Techinvasion.net

Video tutorial on IPV6

john — Thu, 15 May 2008 20:47:58 +0000
You can download or watch the full video at IPV6


liveplasma.com
john — Sun, 10 Feb 2008 03:16:44 +0000
I found a really cool site that displays related content in a visual way, so if for instance you type in an Artist name like Pinback, it will show all related artists in a very cool visual way, very similar to some of the visual displays for Digg.com



Outlook 2003 error setting up profile after uninstalling office 2007
john — Wed, 06 Feb 2008 21:12:19 +0000
This is a problem that I run into quite alot as most new PCs come with the Office 2007 trial  pre-installed. When you try to setup Outlook 2003 for the first time you get the following error
“There was an error locating one of the items needed to complete this operation. It might have been deleted”
In order to fix this error you have to rename ‘mapisvc.inf’ one in
C:\Windows\System32,
and one in
C:\Program Files\Common Files\System\MSMAPI\1033
Once you rename these files start outlook again and it will reinstall the correct versions of the file and allow you to setup the users outlook profile.



New Forums
john — Thu, 31 Jan 2008 23:33:19 +0000
We have added a new forums section to techinvasion.net. We hope these forums will become a big part of the site and allow all the users to participate, ask questions, and get answers. The link to the forums is along the left hand side of the page in the categories section. You can also go directly to the forums by going to http://www.techinvasion.net/forum.
We are also looking for writers to post relevant articles such as the ones that have been posted by our 3 writers so far. If you are interested in writing for techinvasion.net please send an email to admin@techinvasion.net.  



Fixing the SKU01A.CAB and other office cab file issues
john — Thu, 31 Jan 2008 02:47:43 +0000
Anyone who has used office 2003 has noticed that when switching domains or logging in as a new user Microsoft Office ask you to insert the cd to cache files needed to start. In some cases it asks for files from older office versions that have been upgraded, sometimes you don’t even have the original cd. To solve this problem you can make a simple change to the registry that tells office not to expect cached files off the installation cd. 
To do this you have to change a registry value to tell office not to cache files off of the CD. To fix the problem you have to change  a registry key. set the value of the following key to “0″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\11.0\Delivery\
“CDCache”=”0″
I have added a registry file that will fix this for you, just click the link below
Fix_CDCACHE.REG



An overview of CISCO IOS Security features as related to packet filtering.
john — Wed, 30 Jan 2008 03:30:27 +0000
 The Cisco IOS has many powerful security features that enable network engineers to protect their internal network. The Cisco IOS is capable of intrusion detection, deep packet inspection, and stateful firewall features. Setting up IPS allows the admin to push intrusion detection to the network edge. The Cisco IPS feature set can scan for spyware, viruses, worms, Trojans, and network intrusions by receiving updated signature files from Cisco. If a packet or series of packets matches a particular signature the router can, send an alert, drop the packet, or reset the connection of the offending user. In this way the network engineer can better protect the network by acting on suspicious packets before they can pose a risk to the network infrastructure, another advantage of pushing IPS duties to the network edge is it allows offending packets to be dropped before they take up finite network resources.  In large networks as much as 10 percent of network resources could be consumed by packets that ultimately will be dropped for security reasons deeper in the network.
A lot of engineers prefer to use dedicated systems for network security such as Pix and ASA devices. However the Cisco recommended methodology is to filter packets as close to the egress point as possible thus saving network resources and enhancing security. In times past it was considered better to apply security features on dedicated devices deeper in the network while putting as few strains on the edge routers as possible. This methodology used to be a necessity as routers typically had much less horse power and a significant amount of CPU cycles and memory was used just routing and switching packets, add to that the wide spread use of Port address translation which requires a large amount of CPU cycles and memory to maintain the port translation state table and the situation was dire. It was not uncommon to see a branch office level router such as a 2500, or 2600 series overloaded by P2P programs which open up thousands of ports for connections. In these situations a single user could easily destabilize the network and cause the router to drop packets from the load. Cisco realizing the changing world of networking and the relative cheapness of CPU power released the XM series routers as a stopgap measure until the new integrated services platform routers were available such as the 2800 and 3800 series routers. These new routers are more powerful than ever and allow IPS, stateful firewall features, and deep packet inspection to be performed at the network edge thus enhancing security and availability of network resources.
Besides the IPS features the Cisco routers can also perform CBAC or Content Based Access Control. With CBAC the router can inspect TCP, UDP, and ICMP packets for fragments and irregularities. The IOS can also inspect sever layer 7 protocols, and with the latest 12.4 IOS and current generation of routers this list has expanded to many many layer 7 protocols. When using CBAC the router monitors the outgoing packets on an interface, and dynamically creates holes in the inbound access list to allow only packets that match up to the outgoing request. This means that CBAC enables the IOS to perform true stateful Firewalling.  In the 12.4 IOS CBAC uses deep packet inspection to determine the true protocol of the packet and better protect the network from intrusion. With deep packet inspection the router will recognize an FTP packet and scan it for known issues even if the packet arrives on a port other than the standard FTP control port. The IOS also uses access lists to secure interfaces and drop unwanted traffic at the network edge which will prevent network resources from being wasted.
I hope this brief overview of the Cisco IOS security methodology as it relates to packet filtering was informative. I will follow up later with a more technical article on how to configure CBAC stateful firewalling, and IPS signatures on the Cisco router.



Cisco WIC-1ADSL config for 1800 series router and ios 12.4
pedro — Tue, 29 Jan 2008 02:50:46 +0000
This config is for the Cisco 1800 series router running IOS 12.4. IOS 12.4 has some command and syntax changes in reguards to interfaces and configuration commands for PPPOE. This config was submitted by my good friend Pedro Rivera.

version 12.4

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname Router

!

boot-start-marker

boot-end-marker

!

!

no aaa new-model

!

resource policy

!

mmi polling-interval 60

no mmi auto-configure

no mmi pvc

mmi snmp-timeout 180

ip subnet-zero

ip cef

!

!

!

!

ip name-server 205.152.144.23

!

!

interface FastEthernet0/0

 description Internal Lan

 ip address 10.10.10.254 255.255.255.0

 ip nat inside

 ip virtual-reassembly

 ip tcp adjust-mss 1452

 duplex auto

 speed auto

!

interface FastEthernet0/1

 no ip address

 shutdown

 duplex auto

 speed auto

!

interface ATM0/0/0

 no ip address

 no atm ilmi-keepalive

 dsl operating-mode auto

!

interface ATM0/0/0.1 point-to-point

 pvc 8/35

  pppoe-client dial-pool-number 1

 !

!

interface Dialer0

 ip address negotiated

 ip mtu 1452

 ip nat outside

 ip virtual-reassembly

 encapsulation ppp

 dialer pool 1

 dialer-group 1

 ppp authentication chap callin

 ppp chap hostname xxxxxxxxxxxxx@xxxxxxxxxxxxxx.net

 ppp chap password 0 xxxxxxxxxxxxxxx

!

ip classless

ip route 0.0.0.0 0.0.0.0 Dialer0

!

ip http server

no ip http secure-server

ip nat inside source list 1 interface Dialer0 overload

!

access-list 1 remark INSIDE_IF=FastEthernet0/0

access-list 1 remark SDM_ACL Category=2

access-list 1 permit 10.10.10.0 0.0.0.255

dialer-list 1 protocol ip permit

!

!

control-plane

!

!

line con 0

line aux 0

line vty 0 4

 login

!



Configuring WIC-1ADSL on Cisco 2600 with PPPOA and PPPOE
john — Tue, 29 Jan 2008 01:59:12 +0000
Configuring a Cisco router to use the WIC-1ADSL card is one of the most commonly asked question by people in the Cisco forums. There are some interesting and compelling reasons to use a WIC card instead of connecting PPPOE through the ADSL modem in bridged mode. One of the most compelling reasons is the ability to use advanced QOS features such as interleaving and fragmentation. Because the DSL WIC card shows up as an ATM WAN interface, the router is able to perform those advanced Quality of Service features.  The overhead of encapsulating a packet in PPPOE and sending it to the modem over some length of cable is also a reason to use a WIC card instead of the modem.
It is important to realize that with most ISP’s you can configure the connection to use either PPPOA or PPPOE, the difference in configuration is very subtle however it can save you a couple of bits of overhead as PPPOE is encapsulated more time Than PPPOA.  So without further a due:
First the PPPOE config:
The below is a complete config
Red  is directly related to the WIC DSL config
Green is the rest of the config needed for a bare minimum  working config.
##################################################################################
     Using 5173 out of 29688 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Lord_Yu
!
boot-start-marker
boot-end-marker
!
logging buffered 56000 debugging
no logging console
enable password 7 xxxxxxxxxxxxxxx
!
memory-size iomem 15
clock timezone est -5
clock summer-time est recurring 4 Sun Mar 1:00 4 Sat Oct 1:00
no aaa new-model
ip subnet-zero
ip cef
!
!
no ip domain lookup
ip domain name techinvasion.net
!
no ip bootp server
vpdn enable
vpdn-group 1
 request-dialin
  protocol pppoe
!
interface ATM0/0
 no ip address
 ip route-cache flow
 no atm ilmi-keepalive
 bundle enable
 !
 dsl operating-mode auto
 pvc 8/35
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
 !
!
interface FastEthernet0/0
 description LAN INTERFACE
 ip address 10.0.0.254 255.255.255.0
 ip nat inside
 ip tcp adjust-mss 1460
 duplex auto
 speed auto
!
interface Ethernet1/0
 no ip address
 shutdown
 half-duplex
!
interface Dialer1
 description ADSL WAN DIALER
 ip address negotiated
ip mtu 1492
 ip nat outside
 encapsulation ppp
 ip route-cache flow
 ip tcp adjust-mss 1452
 dialer pool 1
 dialer-group 1
 no cdp enable
 ppp authentication chap pap callin
 ppp chap hostname xxxxxxx@xxxxxxxxxx.net
 ppp chap password 7 xxxxxxxxxxxxx
 ppp pap sent-username xxxxxxxx@xxxxxxxxxx.net password 7 xxxxxxxxxxxx
 ppp ipcp dns request
!
ip nat translation timeout 3600
ip nat translation tcp-timeout 1200
ip nat translation finrst-timeout 15
ip nat translation syn-timeout 45
ip nat inside source list 10 interface Dialer1 overload
no ip http server
no ip http secure-server
ip flow-export destination 10.0.0.3 2055
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1 permanent
!
!
!
ip access-list extended inbound
 deny   ip 0.0.0.0 0.255.255.255 any log-input
 deny   ip 10.0.0.0 0.255.255.255 any log-input
 deny   ip 127.0.0.0 0.255.255.255 any log-input
 deny   ip 169.254.0.0 0.0.255.255 any log-input
 deny   ip 172.16.0.0 0.15.255.255 any log-input
 deny   ip 192.168.0.0 0.0.255.255 any log-input
 deny   ip 224.0.0.0 15.255.255.255 any log-input
logging 10.0.0.3
access-list 10 permit 10.0.0.0 0.0.0.255
!
line con 0
 password 7 xxxxxxxxxxx
line aux 0
line vty 0 4
 password 7 xxxxxxxxxx
 login
 transport input telnet ssh
line vty 5
 password 7 xxxxxxxxxxxx
 login
!
ntp clock-period 17180335
ntp server 192.43.244.18
ntp server 129.6.15.28
!
end
The Following is the PPPOA Config:
It is not the full config only a partial config.
The Red text is the differences,
Notice how the dialer access-list is different and notice tha lack of the VPDN commands at the top of the config:
####################################################################################
version 12.3
hostname Lord_Yu
!
boot-start-marker
boot-end-marker
!
logging buffered 4096 debugging
no logging console
enable password 7
!
memory-size iomem 15
clock timezone est -5
clock summer-time est recurring 4 Sun Mar 1:00 4 Sat Oct 1:00
no aaa new-model
ip subnet-zero
ip cef
!
no ip domain lookup
ip domain name techinvasion.net
!
interface ATM0/0
 no ip address
 ip route-cache flow
 no atm ilmi-keepalive
 bundle enable
 !
 dsl operating-mode auto
 pvc 8/35
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
 !
!
interface FastEthernet0/0
 description LAN INTERFACE
 ip address 10.0.0.254 255.255.255.0
 ip nat inside
 ip tcp adjust-mss 1460
 duplex auto
 speed auto
 ipv6 address autoconfig
 ipv6 enable
!
interface Ethernet1/0
 no ip address
 shutdown
 half-duplex
!
interface Dialer1
 description ADSL WAN DIALER
 ip address negotiated
ip mtu 1492
 ip nat outside
encapsulation ppp
 ip route-cache flow
 ip tcp adjust-mss 1452
 dialer pool 1
no cdp enable
 ppp authentication chap pap callin
 ppp chap hostname xxxxxxxxx@xxxxxxxx.net
 ppp chap password 7 xxxxxxxxx
 ppp pap sent-username xxxxxxx@xxxxxxxx.net password 7 xxxxxxxx
 ppp ipcp dns request
!
ip nat inside source list 10 interface Dialer1 overload
no ip http server
no ip http secure-server
ip flow-export destination 10.0.0.3 2055
ip classless
access-list 10 permit 10.0.0.0 0.0.0.255
dialer-list 1 protocol ip permit



Vista Complete-PC backup to network share
john — Tue, 13 Nov 2007 04:42:07 +0000
The real magic of the new Vista backup tool is the second option Complete-PC backup. This feature takes advantage of the HAL independence of Vista and allows you to backup your entire system at one time using the magic of volume shadow copies to backup open files. The backup is also stored in a virtual machine file which means that you can boot, run, and extract files from your backup using Microsoft Virtual PC. This is a really neat feature! If the previous feature isn’t enough for you Microsoft will let you restore your pc by booting to the Windows Vista install DVD and selecting the restore option. This is the greatest reason to use the new Windows complete-pc backup feature over other third party backup solutions. As it lets you restore you pc intact with all software serial codes and files ready to rock.However Microsoft in their wisdom has added some obstacles to using what would otherwise be a great tool. When you select the complete pc backup feature you are not given the option to backup to a network drive. This is a big problem as most people do not have a spare hard drive sitting in their desktops waiting for a backup. It is also a problem from an IT administrative viewpoint. As an administrator I would like to have 1 centralized location to store all of my client PC backups. This is also a problem for people at home with nas storage devices as they may have opted for 1 drive without partitions as they expected to keep all backups and data files on the nas drive. In order to get around this problem Microsoft has provided a command line version of the windows backup utility called wbadmin.exe. This version of the utility is far more powerful than the generic GUI version intended for typical users and allows you to backup to a network drive among other things. Remember that although you can backup to a network drive the backup file must be on a local drive it is to be used by the Windows bootable CD to restore the drive!Lets take a quick look at the switches available to us on the CLI version of the utility, but first lets cover a few caveats. 
· The command line version of the utility does not prompt for credentials, it attempts to access the network share using the credentials of the current user. This means that if you are not backing up to a windows domain member server, in the case of a consumer Linux powered NAS drive, then you must have an account on the nas box that has the same username and password as you are using on the Vista machine.· The CLI version of the command must be run from an elevated command window.Let’s take a look at the utility now that we have covered the basics.C:\Users\John>wbadmin.exewbadmin 1.0 - Backup command-line tool(C) Copyright 2004 Microsoft Corp.ERROR - Command incomplete. See list below.For more help, type wbadmin  -help—- Commands Supported —-START BACKUP — Run a backup immediatelySTOP JOB — Stop currently running backup or recoveryGET VERSIONS — List details backups recoverable fromGET ITEMS — Lists items backed up for a backupGET STATUS — Lists status of currently running jobC:\Users\John>C:\Windows\system32>wbadmin start backup -backuptarget:\\server\share\ -include:c: ß-drive letter to backupwbadmin 1.0 - Backup command-line tool(C) Copyright 2004 Microsoft Corp.Retrieving volume information…This would backup volume Local Disk(C:) to \\server\share\.Do you want to start the backup operation?[Y] Yes [N] No yBackup to \\server\share\ is starting.Running shadow copy of volumes requested for backup.Running shadow copy of volumes requested for backup.



Hacked Iphone goodness
john — Wed, 31 Oct 2007 01:05:32 +0000
As promised here is some iPhone screenshots!!!.