• On the Road

    On the Road: Miles

    How many miles have I let expire?  How many flights did I not bother to register the mileage properly for?  All that’s changed.  Sure, there might be better programs out there but I’m in love with AmEx.  That’s all I have to say about that.

  • Consulting,  Kerio,  Mac OS X Server,  Microsoft Exchange Server

    Blocking Spam Attacks

    Various Spam Issues and the Appropriate Steps to Resolve Them:   Symptom: Users of the domain are getting a large amount of spam Problem: Spam sucks… Resolution: Outsource spam to MXLogic, Postini, Katharion, etc., limit incoming traffic over port 25 to the IP scheme of the outsourced service and use whatever form of message hygiene is built into the server for a layered approach (eg – Intelligent Messaging Filter in Exchange, Spam Assassin in Mac OS X Mail Server, Kerio Spam rules, etc.   Symptom: An IP or domain name is getting flagged as being a spammer although the users do not send spam. Problem: The mail server potentially does…

  • Active Directory,  Mac OS X Server,  Mac Security

    Managing the Keytab with ktutil

    clear_list – Clears the current keylist  read_kt or rkt – Reads a krb5 keytab into the current keylist  read_st or rst – Reads a krb4 srvtab into the current keylist  write_kt or wkt – Writes the current key listing into a krb5 keytab  write_st or wst – Writes the current key listing to a krb4 srvtab  add_entry or addent – Adds an entry to the current key listing  delete_entry, delent – Deletes an entry from the current key listing  list – Lists the current key listing  list_requests or lr – Lists available keys 

  • Mac OS X

    Mac OS X: The Dangers of Internet Sharing

    There have been a number of occasions when there is a Mac introduced into a freelance type of environment where the Mac has Internet Sharing enabled and using the Internet Sharing feature ends up causing issues on the network due to the DHCP server that is enabled as a part of Internet Sharing.  Rogue Access Point detection is one solution that can help to mitigate this risk.  D-Link and a number of other vendors have solutions that can be enabled on their switches that disable this type of activity.

  • Mac OS X Server

    Mac OS X: 2 Factor Authentication

    CryptoCARD can be used to provide 2 factor authentication.  This can easily be integrated into the VPN server for Mac OS X, although it will take a little while to get integrated into Open Directory.  However, it’s cost effective and available for OS X.