Re: "Lost" PCs on local network.

if you are using DHCP, manually set an IP of one of them outside of the

DHCP range and see if you are having the same issue.

I am using DHCP but with it configured to always hand out the same addresses
to the "family" machines.  I'll give the fixed IP idea a shot later

can they ping each other by name, or only by IP address?

No - and to the best of my recollection they never have been able to do so -
although I probably only tried a couple of times and gave up.

is the same device giving out addresses?  Perhaps are BOTH devices

running DHCP and getting confused?

Nope - only one DHCP server in the network.

Is the problem universal, or restricted to devices trying to talk across

the wireless AP to the wired switch?

Universal.  Happens to both wired and wireless.

Do the W2000 and XP systems behave differently?

Nope.  Both the same - although the wireless PC had intermittent problems
connecting prior to the current problem but a reboot always cleared it.

when you futz'ed with the configs on the devices, did you see any

settings related to NETBIOS, DNS, or file sharing  that perhaps you changed
trying to make the old address scheme work?

By "devices" you mean the WAPs etc.  In that case no.  I did try enabling
Netbios over TCP/IP on the two wired PCs which was something suggested in a
post concerning a similar problem that I found via Google - but that's the
only change 

_except_ I did change the DHCP server to always give the same IP to the same
PC.

Name resolution in Windows  is kind of weird.  If you let is all run a

few days it sometimes straightens itself out as caches expire, etc. 

You can say that again.

Thanks for the help.


Jon Paris
Partner400

www.Partner400.com
-----Original Message-----
From: pctech-bounces@xxxxxxxxxxxx [mailto:pctech-bounces@xxxxxxxxxxxx] On
Behalf Of pctech-request@xxxxxxxxxxxx
Sent: Tuesday, June 13, 2006 1:00 PM
To: pctech@xxxxxxxxxxxx
Subject: PcTech Digest, Vol 4, Issue 124

Send PcTech mailing list submissions to
        pctech@xxxxxxxxxxxx

To subscribe or unsubscribe via the World Wide Web, visit
        http://lists.midrange.com/mailman/listinfo/pctech
or, via email, send a message with subject or body 'help' to
        pctech-request@xxxxxxxxxxxx

You can reach the person managing the list at
        pctech-owner@xxxxxxxxxxxx

When replying, please edit your Subject line so it is more specific than
"Re: Contents of PcTech digest..."


*** NOTE: When replying to this digest message, PLEASE remove all text
unrelated to your reply and change the subject line so it is meaningful.

Today's Topics:

   1. Re: FYI, Google Calandar recognizes Notes meeting invites to
      Gmail. (David Gibbs)
   2. Re: FYI,  Google Calandar recognizes Notes meeting invites to
      Gmail. (rick baird)
   3. "Lost" PCs on local network. (Jon Paris)
   4. Re: "Lost" PCs on local network. (David Gibbs)
   5. Yahoo Webmail Worm on the Loose (QSCANFSCTL)
   6. Re: "Lost" PCs on local network. (Tom Jedrzejewicz)
   7. Re: "Lost" PCs on local network. (Shannon ODonnell)


----------------------------------------------------------------------

message: 1
date: Mon, 12 Jun 2006 12:11:13 -0500
from: David Gibbs <david@xxxxxxxxxxxx>
subject: Re: [PCTECH] FYI, Google Calandar recognizes Notes meeting
        invites to Gmail.

rick baird wrote:

i recieved a lotus notes meeting invitation, and it was automatically 
added to my google calendar.

Works with Outlook generated meeting invitations also.

david

--
Any decision, made in haste, is invariably flawed...
regardless of the outcome.


------------------------------

message: 2
date: Mon, 12 Jun 2006 13:26:36 -0400
from: "rick baird" <rick.baird@xxxxxxxxx>
subject: Re: [PCTECH] FYI,      Google Calandar recognizes Notes meeting
        invites to Gmail.

I imagined it would, but notes has long been the red-headed stepchild
of email and calendaring when it comes to integration into other
software.

I just started using google calendar, because I get meeting invites
from different places and want to be able to access a calendar from
everywhere.

it just surprised and pleased the heck out of me that it recognized
the notes invite.

On 6/12/06, David Gibbs <david@xxxxxxxxxxxx> wrote:

rick baird wrote:

i recieved a lotus notes meeting invitation, and it was automatically
added to my google calendar.

Works with Outlook generated meeting invitations also.

david

--
Any decision, made in haste, is invariably flawed...
regardless of the outcome.
--
This is the PC Technical Discussion for iSeries Users (PcTech) mailing

list

To post a message email: PcTech@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/pctech
or email: PcTech-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/pctech.

------------------------------

message: 3
date: Mon, 12 Jun 2006 20:58:17 -0400
from: "Jon Paris" <Jon.Paris@xxxxxxxxxxxxxx>
subject: [PCTECH] "Lost" PCs on local network.

I made a small (?) change to my network this weekend to connect my Tivo.
Because I found myself having to frequently reconfigure a LinkSys WAP and
Client set-up before I could get it right, I finally gave up on trying to
force the LinkSys to use a 192.168.0.n address and instead allowed it to
default to 192.168.1.n and changed my D-Link router from the .0 setup it
wants to use.

Some time later when Tivo and everything was working we noticed that none of
the PCs could "see" each in the Windows network any more.

All PCs can ping each other no problem.  I can connect to both the LinkSys
AP (.245) and the Client (.246) for configuration purposes.  I have also
checked to see if other PCs can connect (using the IP address) to the Apache
server running on my laptop.  This works just fine.

All PCs can see the internet no problem.

PCs are running a mix of Win 2K and XP.

I have rebooted the PCs with no effect.  I also enabled NetBios over TCP/IP
on two of them which was the suggested fix from one web page I found.

I'm clueless - anyone got any suggestions? 

Jon Paris
Partner400

www.Partner400.com



------------------------------

message: 4
date: Mon, 12 Jun 2006 21:55:56 -0600
from: David Gibbs <david@xxxxxxxxxxxx>
subject: Re: [PCTECH] "Lost" PCs on local network.

Jon Paris wrote:

Some time later when Tivo and everything was working we noticed that none

of

the PCs could "see" each in the Windows network any more.

Any other devices on your network?  Any linux machines running Samba?

I've seen this kind of thing happen on my network when a Samba server
assumes the 'master browser' role ... and screws things up.

In my case, I know it's a configuration problem on the the Samba server
(that I haven't gotten around to fixing).  The end result was that none
of my windows systems (xp in this case) could see each other.

david



------------------------------

message: 5
date: Mon, 12 Jun 2006 21:27:27 -0700
from: "QSCANFSCTL" <QSCANFSCTL@xxxxxxxxxxx>
subject: [PCTECH] Yahoo Webmail Worm on the Loose

From:
http://blog.washingtonpost.com/securityfix/2006/06/yahoo_webmail_worm_on_the
_loos.html

Security experts are warning of a new e-mail worm that takes advantage of a
flaw in Yahoo's Web mail system to redirect users to advertising sites and
to spread the worm to everyone in the victim's e-mail address book. 

According to an advisory issued by Symantec, "JS.Yamanner" exploits an
unpatched Javascript vulnerability that kicks in when the user opens an
e-mail infected by the worm. Unlike most e-mail-based worms -- which launch
when the recipient clicks on an infected file attachment -- this one spreads
merely by getting the user to open the e-mail.

There may well be different versions of this bugger going around, but the
one being tracked at the moment has "av@xxxxxxxxx" in the sender field, with
the subject "New Graphic site." Symantec said users of Yahoo Mail Beta do
not appear to be vulnerable to the worm.

When I followed the redirects on a test version of Windows XP, it launched
two Web sites -- one advertising various online animations and graphics, and
another that asks the visitor to download "Casino Tropez," an
online-gambling program apparently operated out of the Caribbean island of
Antigua (its entry at SiteAdvisor indicates this company is known for
advertising via spam with forged e-mail headers). 

The site hawking the online animations is registered to an Alireza Lavaei in
Ontario, Canada. The server that hosts the site also hosts about 50 other
marketing sites, most of them written in Arabic. It's important not to read
too much into the registration information, as it is most likely fraudulent.
Still, it is interesting to note that the server also hosts a (currently
inactive) site called Yahoo-Incs.com; people who work for Yahoo have e-mail
addresses that end in yahoo-inc.com, so such a site could be fairly
effective if leveraged in tandem with future social engineering attacks on
Yahoo users.

This attack does not appear to try to foist malware on visitors, but
according to Web security firm Websense, a trivial reconfiguration to the
worm could direct victims to sites that do. I have a call in to the people
at Yahoo, but until this vulnerability is fixed, you're probably best off
taking Websense's advice and using another Web mail program like Gmail or
Hotmail.

However, according to a writeup on this by the SANS Internet Storm Center,
there may no easy way to fix this vulnerability. SANS incident handler
Arrigo Triulzi wrote that turning off Javascript on your browser will
prevent you from reading your Yahoo Webmail.

SANS also says it's aware of two versions of this worm going around,
released just two hours apart: "The [quick] release of a new version ...
which partially fixes the first version indicates that the code is very much
under development and you should assume that the remaining bugs will be
rapidly ironed out."

Read About It
Information about JS/Yamanner@MM is located on VIL at:
http://vil.mcafeesecurity.com/vil/content/v_139913.htm

Detection
JS/Yamanner@MM was first discovered on June 12, 2006 and detection will be
added to the 4783 dat files (Release Date: June 13, 2006).

Though we consider this a low threat, An EXTRA.DAT file may be downloaded
via the McAfee Avert Extra.dat Request Page:
https://www.webimmune.net/extra/getextra.aspx

If you suspect you have JS/Yamanner@MM, please submit a sample to
<http://www.webimmune.net>

Mike Grant
Bytware, Inc.
775-851-2900 

http://www.bytware.com


CONFIDENTIALITY NOTICE:  This e-mail message and any attachment to this
e-mail message contain information that may be privileged and confidential.
This e-mail and any attachments are intended solely for the use of the
individual or entity named above (the recipient) and may not be forwarded to
or shared with any third party.  If you are not the intended recipient and
have received this e-mail in error, please notify us by return e-mail or by
telephone at 775-851-2900 and delete this message.  This notice is
automatically appended to each e-mail message leaving Bytware, Inc.  




------------------------------

message: 6
date: Mon, 12 Jun 2006 22:33:43 -0700
from: "Tom Jedrzejewicz" <tomjedrz@xxxxxxxxx>
subject: Re: [PCTECH] "Lost" PCs on local network.

On 6/12/06, Jon Paris <Jon.Paris@xxxxxxxxxxxxxx> wrote:

I made a small (?) change to my network this weekend to connect my Tivo.
Because I found myself having to frequently reconfigure a LinkSys WAP and
Client set-up before I could get it right, I finally gave up on trying to
force the LinkSys to use a 192.168.0.n address and instead allowed it to
default to 192.168.1.n and changed my D-Link router from the .0 setup it
wants to use.

Some time later when Tivo and everything was working we noticed that none

of

the PCs could "see" each in the Windows network any more.

All PCs can ping each other no problem.  I can connect to both the LinkSys
AP (.245) and the Client (.246) for configuration purposes.  I have also
checked to see if other PCs can connect (using the IP address) to the

Apache

server running on my laptop.  This works just fine.

All PCs can see the internet no problem.

PCs are running a mix of Win 2K and XP.

I have rebooted the PCs with no effect.  I also enabled NetBios over

TCP/IP

on two of them which was the suggested fix from one web page I found.

I'm clueless - anyone got any suggestions?

Just one suggestion ...
- if you are using DHCP, manually set an IP of one of them outside of
the DHCP range and see if you are having the same issue.

And some questions ...
-- can they ping each other by name, or only by IP address?
-- is the same device giving out addresses?  Perhaps are BOTH devices
running DHCP and getting confused?
-- Is the problem universal, or restricted to devices trying to talk
across the wireless AP to the wired switch?
-- Do the W2000 and XP systems behave differently?
-- when you futz'ed with the configs on the devices, did you see any
settings related to NETBIOS, DNS, or file sharing  that perhaps you
changed trying to make the old address scheme work?

Name resolution in Windows  is kind of weird.  If you let is all run a
few days it sometimes straightens itself out as caches expire, etc.

Good luck!