Sorry for the drastic measure, but I’ve only got about 1mb up and 1mb down, and I hate to be used by anyone as a DDoS reflector. My DNS server no longer allows queries for the root nameservers, (thx again, Kiter) and the block list has been cleared. The entire world may now freely access this site, though I’m not sure what for, save for some comic relief, and sparsely located golden nuggets of networking knowledge.
If you *do* happen to be reading this, just drop a comment to say “hey”.
You don’t even need to register…
It won’t hurt a bit…

For this particular exercise, let’s pretend that you are, once again, named Bob. You work for TailswimToys.com, and they use a Microsoft Windows Small Business Server 2008, running Exchange 2007 for email and collaboration services. You use Outlook 2007, and are very happy with it overall.

All of your customers know you as bob@tailswimtoys.com [eat that, spammers… ;) ]

Recently, TailSwimToys experienced a huge economic windfall, and acquired Fabrimak.com, whose main business model is appearing in test questions, under an altered name.

Anyway, bob@fabrimak.com needs the ability to communicate with Fabrimak’s customer base without letting them know that he is *also* bob@tailswimtoys.com, which they would view as silly, thus undermining their confidence in Bob. (And Bob’s company)

In order for Bob to send an email from an address other than his default email address, you need to do the following:

Note: You may want to stop all inbound email services while you do this. This way, anyone sending email to an address that you’re moving to a distribution group will not bounce, but will sit on their mail server in the retry queue, and will be delivered after you’ve created the group, and re-started the inbound mail services. (typically, you’ve got 12 hours before an email will expire from the queue and cause a NDR.)

This assumes that you’ve already configured your Exchange server to accept email for the Fabrimak.com domain, and all necessary DNS records have been created, as these are beyond the scope of this post.

First, open the Exchange Management Console, and delete all but the default email address from the user’s mailbox. (leave bob@tailswimtoys.com in there, this will be the email address used when Bob doesn’t specify an outbound address.)

Next, remove the Recipient Update Policy setting from the user’s mailbox in the Exchange Management Console. This is necessary so that the alternate addresses aren’t re-applied to the mailbox on the next run of the Recipient Update Service.

Then, create a Mail-Enabled Distribution Group named bob@fabrimak.com, and apply the secondary email address to it. (in this case, bob@fabrimak.com) Make the user Bob a member of this group. Also, you’ll need to grant Bob “Send-As” permissions to the Mail-Enabled Distribution Group, so he can “Send-As” from the Group. Another thing you’ll need to do is remove the Recipient Update Policy setting from the Mail-Enabled Distribution Group, as it’s enabled by default.

After these configuration changes, Bob will be able to compose a new email, select to show the “From:” field in Outlook, click “From:”, and select the Mail-Enabled Distribution Group named “bob@fabrimak.com”, and that is the only address for Bob that the receiving party will see.

We’ve recently run into a situation that we realized is no longer possible when running Exchange Server 2007 on Windows Server 2008.

You cannot choose an alternate email address from which to “Send-As”, because the Exchange server will resolve your user object against the Active Directory, and replace whatever alternate address you’ve chosen with your user object’s default email address, as listed in the Active Directory.

Here’s the scenario-
Fabrimak is a company with many divisions. All of these divisions function as individual companies, and as such, have their own corporate identities, domain names, URLs, etc. However, due to the current trend of downsizing and leaner operational costs, they share a core Active Directory domain namespace, running Windows Small Business Server 2008 Premium Edition.

I know this is starting to sound like a test question for an MCSE exam, but bear with me.

The domain names in use currently are as follows:
Fabrimak.local (internal domain)
Tailswimtoys.com (default Internet domain in Exchange)
Consoto.com
Northbound.us

So, when users of Fabrimak’s internal network open up Outlook 2007, and create a new outgoing email, manually select to show the “From:” field, and choose to use their ‘user@consoto.com’ address, the mail recipient sees that the email came from ‘user@tailswimtoys.com’. This is because the outgoing email address used is decided when Outlook resolves the user account used to log into Exchange against the Active Directory, returning whatever address is listed as the user’s default. (Usually managed in the Exchange Console with the Recipient Update Policy.)

Even if you choose to show the “From:” field, and select an alternate (albeit valid) email address, the Exchange server will change the outgoing address used to your user account’s default outgoing email address.

Apparently, this ability to “Send-As” was purposefully removed by Microsoft, during the codebase rewrite of Exchange server.

However, (with the help of some friends from Redmond) there is a workaround. Allowing this “Send-As” behavior *is* possible. The workaround entails the use of Mail-Enabled Distribution Groups, and the removal of the Recipient Update Policy from the user account.

Details coming in my next post.

I can’t say enough how much of an amazing change this is from all previous versions of Windows. A ton of hard work went into this, and it shows. This release marks the very first time that all of my applications work together at the same time. I can now sync my phone using bluetooth, and access it’s internal storage directly from explorer.

There is an issue with the fingerprint reader being recognized after waking my Lenovo X61. I assume it’s because there isn’t a USB device bus scan immediately after wake-up. It doesn’t matter too much to me, though.. You can click on “Switch User”, and then the fingerprint reader will be recognized, and works for login.

You know, some of you out there in the ether may get the idea that I don’t like Microsoft. If you get that feeling, I can understand why. But, you’re wrong. I have a great respect for them, and their software. It has often been known to be insecure, incomplete, ineffective, and annoying. That being said, consider the start. A group of slacker nerds dropped out of college, lived, slept, ate, and breathed code just because they wanted to, and sold their {not entirely finished/owned/understood} OS to a rather large computer manufacturer with *NO FRIGGING* possibility of knowing if they could pull it off. But, they did. And they succeeded. And their OS and software runs on millions more machines than the OS you and I wrote. For that, I really admire Microsoft. They just did it. Did you?

So, this news of subscription-based access to their OS and software is extremely interesting to me. All I’ll say about it is that my admiration for Microsoft would grow logarithmically should they decide to implement a program rewarding an exemplary GPA for students paying their subscription fees. A straight-up 4.0 GPA student should enjoy all of their services for free.
Maybe they should receive an all-expenses paid trip through UC Berkeley for their CS degree. Microsoft possesses the ability to make an important difference here. I believe that educating our children better benefits not only us, but the entire world.

United States Patent Application: 0080319910.

VirtualBox 2.1 Supports 64-Bit VM In 32-Bit Host

Slashdot | VirtualBox 2.1 Supports 64-Bit VM In 32-Bit Host.

Sun ROCKS!!!!! Thanks, guys!

I started writing an OpenBSD how-to regarding an all-in-one appliance solution some time ago.. (around the 3.4-RELEASE)
It started to seem really redundant, as OpenBSD is so thoroughly documented.
Is there any interest in seeing something like that?
I was thinking of something that could be used as your firewall, mail server, web server, as well as a VPN/DNS/DHCP/SSH/SFTP/FTP server.
We’ll set it up wiki-style, allowing edits.
So, any takers? Those asking questions and offering feedback will be encouraged to post…

You can download it here:http://labs.adobe.com/downloads/flashplayer10.html

Make sure that you uninstall any other version of flash player you’ve installed before trying to run the new one.
If you’re running Ubuntu, use the Synaptic Package Manager to search for and remove any previous versions of flash.
Then, just copy the libflashplayer.so to your plugins folder, on Ubuntu-8.10×64, this location is usually /usr/lib/mozilla or /usr/lib/firefox-{version}

Loads quickly, plays smoothly in full screen. Thanks, Adobe!

This one really surprises me. Microsoft, (albeit under court order) has begun working with Samba’s developers to ensure proper interoperability between Active Directory and Samba.
For those of you not familiar with it, Samba is the open source implementation of the Server Message Block protocol, also known as SMB. It’s a way for non-windows computers to communicate using Window’s native language, SMB.
This is really fantastic news, as the biggest reason that implementation of Linux or UNIX into a heterogeneous Windows environment is problematic at best is the lack of a single point of administration for user accounts.
(And, currently, AFAIK, there’s no built-in password synchronization to Active Directory for Linux and UNIX users. Sure, you can script it, but that’s messy…)

According to this article, Microsoft is treating the Samba developers as “Premium Support” customers, and cooperating fully, even devoting the resources of knowlegeable developers to answer relevant technical questions for the Samba team.

So Microsoft, THANK YOU!!!
Interoperability will benefit us all. Thanks for doing the right thing.

Need an easy way to find a machine’s serial number? Or service tag number?
Or BIOS revision? Hard drive type? Use WinAudit. It’s free! And it rocks! It’s ~830k, and needs no installation. written by the fine folks at Parmavex, across the pond.
http://www.pxserver.com/