| |
| |
| |
|
Page: 1 2 3 4 5 6 7 8 9 10 11 12 13 14
<bofh`> that's why most people just use pptp
<Ta1oN> and for home users, that is much more than enough
<bofh`> easier
<blackdevl> ppppppppppppppppppppppppppppppppppppppptp
<bofh`> shaddup bd. :)
<blackdevl> sup
<Ta1oN> at work we use l2tp/ipsec with smartcards for example
<Ta1oN> but the endpoint is the isa server
<Ta1oN> which has a public ip of course
<bofh`> we don't secure anything. :)
<Ta1oN> unsecured remote clients = ta1on's fear O.o
<blackdevl> we use a cisco vpn 3000 concentrator with ipsec over udp
<bofh`> heh, my isa box doesn't have a public ip. :) but that's because it's behind another router. or rather, one router and one tnat device
<bofh`> don't have remote clients. :)
<bofh`> actually, do, but don't connect to the network, just use ssh-telnet gateway to connect to collections system. no unsecured traffic
<Ta1oN> and what i hated the most (before i could get the cisco aironet + ieee802.1x running), was wireless
<bofh`> yeah
<bofh`> lots of ooptions for that these days though
<Ta1oN> wireless is so... so... ewww... have no words for it :P
<bofh`> radius, 802.1x, vpn, etc. rather than the hhacked together things we used to do
<blackdevl> i wish i had radius for my home wlan
<blackdevl> we use airspace here
<Ta1oN> but with 802.1x/radius it is very nice
<blackdevl> its ****in cool
<DaveJ|UK> ANy ideas why IIS keeps applying read only permissions to my home directory?
<DaveJ|UK> i've tried resetting permissions in both IIS and Windows Explorer but it changes back immediately
<Ta1oN> what iis, what home directory, what read only permissions?
<Ta1oN> ?? specific
<CyberGeek> specific == BE MORE SPECIFIC! Please don't make us drag the details out of you. Don't say it doesn't work or it won't let you, describe what it looks like visually. Utilize those 3rd-grade story writing skills!
<Ta1oN> for starters, which iis version?
<DaveJ|UK> IIS on Windows XP pro. I have 1 site running; that home directory. when i use an sql update query i get "operation must use an updateable query". then i see the home dorectory, and everything else, has read only set.
<Ta1oN> why the hell are you trying to use xp's iis for more than just a static homepage? O.o
<lwek> Anyone know how to isntall certficates on a PDA?
<Ta1oN> if you want a webserver on xp, get apache... and that comes from someone which normally is a ms-*****
<bofh`> heh
<DaveJ|UK> Ta1oN: im just developeing the site. it saves me uploading. i thought that was pretty sensible.
<Ta1oN> but even i would never touch iis5
<Ta1oN> never again at least :P
<Ta1oN> anyway, can't help you with iis5+sql, sorry
<Ta1oN> but normally iis5 does not set read-only ntfs permissions automatically
<Ta1oN> or are you talking about the read only attribute of files?
<blackdevl> anyone talk to AngryMidget
<compdoc> naw, hes too angry
<pauliee> Hey i have 4 computers networked with router and dsl modem. I installed i.e. 7 on all computers windows legit. For some reason i'm not able to open "google.com" on all computers. Anyone know the reason for this? please any help would be appreciated.
<Ta1oN> do any other sites work?
<pauliee> yea
<pauliee> every other site works
<Ta1oN> and why the hell did you install a beta software on your real pc's?
<pauliee> weird, i never touched anything.
<pauliee> recently just didn't work
<pauliee> i.e.7 rox man
<pauliee> love it
<Ta1oN> yeah, maybe
<Ta1oN> but it is still beta
<pauliee> yea but no problems but this website
<Ta1oN> and you shouldn't use a beta software outside of a testing environment
<Ta1oN> cause you can never know what stability or security issues it could have
<^-Lord-^> not without ghosting first
<pauliee> i hear ya but today's lesson is not Teaching it's helping.
<pauliee> :)
<Ta1oN> personally i'll use ie7 too as soon as it is available, but not as long as it is beta
<Ta1oN> yeah, ok then do the following:
<Ta1oN> open a cmd.exe
<Ta1oN> type "nslookup www.google.com"
<Ta1oN> what do you get?
<pauliee> ip
<Ta1oN> what exactly do you get?
<pauliee> can't ping it tho
<pauliee> i get the website ip
<Ta1oN> copy/paste it on www.pastebin.com
<jak2000> Ta1oN then VPN with windows is INSECURE?
<Ta1oN> ?
<Ta1oN> who said that?
<^-Lord-^> it's secure...
<jak2000> i am reading lines... before wait
<jak2000> see:
<jak2000> <KSecDD> jak2000: l2tp is a documented standard. Check it out if you're interested. 128-bit keys are pretty much de rigeur for that sort of thing nowadays.
<jak2000> <bofh`> l2tp behind nat "doesn't work"
<jak2000> <Ta1oN> l2tp/ipsec over nat does never work
<Ta1oN> yeah, and?
<Ta1oN> that has nothing to do with security
<pauliee> hmm so do you know why this google site is not working?
<Webbie> works for me
<Ta1oN> pauliee, i said copy/paste the nslookup on www.pastebin.com
<Ta1oN> can't help you if you ignore what i tell you
<DaveJ|UK> Ta1oN: the problem is that the folders read only permission is set, so i cant update the database. it's not an issue with my code/sql.
<jak2000> Ta1oN, but i can use encrypt.... same as openvpn?
<Ta1oN> DaveJ|UK, the permission as in ntfs permission? or the folders read only attribute?
<Ta1oN> jak2000, in windows, every vpn connection is encrypted
<Ta1oN> if you use pptp then the encryption used is msppe
<Ta1oN> and if you use l2tp, the encryption comes from ipsec
<DaveJ|UK> In Windows Explorer, i right click, click properties, and read only is ticked. i untick it, go back in and it's ticked again.
<bofh`> ?? readonly
<Ta1oN> that is not a permission, DaveJ|UK
<CyberGeek> readonly == That little grey box that's half-checked in grey? No, it's not true read-only, it's a Microsoft thing. If you want true read-only, you need a WHITE box with a check in it. See http://support.microsoft.com/default.aspx?scid=kb;en-us;326549
<bofh`> go read that, DaveJ|UK
<Ta1oN> yeah, and what bofh` said
<Ta1oN> this is NOT read only
<DaveJ|UK> my bad
<Ta1oN> read only on folders does not really exist on ntfs
<Ta1oN> it does, but it is special
<Ta1oN> so the attribute you see there checked, is NOT the cause of your problem
<Ta1oN> cause it has nothing to do with read only or not
<jak2000> Ta1oN, ok, by sample, openvpn, generate a key of 128 bits, ONLY the client that have it... can enter (of course ask too a username and p***word....) is possible with windows?
<Ta1oN> jak2000, yes, use l2tp/ipsec with certificate authentication
<Ta1oN> you can have much more than just a 128bit key encryption with that
<jak2000> ahh ok
<Ta1oN> but if you really want security, get windows2003 instead of xp
<Ta1oN> and use the real ras/vpn server there
<jak2000> any urls that recommend me for read?
<Ta1oN> !google l2tp site:microsoft.com
<CyberGeek> http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B818043
<jak2000> !google ipsec site:microsoft
<pauliee> ok ta1on posted
<Ta1oN> http://search.microsoft.com/search/results.aspx?st=b&na=88&View=en-us&qu=l2tp+ipsec
<Ta1oN> then give us the link, pauliee
<jak2000> Ta1oN, ok, other q: i need in 1 side a ip static, right?
<DaveJ|UK> Ta1oN: both read and write are ticked for this file/folder in IIS
<pauliee> what's that?
<pauliee> what link?
<Ta1oN> *sigh*
<Ta1oN> jak2000, vpn works in windows the same as everywhere else, read up on vpn in general first
<Ta1oN> we won't give you a step by step instruction for vpn, cause that would take too much time
<Ta1oN> DaveJ|UK, then it is allowed to read and write from the folder
<Ta1oN> iis controls permissions via ntfs permissions
<Ta1oN> so check them
<Ta1oN> make sure your sql server has access to the folder, and the same for iis
<Ta1oN> pauliee, the point in pasting on pastebin.com was to show it to us
<jak2000> Ta1oN, i ask because if need a static ip i solve it with no-ip by sample right?
<Ta1oN> after pasting it, you got a link, which you should tell us :/
<Ta1oN> so that we can see it
<Ta1oN> jak2000, if you mean a static ip for your internet access, then no, you could just get a dynamic dns host
<jak2000> ok....
<Ta1oN> if you mean a static ip for the vpn server, then yes, it should have one
<pauliee> ****
<jak2000> Ta1oN: if you mean a static ip for the vpn server, then yes, <----- not work fine no-ip domain??
<pauliee> i need goooooooooooooooogle lol.
<Ta1oN> if you need a dynamic dns host, there are many free ones
<Ta1oN> jak2000, a vpn server has normally 2 intefaces
<Ta1oN> one pointing to the internet, and one to the local lan
<Ta1oN> the internet interface can have a dynamic ip, as long as you know it
<Ta1oN> the lan interface should have a static ip though... it is not mandatory, but recommended
<jak2000> yes i know, no problem....
<jak2000> what is the speed recommendable for a good vpn connection? adsl 256?
<Ta1oN> depends on what you want to do over it
<Ta1oN> with pptp you can use like 2/3 of the bandwidth most of the time
<Ta1oN> with l2tp even less... maybe half
<Ta1oN> [18:12] <pauliee> i need goooooooooooooooogle lol. <- ok, again, if you want help, do the nslookup, and then paste us the results
<Ta1oN> use pastebin.com, cause pasting it in the channel will probably get you kicked
<jak2000> or use:
<jak2000> http://rafb.net/paste
Return to windowsxp
or
Go to some related
logs:
chatzone
canada
kbfx them
linux "what does Xorg do"
|
|