Redoing a existing network....

By pes2013
in Smart Home, Network & Security

 Share

Recommended Posts

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

whatever dude - removing **** your NOT using CAN NOT BREAK ANYTHING -- are you using teredo?? NO - its a tunneling protocol for ipv6 over 4, are you using isatap?(Intra-Site Automatic Tunnel Addressing Protocol) -- again a method of doing ipv6 over ipv4, not USING IT

6to4 tunnel, again NOT using it!! if you want to leave a IPv6 stack in place sure go ahead, you sure do not need these tunneling methods enabled. If you want your nic to have a local link IPv6 address, sure go for it - pointless unless your actually using ipv6.. Do your servers even have it enabled? If your running 2k3 server then NO its not.

So what do you want to do enable or disable icmp - I would guess you want to enable, because most likely out of the box its disabled.. I would have to lookup up the manual, I don't use those firewalls - did you read the manual? Which should of be step one before you even took it out of the box!!

I don't know what kind of connection you have, so I could not tell you if your PPP or not..

And again - yes its good security practice to disable protocols your not using, and its also just over all good house keeping.. But sure if you don't care if your house is a complete and utter mess then leave all your tunnels that your not using enabled and just beeping away on your network.. Pointless nonsense you could clean up with a few key strokes in your GP.

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

"And our DC is Windows Small Business Server 2003"

Then it has NO ipv6 enabled out of the box - did you ENABLE it?? I highly doubt it!!

Then there is NO freaking way anything your doing with xp, vista, w7 or even 8 is doing anything with your server that has anything thing to do with you ipv6. Period - and they don't do anything to each other. So you HAVE NO USE if ipv6 on your network - NONE!! As I already stated disable it on a couple of machines if your worried. It takes 2 seconds and reboot to disable it, and same amount of time to re-enable it if something doesn't working. Which is not the case because if you have 2k3 server your NOT doing anything with ipv6, because its even enabled on that os unless you installed it..

And yes I read your link - it does NOT pertain to ANYTHING you could be doing because your not even running ipv6 on your server - so as I stated before everything ipv6 related on your clients is freaking noise! nothing more...

Grand Master

Obi-Wan Kenobi

Posted
Posted

Hey pes2013 !!

Listen to BudMan,,

he has really good advice, he has helped me out of a jam once or twice as well. and I have been running networks since before windows was a household name.

:)

THIS, to the infinite power. Don't shun BudMan....he actually KNOWS what he's talking about. I suggest to listen to him. Don't be argumentive. He is the person that has kept my network still working through his advice to others. Trust the almighty BudMan... He'll help you get everything flowing properly. (Y)

Grand Master

Original Poster

Posted
Posted

"The wireless clients are MACed controll and WEP"

So completely open to anyone that can google then ;) Since both are completely and utterly useless as security measures.

agreed WEP is easy to hack and MACs easy to fake... you can sniff the working macs while you are cracking the WEP XD

Neowinian

dnsing

Posted
Posted

Here is the updated network with the DNS entry of my router removed and DHCP lease time increased to 1 day:

post-486562-0-77945700-1364889232.png

Next step that should be done? For now, with the new firewall and the AD updated to the new settings, internet access seems to be doing great without a hiccup (for now)

Veteran

sagum

Posted
Posted

Its enabled out of the box.

Did you read the article I pointed out saying that there are some built in programs that if IPv6 is disabled on W7, could break normal operations???

And our DC is Windows Small Business Server 2003

BudMan is sound when it comes to advice. You should listen to him.

What he's basically doing here is offering you a near 100% walk through of setting up your network *perfectly*, apart from actually coming on site and doing it for you. All you just have to answer his questions and do what he says.

Do you even know how much he could be charging you for this service?

He's handing you the offer of a trouble free setup of your network, one that is secure, and easy to maintain after it's setup .. and you're throwing the chance it away.

Budman has more experience then most on these forums, if he says it'd be best to disable IPv6 if your clients aren't using it, he's probably telling you it for a reason that he's had experience from.

As for your lack of worry about security, if your clients are tunnelling IPv6 over IPv4, the machines are pretty much bypassing your firewall and giving them direct contact with the outside world over IPv6. While you'll have internet facing IPv6 addresses for this, you're still poking holes in to your network (directly to machines) from the outside and once they're in your network, they can use the Local and LAN IPv6 addresses to attack any other IPv6 enabled machine on your network. It's just not worth the security risk, no matter how small it is. It's like the 90's all over again and people are just ignoring it as a non-issue.

Lastly, I noticed you weren't too concerned about WiFi setup, one of the reasons your network could be dropping its connections is if a rogue attacker has your WEP key and is using all your bandwidth or simply screwing around with the network in general. Security should almost always be one of your top priority, even more so on a live network.

This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.

  • Posts

    • Google reshuffles its AI coding team as it struggles to catch Anthropic

      By Karthik Mudaliar · Posted

      Google reshuffles its AI coding team as it struggles to catch Anthropic by Karthik Mudaliar Google is already reorganizing the AI coding “strike team” it created roughly two months ago, as it attempts to find ways to close the gap with Anthropic in one of generative AI’s most commercially important areas. According to The Information, Google DeepMind is expanding the team’s focus to include “midtraining,” rather than concentrating only on coding tools and agents. Midtraining takes place after a model’s broad initial training but before the final stages that prepare it to follow instructions and perform specific tasks. In simple terms, it gives developers another opportunity to expose a model to carefully selected data before it is polished for release. That could help Google improve Gemini’s underlying coding abilities instead of relying only on better prompts, interfaces, or post-training. Previous research has found that midtraining can be particularly effective for code and mathematics, where models must move from general language knowledge to more structured tasks. Google reportedly created the original strike team in April. It was led by Google DeepMind research engineer Sebastian Borgeaud, who previously worked on model pretraining, and focused on complex, long-running programming jobs. Google co-founder Sergey Brin and Google DeepMind chief technology officer Koray Kavukcuoglu were also reportedly involved in the effort. DeepMind researchers were said to believe that Anthropic’s coding tools were outperforming Google’s Gemini models, prompting the company to give the project more attention. Anthropic has made coding a central part of its AI strategy through Claude Code and its Claude model family. The company has continued improving that area, with Claude Opus 4.8 offering upgrades for coding and other agentic tasks, along with the now-unavailable Mythos and Fable models. The reshuffle also comes at a time when Google faces increased competition for AI researchers. Gemini co-lead Noam Shazeer recently announced that he was leaving Google for OpenAI, while two other researchers who contributed to Gemini and DeepMind projects are reportedly preparing to join Anthropic. It remains unclear whether the reorganized team will produce a new public Gemini model or developer product. No release date, team size, or specific performance target has been disclosed. Source: The Information
    • Politically funny images of the World

      By +primortal · Posted

    • Politically funny images of the World

      By +primortal · Posted

    • Sony announces Bungie layoffs that will affect "significant number of employees"

      By +LightEco · Posted

      You're clearly insane.
    • Microsoft raises Xbox console prices by up to $150, discontinues 2TB version

      By +LightEco · Posted

      Just remember - Microsoft is a trillion dollar company. They didn't have to raise the price this high. They chose to.

  • Recent Achievements

    • First Post
      kinowa earned a badge
      First Post
    • Rookie
      krychek57 went up a rank
      Rookie
    • Grand Master
      Jaybonaut went up a rank
      Grand Master
    • One Year In
      Philsl earned a badge
      One Year In
    • Dedicated
      Scoobystu earned a badge
      Dedicated

  • Popular Contributors

    1. 1
      +primortal
      413
    2. 2
      +Edouard
      168
    3. 3
      PsYcHoKiLLa
      132
    4. 4
      Xenon
      73
    5. 5
      Michael Scrip
      73
    Show More

  • Tell a friend

    Love Neowin? Tell a friend!