Re: Help with long term network problem

On 8 Apr 2006 14:31:53 -0700, "Gallon_Jug" <batsncats@xxxxxxxxxx> wrote:

Chuck,

All are connected and can still access router and internet.

Symptoms were not finding mapped network drives or shared printer on
DATA by other machines on the LAN.

Depending on the boot sequence of the computers this changed. If I
shut all down and started DATA then NEOBAT then NEOBAT could use mapped
network drive and shared printer, but not CMM or Dell8400. If I Booted
Data followed by CMM it could access all shared services, but them the
rest could not.

As noted in the beginning all with the LAN has been smooth for nearly a
decade with migrating varied dedicated servers in and out and not
dispensing with the dedicated server and just using on (DATA) as file
server and print server and running the Veritas Server BU SW so I can
back up the entire system to tape drive.

I did learn that Panda has changed some of the Firewall management for
previous versions we were running. Seems that one now needs to
explicitly list IP addresses of all computers on LAN to allow open and
free communication. In the past simply checking a box the then entire
LAN was secure and communication should be allowed was all that was
needed.

There are issues with CMM machine like the browser will not start and
now you pointed out the registry is not available. This may not be a
problem if browser services are only handled by DATA and NEOBAT.

I will let the system sit for the rest of the week end (actually need
to get back to finalizing a risk assessment for the water birds of
Belize then head to Cuba later next week to do bat work.

If everything seems to be functional at the moment I assume we are
done?

If Panda Firewall continues to cause problems using your layered
approach with multiple programs may be in order again. It was a big
pain with Symantec/Norton, Adawae and a host of other separate programs
since I would be the only one to run them and Panda will run fine on
its own on all machines.

FYI you might post to others that the Panda Internet Security 2006
needs a bit more care to config the firewall in a LAN.

http://www.pandasoftware.com/com/support/card?id=10028&idIdioma=2&pagina=5


Thanks for the hand holding and help.

Bruce

OK, Bruce,

By "All are connected and can still access router and internet.", I take it you
mean all computers can access other computers? But this is without PIS
installed? If so, I concur with your idea of letting the systems sit for a
week, while you do your actual work, but I urge extreme caution while you do so.

If your computers sit without any individual malware protection of any type, I
highly recommend that you not allow any visitors to access AOL, or any other
similarly unsafe content, until you are able to install anti malware protection.
I note your need to use a package for protection, but I suspect that you are now
aware that package based protection carries a trade off in terms of what we call
lack of granularity.

And you're absolutely right, it's a big pain to deal with AdAware, Spybot, and
other components in granular layered security. But you also, I hope, realise
that the pain of dealing with multiple components is far less than the pain of
trying to clean up a damaged computer, or to deal with data loss from one
irreparably damaged.

And I will note for the record that we've been aware here of the ongoing
problems with NIS and MIS, and now I add PIS to that list. Congrats on your
determination to stick it thru to the end. Please let us know how it works out
for you in the future.

--
Cheers,
Chuck, MS-MVP [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My email is AT DOT
actual address pchuck mvps org.
.

Relevant Pages

  • Re: Help with long term network problem
    ... Symptoms were not finding mapped network drives or shared printer on ... DATA by other machines on the LAN. ... dispensing with the dedicated server and just using on as file ...
    (microsoft.public.windowsxp.network_web)
  • Re: recommended network/server layout for website, email, and backup hosting
    ... would provide a web server, and email server and back up servers. ... these machines are more than enough. ... both internal LAN backups and DMZ ... secondary DNS with other responsibilities, i.e. email/DNS on one machine, ...
    (Debian-User)
  • Re: Unable to Access Drives on Share Computers
    ... permission to use this network resource. ... this server to find out if you have access permissions. ... Some machines are DHCP, some are static. ... All computers are completely patched, no viruses, no spyware. ...
    (microsoft.public.windowsxp.network_web)
  • recommended network/server layout for website, email, and backup hosting
    ... would provide a web server, and email server and back up servers. ... I have a static IP with an IPCOP firewall, and a internal LAN ... with several machines running debian behind the firewall. ... both internal LAN backups and DMZ ...
    (Debian-User)
  • Re: Unable to access private network from the VPN (NAT)
    ... I have the VPN setup with one network ... However they can't access any of the machines on the network. ... > the remotes and forwards traffic on to LAN machines. ... > the server does proxy ARP for the clients, gets the packet and forwards it ...
    (microsoft.public.win2000.ras_routing)