J.R.'s IP and Security Tools

Custom Search

Updated/Revised on Saturday June 12, 2010 12:00 AM Eastern
Yikes! Haven't done much updating for a while. What can I say, I'm a busy guy.
CTRL-F to find stuff in here. I am working on a new layout.

Daylight Savings Time Changes(AKA The Mini-Y2K bug) - Moved it to it's own page.
Email server stuff - Anything related to Exchange, Antispam, and email.
Misc Stuff - Just a temp dump of links I find.
SonicWALL - TechNotes for SonicWALL devices.
WSUS - WSUS v3 setup files and related
Cisco Related - Tech Notes

Need something to listen to?

RIT NDT server - Speed Test - Java
Time Warner Speed Test - Northeast (Updated Link)
Verizon Online - FiOS Speed Test and Verizon Online - FiOS Speed Optimizer
testmy.net :: Broadband Speed Test and Internet Bandwidth Community
SpeedGuide.net
FireEye Malware Intelligence Lab: Srizbi rootkit removal instructions

These are some of the tools our techs use both at the shop and on-site. Click on a link above or below and the link will open in a new browser window. The speed, line, and tweak tests are not recommended for 56k dial-ups. Latest additions/modifications are highlighted in red.

J.R. was a very proud member of

Daryl's Subnet Calculator - A simple subnet calculator that runs in your browser.
Daryl's TCP/IP Primer - You want to learn everything about TCP/IP? This is one of the best primers out there.
BroadBandReports AKA DSLReports - THE place to go to get all the info you need about broadband connectivity. All types are covered, including cable, wireless, and satellite.
Internetworking Tech. Overview by Cisco - Explains about the technology behind your connection.
Line Test by DSL Reports - Line Quality Test. (Note: You must be a member of DSLReports in order to use this. Membership is free, however :).
Open Port Check Tool - Enter a port # to find out if the port is open to you from the 'net.
Samspade.org - Common IP tools like WhoIs, Tracert, DNS Query, etc. that runs in you browser. A browser plug-in is also available. An excellent tool to help track down IP address.
Security Tools  - Various security links, tools, patches, and info to help plug up those leaky holes in your broadband connection.
Speed Test by DSL Reports - Test your connections "true" throughput.
Tweak Test by DSL Reports - Checks to see if your IP connection needs tweaking.
Visual Trace Route - Trace a connection from a high-speed line in Dulles, Virginia to any IP or DNS address. (Note: The other connections are now dead, but will be updated when they're available.
What's my public IP address? by DSLReports - Find out what your public IP address is.

Vista Info: - Tidbits on things about Vista
On a personal note: I can't stand Vista, and do not recommend it at all! There are WAY too many issues to even start listing here. I consider Vista to be a bigger public beta than XP ever was. And the irony is that you pay to use a beta product! Windows 7 will be the real Gold release of Vista, I hope. For some proof of this, take a look at this Register article: Windows 7 early promise: Passes the Vista test • Channel Register

• What are the N versions all about? - "(versions of) Windows Vista Business (and Home) N includes the same functionality as Windows Vista Business (or Home), except that it does not include Windows Media Player and related technologies such as Windows Movie Maker. As a result, you will need to separately install a media player in order to play or create audio CDs, media files, or personal videos; organize media library content; create playlists; transfer media to portable media players; share photos on a home network; or perform other media player-related tasks. Other features including Sync Center and Group Policy are also affected.

MISC Stuff:

• Welcome to Petri.co.il IT Knowledgebase - Fantastic site with lots of tips and tricks (Yes, these pages should be like this. I'm working on it. ;)
• Microsoft Virtual Server 2005 Migration Toolkit
• VMware Converter for workstation to virtual pc and virtual machine migration: VMware - VMware
• Virtual PC Guy's WebLog : Using Virtual PC for computer migration
• Windows Vista Volume Activation 2.0: Step-by-Step Guide
• Windows Vista Volume Activation 2.0: Technical Guidance
• Manually remove Exabyte Tape/Autoloader drivers.
• Changing a Symantec AntiVirus client (v8 - v10) from managed to unmanaged
• Changing a Symantec AntiVirus 8.x or 9.x client installation from unmanaged to managed
• Changing a Symantec Client Security 3.x or Symantec AntiVirus Corporate Edition 10.x client installation from unmanaged to managed
• Windows Server 2003 Active Directory Domain Rename Tools
• Error message when you try to use the Rendom.exe utility to change the NetBIOS name of a domain in Windows Server 2003 SP1: "rendom /execute : error 13"
• Dunno why we still find uneducated admins doing this, but here is the information about configuring Windows for domains with single-label DNS names.
• You receive event ID 7000 even though Network Load Balancing is not installed - Windows 2003 Server
• "NLB Failed to Start" Error Message on Windows 2000 If NLB Is Not Installed
• Installation of the Windows SBS 2003 Transition Pack may silently fail on a Windows SBS 2003-based computer
• Description of Software Update Services and Windows Server Update Services changes in content for 2007
• Description of Software Update Services and Windows Server Update Services changes in content for 2006
• Description of Software Update Services and Windows Server Update Services changes in content for 2005
• Windows Server Update Services (WSUS) Technical Library
• DDInstall Section - Wanna change a Device to make it un-removable? Change the Characteristics of a driver to 0x2x where x=existing #. Example is 0x29 for the WAN Miniport drivers (0x1+ 0x8 = Virtual Adapter + Hidden) If it's 0x10, then it would be 0x30 (If this is possible, I have no idea. Not tested). Located in HKLM\System\CurrentControlSet\Control\Class\<GUID of device>
• How to Use Jetpack.exe to Compact a WINS or DHCP Database
• How to restore deleted user accounts and their group memberships in Active Directory
• Just because I always forget how to do this: Memory Size Specifications AKA: How to read the ddXww numbers on memory sticks.
• Semiconductor Manufacturing: Reverse Engineering of Semiconductor components, parts and processes for Semiconductor Distributors | Chipworks - Might be a good place to find chipset IDs and the makers.
• Download details: Group Policy Management Console with Service Pack 1
• Upgrading Windows 2000 Group Policy for Windows XP - So you can add Firewall and other policies to your Win2000 GP.
• edwalt's - Things I Wish I'd known about Small Business Server...... : Removing WSS 3.0 Companyweb Upgrade - Restoring WSS 2.0 on SBS 2003
• Companyweb & Sharepoint v3 - Part 5 - Aimless Ramblings from a Blithering Lunatic . . .
• Or, as they say, "Just Google it!": change companyweb - Google Search
• "The Permissions for This GPO in the SYSVOL Folder Are Inconsistent with Those in Active Directory" Message When You Run GPMC
• Windows 2003 service pack 2 known issues on Small Business Server 2003
• Prevent people from using PST files.
• How to configure RPC over HTTP on a single server in Exchange Server 2003
• Synergy - Use one KB and mouse across two or more computers, no matter the OS - And no, I'm not talking about a KVM solution.
• How to Remove Files with Reserved Names in Windows and the RM.EXE file (You have any idea how hard this is to find nowadays?)
• Get IT Done: Print Migrator eases the move from Windows NT to Windows 2000
• Printer Properties Pro: Mover - Works beautifully, just nag screens pop up when the client is run on the workstations and is limited to 3 printers. EXE
• Ask Dr. Bob Your Windows NT Questions (December 1998) - Article contains another way to "migrate" printers and moving user profiles across different domains.
• Windows SharePoint Services 3.0 Technical Library
• Ban IPs attempting to login via dict. attacks. - VERY handy script to block FTP attacks. Even better, if you use If Not then you can block ANY bad username. Here is my modified version that bans anyone not authorized, or frells up the password: BanFTPAttack.vbs Will post up how to add this as a service once I've tested it.
• FTP Security - Block attacks on FTP server - When I tested this the service wouldn't start (marked for deletion), because it requires the Web Service, so not a good solution if all the server is running is FTP.
• Windows 2000 SP4 Support Tools
• Moving Symantec Client Security 3.x or Symantec AntiVirus Corporate Edition 10.x clients from one parent server to another
• Geeky Ramblings » The local policy of this system does not permit you to logon interactively
• Windows Server 2003 SP1 Slipstreaming - Also instructions for creating an bootable ISO image.
• ISO Recorder v 2 - Adds stupid-simple support to burn an ISO image on Win2k3/XP. Just double-click on an ISO and burn it.
• trimMail’s Email Battles · How To Override “Access Denied” and “Sharing Violation” Roadblocks
• OpenedFilesView - View opened/locked files in your system (sharing violation issues)
• Slipstreamed Driver Installation of SBS 2003
• How to slipstream hotfixes that replace pre-existing driver files
• Migrating Windows Small Business Server 2003 to New Hardware
• WinSCP :: Free SFTP and FTP client for Windows
• How To Find Servers That Hold Flexible Single Master Operations Roles
• How to migrate a printer server configuration between Windows NT 4.0 or Windows 2000 computers with the Printer Migrator 2000 Tool - NOTE: This only migrates settings from one server to another like-server (NT to NT or 2k to 2k). This will not do the users PCs and is rather dated!
• Microsoft Windows Server 2003 Print Migrator 3.1 - Word DOC and Download link
• Quickly Find Local Open Ports
• CSVDE -f Export examples user accounts from Active Directory to spreadheet
• rdp port configuration - Google Search
• When you run Dcpromo.exe to create a replica domain controller, you receive the "Failed to modify the necessary properties for the machine account. Access is denied." error message - Ran into this when I was trying to dcpromo a new server onto an existing SBS2003 domain. Added Administrators and it worked.
• Windows SBS Upgrades and Migration and some specific articles:
  Migrating Windows Small Business Server 2003 to New Hardware
  Migrating from Small Business Server 2000 or Windows 2000 Server to Windows Small Business Server 2003
  Migrating from Small Business Server 4.5 or Windows NT Server 4.0 to Windows Small Business Server 2003
• How to determine the appropriate page file size for 64-bit versions of Windows Server 2003 or Windows XP
• I ran into a big issue with a 2008 server that took me forever to diagnose. Two things caused the problem:
  1. Symantec AV 10.2.1 was installed, so for the sake of my sanity (what's left of it anyway) I removed it. (My server just wont ... let ... go and MR3 Locks up Server 2008 file shares - Symantec Endpoint Protection 11.x - STN Peer-to-Peer Discussion Forums)
  2. The DNS Server service was opening so many ports that the server ran out of ephemeral ports (Default is 5000). Over time, this caused MAJOR issues with all of the client PCs trying to connect to the directory services (Drive mappings not working, logins not working, etc.). I saw a HUGE amount of CLOSE_WAIT states on the microsoft-ds port 445 that would never close. What fixed the issue was editing the TCP/IP settings to allow for a much larger list of ephemeral port numbers (In my case, I changed it from 5000 to 50,000 ports). Here are references to that:
  When you try to connect from TCP ports greater than 5000 you receive the error 'WSAENOBUFS (10055)'
  The default dynamic port range for TCP/IP has changed in Windows Vista and in Windows Server 2008
  Microsoft Windows 2000 TCP/IP Implementation Details.
  Now the big question is WTF is DNS Server opening so many ephemeral ports?!?! UPDATE: AH HA! Found out why. Damn thing is using up 2,500 PORTS!!: You experience issues with UDP-dependent network services after you install DNS Server service security update 953230 (MS08-037)
  NOTICE! If you are running SBS, watch how far you go! Here's why: Some services may not start or may not work correctly on a computer that is running Windows SBS after you install the DNS Server security update 953230 (MS08-037)
• Microsoft root certificate program members - Updated monthly. Good source of legit SSL certs that play nice with Windows.
• How to correct "disable Autorun registry key" enforcement in Windows - This should now be patched with the latest critical updates.
• When a Windows NT 4.0-based computer tries to use the NETLOGON service to establish a security channel to a Windows Server 2008-based domain controller, the operation may fail. - I think this also applies to Win98 machines. Still have to check on this one.
• Fix for license issue when trying to RDP into 2008.

SonicWALL

• SonicOS: Configuring Multiple Subnets Using Static ARP with SonicOS Enhanced - If the link doesn't work, then you'll need a MySonicWALL account and then click here.
• SonicOS: How to configure WLAN Interface in L2 Bridge Mode (WLAN and LAN on same subnet)? - Resolves the issue with the WLAN devices not able to see devices on the LAN subnet through NetBIOS names.

WSUS - Updated with WSUS 3.0 SP2 info, including fixes to SBS2008/2003 when SP2 is installed.

• If you're install WSUS on Server 2008 R2, you can install it through the Add Roles Wizard. Then you will only need the SP2 file below. :)

• The following software is required for running WSUS on Windows Server 2003 Service Pack 1:
      Microsoft .NET Framework Version 2.0 Redistributable Package
      For 64-bit platforms, go to Microsoft .NET Framework Version 2.0 Redistributable Package
      Microsoft .NET Framework Version 3.5 Service pack 1 - Needed for WSUS v3 SP2. For 32 and 64 bit versions.
      Microsoft Management Console 3.0 for Windows Server 2003 (KB907265)
      For 64-bit platforms, go to  Microsoft Management Console 3.0 for Windows Server 2003 x64 Edition
      Microsoft Report Viewer Redistributable 2005 - For both 32 and 64 bit versions. Use the SP1 version below.
      Microsoft Report Viewer Redistributable 2005 SP1 - For 32 and 64 bit versions.
      Microsoft Report Viewer Redistributable 2008 SP1 - Needed for WSUS v3 SP2. For 32 and 64 bit versions.
      WSUS 3.0 SP1
      WSUS 3.0 SP2 - New version released on 2009-08-25
      WSUS 3.0 if you really need it (Hint: If you have v2 installed, look for an 81 Meg file in the Dist folder with a date modification around 5/11/2007)

• Software updates are not managed by SBS 2003 Update Services after you upgrade to WSUS 3.0 Service Pack 1 or 2 - When it "breaks", it's a PITA to fix. This article has fixed two of my clients so far. Thing to note: If you've integrated the WSUS database into SQL Server, then the command line syntax is osql -E -i C:\FixR2.SQL

• WSUS Forums

• These three posts will assist in getting WSUS 3 working again if SP2 doesn't update correctly. Personally I'm very touchy about doing SP2, but it is required if you have any Win7 PCs on your SBS domain.
      Repairing WSUS 3 on SBS 2008 - THE OFFICIAL BLOG OF THE SBS "DIVA"
      Re: FYI: Do not delete Computer Groups SBS2008 WSUS 3.0
      WSUS Problem on SBS 2008 - Small Business Server

Cisco Related - NOTE: Most of these will require a CCO account login!!

• Password Recovery Procedures - Cisco Systems

Our (now defunct) Wireless Connection  - A description of the WLL that we had at MicroTECH.

Internet Gateways - Here's a very small list of hardware gateways available. There are just too many to list, so I will only list ones I have worked with.

D-Link DI-701, DI-704, DI-707, DI-711, and DI-713
DI-7xy:
x = 0 CAT5 only x = 1 Wireless and CAT5
y = Number of CAT5 ports
DI-701 with v3.20 firmware Security Scan Results. Perfect Security score of 0. Only the IP address could be pinged and all ports were stealthed! Nothing had to be changed to get this result, BTW. This is the best result from the DI-701 yet.

NetGear Wired Internet Gateway Routers and NetGear Wireless Internet Gateway Routers

NOTICE! Even though Cisco has bought them out, I still no longer recommend Linksys routers as I have run into way too many issues with them over the years. A perfect example is my own two BEFSR11 routers. Both have proven to fail under pressure, locking up when I push a lot of bandwidth through them. And several clients I've worked with have run into the same issues. Other routers I've tested have had no problems with the same amount of BW, so I will just chalk it up as bad over-all design. I've also run into an issue that STILL hasn't been fixed. If you update the firmware past v1.44.2 (Dec. 13, 2002), the VNC protocol will no longer work, both inbound and outbound. This bug has been reported since v1.45.6 (June 24,2003) was released (when the VNC protocol first broke), and it still doesn't work (last that I knew of). So I will be happy sitting behind my Cisco PIX 501 until it's eventual EOL.

Linksys BEFSR11 and BEFSR41
Security scan results: Old Firmware (v1.21)  v1.36 (all versions past v1.36 have reported "perfect" results)

NOTE: If you haven't updated your firmware for the Linksys products, do so ASAP. The v1.36 and higher firmware with the default settings resulted in a perfect score of 0, plus it wasn't pingable. The unit I tested showing the scan results above was fresh out of the box.

As mentioned above, I still don't recommend the Linksys products due to the bad security scan results I got from DSL Reports, and the problems people have been reporting. Three ports were reported open, and NOTHING should have been open at all! One of them was the TFTP port. This could have lead to someone updating the firmware (or even corrupting it) from the Internet! Yikes!! They have revised the firmware since the original test, so the new scan resulted, out of the box, in 100% better security. However, the routers can be configured to allow these ports to be accessible from the Internet. So be careful with your settings.

And still my personal favorites and secure, but more expensive SonicWall Products, CISCO PIX 500 Series, and Cisco ASA 5500 Series Adaptive Security Appliances (Slowly replacing the PIX Series).

Used times