[NTISP Digest]

ntisp-digest-request@iea-software.com
Fri, 31 Jul 1998 00:00:32 -0700

Message 1: RE: Restrict access by referer
from "Richard Lachance" <richard@vircom.com>

Message 2: Re: RAID 5 Partitions
from "Majordomo@essex1.com" <majordomo@essex1.com>

Message 3: Re: Restrict access by referer
from Robin Lister <robin@flicks.com>

Message 4: Multilinking
from "Kevin Ingram" <kingram@cameron.net>

Message 5: IIS 4.0 FTP or Frontpage 98 Server Extension/RadiusNT/SQL Authentication.
from "Rudy Komsic" <rudyk@cyberglobe.net>

Message 6: Re: RAID 5 Partitions
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 7: Re: IIS 4.0 FTP or Frontpage 98 Server Extension/RadiusNT/SQL Authentication.
from "Michael Watson" <mwatson@pdragon.com>

Message 8: Re: IIS 4.0 FTP or Frontpage 98 Server Extension/RadiusNT/SQL Authentication.
from "Rudy Komsic" <rudyk@cyberglobe.net>

Message 9: RRAS & Setting Ip address
from "mauro" <mauro@citynet.net.ar>

Message 10: Interesting Project for intertying NT User Manager with Emerald Database
from "Rudy Komsic" <rudyk@cyberglobe.net>

Message 11: NT Memory Leak
from "Steve Coleman" <scoleman2@csolutions.net>

Message 12: Request feedback on Telebit Netblazer routers
from "Danny Sinang" <danny@uplink.com.ph>

Message 13: RE: Are there leased lines slower than 64 Kbps ?
from "albert zegiel" <emmanuel@mwt.net>

Message 14: Re: NT Memory Leak
from "Paul Sheahan" <pesheah@peoples.com>

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 1 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: RE: Restrict access by referer
From: "Richard Lachance" <richard@vircom.com>
Date: Thu, 30 Jul 1998 13:01:08 -0400

> -----Original Message-----
> I need to restrict access to a sub directory of a IIS site.
>
> I would like to restrict this access based on the referer
> (HTTP_REFERER) so
> lurkers, must come through a sign on form to gain access etc..
>
> Does anyone know how this can be done.

Vircom has made a product that can do that. The authentication source can
be a text file, an ODBC data source, a RADIUS server or the NT SAM. The
realm can also be changed to allow authentication against different source
within the same site. Since most of the security settings are stored in an
text file, it can also be remotely managed by FTPing/copying the file to the
IIS server.

The name of the product is the VOP ISAPI Authentication Filter. More
information is available from our WWW site at http://www.vircom.com. You're
also welcome to email me or sales@vircom.com if you have specific questions.

Richard Lachance.
General Manager, Vircom Inc.

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 2 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: Re: RAID 5 Partitions
From: "Majordomo@essex1.com" <majordomo@essex1.com>
Date: Thu, 30 Jul 1998 12:10:51 -0500

At 04:30 PM 7/29/98 -0700, you wrote:

>
>Gentlemen (and Ladies), lets clarify something here. I might be
>wrong, but the initial portion of this thread was talking about
>a HARDWARE RAID 5 setup, not a Windows NT Software RAID setup.
>I believe we are getting things mixed up here and thats why there
>is so much confusion. Hardware RAID solutions do not have the
>limitations of mirror only and such, since it is completely
>transparent to the operating system.
>
>--

NT Raid 5 is not limited to mirror only, it is full striping with parity, with
hot fixing (SCSI only). There is some overhead added to the OS but, I doubt
if it's anymore then you would add with the drivers required for the
hardware version (although I've never set up a hardware based Raid, never
needed to). I don't know if NT Raid 5 supports hot swapping though, which
would be nice to have in some cases.


R. Laughlin
Majordomo@essex1.com
Essex Internet
Sterling, IL 61081
(815) 625-8893

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 3 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: Re: Restrict access by referer
From: Robin Lister <robin@flicks.com>
Date: Thu, 30 Jul 1998 10:43:42 -0700

Check out AuthentiX by Flicks Software:
http://www.flicks.com/flicks/authx.htm

It can protect directories by referrer and by IP address.
If access by referrer is denied, then you have a checkbox option to
"failover" to authenticating by username/password.

It can authenicate against a built-in database, or via an external ODBC
database, independent of NT Users.
It also has complete remote administration via ASP pages.

Hope this helps
Robin

At 12:32 PM 7/30/98 +1000, you wrote:
>I need to restrict access to a sub directory of a IIS site.
>
>I would like to restrict this access based on the referer (HTTP_REFERER) so
>lurkers, must come through a sign on form to gain access etc..
>
>Does anyone know how this can be done.
>
>Perl or similar would be nice, we are not using ASP.
>
>Thanks
>Darryl
>

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 4 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: Multilinking
From: "Kevin Ingram" <kingram@cameron.net>
Date: Thu, 30 Jul 1998 16:17:00 -0500

Does anyone here have any experience multilinking two connections together
using MS-RRAS? I can establish one connection or the other but not both at
once.

Thanks,
Kevin Ingram

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 5 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: IIS 4.0 FTP or Frontpage 98 Server Extension/RadiusNT/SQL Authentication.
From: "Rudy Komsic" <rudyk@cyberglobe.net>
Date: Thu, 30 Jul 1998 17:27:59 -0400

Hello,

I was told by Microsoft that IIS 4.0 FTP and Frontpage is capable of
authenticating via an ODBC Database. If anyone was able to get this working,
could you please help me with getting this set up. I checked Microsoft's
Support section and I can not obtain any info about this.

----
Rudy Komsic
President, Network Administrator - Cyberglobe Communications Inc.
4996 Place de la Savane, Suite 200, Montreal, Quebec, H4P 1Z6
Tel: (514)342-3883 Fax: (514)342-5139 E-Mail: rudyk@cyberglobe.net

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 6 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: Re: RAID 5 Partitions
From: "Dale E. Reed Jr." <daler@iea-software.com>
Date: Thu, 30 Jul 1998 14:45:11 -0700

Majordomo@essex1.com wrote:
>
> >Gentlemen (and Ladies), lets clarify something here. I might be
> >wrong, but the initial portion of this thread was talking about
> >a HARDWARE RAID 5 setup, not a Windows NT Software RAID setup.
> >I believe we are getting things mixed up here and thats why there
> >is so much confusion. Hardware RAID solutions do not have the
> >limitations of mirror only and such, since it is completely
> >transparent to the operating system.
>
> NT Raid 5 is not limited to mirror only, it is full striping with parity, with

I know that and its beside the point. We are talking about HARDWARE
RAID here, not NT's built in sotware RAID.

> hot fixing (SCSI only). There is some overhead added to the OS but, I doubt
> if it's anymore then you would add with the drivers required for the
> hardware version (although I've never set up a hardware based Raid, never
> needed to). I don't know if NT Raid 5 supports hot swapping though, which
> would be nice to have in some cases.

AFAIK NT's RAID support does not support hot swapping. Most
Hardware RAID systems do. As for Overhead, there is *NO* overhead
for hardware RAID solutions. The drivers you install are typically
for monitoring the status of the RAID and doing maintenance. Normal
operations just see the drives as one drive from NT's perspective.
Performance itself is typicall 30% FASTER with hardware RAID than
NT's software RAID.

-- Dale E. Reed Jr.  (daler@iea-software.com)_________________________________________________________________       IEA Software, Inc.      |  RadiusNT, Emerald, and NT FAQs Internet Solutions for Today  |   http://www.iea-software.com

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 7 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: IIS 4.0 FTP or Frontpage 98 Server Extension/RadiusNT/SQL Authentication.From: "Michael Watson" <mwatson@pdragon.com>Date: Thu, 30 Jul 1998 16:50:15 -0500

>I was told by Microsoft that IIS 4.0 FTP and Frontpage is capable of>authenticating via an ODBC Database. If anyone was able to get thisworking,>could you please help me with getting this set up. I checked Microsoft's>Support section and I can not obtain any info about this.

I've not actually seen that this can be done with FP, and I've been runningit for quite some time, but perhaps MS snuck it in there as a new featureand I didn't catch it.

You can, however, use ASP to do exactly this. There is a product (free)called ASPLogin that authenticates thorugh ODBC. It requires that all ofyour pages be .ASP pages and that you have a simple piece of code embeddedat the top of each page. It is very simple, the source code is provided,and it works...if you can use ASP. With ASP being a free component of IIS4.0, I recommend it highly.

Go to: http://www.oceantek.com/products.html

Michael S. WatsonPendragon Consulting Servicesmwatson@pdragon.com

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 8 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: IIS 4.0 FTP or Frontpage 98 Server Extension/RadiusNT/SQL Authentication.From: "Rudy Komsic" <rudyk@cyberglobe.net>Date: Thu, 30 Jul 1998 18:27:02 -0400

-----Original Message-----From: Michael Watson <mwatson@pdragon.com>To: ntisp@iea-software.com <ntisp@iea-software.com>Date: July 30, 1998 5:51 PMSubject: Re: IIS 4.0 FTP or Frontpage 98 Server Extension/RadiusNT/SQLAuthentication.

>>I was told by Microsoft that IIS 4.0 FTP and Frontpage is capable of>>authenticating via an ODBC Database. If anyone was able to get this>working,>>could you please help me with getting this set up. I checked Microsoft's>>Support section and I can not obtain any info about this.>>>I've not actually seen that this can be done with FP, and I've been running>it for quite some time, but perhaps MS snuck it in there as a new feature>and I didn't catch it.>>You can, however, use ASP to do exactly this. There is a product (free)>called ASPLogin that authenticates thorugh ODBC. It requires that all of>your pages be .ASP pages and that you have a simple piece of code embedded>at the top of each page. It is very simple, the source code is provided,>and it works...if you can use ASP. With ASP being a free component of IIS>4.0, I recommend it highly.

>let me rephrase the question I was trying to say the first time. We wouldlike to turn on non anonymous logins to user directories for our users FTPlogin. Instead of adding the user name to the User manager for domains, itwould authenticate via ODBC. This would be the same with Frontpage.

>Go to: http://www.oceantek.com/products.html>>Michael S. Watson>Pendragon Consulting Services>mwatson@pdragon.com>>

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 9 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: RRAS & Setting Ip addressFrom: "mauro" <mauro@citynet.net.ar>Date: Thu, 30 Jul 1998 20:05:24 -0300

I'm using RRAS and I want to know if it is possible te set a fixed IPaddress on each COM. Ex:Com 3 192.168.10.3Com 4 192.168.10.4etc.

Thanks.

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 10 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Interesting Project for intertying NT User Manager with Emerald DatabaseFrom: "Rudy Komsic" <rudyk@cyberglobe.net>Date: Thu, 30 Jul 1998 19:45:38 -0400

After thinking long hours ( just a about 10 minutes in RL) I was wondering ifSQL could be triggered to execute an external batch process. If so, Emerald'sinterface for 2.5 can be customized to include the following fields to createweb pages with IIS software:

Fields needed in Emerald Database:

IISServer=Boolean Toggle to see if External process to create user account via ResourceKit's Create User command

Domain=varchar Domain the user is created on (usually the server's local user table, notthe whole company domain)

IISServerName=varchar Server where to create the user account.

IISClientDirectory=varchar The Directory that the client's website will be hosted on (usually in UNCstructure since we would use the Samba method (the one hackers use to gainaccess to a netbios connected drive) to connect to the domain to create thedirectory or use the net login command.

IISFPHosting=Boolean This would be to verify if the client will be hosting via Frontpage. Ifso, it will just create a new directory web site via the web administrationtools.

IISIPMap=varchar The IP Address the client's website will be using for binding to the site.

IISServerWebName=varchar The name the site will be called (usually full domain name www.xyz.com)

IISServerFTPName=varchar The name the site will be called via FTP

Any other variables that would be needed can be displayed at a later date.

Procedure of having Emerald setup the client's FTP or Frontpage site.

If the IISServer has a value of true, then on the SQL Server the run externalprocess would start the batch file with the variables needed to first createthe Client's account. We could use the Resource Kit's create user program tomake the account with the appropriate values and have them assigned to thecorrect groups. Along with the username and password would come theExpiration date as well. This way Emerald would control the dates and activeaccount information for the client. The client's Home directory will be basedwithin the User Manager via a global directory name based on the copied useraccount defined for this (usually Z:\INetPub\users.xyz.com\~%USERNAME%). IFthe client has a full domain name, then a different home directory would beused (Z:\INetPub\%VALUE%-%USERNAME%, Value is the value passed fromIISServerWebName and username is to make easy tracking for accoutningpurposes).

The Next step would be to use the power of SQL to make a HTML Request to thedestination server and access a modified version of the ASP web basedadministration page where it would create the virtual site and bind it to anavailable IP that was assigned via IISIPMap. If the server is gonna be afrontpage server, the IISFPHosting will determine if the Frontpage Hostingfeatures would be activated. Any additional features could be defined at alater date that would be needed for this.

If the site is not gonna be Frontpage hosted, then a second ASP request wouldbe made to make the www.xyz.com be associated to ftp.xyz.com. The client'sFTP Site would not have anonymous login and could access it via username andpassword. If the client's site is a virtual directory, the same would followbut he would see a list of all directories in the virtual site. He will onlyhave access to his directory structure only as read and write.

Now if the client needs a CGI-BIN directory, this can also be created via theweb-based management.

If anyone out there is interested in programming this, I would like to hearfrom you so that we could work together on this and finally have Emerald workdirectly with NT and IIS instead of using just one FTP server solution.

Dale, any insite on this type of configuration that could be added to Emeraldto make this function or give negative feedback on this would be appreciated.

Now the task of finding someone who would be interested in developing this(prefer a Canadian Programmer since we are based in Canada)

----Rudy KomsicPresident, Network Administrator - Cyberglobe Communications Inc.4996 Place de la Savane, Suite 200, Montreal, Quebec, H4P 1Z6Tel: (514)342-3883 Fax: (514)342-5139 E-Mail: rudyk@cyberglobe.net

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 11 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: NT Memory LeakFrom: "Steve Coleman" <scoleman2@csolutions.net>Date: Thu, 30 Jul 1998 18:24:01 -0600

Any idea what might be causing two of our NT servers to gradually increasethe amount of "in use memory"? By the time a couple of weeks have elapsedit gets to the point where the servers complain of "running low on virtualmemory". I am using task manager to find out how much ram is in use.Looking at the running applications doesn't seem to show any taking upabnormal amounts of ram. Both servers have 128mb of RAM and a 128mb Swapfile.

Steve

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 12 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Request feedback on Telebit Netblazer routersFrom: "Danny Sinang" <danny@uplink.com.ph>Date: Fri, 31 Jul 1998 10:28:24 +0800

Hello all.

Has anyone used any Telebit routers ? How was it ? Did it perform well ? Anyparticular problems / shortcomings ? How about the price ?

- Danny

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 13 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: RE: Are there leased lines slower than 64 Kbps ?From: "albert zegiel" <emmanuel@mwt.net>Date: Thu, 30 Jul 1998 23:04:38 -0700

no , it is simply a regular internet connection from the local phone companywith a dedicated modem, but all you need is a regular internet connection,you may want to check ot the satellite companies-----Original Message-----From: ntisp-request@iea-software.com[mailto:ntisp-request@iea-software.com]On Behalf Of Danny SinangSent: Wednesday, July 29, 1998 8:11 AMTo: ntisp@iea-software.comSubject: Re: Are there leased lines slower than 64 Kbps ?

A modem leased line ?

Can please you explain further ? Is this the same leased line that needs aCSU/DSU at each end ?

- Danny Sinang

-----Original Message-----From: Waldemar Born <WallyB@LIP.net>To: ntisp@iea-software.com <ntisp@iea-software.com>Date: Wednesday, July 29, 1998 11:11 PMSubject: RE: Are there leased lines slower than 64 Kbps ?

>You can use a modem leased line with 28.8>>> -----Original Message----->> From: ntisp-request@iea-software.com>> [mailto:ntisp-request@iea-software.com]On Behalf Of Danny Sinang>> Sent: Wednesday, July 29, 1998 4:55 PM>> To: NTISP>> Subject: OT: Are there leased lines slower than 64 Kbps ?>>>>>> Hello.>>>> Is there such a thing as a leased line slower than 64 Kbps ?>>>> - Danny Sinang>>>>>>>>

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 14 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: NT Memory LeakFrom: "Paul Sheahan" <pesheah@peoples.com>Date: Fri, 31 Jul 1998 00:33:39 -0400

Steve,

Your swap file is set too small. The default recommended size is RAM plus12. So if you have 128 meg of RAM in your box, the default minimum would be128 + 12 or 140 meg swap file MINIMUM. Maximum does NOT matter. If you haveplenty of disk space, make it like 500 meg max or something so you knowyou'll never reach that high.It requires extra overhead on NT to have to resize the swap file while it isbusy doing other things. So I would recommend a minimum swap of somethingmuch higher than 140 meg. Assuming you have the disk space, I would usesomething like 250 meg min and 500 meg max or whatever so NT never has toresize it during operation.It is normal for NT boxes to use up RAM over time so all you can do is setthe swap file correctly.

Good luck...

-----Original Message-----From: Steve Coleman <scoleman2@csolutions.net>To: winnt-l@peach.ease.lsoft.com <winnt-l@peach.ease.lsoft.com>Cc: ntisp@emerald.iea.com <ntisp@emerald.iea.com>Date: Thursday, July 30, 1998 8:17 PMSubject: NT Memory Leak

>Any idea what might be causing two of our NT servers to gradually increase>the amount of "in use memory"? By the time a couple of weeks have elapsed>it gets to the point where the servers complain of "running low on virtual>memory". I am using task manager to find out how much ram is in use.>Looking at the running applications doesn't seem to show any taking up>abnormal amounts of ram. Both servers have 128mb of RAM and a 128mb Swap>file.>>Steve>>