Lacking SNMP

I had the worst day trying to troubleshoot slow internet connection speeds with Time Warner today. Without SNMP interfaces on the 3Com OfficeConnect VPN Firewalls we use I couldn’t get a handle on where the problem was occurring. All I knew is that we didn’t have a lot of irregular traffic on any ports, the VPN stayed up (barely) and I had external URL and IP ping times as high as 2500 ms.

We’re going to be putting an SNMP compliant firewall/router at our core. Probably a 3Com Tipping Point. That will let me use PRTG Traffic Grapher to look at our bandwidth by interface in real time. Monitoring without SNMP sucks.

Outlook Web Access from another IIS server

Last weekend I spend over 16 hours working on an Exchange mail server migration from a MS Small Business Server to a stand alone Exchange instance on a Dell PowerEdge 2850. It all went relatively smoothly by installing the second Exchange server on the network as a second instance and moving the mailboxes using the wizard. The part that took the most time was moving the Outlook Web Access configuration.

For the record, you cannot run OWA from an instance of IIS other than on the Exchange server itself. But if you have only one public IP address on the firewall/router and have port 80 going to a different web server you can still access OWA on the Exchange server by using SSL port 443. Here’s how (assumes advanced IIS knowledge):

  1. Using Port Address Translation on your firewall point port 443 to the internal IP address of your Exchange server.
  2. Port 80 should already be going to your primary web server via PAT entry unless your running it in a DMZ.
  3. Make sure your external DNS entries contain an entry for the new “webmail” host (an A record or CNAME pointing to the public IP of your firewall/router). ex: webmail.yourdomain.com
  4. Create a CNAME (alias) in your internal DNS records for “webmail” pointing to the A record for your primary IIS server.
  5. Create another A record or CNAME entry in your external DNS entries to include the name of the Exchange server. ex: “exchangeserver.yourdomain.com”. You should already have this entry internally or you didn’t set up your Exchange server right.
  6. On the primary (port 80) IIS server create a new site called “OWA Alias”.
  7. Create a host header for this site called “webmail.yourdomain.com”.
  8. In the properties of this site select “Redirect this site to another URL” to a site on port 443 (https://exchangeserver.yourdomain.com).

Now when an internal or external user goes to “webmail.yourdomain.com” they will be redirected to “https://exchangeserver.yourdomain.com”. For users outside of your LAN this will push them back out the firewall and force them to come in over port 443 to the Exchange server. Internal users who type the “webmail.yourdomain.com” into a browser will be redirected to the https://exchangeserver.yourdomain.com as well thus providing a URL required for the certificate.

Note: you should always run OWA with a certificate so make sure ones installed for the “Default” site for the instance of IIS on the Exchange server. This certificate can come from a public Certificate Authority or can be generated by Microsoft Certificate Services running on the Exchange server itself. Because of the detail involved I won’t get into certificate issuance in this post. Pay close attention to the name of the host when generating the certificate request. It should be the same as the https host name (https://exchangeserver.yourdomain.com in my example).

All work. Tomorrow I play.

Up until 3:00 today it’s felt like I’ve been working non-stop since July 1st.  I did take the 4th off.  But I did some work from home.  So I left at 3:00 today and made preparations to get my truck fixed.  The AC is out and there’s a thump coming from one of the tires.  It’s hot and annoying.

My mom turned 60 yesterday.  So did George Bush.  I never knew they were born on the same day until this past weekend when I was enlightened by CNN.  We celebrated her birthday on the 4th with many people at her house.  We would have gone over last night but I had to ride 30 minutes out to RTP to restart an IIS server.  I need to remember to expense those trips.

I’m playing golf tomorrow if I have to do it in the dark.  I have a 1:00 tee time and it would take a court ruling banning the sport to make me miss it.  Let’s see, what else?

I might have a new cell number soon.  Weird, I know, in the age of portable numbers.  But the new phone will be paid for by Pack Rat so their support calls will quit chewing up the minutes on the family plan we have on Dad’s account.  He didn’t like it that we ran up the bill voting on American Idol.  I feel 15 again.

It’s summer time again….

connorSo why am I so busy? Especially at work. I definately made one sacrifice leaving Dillon Supply and that was the moderately hectic Monday through Friday verses the all out chaos on any weekday at 1-800-Pack-Rat. I left on Friday at 6:15 and decided I would not do a thing involving Pack Rat over the weekend. We went to the beach yesterday. Connor got a little burned. So did I. Here’s a recap of the of the last two weeks outside of work:

The Hurricanes did not win the Stanley Cup (yet).

I bought a Cobra 460 SZ as discussed in the previous post. But I ended up finding a 10.5 degree (preferred) at Dicks SG where they sold it to me for the same price I could have bought it for on-line. I now own a pro driver again and I feel better.

connpr

Tiger Woods did not make the cut at the US Open. Which kicks a$$ because Phil Mickelson has been in his shadow for too long and Phil is by far the better player and has been for Tiger’s whole over-hyped career. Look out for Scott Adams in the future. He rocks. And I couldn’t beleive it when David Duvall made the cut into the weekend. Where’s he been?

We got a parking ticket in Wilmington. All so that we could park for a poorly cooked, over-priced meal at the Real Fish and Steak House. It’s cool to drink there but don’t eat. Go to the Dock Street Oyster Bar next door.

Now I have to go cut the grass on Father’s Day. That’s so that I can remain a father because the creatures in the wilderness we call a back yard might eat my child. It hasn’t been mowed since Memorial Day.

File under “Gotta have it…”

cobraNot long ago I bought a Bang 450 driver from 300yards.com ignoring all warnings about it’s open face. This was not smart considering I already have a mean fade (a pure slice really). So I was immediately hurt by the Bang’s tendency to go hard right without making every swing an intentional draw. Infuriated by this poor purchase I went in search of a more forgiving stick to redeem myself.

After hitting more than nine different drivers, some on sale and some not, today I found the one I felt most comfortable with as it has no disqualifying characteristics. Behold the Cobra 460 SZ (SZ for ‘Sweet Zone”…oh ya.)

Unlike the bargain priced Taylor Made 580xD it has a face that is 1 degree closed. I liked the Adams Redline RPM (a real sleeper and a bargain at $119) but I thought the shaft felt long only to find out it is indeed 46″. It’s a very forgiving club. I toyed with some Callaway Bertha’s, also fine clubs but never comfortable to me. I actually like the old Callaway’s better than the new stuff. And I hit another top contender, the Mizuno MX 500, by far the best looking club on the market.

There was one club I would have liked to hit but cannot find in stores anywhere, the Wilson Staff Dd5. It gets rave reviews for it’s shaft, accuracy and address at the ball. But I don’t think there’s a dealer in NC and I’ll be d@mned if I’m going to buy another club I can’t hit first after the Bang disaster.

So out of all the clubs I could hit the Cobra SZ is by far the most complete for me. But there’s one problem. They’re only being sold as manufacturer’s closeout items right now and finding one is difficult. Golfsmith.com has a 9 degree regular shaft on sale for $199. If my pennies come together fast enough, I own one. If not I will continue my quest.

I have a confession to make…

Ever since the first season of America Idol I’ve only watched the first couple of episodes to laugh at the auditions. This season was different. When I watched Chris Daughtry audition in Colorado I started to become intrigued about how far someone with actual talent might go on the show without being voted off by 14-year-old girls who run up their daddy’s phone bills with text messaging. So I started watching every week (not the whole show, usually just Chris’s performances, then I’d do something else or change the station). None the less I became one of those people – an American Idol viewer.

I was shocked to see how far Chris actually made it. He went to the final four this week. Hmmm, I thought, maybe America isn’t so stupid and tasteless. But tonight my suspicions were reconfirmed. Either 25 million American Idol viewers are nothing but stupid and tasteless, or the voting is rigged by the producers (I doubt this as I am not quick to become a conspiracy theorist). And here’s the real kicker: I actually tried to vote last night for the first time. But after 12 busy signals I figured that I’m not as good at it as the 14-year-old’s with tools like DialIdol running on their PC’s to slam the phone lines. And that’s what it most likely came down to. The type of audience that Chris appeals to was just to lazy or indifferent to push the limits of trying to get a vote through.

If anyone claiming any experience in the music industry can explain to me how Katherine McPhee’s performance was better than Chris’s then I will concede my position. But the truth is the girl just sucked last night. If I’d paid for her performance I’d want my money back. And Taylor Hicks is no more than a novelty item. He’s funny to watch, like a drunk wedding singer (as Simon described it). Elliott Yamin redeemed himself and probably deserved to move on even if the boy is hard to look at. But do you honestly see yourself paying to download Taylor Hicks or Elliott Yamin MP3’s off Napster or iTunes?

Chris on the other hand will probably go on to make more money in the recording industry than all of them combined. Just as Clay Aiken made a joke out of Ruben Studdard’s Idol win Chris will be remembered six to ten years from now while Taylor Hicks is out looking for another gig in a piano bar or celebrity wedding.

I will leave you with this: It’s argued that in general American’s are smart and George Bush is President.

I hate my slice.

I’m sore from going to the driving range seven out of the last 10 days. I’ve hit over 730 balls on these trips because I want my 6 handicap back. Actually I’d love to just get under 80 again by the end of the summer. This would seem to be an obtainable goal if it weren’t for the fact that I’m still slicing 10-20 yards on every drive.

My irons are solid but not consistent for distance. At least I’m not spraying them. They’re all straight. I drove a three iron 240+ yards consistently on Sunday. The guy hitting beside me shot a 78 in a tournament the previous day and he was hitting a 5 iron about 200 yards. I bet he’s not sore. Golf is a superior sport because there’s no such thing as a natural. You only get out of it what you put into it.