htsource

This is more of a network hardware question than MS Windows, hope you guys don't mind. I'm trying to hook up the 3Com 3300 24-port managed switch to the Cisco Catalyst 3500. 3Com doesn't have an uplink port neither does the Cisco. I'm using port 24 and a crossover cable but the link status light would not light up no matter what I do. However, if I put a 5-port Linksys switch in between the 3Com and Cisco like so: Cisco 3500 --> Uplink Linksys 5-Port --> 3Com 3300 It's working okay. I just wanted to find out if it's a configuration issue such as VLAN's or it's somewhere else? So far there's no VLAN setup on both switches, they're set to their defaults. Thanks for your help, Simon

Hi, I was the one who posted a while ago about external DNS not working. I've since reverted back to forwarders instead of using root hint servers. So far it's working just fine so I'm suspecting it might be the DNS problem from my ISP. The point of this post is I don't think it's a known problem with Server 2000 as it was working for me for more than a year or so and it's working now again. Thanks, Simon

Hi, I have a full W2K Server Active Directory running on my network and lately for the last few days, all of a sudden, AD will lose Internet connection. Basically, the box is also handling DNS queries and DHCP. Any internal DNS queries belongs to my LAN are okay, but whatever from outside is not working (i.e. ping www.google.ca). I'm not getting any errors through Event Viewer and if I restart DNS Server through Services, everything is back up again. It's getting annoying as all the clients are connected to this box and I have the forwarders set up to go externally. Therefore if this box is not connecting to the Internet, nobody else can from the LAN side. I checked the forwarders and they all matched the WAN DNS servers. I haven't changed any of the settings and it was running very stable for a long time until now. Any pointers as to where to look would be really appreciated. Thanks, Simon

Hi guys, Thanks for all the suggestions. I checked and I don't have "." zone in DNS. I had to reboot the day after I posted my initial post and it's been working fine since. I'm not sure if it somehow fixed itself or what. The server has SP4 and all latest MS patches. Thanks again for all the help, Simon

Hi clutch, Thanks for your response. I have 2 NICs but one is disabled in Windows and it's wireless and server has single IP. The DNS server is referencing itself for its TCP/IP properties. There's only 1 IP entered and that's true for the rest of the computers in the LAN side. I have 4 IPs setup in the forwarders and they are from the Linksys router. Thanks, Simon

Hi again, After a bit of lookup on Google, I was told NOT to use forwarders but instead use Root Hints Servers. For the forwarders, I was using whatever DNS servers from the router from my ISP. For Root Hints, server name is the Linksys router with the router's IP. Is this the correct way to set up root hints servers? Should I add the DNS servers from my ISP's as well? I need a server name though on top of the IP address, how do I find out what DNS server names my ISP use? Sorry for so many questions but I'd like to get this problem resolved. P.S. After I configured Root Hints Server and disabled forwarders, Internet still working fine. Thanks, Simon

I currently have an older PC that's acting Active Directory and I'd like to transfer all data to the new one or I can set up a 2nd PC and make them to run parallel. All clients are logged in to the active directory so I need to make sure if I do transfer data over to the new one, I won't have to recreate profiles on client PCs. I understand with Active Directory, there's no more PDC and BDC. Thanks for your help and happy holidays!

When I installed XP Pro on my laptop, I made some security changes to Administrator profile so only the Administrator can touch C:\Doucments and Settings\Administrator. Not even the Administrators group can access the files inside. I have some financial documents in that profile and I want them to be secure as much as possible. However, there are some side effects to this. If I login as Administrator and files get changed. All files that got modified/created by Administrator will be unlocked by Administrator only. If I login as another user and try to access files in C:\Program Files, it gives me permission denied. Is there any way to reset all file permissions to its default? Your help is much appreciated, Simon

I have a Linksys WAP11 as well as a Linksys router behind the cable modem. My main PC (Domain Controller) has 2 network cards which I was told I could tap the WAP11 to the 2nd network card for better protection and to create separate network for wireless. The question is how? My home has 5 PCs and all Windows XP/2000 based. 1 PC is Domain Controller and I'd really like to explorer the possiblity of securing my WAP11. I enabled MAC filtering and disabled SSID broadcast. My TrueMobile Dell card doesn't like encryption so I can't enable it. I also have a Linksys WPC11 card but the Dell one has better reception. Anyway, what I was thinking is to secure the wireless LAN by limiting certain addresses to pass through to the wired LAN. For example, if I have only 1 laptop using wireless, then there should only be 1 IP to have access to the wired LAN, the rest should be ignored. This way, I can prevent others tapping into my wireless LAN, am I right? Thanks for your help, Simon

I just upgraded my PC from P3 Celeon to P4-1.6GHz with an Asus P4S333 MB. I installed W2K Server on the weekend and everything went fine. This afternoon I bought the iPanel and I can't get Windows to boot anymore. It would hang at Starting Windows 2000 and from time to time, I get a message telling me I need to reinstall ntkernal.exe. Well, if I need to re-install the OS because of this, I'll return the iPanel. But I don't think putting in add-on like this would upset Windows. Ahy thoughts are welcome, thanks. Simon

Klark, My domain controller is "htsource.com" as well as my site hosting by IIS on a different server but the same network. Now, if I'm inside the home network and I type "www.htsource.com", I get page not found. If I type in the same URL but from outside the home network, everything works fine. I have frame-forwarding setup with BuyDomains so it goes to my IP address automatically. Do I actually need that if I have my own DNS server? Anyway, I'm a newbie when it comes to DNS setup, Names Server, etc. Here's some details about my DNS setup in Domain Controller: Forward Lookup Zones - htsource.com Name: (same as parent folder) Type: Host Data: 192.168.1.103 Name: (same as parent folder) Type: Start of Authority Data: [82], pic_frame.htsource.com. Name: (same as parent folder) Type: Name Server Data: pic_frame.htsource.com. The server name is "pic_frame" for the Domain Controller and the IIS server is "web_server". Your help is much appreciated.

I was just wondering if I need to re-run the wizard to get the latest URLScan security in place. I have URLScan 2.0 installed and configured and when I double-clicked on the new 2.5 Update, it told me it udpated the software and it was successful, but I'm not sure if I should rerun the wizard. Thanks for your help, Simon

Norton Ghost is a nice program for imaging hard drives. However, Ghost will work only if you had a second hard drive or second partition. The way I would work is add a second hard drive to the system, then run Ghost to image C: to file and leave the files on D: with max image size of 640MB. Later on, you can burn these files to CDs and use them to restore the system if needed.

Is it a good idea to throw ZoneAlarm on Windows 2000 Server? Would it interfere IIS? I would also like to know if there's a way to block IP addresses in IIS? I know how to do it to individual site but I want something to apply to all sites. I have 4 different web sites running on my IIS server. Your help is much appreciated.

Steven, Any versions of ZoneAlarm should work with your Linksys router. In fact, I had 2.61 installed long time ago with my router and they worked just fine. The ZoneAlarm version designed for Linksys has some add on features but I can't spend like $100+ for 3 copies of ZoneAlarm. I might put back 2.61 on my server though since I like ZoneAlarm a lot and the ease of use. Hope it help,

Thank you for your reply. I'll try to get the version that's good for my Linksys router. Don't know the real difference between the normal version and the one designed for Linksys router. Also, I found out how to block IP addresses for all web/ftp sites. All you need to do is to right click on the server name from IIS Snap-in and select Properties, then click on Edit under Master Properties. Now I wonder if there's any script I can get so that it will automatically monitor IIS Log and block hackers automatically by adding IP address to the block list. Thanks again

I was wondering if there's a reference guide somewhere that tells me what these 401, 404, 403 codes represent? Thanks

Clutch, thank you very much for your information. Just what I needed.

Hi, I have the following set up in my home network: a) Linksys router with DHCP disabled PC running W2K Server - is a domain controller, DHCP Server, DNS Server c) all Windows clients are using the following: Gateway: 192.168.1.1 (Linksys router IP) IP: 192.168.100.1 (1-4 for all PCs in the house) Subnet: 255.255.255.0 for all PCs DNS Servers: 192.168.1.101 (Domain Controller), 24.100.101.24 (from cable company), 24.xxx.xxx.xxx (from cable company), etc. d) Server setting: Gateway: 192.168.1.1 IP: 192.168.1.101 Subnet: 255.255.255.0 DNS: 127.0.0.1, 24.100.101.24, 24.xxx.xxx.xxx, etc. The problem is everything will work fine for about 15 mins, all of a sudden, I can't get on the net anymore or I'll get the timeout error. If I bring up a DOS prompt, I can ping www.yahoo.com or any web sites. Any help would be much appreciated, thanks.

The problem is fixed by preventing DNS service from loading at bootup. Weird but it did the trick. Thanks anyway for all your suggestions.

It's not a typo, I CAN ping www.yahoo.com even though I can't browse anymore from a browser. Basically, when the connection is out, at the bottom of the page, it'll say contacting 209.xx.xx.xx (whatever the IP address of the site) instead of contacting www.yahoo.com. I don't know if that show any clues. Thanks

Hi, I'm trying to host my personal web site on my Windows 2000 Server, but I'm not sure where to start, can you guys shed some lights? Here's some background information: I have a Linksys router (4-port) and the 2K Server is behind the router with port 80 forward enabled. The 2K Server is a Domain Controller with a name mydomainname.com. Right now, I have bought a few domain names and I'm using URL forward to point to: http://209.xx.xx.xx/personalweb Is there any way I can point it right to my 2K Server instead of using URL forwarding? I'm sorry if this is confusing because I'm not sure how to explain it Also, is it possible to add a 2nd web site? My main one I enable Terminal Server web and my personal web is part of it. Now, what I want is to move my personal web to a separate spot so I can restrict IP incoming for the Terminal Web connection. But so far I have no luck getting it to work properly. Thanks for your help.

Okay, the problem is happening again even with the MTU enabled. If I reset the router, it will work again but not for long. It's strange though, only IIS WEB/FTP sites are working. Everything else is fine such as pcAnywhere ports. If I change the port number to something else on both IIS and router, it will work but then it will eventually die after a while. I'm now using ports like 1600, 1700. Should I be changing to something else? If I leave the HTTP port 80, it always work so now I'm thinking the problem is IIS. Thanks,

Hi clutch, That's weird, isn't it? I had the MTU setting like that for a long time. Our company has CheckPoint SecuRemote and I've trying to get it through Linksys with no luck. I was suggested to change the MTU setting and that's why I left it on. Few days ago, after I got the IIS server running, I went back to Linksys and thought it was time to do some clean up. I disabled the MTU and that was the time I started seeing things went wild on me. Changed the MTU setting as it was, everything was back to normal.

Never mind, I solved the port forwarding problem by changing the default MTU size to 1492.