George vs. Server

WordPress Upgrades and Comcast Update

2009-07-29T09:04:00.001-07:00

First, the comcast update. For some reason, the gateway Comcast provided (i.e. modem + firewall +?) appeared to be interfering with our existing firewall. After about 8 trouble tickets has been opened on the issue (Why did they close the first one?), Comcast agreed to replace the gateway with a simple modem in May. Since that time, our internet connection has been extremely stable. This is good to know since I live 30 miles from the school and I don't go in to campus regularly during the summer. I didn't want to be spending my summer resetting the gateway every couple of days. I am not sure what the exact cause was as we were using pretty generic hardware for the firewall. For this we were running Untangle software, which I have fallen in love with. I hated the thought that I might have to ditch it as a result of these network issues. I am thrilled that I don't have to.

Last night, I decided to take the plunge and upgrade our school's website from WordPress 2.7.1 to 2.8.2. Following the advise of blogs like Karen Blundell's, I backed up the database and deactivated my plugins. The automatic upgrade worked sell. The only glitch was that I use custom permalinks and the control panel could not update my .htaccess file. The result was the 500 Internal Error. Unfortunatley, after giving this file WORLD permissions in the cpanel, WordPress did not correctly update this file for my permalinks. NOW, all I got was a 404 error when accessing any of my blog files.

To solve this, I accessed my blog files via FTP, showing my hidden files. In the /blog directory, I found the .htaccess file, backed it up locally then deleted it. That got me access to the WordPress admin pages again. YES!! From there, I copied the code which was suggested by the Settings > Permalinks page as follows:

RewriteEngine On
RewriteBase /blog/
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /blog/index.php [L]

I placed the code into the .htaccess file and this fixed the problem. SUCCESS!!

As I looked again at the corrupted .htaccess file, I discovered that the code was copied in by WordPress with incorrect line breaks resulting in bad code. It took me some time to figure all this out so solving this issue was a major coup for me. Thanks to the bloggers who covered this issue.

Comcast Chaos

2009-04-06T12:46:00.000-07:00

We have had continuous conncection issues with Comcast here at the school. The folks at Comcast were very responsive when I called them Wednesday and came out the same day replaced our gateway/modem. Things went swimmingly Thursday and Friday. This morning, however, some serious connection problems arose with inconsistant results loading pages. When I called them, they indicated that there was an outage in our area and that they were working to solve the problem. I was thrilled to know that, at least, I was not OUR equipment.

By 11AM, I decided to reset the modem/gateway by powercycling it. So far, all is well. In fact, as the figure below shows, our speed seems to be reaching previous levels measured after the Boost feature was launched last May. Nice job, Comcast!

Comcast Cares

2009-03-23T15:47:00.000-07:00

An interesting thing happened a couple hours after my last post and a similar notice posted on Twitter regarding this issue; I was contacted by ComcastBill on Twitter asking if I needed any help. I hadn't had a chance to contact tech. support so this pre-emptive contact on their part was a pleasant surprise. I replied with my experience (see previous post) and that I would like to have the line tested. Unfortunately, I had already left school for the weekend and would not return until this past Wednesday due to an illness early in the week. My reply was recieved after ComcastBill had left the office so ComcastBonnie (on Twitter) followed up.

When I returned to school last Wednesday, I ran a few tests on the network to see if the issues had cleared up. So far, the disconnection issues have not returned. Our speed seems to have returned to expected levels too (see below).

I don't know how long Comcast has been doing tech. support via Twitter but I love the idea. Saves me time on the phone. Also, while I have no direct knowledge that they actually changed anything on their network, at least their AWARENESS of the issue has resulted in better connection quality. Thanks, Comcast!!

What's Happening?

2009-03-13T09:04:00.000-07:00

Over the last the days, our internet connection has been spotty. The firewall appears to be handling the load (50 total nodes) with no problem, but at times, webpages fail to load. I powercycled the the cable modem yesterday, which seemed to help but the Internet is still sluggish. I ran another speedtest and came up with the following results...

Compare this to the result I blogged about last May when they launched their Boost feature.

While I realize this is not scientific, at the time I ran today's test all students and teachers were in the mulitpurpose room for an assembly. Only a couple of office staff could have been online at the time. Pings work internally with no problem but sometimes don't hit the internet. Something is fishy. What's up, Comcast?

To Cache or Not To Cache

2009-03-05T21:07:00.000-08:00

Untangle server continues to run beautifully. It is amazing to me how slick the interface is. For me, the interface, with it's virtual "rack" makes the whole package the perfect solution for those with limited knowledge in this area. Customization is easy and it is astounding how much power you get in the open source package. Add in the Commercial packages as needed and you have an easy to manage kick-butt gateway with options for any need. With my limited network administration background, the feature set combined with the interface and the availability of support was the clincher for me. See the screenshots here.

The one feature I do find missing however is a caching "rack". After doing some research on this recently, I have discovered that there is some disagreement among IT professionals as to the need for caching in the current online environment. Some argue that, since most pages are dynamically generated, that caching does little good and may actually cause a bottleneck in your network. Others counter that educational institutions often visit the same sites over and over again so caching is still a benefit. If you have thoughts on this debate, please leave them in the comments.

Firewall Success

2009-02-23T12:39:00.001-08:00

Hallelujah! I finally have a fully functional open source firewall that is now installed at the school. It took a few months but we have done it!

Those of you who have read this blog (sparse though it may be) have read my trials and tribulations with IPCop. For a novice such as me, I found it a bit cumbersome and difficult to troubleshoot. Remember, my MAIN job is being my school's Computer Teacher. This IT stuff is an undesirable necessity. Don't get me wrong, I love training teachers in the use of technology, but when it comes to dealing with servers, I lack enough knowledge to really be comfortable with these duties.

I had installed IPCop over the Christmas break because we could no longer afford the ongoing subscription costs to filter our web content. It worked well, though it was still a bit confusing for me. With IPCop, however, we were experiencing regular browser messages stating that Internet Explorer could not load the page. The choice of browser didn't make a difference, nor did upgrading switches. In addition, all the information I collected about IPCop indicated that, while I was using a older machine (760 MHz), my hardware was still plenty capable of handling its tasks on a 50 user network. I even tried shutting off intrusion detection and caching, but the problem continued.

Enter, Untangle! Untangle is extremely easy to use. While the base package is free to download and install, Untangle offers some educational modules we plan to explore in the near future. For now, I installed the base software "bare back" on a server and 4 modules to define the roles of the server. These modules are easily downloaded and installed from within the Firefox browser supplied with the software. (Nice touch!) Once installed, they appear in your virtual "rack" and can be customized by entering the Settings for that module. I set up the Web Filter, Protocol Control, Firewall and Attack Blocker modules and was easily able to enter settings according to our needs.

I did have one small glitch, however. The Untangle server is connected to a gigabit switch and other workstations could not PING the Untangle server initially. After some tinkering (and sweating), I was able to accomplish a connection by setting both NIC's (inside and outside) to a speed of "10/100" instead of "Auto". Once that setting was changed, everything worked flawlessly.

I don't think IPCop failed me, however. First, the IPCop box was connected initially to 10/100 switch before I swapped it out for a gigabit switch, thinking my issue was with network traffic limitations. This proved not to be the case. Also, I decided to use a completely different repurposed computer which had more RAM and processing power, though I doubt the IPCop box was hindered in any way running on the slower hardware. The best I can come up with is a NIC driver issue or a bad Ethernet cable. Nevertheless, the system is working beautifully now and I am not going to question it. It's done and I don't have to worry about it anymore.

Now, back to teaching!

This Is Not An Easy Job

2008-11-05T10:39:00.000-08:00

My job title is "Computer Teacher" at small private school. And before you decide that "private" means that we have money to spare, you could not be further from the truth. My technology budget for everything except Internet access is $1800. That's HALF of the same line item from last year. It is a number which has not changed in over 10 years until it got slashed last year. Forget about getting NEW technology, I am restricted to only replacing broken equipment and begging for money left and right. We also have to constantly look for open source solutions whenever possible which means that I need to find more time for the research and instalation time and hope it doesn't break on me.

But that is not why I am venting right now. I am frustrated because I am, by default, THE I.T. guy for the school, a responsibility that is NOT in my job description. I have learned a great deal in the last 8 years in this position but there are things I simply cannot do -- issues for which, in the past, I have been able to outsource to solve. This year, things are very tight and I have to do more myself, despite my lack of knowledge in these areas. What I really want to do is focus on my teaching. Instead I have to fix, replace, troubleshoot, etc. When I can squeeze it in, I have file paperwork for federal discounts on phone and internet services from the E-RATE program or collect/ship cartridges for recycling fundraiser we run. Forget moving forward, I am simply racing to keep our ground-losing to a minimum.

Don't get me wrong. These things greatly help our program but the also a lare huge distraction from my REAL job of teaching. It's a pain sometimes and I get tired of sacrificing my time and energy for things that don't help me to be a better teacher. So far, I am doing a fair job of not letting my teaching suffer due to these distractions, but I could be a more inspired teacher if I were able focus more on the duties listed in my job description.

Some day....

IPCop Clean Install

2008-09-25T15:10:00.000-07:00

OK, so I screwed up. After some comments left on this blog by "Anonymous" discouraged me from running IPCop over VMWare on a Win2003 Server for a "live" environment, I decided to do a clean install of IPCop running native. So far, everything is going fine. I installed the URLFilter addon and setup Snort (intrusion detection) and have begun testing the new box in preperation for going "live". All went smoothly once I decided to switch 320 GB HD out for a 80GB to avoid any 48-bit issues with drives over 136GB. Besides, I don't need THAT much space. The only glitch is that I accidently ran the install using IPCop 1.4.2 instead of 1.4.20, which are different animals. I suppose I could have downloaded the 1.4.20 ISO and do another install but, since I am a newbie with IPCop, I decided to run the approximately 18 patches in succession to get it up to 1.4.21. Once I figured out the system (and that I didn't have to expand the .tar files before uploading), everything went fine and I was able to see the changes as IPCop had grown since 2005. It was a bit tedious but a good learning experience. Thanks again, Anonymous!

IPCop Deputized

2008-09-17T13:50:00.000-07:00

After much research and time, we have decided to try out the IPCop firewall with URL Filter for the school's needs. Our VERY limited budget made the decision even more difficult. So, we are currently testing it as a VMWare appliance on a Windows 2003 box. For the time being, we are directing 2 computer's traffic through it to test the waters. While IPCop is running in transparent mode, our LAN currently uses a Surfcontrol plugin on an ISA server and forcing the transparency to happen would require removing the MS Firewall client for all machines. A friend of mine will be scripting this so that the all workstations we be automatically run the uninstall.

One issue I am having is that I sometimes have to ping the IPCop box from the workstation in order to get internet access. For the testing phase, I am simply using IPCop as the gateway, but Linux seems to have an issue recognized other nodes on the network unless they are pinged. I haven't been able to find out much about this by Googling it. I guess I'm not using the correct keywords. If has any information on this, I would very much appreciate hearing about it. I suppose I could write a boot script but my guess is that there is an easier way. Anyone?? Does the fact that it is a VMWare appliance affect things? Thanks!!

Add your comments below.

Comcast Boost Realized

2008-05-29T08:21:00.000-07:00

I've been hearing about Comcast business customers getting a speed boost but I hadn't seen that happening on our connection. Today, I received a letter from Comcast indicating that our connection speed, previously 8Mb/1Mb, had been doubled both downstream and up speeds. The letter also indicated that I might need to do a hard reset on the cable modem to see the new speeds. So, I reset the modem and, sure enough, we are getting faster speeds that we were previously set up for, though I have never seen us near the cap from a workstation on our network (but who's complaining). Nice! Great for a school on an ever DECREASING budget.

I had also heard about a Power Boost feature to give you a quick boost on your first 100 MB (or something like that). The letter I received did not go into specifics but did refer to such a feature.

We will be upgrading our servers soon. More posts to come on that. Stay tuned!

Dell Laptop NIC issue -- Odd Mystery Solved

2008-05-13T10:08:00.001-07:00

A friend brought me a Dell laptop yesterday. I don't recall the model number but it was approximately 2 years old. She said she couldn't get it on to our network using the Internal NIC card. I told her to bring it to me and I'd take a look at it. I promptly plugged in a Cat-5 but the Internal NIC remained disabled. What gives? This was truly a mystery. I checked all the DHCP setting and such. Nothing seemed out of the ordinary, yet I simply could not enable the NIC.

After about 20 minutes, the battery was beginning to run down so I plugged in the AC adapter for charging and decided I'd return to it a short time later. When I resumed my troubleshooting, I connected the laptop via wi-fi access point to my network and noticed that the internal NIC card was now connected as well. I wasn’t going to question why it was suddenly working so I unplugged the laptop (so it was now running on batteries) and walked it down to my friend, whose office is on our school campus. I plugged it back into the wired network and, once again, the NIC was disabled. I started digging through ALL the settings I could find. It turns out there was a separate control panel for the internal NIC. When I explored it, I discovered an obscure checkbox. It was for an option to disable the Internal NIC when the laptop was running on batteries. What? I couldn't believe it! This was clearly a new one for me (though that's not hard to do). I unchecked this box and exited the control panel. The NIC was immediately activated and I was good again.

I have been brainstorming on the purpose of such an option since that time. The only scenario that I see is that Dell is assuming that if you are running on batteries, then you aren't near an AC outlet or within reach of an Ethernet port. Dell should not make such an assumption. I know many people who are near Ethernet ports but chose to work on batteries until they need to plug into the AC outlet. While I agree that doing this regularly would, over time, deplete the total charge available by the battery and that this option COULD be useful in saving battery life, it should NOT be the default. It's not obvious to most users that running off the battery would disable their NIC. Dell should either make this checkbox MUCH more obvious to the user or not make it the default option.

Your thoughts? Feel free to leave comments.

Blogged with the Flock Browser

Firewalls and Schools

2008-05-09T11:30:00.000-07:00

I've been researching firewall/proxy software or Linux-based system for a small school serving 300 students. It's been a bit frustrating that there seems to be very little information on this topic relating to schools. Since schools are required by CIPA/COPA/ERATE to put these safeguards in place, you think that there would be more information on this topic.

I search eschoolnews.com, which is constantly pushing their Resource Center, but the most recent article on the topic was from 1999. (Maybe when I get some more knowledge in this area, my blog can be a useful resource for someone facing similar issues.)

We will be replacing our current Windows 2000 Server (ISA 2004 firewall with SurfControl plugin for web content filtering) with a Linux box. So here is my question...

Will the firewall/proxy on Red Hat Linux (for example) with DansGuardian be an adequate replacement for the current server or is there something more robust we need to consider?

If anyone has an answer to this, please respond in the comments. Thanks!

Network Communications issues

2008-05-07T09:57:00.001-07:00

During the last few days, I have experienced daily network communications failures on our only Windows 2000 Server (firewall/proxy/content filtering/file-print sharing). This resulted in access to the internet and all other network communications being halted across campus. I was able to determine that is was not a proxy issue because bypassing the proxy did not get me out to the Internet. Not knowing exactly what was cause, I found that I could bring the services back online if I restarted our server. What a pain! I have had to do this 4 out of the last 5 days first thing in the morning.

The last failure was at about 4PM Monday. The event log showed the following two errors:

DHCP service - The JET database returned the following Error: -1808
DHCP service - Error when backing up the database

First, the 1808 error. I googled for Error 1808 and discovered that this is a DHCP error indicating that there is a lack of space on the volume. I checked my system and discovered that the 3.5 GB system partition had only about 50 MB. So I removed some unnecessary programs and opened this up to nearly 100 MB. Since my dhcp.mdb database is 1.0 MB, I thought this ought to be plenty.

A Google on the second error led me to this article and the possible need to fix my dhcp.mdb file using jetpack.exe. I have not done this yet as I am seeking some advice as to whether I should proceed since this is an OFFLINE operation.

Good news! Since I cleared up some space on Tuesday, the network communications have not failed ("knock on wood"). I will be examining the logs further when I get a chance. First, I have grading to do.

Blogged with the Flock Browser

Introduction

2008-05-07T08:18:00.000-07:00

I am starting this blog to chronicle my adventures into "Server-land". Although I have other blogs, this one will be geared towards a more specific audience - those who "have" to function as administrators for schools and small-business environments, but for whom this is not the primary function of their job.

I am a Computer Teacher at a K-8 Catholic school in California serving 325 students and approximately 20 staff members. I consider myself to be a beginner network admin who wishes to learn more and share in my journey so that others can benefit. I seek to find reliable technologies for maintaining an effective and safe computing environment while, at the same time, staying within a shoestring budget. I will explore both open-source and mainstream solutions to meet these goals.

My hope is that, by sharing my lessons learned along my journey, we all will benefit from what I have learned and contribute your knowledge to the cause. Schools, like all of us, are facing difficult financial times and must examine all options that can meet our needs while providing the most bang-for-the-buck. That is not to say that I will be looking to open-source technologies simply because they are free. Since my primary job is teaching computers, any solution must work well and be easy to maintain a minimal amount of time spent keeping it running.

In the next couple of months, we will be replacing our Windows 2000 server (file/print sharing, proxy, firewall and content filtering, ISA 2004) and moving all but the file/print sharing functions off to another server, probably a Linux server. The file/print sharing services will be tasked to the new Windows 2008 Server. I am less familiar with Linux but my budget can no longer sustain the $1800 price tag for the annual content filtering subscription. I am learning that there are open-source solutions for proxy/firewall/content that will do an equal or better job of providing these services.

Do you have any solutions that you are currently using? Thoughts? Ideas? Please share them for the community so that we all can benefit. Leave a comment below. Thanks!