCEPT
iptables -t nat -I PREROUTING -s 85.x.x.2 -p tcp –dport 990 -j DNAT –to 192.168.1.20
iptables -I FORWARD -d 192.168.1.20 -p tcp –dport 990 -j ACCEPT

Something is probably changing the email before delivery, and now it it not valid. An antivirus and/or SPAM scanner could course this. If you are using ESVA Mail scanner this software is insetting a text in the email. This can be disabled.

ESVA Customization

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
“LegalNoticeCaption”=”Testing on top”
“LegalNoticeText”=”Test Test”

Download

Works in Windows 7

openssl genrsa -des3 -out “YOUR-DOMAIN”.key 1024
openssl genrsa -out “YOUR-DOMAIN”.key 1024
openssl req -new -key “YOUR-DOMAIN”.key -out “YOUR-DOMAIN”.csr

openssl req -noout -text -in “YOUR-DOMAIN”.csr
cat “YOUR-DOMAIN”.csr
Make a SSL request

copy the response to a “YOUR-DOMAIN”.crt

Edit this file:
/etc/httpd/conf.d/ssl.conf

Edit these two lines:
SSLCertificateFile /etc/pki/tls/certs/”YOUR-DOMAIN”.crt
SSLCertificateKeyFile /etc/pki/tls/certs/”YOUR-DOMAIN”.key

Restart apache

The problem is exchange 2003 (with SP2) by deafult only waits for 1 min.
That has to be changed.

HKLM\System\CurrentControlSet\Services\SMTPSvc
Create a new DWORD value GlitchRetrySeconds

Change the Base to Decimal
Set 360 for 6 min.

Restart the SMTP service.

The central components are Clam antivirus and spam assassin.
After the basic setup you might want to customize some thing that cannot changed in the wizard or GUI.

Change the amount of cashed mails:
- $days_to_keep = 180; in /etc/cron.daily/clean.quarantine
- define(QUARANTINE_DAYS_TO_KEEP, 180); in /var/www/html/conf.php
- INTERVAL 180 DAY in /usr/local/bin/mailwatch/tools/db_clean.php

/etc/cron.daily/clean.quarantine

$disabled = 0;
$days_to_keep   = 14;

The default signature:
/etc/MailScanner/rules
- sig.html.rules
- sig.text.rules
Blocked filetypes:
/etc/MailScanner/filename.rules.conf

Change the max message size:
In webmin – postfix - ”General resource control”.
An example is to add a zero.
Max size of a message: 102400000
Max size of a mailbox: 512000000
Or in /etc/postfix/main.cf: message_size_limit = 102400000
For 100 MB

Remove the “notify for SPAM”.
In the file: /etc/MailScanner/MailScanner.conf
Remove notify in the line:  Spam Actions = store notify

Remove the “MailScanner has detected a possible fraud attempt from…”:
Highlight Phishing Fraud = no

Remove the opportunity to read the emails in the Webinterface:
Edit /var/www/html/detail.php
Go the end and change the “view email” link.

// echo “  <TD><A HREF=\”viewmail.php……………..”</A></TD>\n”;
echo ” <TD>…</TD>\n”;

Default SPAM score:
/etc/MailScanner/MailScanner.conf
Required SpamAssassin Score = 5

Remove Inline HTML Signature
In the file: /etc/MailScanner/MailScanner.conf
# Add the “Inline HTML Signature” or “Inline Text Signature” to the end
# of uninfected messages?
# This can also be the filename of a ruleset.
Sign Clean Messages = no

Auto Reply – Out of office
Treat Invalid Watermarks With No Sender as Spam = 2

Script in the email
Allow Script Tags = disarm
Or yes/no

Office 2010 Fileformats:
Microsoft Office 2007/2010 documents (.docx, .xlsx etc) seem to be archived XML documents and MailScanner does not like that by default.

The solution is to put this in filename.rules.conf
allow   \.xml\.rel$             -       -
allow   \.rel$                  -       -
allow   \.docx$                 -       -
allow   \.xlsx$                 -       -
allow   \.xml\d*\.rel$          -       -
allow   \.x\d+\.rel$            -       -
allow   \.bin$                  -       -
allow   \.wmf$                  -       -
allow   \.dat$                  -       -

Put this just above the “# Deny all other double file extensions..” line

allow   .doc$                   -       -
allow   .xls$                   -       -
And in MailScanner.conf change Maximum Archive Depth to 3

Maximum Archive Depth = 3

This makes MailScanner recognize the Office 2007/2010.

Disable Fuzzyocr:
Rename /etc/mail/spamassassin/FuzzyOcr.cf to something else.
Restart Mailscanner

Disable SPAM and or AV scan
/etc/MailScanner/MailScanner.conf
Spam Checks = no
Use SpamAssassin = no
Virus Scanning = no

Enable Remote ssh login
/etc/ssh/sshd_config
PermitRootLogin yes
Restart sshd

If running virtual, ESVA might loose time
Make a file in: /etc/cron.daily
–
#!/bin/sh
#
/usr/sbin/ntpdate 195.184.96.2
date +”%D %r `echo Cron completed`” >> /var/log/cron_job.log
–
chmod +x ntp.cron

Remember RAM!
Do you see this error in the maillog:
“too big for available disk space in /var/spool/MailScanner/incoming, skipping it”

Mailscanner is using this directory temporality to unpack files before scanning.
By default ESVA have 1024 MB of RAM. Half of that size is used to the RAM-based filesystem.
Maybe 512 MB for unpacking is to small.
See FSTAB and change the size here
tmpfs /dev/shm tmpfs defaults,size=1024m

The easy way (if you have RAM enough), is to just give ESVA more RAM.

Allow EXE in zipped attachments
/etc/MailScanner/archives.filename.rules.conf
allow \.exe$ Windows/DOS Executable

/etc/MailScanner/archives.filetype.rules.conf
#deny executable No executables

Remember to update resolv.conf
If this file does not contain a IP of an vallid DNS, you might get this error in the log: “Recipient address rejected: Domain not found”
This is an exaple with openDNS
/etc/resolv.conf
search localdom.local
nameserver 208.67.222.222

chown -R www-data:www-data /www/MyWebsite/www

find /www/MyWebsite/www -type f -exec chmod 0644 {} \;
find /www/MyWebsite/www -type d -exec chmod 0755 {} \;

NET USE S: \\servername\share /USER:domainname\username password

servername = Name of the server
share = Name of the share
domainname = Name of the domain where the username is defined, if local user just remove it.
username = Username
password = Password

You just have to modify the rights a little bit.
On the terminal server open “Terminal Services Configuration” and right click on the connection.
In “remote control” choose “use remote control with…”.
In “permissions” add the super user and go to “advanced”. Add the “remote control” right.

If the users affected by the new rights were logged in, remember to log them off before the changes are working.

If you move this file to a new computer or just a new user profile, the information is active again.

The NK2 file can be edited with this program: http://www.nirsoft.net/utils/outlook_nk2_autocomplete.html

esxcfg-nics -l
Gives an list of your physical nics

esxcfg-vswitch -l
esxcfg-vswitch -l > textfile.txt
Gives an list of your virtual switch configuration. If you “pipe” it to a textfile it can be easily readed.

esxcfg-vswitch -L vmnic6 vSwitch0
In this example a physical nic is added to a vSwitch.

The connection has now been recreated

regex domainlist1 “\.dating\.dk”
regex domainlist2 “\.facebook\.dk”
regex domainlist3 “\.facebook\.com”
!
access-list inside_mpc extended permit tcp any any eq www
access-list inside_mpc extended permit tcp any any eq 8080
!
class-map type regex match-any DomainBlockList
match regex domainlist1
match regex domainlist2
match regex domainlist3
!
class-map type inspect http match-all BlockDomainsClass
match request header host regex class DomainBlockList
class-map inspection_default
match default-inspection-traffic
class-map httptraffic
match access-list inside_mpc
!
policy-map type inspect http http_inspection_policy
parameters
protocol-violation action drop-connection <— XX
match request method connect
drop-connection log
class BlockDomainsClass
reset log
!
policy-map inside-policy
class httptraffic
inspect http http_inspection_policy
!
service-policy inside-policy interface inside

Block all domains containing the word “facebook” ex: myfacebook.com

regex domainlist1 “.*facebook.*”

class-map inspection_default
match default-inspection-traffic
!
policy-map global_policy
class inspection_default
inspect pptp
!
service-policy global_policy global

———-
PPTP uses IP protocol 47 (General Routing Encapsulation / GRE) for data.
Allowing connections to be established – port 1723

How do you configure the firewall so only the “real” mail server can send out emails?

You do it with an access-list on the inside interface. This way you can control the outgoing smtp traffic and only allow one LAN IP to send out emails.

access-list acl_out permit tcp host 10.0.0.2 any eq 25
access-list acl_out deny tcp any any eq 25
access-list acl_out permit ip any any
access-list acl_out permit icmp any any
access-group acl_out in interface inside

Try this:
service pegasus stop
service mgmt-vmware stop
These commands may take some minutes.

ps -e f |grep vmware-watchdog
ps -e f |grep mgmt

Kill all processes you find:
kill -9 processid

Start the services (wait two minuets):
service mgmt-vmware start; sleep 1; service pegasus start

If it does not work try this instead:
service pegasus stop; service mgmt-vmware stop; sleep 30; service mgmt-vmware start; service pegasus start

–
service network restart.
–

vmware has a KB about this issue regerding:
mgmt-vmware restart script might not finish restarting the hostd
mgmt-vmware restart script does not finish restart the hostd.
The script gets stuck when stopping the service.
The SSH session to the ESX host becomes unresponsive.

KB ID: 1005566

A mounted floppy image on the old server could course the problem when upgrading the virtual hardware on the new host. The upgrade process can not be cancelled in the GUI so what do you do?

First, stop the hanged job by restarting this two services:

service vmware-vpxa restart
service mgmt-vmware restart

Then remove the VM from the inventory.

Edit the VM’s configuration by hand:
Set the floppy to false
floppy0.present = “false”

Disable other floppy properties
# floppy0.startConnected = “false”
# floppy0.fileName = “/div/vmscsi-1.2.0.4.flp”

Now re-add the VM to the inventory

Try to upgrade the virtual hardware now, it should work now.

How to avoid this to happen in the first place:
On the old ESX2,5 remember to remove floppydrives BEFORE migrating the VM to a new ESX3,5.

1)
login to the webinterface.
2)
Make a backup of the configuration, the output is a XML file.
3)
Edit the XML file in a texteditor. Make the changes and upload it to the firewall.
4)
monowall reboots

Configuration file:
You can insert the shell command inside <shellcmd and </shellcmd>
The whole thing has to be placed after </webgui> and before </system>

Se the example below:

</webgui>
<dnsserver>10.0.0.100</dnsserver>
<dnsserver>10.0.0.101</dnsserver>
<shellcmd>vmware-guestd –background /var/run/guestd.pid</shellcmd>
</system>

Restart the sshd server:
/etc/init.d/sshd restart

Configuration in SQL Server Management Studio
Click “All Programs” –> Click “Microsoft SQL Server 2005″ –> click “Microsoft SQL Server Management Studio”.
Log in to SQL Server 2005 with windows authentication or sa user.
Highlight the server and right click “Properties”.
Highlight “Security” –> Under “Server authentication”, choose “SQL Server and Windows authentication mode”.
Highlight “Connections” –> Under “Remote server connections”, choose “Allow remote connections to this server”.

Configuration in SQL Server Surface Area Configuration
Click “All Programs” –> Click “Microsoft SQL Server 2005″ –> click “Configuration Tools” –> click “SQL Server 2005 Surface Area Configuration”.
Click “Surface Area Configuration for Services and Connections” -> click “MSSQLSERVER” –> click “Database engine” –> click “Remote connections” -> Under “Local and remote connections”, choose “Using TCP/IP only” or other protocols.

Remember the “SQL server browser” service. It it ussed when connected from the outside.

To fix it enter the Exchange System Manager.
“Global Settings” –> “Internet Message Formats”.
Right click “default”. –> “Properties” –> “Advanced”.
Check the “allow out of office responses” box.

Give both of them a value of ‘a’ (don’t write the  ‘ ‘ )

It can be done with a script by Michael B. Smith.

Get it here, instructions inside.

terminal monitor

START http://www.microsoft.com/
START http://www.hp.com/
START http://www.ibm.com/

The file iperf.exe is used as client AND server.
The basic idea is that the client UPLOADES an amount of data to the server.
The speed of the transfer is then calculated.

For a deeper introduction watch this Flash guide.

An example:
Server: iperf.exe -s
Client: iperf.exe -c <server-ip>
(Speed is now uploaded to the server)

Use: iperf.exe –help to see options

—–

Test up and then down:

C:\>iperf.exe -c 192.168.0.199 -r
————————————————————
Server listening on TCP port 5001
TCP window size: 8.00 KByte (default)
————————————————————
————————————————————
Client connecting to 192.168.0.199, TCP port 5001
TCP window size: 63.0 KByte (default)
————————————————————
[1876] local 192.168.0.90 port 3975 connected with 192.168.0.199 port 5001
[ ID] Interval       Transfer     Bandwidth
[1876]  0.0-42.9 sec  1.13 MBytes   221 Kbits/sec
[1944] local 192.168.0.90 port 5001 connected with 192.168.0.199 port 4442
[ ID] Interval       Transfer     Bandwidth
[1944]  0.0-10.0 sec  41.5 MBytes  34.9 Mbits/sec

C:\>

Download reg file

HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Common\General
and the key: UserTemplates
type: REG_EXPAND_SZ

Just give it a value. (path to a folder)

If you can not find the key UserTemplates, Office is using the standard path:
C:\Documents and Settings\\Application Data\Microsoft\Templates

If you use KIX:
WriteValue(“HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Common\General”, “UserTemplates”, “c:\somefolder”, “REG_EXPAND_SZ”)

–

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.

–

It can be removed by edit this file: /etc/motd.tail

Make a scheduled job that runs the bat file.

DefaultUserName
DefaultPassword
DefaultDomainName
AutoAdminLogon (0 disable | 1 enable)

create a certificate:
openssl req $@ -new -x509 -days 365 -nodes -out /etc/apache2/apache.pem -keyout /etc/apache2/apache.pem
chmod 600 /etc/apache2/apache.pem

a2enmod ssl
/etc/init.d/apache2 restart

Edit the conf files:
NameVirtualHost *:80
NameVirtualHost *:443

SSLEngine on
SSLCertificateFile /etc/apache2/apache.pem

/etc/init.d/apache2 restart

C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\muweb.dll,LaunchMUSite

This example are from a Cisco ASA

access-list allow_inbound extended permit tcp any interface outside eq ftp
access-list allow_inbound extended permit tcp any interface outside eq 2950
access-list allow_inbound extended permit tcp any interface outside eq 2951
access-list allow_inbound extended permit tcp any interface outside eq 2952
etc.

static (inside,outside) tcp interface ftp 192.168.1.2 ftp netmask 255.255.255.255
static (inside,outside) tcp interface 2960 192.168.1.2 2950 netmask 255.255.255.255
static (inside,outside) tcp interface 2961 192.168.1.2 2951 netmask 255.255.255.255
static (inside,outside) tcp interface 2962 192.168.1.2 2952 netmask 255.255.255.255
static (inside,outside) tcp interface 2963 192.168.1.2 2953 netmask 255.255.255.255
etc.

Configuration on the ftp server:
General tab:
Specify address for passive mode: Write your public ip
specify port range for passive mode: Write 2950 to 3000

SSL/TLS tab:
Create a certificate.
Enable secure ftp through implicit ssl/tls and write using ssl/tls, only allow secure data transfers

That’s it!

Reboot

———————————-

If you use Ubuntu

sudo -i -u root
grub
find /boot/grub/stage1 (remember the output)
root (hdx,x)
setup (hd0)
quit

Reboot

ASA
crypto key generate rsa
In ASDM
crypto key zeroize rsa noconfirm
crypto key generate rsa noconfirm

—–
show crypto engine
show crypto ipsec sa

It is possible to “activate” this remotely with regedit.
find this regedit patch: HKLM\System\CurrentControlSet\Control\Terminal Server
Set this DWORD to 0: fDenyTSConnections

I you for an example want to start the display properties just start the file: desk.cpl
(could be done from run)

If you want to activate through a script
rundll32.exe shell32.dll,Control_RunDLL desk.cpl

The shortcut MAIL can be found here:
C:\Program Files\Common Files\System\MSMAPI\1030\MLCFG32.CPL

More info here.

On your computer make 3 directories.
TempSP3
Office2003
MSOffice2003

Put the servicePack file in the folder TempSP3
Extrakt the SP into Office2003 directory with this command:
C:\TempSP3\Office2003SP3-KB923618-FullFile-DAN.exe /Q /C /T:C:\Office2003
(depending on your chosen language, the name on the SP is different)

Make a administrative install of office 2003 with this command:
d:\setup.exe /a

During the install you have to use the serial number.

Slipstream with this commands:
msiexec /p C:\Office2003\MAINSP3.msp /a C:\MSOffice2003\PRO11.msi SHORTFILENAMES=TRUE /qb
msiexec /p C:\Office2003\OWC11SP3.msp /a C:\MSOffice2003\OWC11.MSI SHORTFILENAMES=TRUE /qb

To check the configuration, use this command:
show errdisable recovery

If something is disabled, it means you manually have to activate the port if this specific error has occurred.

It can all be done automatically with this commands:

errdisable recovery cause udld
errdisable recovery cause bpduguard
errdisable recovery cause security-violation
errdisable recovery cause channel-misconfig
errdisable recovery cause pagp-flap
errdisable recovery cause dtp-flap
errdisable recovery cause link-flap
errdisable recovery cause gbic-invalid
errdisable recovery cause psecure-violation
errdisable recovery cause dhcp-rate-limit
errdisable recovery cause unicast-flood
errdisable recovery cause vmps
errdisable recovery cause storm-control
errdisable recovery cause loopback
errdisable recovery cause sfp-config-mismat

Nothing has to be done on the server.
On the client in regedit find this path:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Terminal Server Client\Default\AddIns\RDPDR

Add a DWORD value: RedirectDefaultPrinterOnly = 1
Deactivate with 0

The client need Remote Desktop version 6.

More info  http://support.microsoft.com/kb/911913

RedirectDefaultPrinterOnly.reg

Bat-file:
cd C:\Program Files\Symantec\Backup Exec
bemcmd -o111 -d”HP 1″ -e1

first line enters the directory where “bemcmd” is localized.
second line runs a quick erase on the device “HP 1″.

003 Router: 192.168.1.1
006 DNS servers: 192.168.1.3
015 DNS Domain name: dom.local
044 WINS/NBNS Server: 192.168.1.3
046 WINS/NBT Node Type: 0×8

1)
The user running the agent on exchange MUST be visible in Global Address List. In Active Directory user properties be sure not to have “Hide from exchange address list” checked.
If your exchange is an standard setup and your using the administrator account in the agent, this is probably whey the error came.

2)
If not using the Administrator account, be sure to check that the used account is a member of Domain Admin and NOT a member of Domain Users.
The account also need to have the exchange role “full exchange administrator”.

This can be done in the exchange manager.
- Open Exchange System Manager
- Right-click on the First Organization (Exchange) root and select Delegate “EXCHANGE FULL ADMIN” to the user”.

Maybe an old print-job is stuck on the computer.
Go to: C:\WINDOWS\system32\spool\PRINTERS
and remove all the files.

Restart the printing service.

You need two files from the “Windows Server 2003 Resource Kit Tools”. Instrsrv.exe and Srvany.exe.
Run this command:

c:\reskit\INSTSRV.EXE “Your service name” c:\reskit\SRVANY.EXE
Now the service “Your service name” exsists on the server.

You now need to add the actual exe to be run by the service.
This is done in Regedit.
Navigate to this registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\”your service name”.Add Key and name it Parameters.

In this Add Value and type EXE information.
Value Name: Application
Data Type : REG_SZ
String:c:\your.exe

Links:
Windows Server 2003 Resource Kit Tools

Lock screen:
rundll32.exe user32.dll,LockWorkStation

Restart:
shutdown -r -t 01

Shutdown:
shutdown -s -t 01

There are different ways to remove it.

In Active Directory Group Policy:  ”Administrative Templates” –> “Start menu and Taskbar” –> “Remove Balloon Tips on start Menu items”.

On a standalone XP click “start” –> “run”. Type: “gpedit.msc”.

Computer Configuration –> Windows Settings –> Local Policies/User Rights Assignment –> Change System Time.

You can specify specific users and or groups.

38.107.179.211

38.107.179.211

Postfix
If changed mail.cf, do a /etc/init.d/postfix reload
If changed /etc/postfix/virtual run this command: postmap hash:/etc/postfix/virtual
postmap /etc/postfix/transport

Copy a hard-drive
dd if=/dev/hd_originaldisk-partition of=/dev/hd_nydisk-partition

MySQL Backup
/usr/bin/mysqldump -A -uroot -p[myCode] > /andet/backup.sql

Delete a folder containing files
rm -rf /remove/this

Create an empty file
touch file-name

Disk-use of an folder
du -sh folder

Format disk
cfdisk /dev/hda

Extract tar.bz2 to a folder
tar xzf file.tar.bz2

NMAP scan to a file
nmap -sS -PT -PI -O -T 3 10.0.0.*>file.txt

Change file and folder rights
chown martin filename
chown -R martin:martin FileAndSubFolders

chmod
- user group other
- 4 2 1 4 2 1 4 2 1
- r w x r w x r w x

Boot script in Debian
/etc/rc.boot/
Remember: #!/bin/bash
on top of the text files.

Set date and time
ntpdate

Search inside files
find /www/test.local/www/ -name * | grep -lir VALID_AZ09 *

Create sources.list
http://debgen.simplylinux.ch/index.php

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
auto eth0
iface eth0 inet static
address 10.0.0.40
netmask 255.255.255.0
gateway 10.0.0.1

Example 2 – DHCP
auto eth0 iface eth0 inet dhcp

Remember the DNS configuration in /etc/resolv.conf
nameserver 195.184.96.2
nameserver 213.173.225.86

Tips
Change (spoof) the MAC
ifconfig eth0 hw ether 01:23:45:67:89:AB