Extending the ISA Firewall’s SSL Tunnel Port Range (2004)

Extending the ISA Firewall’s SSL Tunnel Port Range (2004)

Having problems connecting to SSL sites that use an alternate port number? No problem! Check out this article for an explanation of the problem and a quick fix.

I finally had a use for this fix. In the last year I had my two of my websites hacked so I decided to investigate ways to improve security. Some of the options I was looking at was sftp, ssl ftp, and accessing the files via a browser using https. UPdating the site using a browser with a SSL connection looked simple and easy but my firewall was stopping me from using the non-standard SSL port. This fixed my problem.

Reinstall and Restore Win XP Activation

Reinstall and Restore Win XP Activation

If you have to reinstall Win XP on the same equipment, you know what a pain it is to reactivate XP. This simple guide tells how to backup and restore two small files so you can avoid reactivation.

I never knew this. This could be handy. Activation is so annoying.

Microsoft Kills Off ‘My Private Folder’ App

Microsoft Kills Off ‘My Private Folder’ App

Microsoft quietly added the free encryption utility earlier this month, and then just as quietly deleted it. The utility allowed users to encrypt and store files inside a private folder.

When I first saw this product I thought it was a TrueCrypt me-too product without the documentation. The nice thing is that it got the blessing of Microsoft. Besides the blessing from Microsoft I could not think of a reason for me to switch from TrueCrypt to ‘My Private Folder’. In a way I am sorry to see it go. There is a serious security/identity theft issue with laptops that encrypted virtual disks/folders can reduce. Ophcrack shows how easy it is to crack operating system passwords so a pragmatic person has to assume that the operating system passwords will be compromised fairly quickly. Encrypting sensitive data without using the operating system passwords becomes a step improvement in security. Using TrueCrypt is not the perfect answer but it is better than no security.

RE: On My Way to Microsoft!

On My Way to Microsoft!
I’m very pleased to announce that Microsoft has acquired Winternals Software and Sysinternals. Bryce Cogswell and I founded both Winternals and Sysinternals (originally NTInternals) back in 1996 with the goal of developing advanced technologies for Windows. …

I wish Mark and Bryce good luck with their new employer. I have always found that their utilities and knowlege to be first rate. I am hopeful that both Microsoft and the rest of us will benefit from having them as Microsoft employees.

Difficulties with KB917537

It seems a lot of folks had problems with KB917537. After patch Tuesday I let my SBS install the patches. All of the patches failed to install. Then the server asked me to reboot. I tried a second time and it failed the same way. I tried a third time using an express Windows Update and it failed again. So I went off to do other things.

In a day I started hearing about the problems people were having with KB917537. So I went back and updated everything but KB917537 via a custom Windows Update. It worked. Finally I tried the “really” manual approach. I downloaded the patch file and ran the executable. It finally worked!

VMware Delivers Free VMware Server

VMware Delivers Free VMware Server

I have become a fan of VMware. I have used VirtualPC in the past but became interested in their products when they offered VMPlayer for free. When they offered free usage of the server product and encouraged the VMTN appliance community, I switched.

My use has generally been in two areas:

  1. Testing new slipstreamed installations of Win XP.
  2. Playing with pre-built appliances.

The first appliance I started playing with was Asterisk at Home or now know as Trixbox. I have downloaded several versions over the last couple of months using BitTorrent. There is a bit of learning curve for this product and I did not want to waste time setting up a test box. There is a market for supporing this product but I do not have a customer right now.

The second appliance I have started playing with is a couple of Nagios/Groundworks variants. Nagios is an open source network monitoring program and Groundwork Open Source is a free version of a commercial variant of Nagios. Due to some recent discussions I had with my son in which he maintained that our internet access sucked, I decided to investigate the matter further. I originally downloaded a prebuilt Groundwork Open Source system by Tony Su of Su Network Consulting. The good news is that he had built it. The bad news is that he released it as a virtual disk drive rather than a virtual appliance. As a result it was a little harder to set up than Trixbox. To compound the problems the network adapter needed to configured before it would do anything. Trixbox configured the network adapter during startup so this was new territory for me since this was a SUSE box.

Along the way I found a posting about baywatchos. It was a Groundwork Open Source system built upon Centos which is the same operating system used by Trixbox. My familiarity with Centos and the fact that it had Webmin already installed were pluses for me. The author even provided a nice Getting Started document in English. After a brief configuration I had it working. Gianluca, you did a fine job!

My next project will be to move these virtual appliances to my ghetto box and see how well they run. This should be amusing. Groundwork has some pretty stiff hardware requirements.

Aimless Ramblings from a Blithering Lunatic . . . : Eureka!

Aimless Ramblings from a Blithering Lunatic . . . : Eureka!

If I schedule a backup of a Sharepoint site using stsadm, then I can restore that site – but only if the destination server has the same system state and STS_Config database as the original server. Not normally gonna happen in a disaster recovery scenario. OR – I could schedule a backup of a Sharepoint site using smigrate, and get a backup set that I can restore to any site on any Sharepoint server at any time, without having to worry about system state or the presence of other databases such as STS_Config. Take a guess what I’m going to be using for my scheduled Sharepoint backups going forward . . .

One of the biggest challenges with Sharepoint is backup and restore. Actually let me redefine backup and restore by the tasks we hope it will accomplish.

  1. Total restore. This is when we want to recover the entire backkup from a disk drive failure, theft, fire, hurricanes, etc.
  2. Partial restore. This is when we want to recover a specific file or group of files. The classic example of this is when someone calls and says they accidentally deleted the document or presentation they were working on yesterday.
  3. Archival restore. This is when we are asked to keep archives of files or groups of files for a period that goes beyond the backup retention cycle. Compliance laws typically push this requirement.
  4. Migration restore. This is a bit more complex. This is when we want to save the data in one format or structure and restore it into a different structure or format. This happens when we change data bases, operating systems, or storage technology.

The present Sharepoint backup technologies cover the total restore task pretty well. The partial and archival restore tasks are covered best by third party products. It is the migration restore task that the author is talking about. The standard backup is not independent from the template or the STS_config. By using the smigrate utility you can migrate your data to a new format or new server. The price is right. Obviously, this is worth further investigation!

Offline files finally fixed

My XP box had a problem with offline files not synchronizing. I would click on the offline files icon and it would say it had one file that needed to be synchronized.  I would synchronize the files and then in a minute it would go back to saying it had one file to synchronize. It would synchronize again when I logged off but it would still have one file needing synchronization. I tried to find the file but everything looked like it was synchronized.

I finally decided to do something drastic. I booted up in safe mode and deleted the CSC subdirectories. I had a couple of Gigabytes in the subdirectories when it should only have been 400 MB. Something was really screwy. There were a couple of files above the subdirectories.  I guess I was curious what would happen so I left the files them alone.   When I rebooted everything worked fine. It did take a few minutes to sync the offline files but that was small price to pay to get rid of this annoyance.

Gpg4win – EMail-Security using GnuPG for Windows

Gpg4win – EMail-Security using GnuPG for Windows

Today I upgraded from 1.0.1 to 1.0.3 and experienced problems verifying files. I could not verify a file with GPGee or WinPT. The files had been verified under 1.0.1. GPGee said I had an invalid key and WinPT did not show any results. GPA did verify the file. I re-installed a second time with an uninstall, reboot, and install to see if was an installation error by me. I got the same errors. I have reinstalled 1.0.1 and it verifies the files again.

TrueCrypt 4.2a updated

TrueCrypt v4.2a
TrueCrypt is a software system for establishing and maintaining an on-the-fly-encrypted drive. On-the-fly encryption means that data are automatically encrypted or decrypted right before they are loaded or saved, without any user intervention. No data stored on an encrypted volume can be read (decrypted) without using the correct password or correc…

This is an open source programs I use everyday. I think it is essential for your sensitive data if you still run your laptop with XP Home.

Updating BlackBerry software

Yesterday when I was paying my T-Mobile bill I checked out the downloads section for my BlackBerry phone and found that they had posted a new software version for my phone. The Desktop software was the same version. So I downloaded the new version and updated my phone. The good news is that it added some nice features. The bad news is that the browser was missing, I was having problems syncing with Outloook, and both PocketDay and Opera Mini are broken.

I cleaned up the browser problem by downloading new service books. This also created new icons for my business and personal email accounts. This feature I liked! I cleaned up the Outlook error by deleting the offending contacts(i.e. They were mistakes!). I did find a newer version of the Desktop software on BlackBerry’s website but it did not fix anything. I fixed the PocketDay problem by downloading a new version. I still have not gotten Opera mini to appear. When I try to download it from the website I get a HTTP 500 server error with the error detail referring to a javalang.NullPointerException error.

RE: Revisiting RSS reader choices

Revisiting RSS reader choices
As a result of not resolving the “Feed errors – “Web failure” … forbidden” issue that I started about a month ago, I’ve had to rethink my use of RSS Bandit. I’ve really enjoyed using RSS Bandit, and feel that I’ve contributed some knowledge to the community, but with an unresolved problem, I’ve had to move on. If you’re interested in my evaluation of RSS Bandit v.1.3.0.42, GreatNews 1.0 Beta (Build 370), RSSOwl 1.2.1, Feedreader 3.05 and Abilon 2.5.3 build 196p, you can read it at http://daviding.com/blog/index.php/archive/revisiting-rss-reader-choices/ .

I guess I am a sucker for trying out new RSS readers. After reading his post I decided to give Greatnews a try. At least it had w.Bloggar support in it. That was good since the Blog This support for WordPress did not work as expected. The feed I tried Blog This on had a bunch of %20 in the url that got converted into 20. My first surprise was to see how small a download it was. It was less than 1 MB. Both RssBandit and RssOwl are about five times larger. My second surprise was that it loaded pretty quickly compared to RssBandit. My initial guess is that it does not use as much cpu as RssBandit. I probably need to review my cleanup settings in RssBandit. My third surprise was that its default newspaper layout was visually appealing and easy to work with. I had tried out some newspaper layouts in the past but never liked them.

I like this reader and plan on giving it an extended tryout.

More phpWebsite theme changes and hacks v2

Well I finally went after the rest of the annoyances I have with my website layout for the farm. I had been thinking about modifying the color scheme so one thing led to another. The first thing I went after was cleaning up my positioning in the mast head. As a quick fix I had thrown in a blank line to fix the positioning of the divs. I meant to go back and take it out but I never got around to it. Positioning divs can get pretty funky. By using float:left and a large enough width on the top div I can get correct positioning. Now I have the horse jumping over the navigation bar in both IE and Firefox.

The tough part was fixing up my right content. I have a two column design with a fluid left content column. The problem appeared in several differnt ways but the best example was the dotted bottom border would wrap to the left content. I would get about 10px of border on my left content. I think I solved this problem with right padding on the right content. Now I had a positioning problem. My right content was right next to my left border. In some cases it would overlap my left content and it seemed oblivous to left margin or padding. After some playing around I found that increasing the right margin on my “left content” moved the text in my right content to the right and gave me a faux left margin on my right content. Oh well!

My final fixup was the linkman module. phpWebSite uses tables to display url link info. The default setup overlapped my right content when I viewed it using FireFox. Despite my efforts to convince FireFox that my table was only 600 pixels, it ignored me and calculated the table width. IE was a little better. It resized my divs to make everything fit. Not what I asked for but it was a better looking failure. I played with a lot of stuff but ended up reformatting the table to a smaller size by removing the url column. With the remaining columns FireFox and IE would calculate a smaller width for the table. I put the url field in its own row that spanned the columns and reduced the font size. So for every link I used three rows rather than two rows. The first row had the Title, Visits, and Date Posted. The second row had the url and the third row had the link description. Now the Links page was truly usable.

system admin tips: Customize IE Context-menu for RSS Bandit

system admin tips: Customize IE Context-menu for RSS Bandit

One of the desirable features that RSS Bandit is missing, is an option to open hyperlinks in a default web browser (IE/Firefox). It would have been nice to have a right-click context menu with an option like “Open in Default Browser” or “Open in Internet Explorer”.

I use RSS Bandit, too. This was a desired feature but not one I was willing to do much about since it was relatively easy to work around. Thanks Raj for putting out the effort!

Script for emailing ntbackup log files

Scripts for ISA Server

ISA_E-Mail_Alert.vbs

Script to e-mail the output of any chosen command, such as “ipconfig /all”, when the script is executed by an ISA Server alert action, scheduled job, EventTriggers.exe, Performance Monitor alert, etc. Unlike ISA Server e-mail alerts, you can specify a username and password, and use SSL for SMTPS. Especially nice for being alerted when DHCP-assigned IP addresses change.

I do not know how I found this site but this script inspired me to improve my ntbackup reporting. The standard SBS reporting is pretty good for SBS full backup jobs. The problem occurs if you have gotten a little more sophisticated in your backup strategy. I am using an incremental daily backup job in conjunction with a weekly full backup. For my small site this combination of full and incremental backups allows me to go back and restore a file for up to thirty days. The really nice thing about this strategy is that it fits on a relatively inexpensive 250 MB USB disk drive.

  1. My first step was to modify the script to find the last backup log file and include it in the email.
  2. My second step was to put in a different subject if the backup was successful, failed or was not run. My logic works off of the size of the backup log. It is not perfect but it will work until I find something better.

I schedule this as a job to be run a couple of hours after the backup should be complete. So far the email looks pretty good but I still have one more improvement. The 8019 event ID is posted when ntbackup finishes. It posts either an information type event if ntbackup is a success and an error type event if it fails. I will create two eventtriggers based on these events to write out a small text file I will use to write out the subject line of the email. I cannot use these triggers to email the log since the verify is not complete and log file is still open. Unfortunately ntbackup does not post a unique event ID for when the verify is complete so I will continue to schedule the job and look at the email in the morning.

Helix – Incident Response and Computer Forensics Live CD by e-fenseâ„¢, Inc.

Helix – Incident Response & Computer Forensics Live CD by e-fenseâ„¢, Inc.

I was researching the Linux command, dd, and GParted because I wanted to migrate some data on old disk drives to my new disk drive and to see if I could copy a drive and debug a hardware/software problem on a PC I am working on. There are existing Windows solutions but I was curious about the state of the art on Linux.

I originally tried Ubuntu but GParted did not copy the partition for me?! I then went to Gparted Live CD and it worked for the NTFS partition I was playing with. The Linux partition was a bit more complicated. It is the LVM partition I used for my Fedora Core 4 installation and Gparted will not copy LVN partitions. Hmm…bummer!

I briefly tried the LVM commands to add a new LVM physical drive to the volume group and move the data from the existing LVM physical drive to the new drive. It did not work for me and with some more work I am pretty sure I could make it work since that is one of things LVM should be able to do. However, my interests in cloning the drive were very similar to copying the drive for forensic work so I decided to see what the Pros use for creating copies of disk drives. That led me to Helix.

I had previously downloaded and played with Helix 1.5 and 1.6. Helix 1.6(Knoppix) had problems with correctly recognizing my CD-ROM so I downloaded the newest version to see if it did a better job with the CD-ROM and to see if they had a frontend tool for dd/dcfldd. The CD-ROM worked and I found a frontend acquisition tool called Adepto. Adepto is an improved version of AIR – Automated Image and Restore which is also on the disk. So I cloned the old hard drive.

Mounting cloned drive was a little hard under Helix. I had to:

sudo vgscan
sudo vgchange -a y

before I could:

sudo mount /dev/VolGroup00/LogVol00 /media/sda3

Mounting the partition under Ubuntu was much easier. Now to go clone a copy of the PC’s disk drive I want to troubleshoot.

RE: Linux vs. SBS: Switch!

Excellent point brought up in the comments section today by Josh:

For example, Microsoft wants to argue about stability vs. Linux. In nearly all Linux servers we manage that comparison is laughable. Now, compare RPC-over-HTTP functionality with Linux? You can’t, no such thing on Linux! Where is that among the facts?

This is something that I’ve tried to make very painfully clear in my Linux presentations for SBSers in Florida groups. Here is the thing about winning in small business, you have to know your customers. You also have to know your Microsoft and understand certain “facts”. So here is a little competitive howto on Linux vs. SBS.

Watch Where You Get Your Facts

First and most important thing to understand about Microsoft’s Get The Facts site is that those reports have been paid for by Microsoft and are to a large extent questionable at best and outright false in many respects. Second thing to remember is that those reports are not written or targeted for the SMB market at all – they are written to discourage enterprise and high-end markets from moving their commodity-line servers to Linux and discourage Unix-shops from going to Linux instead of Microsoft. If you’re an SBSer, you will not find your facts there.

Know Your SWOT

Know your strenghts, know your weaknesses… but more importantly know what is not your weakness.

Price

When bidding against Linux you are really competing against this: “Joe Consultant told us that Linux is free.” They are correct, many Linux distributions are free. So in most cases, it will be $599 vs. $0. For the purchase price that is. So on the face of things, Linux wins because its free.

When you dig a little deeper you find out that the “free” is the acquisition cost. If you are losing a client over $599 this is likely a client that you do not want as your business to begin with. If the server costs $1,800 and your labor to set them up and train them for a week will cost them another $4,000 that up-front licensing cost of $599 is going to be less than 10% of the total solution. This is generally what Microsoft talks about when they mention their TCO, total cost of ownership.

But we know our small business owners, don’t we? The same folks that will sign up for a plan with a “free cell phone” (MSRP $99) but agree to a two year contract that costs $20 a month more. If you really want to compete against Linux give them a 10% discount on your labor which will outright displace the licensing costs. Show them that they will be paying the Microsoft penalty anyhow as its very hard to impossible to buy a PC without a Microsoft OS to begin with. 

Upgrades and Migrations

When you bid against Linux you bid against free upgrades, forever, and easy migrations. Thats at least what gets put on the paper and what the Linux guy will say. The truth is much different. Here are a few facts that you might want to consider about some of the most popular Linux distributions out there:

Fedora – Fedora is a free version of Redhat Linux. Redhat Enterprise Linux is a full tested and supported distribution of Linux that retails between $350 and $3000 per server. So whats the difference? Redhat uses Fedora as their bleeding edge distribution, they use it to roll out experimental packages and see what breaks. The software itself is solid, but it is not elegant by a long shot. For example, consider that there is no migration path from version 3 to 4 to 5 – if you Google for “upgrade from FC3 to FC4” you will find a number of hacks that show you how to fool the dependancy checks and hack your way up. Not that it won’t work, but what happens if it fails? Remember, unsupported. There is literally nobody you can call.

Debian – Used to be most popular but recently displaced by its Ubuntu cousin. The trick with Debian is that they are so fanatical about being free that they eliminate any commercial or restricted software (or non GNU) from the base distribution. It is a severly outdated technology (in terms of even years) that nearly everyone seriously running Debian is doing so with the untested– or experimental– branches of the code. Even if you’re not a Linux person you can imagine what thats like. Again, virtually unsupported except for the MVP-like effort.

Gentoo – The concept here is that this is the most optimized version of Linux you can get because virtually everything from kernel on up is upgraded by running an emerge command. What emerge actually does is pretty cool – it downloads the source code along with a spec and compiles it against your hardware – so on a fairly loaded box you are constantly affecting the performance by rolling out your own code. Do you trust that your security patches are deployed as full recompiles of the source code? I don’t even trust most binary patches.

Ubuntu – The darling of the Linux world at the moment. Built on the Debian core with the pretty integrated interfaces and its claim to fame is the ability to roll out LAMP (Linux, Apache, MySQL and PHP) in 15 minutes. Pretty, but unsupported.

Those are the basics of Linux and distributions you will likely come up against. Every now and then someone will propose an Enterprise Linux version, a free community recompile of the popular Redhat Enterprise Linux. Distributions such as CentOS and WhiteBox Enterprise Linux. They are free, but again, unsupported as well.

So here is a real world scenario for you. The upgrade for the above is free– in all cases. They will download an ISO, burn it, stick it in a Linux server and after the reboot the system will be upgraded. All free! Yay.

As far as the technical discussion is concerned, they are right. Here is the dirty secret behind this though that nobody talks about: For most scenarios Linux doesn’t migrate, Linux overwrites. Now lets say your consultant tweaked the /etc/rc.d/rc.local file to automatically delete specific files on the server – generally a Linux distro upgrade would put in the new file in the place and make the original one a rc.local.bak. Let’s say you wanted something special done with your web server – your /etc/httpd/conf/httpd.conf file would have two options – it would get overwritten, or they would copy an httpd.conf.orig or tweak it in another way.

So yes, the upgrade is free. But the time to get this done is not. More importantly, because these migrations are generally done on per-site basis (ok, these guys have Redhat, these are on Fedora, these are on Gentoo) the migration checklist is all but nonexistant.

The truth about Linux deployments is that they are very much done on a per-case, needs basis. The beauty of the system (unlimited flexibility) is also its dagger because by endlessly tweaking the system the documentation part of the setup goes out the window. And when the migration goes bad with the freebies above you will likely have only newsgroups and mailing lists to turn to.

Finally, migrations nearly always include more than the base OS. The reason you deploy a Linux system is to get a flexible, fast and cost effective server. Well, Linux developers don’t think the same way business owners do. Linux developers try to adapt new technology, provide the newest features, create a system that is easiest and fastest to develop for. So when that new distribution comes with MySQL 5.0 and PHP 5.0 – will your PHP 4 script designed on MySQL 3.1 work? Maybe, maybe not. Who do you contact to find out – the webmaster that took the script from some random site? Nope. The commercial software developer? Unlikely, they only support official distributions like Redhat Enterprise Linux and SuSe. Who do you turn to? Good question to ask while providing a competitive bid.

How do you do application migration compatibility tests on Linux? You install the new version and try to hack it into working. If you’re lucky, it will just work. If you’re not lucky, whats the alternative? Another question for the stack. This is not the U part of FUD in uncertainty, this is something that there is no good, reliable, documented process in Linux. For years Linux distributions have tried to fight amongst themselves to develop a unified way that Linux is deployed – with same file system layout, dependancy checks, package management. Today you’re more likely to find multiple package management systems (yum up2date, apt).

Features

For the most part this is your biggest strength. Small business owners and business people in general have habbits that are hard to change. Going from a Windows world to a Linux world is a big transition in anything more complex than a P2P environment. Its easy to replace a pop3 server with an onsite dovecot deployment. But when you’re selling a new server you are selling new functionality. Here are things that you will not find in Linux.

Exchange – Biggest advantage. There are no decent webmail programs for Linux – the best one to date is Scalix and it costs about as much as Exchange does. It does not provide RPC-over-HTTP, it does not provide cached mode, it does not provide advanced connectivity to mobile devices.

ISA – For the most part almost all Linux firewalls are connection based firewalls, nothing provides application-level security. So yes, if you want to block people from going to certain sites, Linux will cut it. Try to set those restrictions in place per employee per hour (ie, no espn updates for Joe between 9AM and Noon) you’ll be SOL.

WSUS – Exists on commercial Linux distributions as a Satellite server but almost all are desktop triggered up2date updates via cron – no ability to see which software is running on which system and no ability to restrict what goes on which workstation without manually adjusting workstations on per-case basis. No grouping. No reporting on which patches failed and no reporting on what may be out of compliance. These could be hacked together but do you really want to hack your security solutions together? Do you think your customers would?

IIS – The biggest reason to deploy LAMP is to get PHP and a free SQL server. Both of those run quite reliably on Windows as well and you can install WAMP on Windows. My personal dev environment for Linux is based on Vertrigo server which rolls out as a single install. So if thats all you need to deploy a new forum, blog, or a survey package your customer saw somewhere – this is the way to do it. And it’s free too. But feature is an advantage here – you have a choice. ASP or PHP? On Linux you have no ASP advantage (they use Chilisoft, Sun’s poor hack of ASP) nor do they have any .NET compatibilities without hacking in mono – but skip back to migrations and upgrades – whats the guarantee that your app will run on a hacked server? Now compare that with IIS. If you’re really familiar with IIS this is almost impossible to do. The cost of a second IIS server is not that great to begin with, Windows 2003 Server Web Edition retails for less than $300 which is likely less than two hours of any consultants time. You’d end up charging them more to download an ISO and read the intro parts of the Apache documentation.

Bus Features

When I worked at Dial ISDN I used to write “If Vlad Gets Hit By A Bus” documentation for everything I did. Why? Because all of our Linux servers were so heavilly tweaked that in case something happened there was no way on earth someone would be able to figure out how I’ve implemented my patch management, version control, monitoring, account creation and race conditions.

How much documentation will the Linux deployment come with? How long will it take someone else to replicate the setup on a new system? What commercial contacts do you have that will validate what you say about Linux? How many “user-geared” books are there on Linux that can get me going with this server immediately? SMB owners are DIY-centric, how much of this can I do through a GUI?

Final question: Give me a place to find other professional Linux consultants.

Where you have hundreds of Windows guys in every area there are only a few Linux solution shops. Most of the “Linux guys” will be people with careers and full time jobs that do consulting on the side and are saving your money out of the goodness of their heart. These are also the types you turn to for support. Do you want to run your business on goodness of strangers or do you want a contract? If you want a contract the savings will go out the window.  

Conclusion

Linux provides a cost effective, flexible and powerful server operating system and Microsoft’s FUD about it is largely a collection of paid distortions, some quite well documented as outright lies. Microsoft will not offer competitive sales support to SMB solutions that are under $10,000 in licensing so you’re on your own. They will also not discuss any of the above because of the irrational fear that if you experience a competitive solution you might find enough in it that you like to leave Microsoft.

On the other end of the fence you have, by comparison, a relatively innovative but young solution that lacks the standardization, unity and certainty with many of its supposed solutions. While the core of it is solid the biggest lacking factors for small businesses are in the areas of available expertise and support systems to fall back on when there are problems. In the areas of affordable business intelligence Linux is behind enough to make it unattractive beyond file servers, basic pop3/imap mail servers and popular web applications. 

In the end, both sides will lie, cheat and FUD to get their points accross. Your advantage is in knowing your customer, knowing their needs, and showing them the solution that will not only solve their problems but be ready for the problems they will encounter as they grow. For what its worth, I’ve been a Linux system administrator for three years longer than I’ve been a Windows guy and work on both platforms daily. 

[Via Vlad Mazek – Vladville Blog]

Trend Micro CSM 3 revsited

The SBS folks have always liked Trend Micro but CSM Version 3 tested their faith. I decided to eat my own dogfood and installed CSM V3 in February. I was somewhat successful but I had some problems with the Security Dashboard hanging up.  Virus checking and updates worked fine. Recently I applied the Service Pack and the Dashboard was a little bit better afterward. When I tried to configure the Messaging Server, it would not let me in. I tried a variety of small fixes but finally decided to reinstall. I tried to just reinstall the Messaging Server but it did not work so I reinstalled everything.