Search Members Help

» Welcome Guest
[ Log In :: Register ]

Page 2 of 3<<123>>

[ Track This Topic :: Email This Topic :: Print this topic ]

reply to topic new topic new poll
Topic: @Home, Routers, and VPN... OH MY!< Next Oldest | Next Newest >
 Post Number: 11
cr0bar Search for posts by this member.
FNG
Avatar



Group: Members
Posts: 733
Joined: May 2000
PostIcon Posted on: Mar. 06 2001,20:40  Skip to the next post in this topic. Ignore posts   QUOTE

Yeah, the old detnet server was a dedicated box. The new one will be, too, just as soon as I can scrape some hardware together. Another note about running a UNIX is that I can ship the box down to a datacenter and have it plugged in, then administer it remotely easily. I know this can be accomplished with NT, but it wasn't designed for it, UNIX was.

I run Win2K on the desktop for hardware support, games, photoshop , and all-around application availability. It's also just a way better GUI than X, IMHO.

There's nothing inherently wrong with a GUI. I'd love to use a GUI configuration utility for Apache/PHP, qmail, djbdns, Samba, or any of the other UNIX packages I use frequently. . .the problem is that usually GUI design philosophy doesn't assume that the user is already a command-line expert. This contributes to default installations of something like NT + IIS being insecure and unstable, whilst something like OpenBSD hasn't had an 'out-of-the-box' exploit in something like three years. Again, it might be fun to tweak things like you said, but I like not having to, and when I do have to/want to, I find that UNIX apps allow for a whole lot more 'tweakability', albeit through text config files.

I don't dispute Windows' place as a business desktop OS. It has a far more complete feature set than anything else, and hell, I use it so what kind of hypocrite would I be if I told everyone else to use Linux + X Windows as their desktop environment?

As for telnet support being all it takes to excite a UNIX junkie into using the Netgear....well....telnet's just a protocol, and the true UNIX junkie already has a box set up doing everything the Netgear does and more :-)

Oh, one thing I didn't mention before is that one can assemble a damn reliable UNIX setup for the price of the hardware. . .something I challenge someone to do with Microsoft software without breaking any laws. At the enterprise level this isn't a consideration, but for instance, when I set up a school's network + website, it was much easier to put Apache, IP masq, and Sendmail (ugh) on a 133MHz Linux box with 16MB of RAM than to tell them to buy an NT license and a P3.

Offline
Top of Page Profile Contact Info WEB 
 Post Number: 12
jim Search for posts by this member.
Asshole
Avatar



Group: Members
Posts: 1208
Joined: May 2000
PostIcon Posted on: Mar. 06 2001,21:58 Skip to the previous post in this topic. Skip to the next post in this topic. Ignore posts   QUOTE

Yeah, but you were saying that NT has no business in the Server enviroment.

When you talk about NT being a choice desktop OS, it HAS to have an NT Server for it to become a member of the domain with.

Or else you have to setup users on EVERY box. Does linux provide centralized user management compatable with an NT desktop? I'm asking not being sarcastic.

And if you are already going to have an NT box to run your domain, and manage your users accounts, then doesn't it make sense to go ahead and use DHCP with it? Win2k requires the authorization of DHCP servers before domain members can grab an IP to prevent rouge DHCP servers. Now if your already using an NT domain, DHCP, and NT for a file server.... Why not integrate DNS. Win2k clients can dynamically register thier addresses in the DNS. Now if all that is true, why not throw in SQL. NT accounts can be used for SQL access, no need for duplicate accounts, or worrying about deleting multiple accounts if an employee quits. Now throw in IIS and integrate NT security with it for secure websites.

It gives you centralized place to do everything! Throw in email, throw in SQL, throw in IIS....

Sure it's expensive, but that's not the arguement.

Like I said, *nix has it's place. I just don't see where it fits into a corporation.

Lots of people use it though, and I believe they pay more for the number of administrators it takes to effectively manage all the different user accounts and such than it would cost to just use NT.

I think UNIX is just wonderful for terminal type applications that only require users to interface with a mainframe, or for basic email.

I'm not a UNIX guru by any means, but I have had to play with it. It literally caused 90\% of my heartache at my job. Probably because I didn't know how to use it properly. I assume the same from people who can't see that NT is better than UNIX in a large business.

This is my outlook in a nutshell.

Windows for a consumer desktop.
Linux for small to medium sized business that need cost effective solutions that don't require centralized management.
UNIX for terminal services such as Mainframe database access and Pine mail or whatever.
NT for anything above that.

IMHO

------------------
jim
Beauty is in the eye of the Beer Holder
Brews and Cues

Offline
Top of Page Profile Contact Info WEB 
 Post Number: 13
cr0bar Search for posts by this member.
FNG
Avatar



Group: Members
Posts: 733
Joined: May 2000
PostIcon Posted on: Mar. 06 2001,23:15 Skip to the previous post in this topic. Skip to the next post in this topic. Ignore posts   QUOTE

When I say "server" I don't mean "Windows NT Server". Obviously, NT machines make the best NT domain servers.

However, if you're talking about websites/e-mail/ftp/DNS services, that's a whole different ballpark, in my opinion. Your core app is no longer coordinating a corporate network.

I think you will find that the larger the service, the less people rely on more or less 'consumer' software from Microsoft.

Hotmail, for instance, has to serve a mind-bogglingly large number of simultaneous users, and handle e-mail for their entire userbase. Microsoft tried repeatedly to get it running on NT, and failed. So it's still using FreeBSD and qmail the last time I checked.

Yahoo as well uses FreeBSD.

Most ISPs who don't suffer from day-to-day downtime and service interruptions also use some form of UNIX. Road Runner uses NT. I think @home uses NT. They both have all sorts of problems. I don't want to sound patronizing, but do you know something they don't? You already said you don't know much about UNIX.

There are other places to look to see the ubiquity of UNIX. Try http://www.netcraft.com/ and read their survey of the most popular web serving platforms. Then look at their list of the top 50 uptimes.

Again, for serving Windows machines, Windows NT is best, but if that's not your goal, UNIX is far more versatile. I should also note that it is possible to provide some Windows domain controller features off of UNIX boxes, but I'm don't know how sophisticated the software is yet. This isn't a shortcoming of UNIX, however, because it's not trying to compete with Windows in that respect.

I must say that I do find your 'hierarchy of OS applications' a bit...misinformed...

Offline
Top of Page Profile Contact Info WEB 
 Post Number: 14
justcozz Search for posts by this member.
FNG
Avatar



Group: Members
Posts: 96
Joined: Mar. 2001
PostIcon Posted on: Mar. 07 2001,00:43 Skip to the previous post in this topic. Skip to the next post in this topic. Ignore posts   QUOTE

I believe we have the same Linksys box. I would suggest getting 2 NICs for your ‘server’ on each network. Use that computer as a gate. Setup a static route on all the rest of the computers pointing them to the server to access the other network. Use a VPN from server to server. You might be able to do this with one NIC I’m not sure. As far as active directory goes I’m assuming you have each network as a different site so replication doesn’t waste all your bandwidth. If it is the Linksys box I am thinking of it has a built-in firewall so you can use any IP address you want behind the router.

Personally I use 2000. I like the command line, I like Unix/Linux my problem is I haven't used it enough to feel like I know what I am doing.
http://my.tenforward.com/raissa/vpn.htm
for a picture of what I am talking about

Have fun.

[edit: add url]
------------------
"Who needs television... I have ISDN." -- Ben Gross

This message has been edited by justcozz on March 07, 2001 at 07:49 PM

Offline
Top of Page Profile Contact Info 
 Post Number: 15
jim Search for posts by this member.
Asshole
Avatar



Group: Members
Posts: 1208
Joined: May 2000
PostIcon Posted on: Mar. 07 2001,00:57 Skip to the previous post in this topic. Skip to the next post in this topic. Ignore posts   QUOTE

We could go back and worth on which site runs what all day.

Hotmail is Win2k IIS 5 by the way.
www.terraserver.com is IIS 4 NT 4 which also hosts the largest on-line database in the world, which is run on MSSQL 7.

My point still, which I believe is being over-looked another time. Is the integration that Microsoft products provide from one service to the next, it just makes sense to let it all run together.

It's people who grab Checkpoint for a Firewall, Windows NT for domains, Netscape for EMail, Apache for Web, Oracle for Databases, Unix for DNS, iMacs on the desktop, Novell for the Network, and Lotus Smartsuite for Office Collaboration, that begin to have all these problems you mentioned. I've been in these integration nightmare scenario combining the above mentioned scenario!!! SWEAR TO GOD!!

I promise if you ever get the opportunity (which you won't) to work for a company that uses Microsoft's flavor of software (provided they make one) for EVERYTHING, you'd be surprised (pleasantly) just how well everything integrates. It amazes me. Really does!

I'm also pretty sure I know what works well, and what HASN'T, I've been there done that. Several, several, several times. I'd be perfectly happy where I am now, if they'd just take DNS away from the UNIX boys, and ditch Netscape as our email server.

quote:
I believe we have the same Linksys box. I would suggest getting 2 NICs for your ‘server’ on each network. Use that computer as a gate. Setup a static route on all the rest of the computers pointing them to the server to access the other network. Use a VPN from server to server. You might be able to do this with one NIC I’m not sure. As far as active directory goes I’m assuming you have each network as a different site so replication doesn’t waste all your bandwidth. If it is the Linksys box I am thinking of it has a built-in firewall so you can use any IP address you want behind the router.

Yes that will work. I already know I can do that. I want to do it through my router. That's why I bought it. If I do it through my server, my server will be directly connected to the Internet... I don't want that. I just want port 1723 open to my server and few other ones. Technically with SUA/NAT by pointing 1723 to my internal box, my computer should be able to treat my VPN connection just as if it were a dynamic NIC. I may have to resort to that solution, but not untill I'm positive I can't do it my way.

------------------
jim
Beauty is in the eye of the Beer Holder
Brews and Cues

Offline
Top of Page Profile Contact Info WEB 
 Post Number: 16
jim Search for posts by this member.
Asshole
Avatar



Group: Members
Posts: 1208
Joined: May 2000
PostIcon Posted on: Mar. 07 2001,01:04 Skip to the previous post in this topic. Skip to the next post in this topic. Ignore posts   QUOTE

quote:
Originally posted by justcozz:
http://my.tenforward.com/raissa/vpn.htm
for a picture of what I am talking about

Actually that picture is exactly what I'm doing. And it doesn't require 2 nics in the server. It's a router to router connection because the servers are acting as routers...

And cr0 about the longest uptime thing, I've seen that netcraft before. Come on now... Look at the sites with the longest uptime, have you heard of ANY of them??? I could toss up a Windows 95 box with PWS and let Netcraft poll it, and it probably would stay up for YEARS! Now if it was Apache.org, linux.org, and some other big websites leading the list, I'd be more open to your arguement. Poll Netcrafts own uptime and pair it against Dell or Compaq... You know they take millions more hits per day....

------------------
jim
Beauty is in the eye of the Beer Holder
Brews and Cues

Offline
Top of Page Profile Contact Info WEB 
 Post Number: 17
cr0bar Search for posts by this member.
FNG
Avatar



Group: Members
Posts: 733
Joined: May 2000
PostIcon Posted on: Mar. 07 2001,01:42 Skip to the previous post in this topic. Skip to the next post in this topic. Ignore posts   QUOTE

This is why I didn't want to have this argument :-)

See, it's not really an argument. You're saying that Microsoft products work great together, and I'm saying of course they do.

I'm also saying that UNIX works great too and allows the user far more power and versatility [insert open-source sermon here].

...then you come back at me with networks running all sorts of Novell/Lotus/Nutscrape bullshit...and I couldn't agree with you more :-)

As for Hotmail, I think the frontend may be IIS, but I know that for a very long while FreeBSD + qmail was running that operation and did a bang-up job. When they ported it to NT, it failed. Of course, this doesn't compare to the other uses of NT, since Hotmail is a webmail app and NT wasn't designed to run webmail. FreeBSD arguably wasn't either, but it lends itself better to that. This gets back to my whole versatility claim....

Offline
Top of Page Profile Contact Info WEB 
 Post Number: 18
jim Search for posts by this member.
Asshole
Avatar



Group: Members
Posts: 1208
Joined: May 2000
PostIcon Posted on: Mar. 07 2001,12:39 Skip to the previous post in this topic. Skip to the next post in this topic. Ignore posts   QUOTE

quote:
Originally posted by cr0bar:
However, if you're talking about websites/e-mail/ftp/DNS services, that's a whole different ballpark, in my opinion.

I'll give you websites on a price/performance ratio. But I don't think that's true when you are in a corporation where you're not just talking about inTERnet sites. What about when you throw in 5,000+ InTRAnet sites. Most are small, all are FrontPage. Now I have to deal with security. Integrated Security with NT just makes my life simple. Now when we talk about high end web servers serving the inTERnet you have to look at the type of applications you'll be doing. To me ASP is by far the most scalable programming interface. And .net is going to take that to a whole new level!

Now I can't believe you'd take Unix email over Exchange. Exchange is by far the best Workgroup email package in existance. Fuck IMAP and POP3... Lotus Notes would get my award for second place. You can make the argument that a LINUX box running on a 486 with 64k of RAM can handle 20,000 users, but what features do you get?!?! None. Exchange and Notes are much more than a way to send simple text messages. It's a whole office collaboration piece.

DNS??? What advantages does UNIX provide in serving DNS?

FTP... Sure ok... I don't have a preferance one way or the other.

And that's all you've said. You stated NT works great at being NT and integrating with NT products. I thought that's what you were origanally against.

You've then stated that UNIX is far more powerful and versitile than NT. But just in the above mentioned situations? Which I strongly disagree with EMail. Websites, in some instances would be far better suited on UNIX, but that's the execption, not the rule. DNS??!?! I can't see your point on this one.

------------------
jim
Beauty is in the eye of the Beer Holder
Brews and Cues

Offline
Top of Page Profile Contact Info WEB 
 Post Number: 19
cr0bar Search for posts by this member.
FNG
Avatar



Group: Members
Posts: 733
Joined: May 2000
PostIcon Posted on: Mar. 08 2001,02:34 Skip to the previous post in this topic. Skip to the next post in this topic. Ignore posts   QUOTE

See, I still think you're so caught up in the Microsoft world that you don't realize what you're saying.

"UNIX is no good at being an MS Exchange server!"

Well, duh.

Exchange may be a great collaboration tool, but it's not really a standard. You might say that Microsoft is a standard in as of itself, and that's fine, but when most people talk about standards, they're thinking of protocols such as SMTP, POP3, IMAP, etc, which are strictly defined, yet implemented in various ways. Things like Exchange (or any of MS's other proprietary protocols/file formats/server software) can't be implemented any other way than Microsoft's way.

I shouldn't need to point out that Microsoft implementations are notorious for being bloated and insecure. Check out Bugtraq or any number of independent reports on security vulnerabilities in various popular server platforms.

Dealing with 5,000+ intranet sites managed with FrontPage wouldn't really be a challenge for a UNIX admin, but UNIX admins don't usually run FrontPage because of its horrible security. "Fine", you say, "so what's the UNIX equivalent of FrontPage?" Well, Microsoft wrote it. What's more, anything that lets users edit websites through a bunch of CGI-esque scripts and POST commands will be buggy, which is why die-hards will hate things like Cobalt RaQs, even though they run Linux.

I don't know much about ASP, and so I can't comment on it, but AFAIK there's nothing you can do with ASP that you can't do with PHP or CGI scripts (and vice versa). Perl is another story (there doesn't seem to be anything you can't do in Perl--someone recently implemented DeCSS in Perl for cryin' out loud). However, if I had to run ASP, I'd do it on a UNIX box using ChiliSoft's package, not under NT.

Again, your comment about "What advantage does UNIX have in serving DNS?" is shortsighted and sort of displays a lack of understanding of the issues. DNS is, yes, a relatively simple task of mapping hostnames to IP addresses. The problems start cropping up when you consider how inherently insecure the current global DNS implementation is. There are also performance issues if you're talking about ISP DNS servers which handle requests for thousands of domains. I'll admit that even UNIX packages such as BIND which is probably the most widely used nameserver are horribly insecure and poorly written. However, there are options for anyone who cares to take a look at the fine software available (for free) at http://cr.yp.to/ (the same applies to the Sendmail MTA). Dan Bernstein's djbdns package has reportedly handled 7,000 DNS queries per second on a P3 550. NT's DNS implementation, on the other hand, is known to be buggy and insecure. (Bugtraq)

However, I can easily see how you'd be tempted to scoff and say "DNS? It's just DNS!"

Same issue with FTP. It may seem like a relatively simple and straightforward service, but then again, while NT might be great for a FTP site that you run for you and your buddies who aren't trying to hack it, if you're going to serve thousands of simultaneous users off a P3 500, you might want to take a look at what cdrom.com is doing with FreeBSD.

I don't think my view that NT is great for serving a Windows environment conflicts at all with my view that the UNIXes are far more robust and versatile. It only makes sense that the Windowses work great together--I should hope they do!

I've played with NT, and out of the box it can be very attractive. Point-click, you're fully featured and ready to serve websites, fancy email, FTP, DNS, the works. . .but it's sort of like buying a Compaq from CompUSA. . .people who care about the internals of their system and the elegance of their software will build it themselves and not be happy with prefab turnkey solutions.

I hope I've managed to further understanding of my viewpoint without offending anyone's preferences. I do not deny that NT can do a lot of great things very easily, but this doesn't say anything about UNIX, whose design philosophy I happen to favor for the reasons I've been citing ad nauseum (security, stability, versatility, cost).

Oh, one more thing I just thought of. Linux (and FreeBSD) can make a great router and/or firewall. http://www.freesco.org/ provides a one-disk Linux-based router solution which boots off a floppy and then runs entirely out of memory. The GNAT Box is also truly amazing, and is based on a stripped-down BSD kernel. (click the link to see the kind of performance it offers on different hardware). 64 Virtual clients each generating thousands of concurrent sessions pulled 29,479kbit/s through a GNAT Box running on a P166 w/ 16MB of RAM. Why can't NT do this? It's just too bloated. You won't strip it down to fit on a floppy and still be so nimble. (NT advocates will probably say "that's because it has more features!". . .to which I say sometimes you don't want more features than you need. If you did, then you'd see NT outperforming UNIX in all areas with little or no modifications)

Offline
Top of Page Profile Contact Info WEB 
 Post Number: 20
jim Search for posts by this member.
Asshole
Avatar



Group: Members
Posts: 1208
Joined: May 2000
PostIcon Posted on: Mar. 08 2001,10:36 Skip to the previous post in this topic.  Ignore posts   QUOTE

quote:
Originally posted by cr0bar:
It's just too bloated. You won't strip it down to fit on a floppy and still be so nimble. (NT advocates will probably say "that's because it has more features!". . .to which I say sometimes you don't want more features than you need. If you did, then you'd see NT outperforming UNIX in all areas with little or no modifications)

Which is why I said there is a place for *NIX.

I'll reply to the rest later, cause I still think you don't see MY point. I see yours.

I knew I shouldn't have checked this thread from home. Now I'm going to be late for work.

------------------
jim
Beauty is in the eye of the Beer Holder
Brews and Cues

Offline
Top of Page Profile Contact Info WEB 
25 replies since Mar. 06 2001,13:09 < Next Oldest | Next Newest >

[ Track This Topic :: Email This Topic :: Print this topic ]


Page 2 of 3<<123>>
reply to topic new topic new poll

» Quick Reply @Home, Routers, and VPN... OH MY!
iB Code Buttons
You are posting as:

Do you wish to enable your signature for this post?
Do you wish to enable emoticons for this post?
Track this topic
View All Emoticons
View iB Code