jump to navigation

Increase in NDR (Bounce) Messages (Backscatter) May 14, 2008

Posted by paragonhost in Hosting News, Internet, ParagonHost, Security Focus, Technology News.
add a comment

Increase in NDR (Bounce) Messages

 

Over the last several weeks there has been a major increase in the quantity of “backscatter” junk email - specifically, undeliverable email notices (also known as Non-Delivery Receipts).

 

This generally occurs when spammers ’spoof’ a valid domain as the supposed ‘From’ address of the junk mail messages. When the junk mail messages are sent to non-existent email addresses, the receiving mail server sends a bounce message to the supposed sender of that junk mail, i.e. to the unsuspecting domain that was spoofed. Given the very high volume of junk mail that spammers send, the unfortunate spoofed domain can see a large number of these bounce messages.

 

Unfortunately, there is no way to prevent a spammer from spoofing any email address that they want to use. (Techniques such as DKIM authentication or SPF will help identify those messages as spam, but they do not prevent the spammer from sending those messages in the first place.) Similarly, there is no way to prevent mail servers that receive these junk messages from sending bounce messages to that spoofed domain.

 

These bounce messages can be difficult for a spam filter to block, as these bounces generally look very similar to ‘legitimate’ bounce messages that people receive if they mistakenly send an email to a nonexistent address. Sometimes there is enough left over ’spammy’ content in the bounce messages that the messages can be identified as junk mail, but it generally does not make sense to block all bounce messages as an ongoing, long-term policy, due to the risk of blocking the occasional ‘legitimate’ bounce messages as well.

 

(TSB) TheSpamBusters.com has added a mechanism that allows us to temporarily block all bounce messages for a domain, so that if or when a domain has been spoofed, an administrator can simply change one setting in the web interface and all the bounce messages to that domain will be temporarily handled as junk mail. After a day or two (when the bounce messages subside), this setting can be disabled.

 

*** If you would like more information on how to protect scrub your email and add protection from Spam Mail before it reachs your computer, contact The Spam Busters a Service of ParagonHost, LLC (866) 412-HOST (467 8)

 

ParagonHost, LLC

http://www.ParagonHost.com

“World Class Internet Services”

(866) 412-HOST (467 8)

Bounced Email or Backscatter May 12, 2008

Posted by paragonhost in Hosting News, Internet, Internet Protection, Linux, Network 101, ParagonHost, Security Focus, Technology News, cPanel.
Tags: , , , , , , , , ,
add a comment

Bounced Email or Backscatter

April 28, 2008 10:07 AM

Email Bounces

In the past few weeks, we have seen a sharp rise in email bounces. These bounces are for emails that the person did not send. While there are many reasons you can get a bounce, the current wave appears to be a spamming technique where spammers spoof reply-to addresses.

Backscatter
Backscatter occurs when a Mail Transport Agent (aka email server) sends a bounce to a person who did not really send the email. Spam Links has a good description of Backscatter and why it happens. Essentially, someone is spoofing the Reply-To field in an email. They then send it to a mail server and it bounces not back to the sending server but to the Reply-To address. Thus you may receive hundreds of spam messages this way.

Symantec, in their April 2008 Spam Report, also noted an upward trend in backscatter attacks. So if you are seeing this issue, you are certainly not alone.

Backscatter Victim?
Unfortunately, there is little you can do. The protocols for email permit anyone to craft a Reply-To address. There is nothing you can do to force someone not to do it. There are some emerging tools that can help. SPF, sender policy framework, is a DNS based method to try to prevent email forgeries. Using DNS, you can specify what servers and IPs are allowed to send email from your domain. SPF can work very well, however, the technique is not widely adopted. Gmail, HotMail and some other major ISPs do use SPF records; however, using SPF alone will not prevent backscatter. The mail administrators must also configure their systems not to bounce emails that fail SPF tests.

If you are being bombarded by these bounces, you may be able to use your own spam filtering to drop the emails. They often have similar subjects, like failed delivery, Delivery Status Notification, or something similar. Typically the attack stops in 2-3 days.

Otherwise, you just have to keep deleting those emails.

Don’t Backscatter
A main source of backscatter is MTA’s that bounce email to unknown users. You should not bounce email that is sent to unknown users. On Plesk and Cpanel there are setting to reject/fail email to unknown users. On Ensim, there is a problem in that the system creates a default catch-all. From a management standpoint this is very poor. The default prevents you from rejecting email to unknown users. As a result, Ensim servers can become overloaded with dictionary-based email attacks. If your server does bounce emails, you could potential end up in RBLs like Spamcop.net, which not treats backscatter as spam.
Catch-22
Hackers are taking advantage of a key feature of email delivery. Bounces are important for system administrators as they are the first notification that something in the email systems may be awry. However, when they become hijacked by spammers, they become useless as you have to sort through the emails to find real bounces. As a result, some admins just route all bounces to the bit bucket. Disabling bounces can be dangerous however as they can give you an earlier indication if your system has been exploited by a spam bot. Many spammers use web based exploits to use your system to send out the messages. Disabling bounces or null-routing them prevents you from seeing these messages.

Headers, Headers, Headers

To determine if you are the victim of backscatter or if your server is really spamming, you have to analyze the email headers. If the headers do not contain your server as a source for the email, then backscatter is the cause.

Many attackers now spoof many headers in attempts to obfuscate the true sender, but with careful analysis you can often find the source.

Summary
If your inbox is full of those “Delivery Failure Notification” messages then you are likely seeing backscatter. Check the email headers and if the header nearest the bottom is not your server, then it is definitely backscatter.

TrackBack

TrackBack URL for this entry:
http://www.rackaid.com/cgi-bin/mt/mt-tb.cgi/54

Comments (2)

Frank:

Three quick additions, SPF is actually about the envelope sender address (Return-Path, MAIL FROM), not the Reply-To address.

Receivers checking SPF hopefully reject a forged mail from, if it was spam that’s it. If it was no spam (erroneous sender policy or receiver rejected FAIL elsewhere, relevant for forwarding) the legit sender gets an error code, and will create a good bounce (non-delivery notification) for the user.

Spammers won’t reach many of their targets with an SPF FAIL protected address, and hopefully give up using an unprotected address after some time.

Jeff Huckaby:

Thanks. I was being careless with my wording. I will make a clarification in the post.

For the backscatter issue, the field is the return-path field. For SPF, I am pretty sure most filters key off of the mail from header. So you could still spoof a reply-to even with SPF filtering provided the mail from headers were correct.

Currently, when we implement SPF filtering for a client, we reject all messages that have a hardfail. Also, on control panels like Plesk, we setup the default templates to include SPF records by default.

I suspect SPF’s ability to curtail spam will be short lived, but at least it should cut down on the email forgeries which are much more dangerous than the spam.

*** Back Scatter 101

http://spamlinks.net/prevent-secure-backscatter.htm

Bounces are messages, officially called non-delivery reports (NDR) or delivery status notifications (DSN), that are generated by a mail server to report on the delivery status of an email message.

Problems arise with bounces if they are sent by a mail server to a non-local recipient. If a message did not originate locally, then a mail server cannot know for sure if the address it is sending the bounce to is forged or not. This quickly leads to unsolicited “backscatter” (or more rarely “outscatter”), sent to sites that never originated the email.

 

Are there trademark issues related to the use of “Got” Marketing? May 9, 2008

Posted by paragonhost in Hosting News, Internet Protection, ParagonHost, Technology News, cPanel.
Tags:
add a comment

California Milk Processor Board Threatens PETA with trademark infringement over “Got Pus?”

After years of allowing numerous parodies (and even some similar third party trademark registrations) of its famous “Got Milk?” trademark, the California Milk Processor Board (”CMPB”) is threatening to sue People for the Ethical Treatment of Animals (”PETA”) over its use of the phrase “Got pus? Milk does.” on T-shirts, mugs, and other merchandise. See Associated Press article here.

In response to CMPB’s cease and desist letter, PETA’s lawyer wrote:

Your client cannot seriously contend that an appreciable number of consumers who see a T-shirt bearing the “Got Pus? Milk Does” slogan would be confused into thinking that your client is the source of the T-shirt, attempting to sell milk by letting the public know that when they drink milk they are also consuming pus.

So apparently, CMPB is ok with the myriad of “Got Milk?” ripoffs — so long as you don’t bash milk.


Source: http://www.vegastrademarkattorney.com/2007/12/california-milk-processor-board.html

Managed Hosting: http://www.ParagonHost.com
cPanel Hosting - GotCpanel.com: http://www.GotcPanel.com

AmbitionMission.com - Matt Makowicz Blog April 29, 2008

Posted by paragonhost in Hosting News, Internet, ParagonHost, Technology News.
Tags: , , , ,
add a comment

Source: http://www.ambitionmission.com/blog

Matt Makowicz’s Ambition Consulting Blog

Vista and Partners - better together

April 29th, 2008

There’s been a lot of banter lately about Microsoft execs and other folks “bashing” Vista or other similar complaints that Microsoft is not standing behind their product. 

The way I see it is Microsoft USED to (like with XP) just hold the party line, i.e. it was difficult to get “real” information from them and therefore the Partners complained.

I see that Microsoft employees that work with or present to Partners are being more empathetic.  They are still defending their product (Vista), but acknowledging issues and providing that feedback up and/or down within Microsoft.  This is a good thing!  The folks from Microsoft and Partners are now engaging in real conversations.  Much better than the “party line” of old in my opinion.

Here is a recent article on the subject:  http://www.crn.com/software/207402573

Happy Hunting,

 Matt Makowicz

Graphic design branding for under $500, (not $5,000)

April 27th, 2008

Anyone who has looking into professional graphic design services, knows that a logo design including 1-2 rounds of revisions with 2-3 design choices will cost approximately $3,000 or more.  Add to that another $2,000 to $4,000 for similar services related to stationary such as business cards, letterhead, etc… and a small business can easily spend over $5,000 for a proper branding campaign. 

-

I am not usually the one who usually finds better value in spending less, but every once in a while, something comes across my desk that changes everything.  I recommend any small business looking for a branding makeover to look at www.99designs.com

-

On this site, one can start a “contest” for a new logo, company stationary, web design layout, etc… There is a modest fee to run a contest ($30-$50) and a monetary prize that is offered to the winner - if a winner is ever chosen.  Minimum prize amounts exist, but are low - such as $150 for a logo and $200 for a website design.  Once the contest begins, which last between 1 and 10 days, freelance designers from all over the world (mostly Europe and Asia) submit entries which the contest holder rates and provides feedback upon.  This feedback encourages designers to try again, make changes to have a better chance of winning the contest, etc…

-

When all is said and done and the contest is over, there may have been over 50 different unique and professional designs to choose from and an entire branding makeover design could be obtained for under $500!

  • More choices
  • More direct and immediate feedback with designers
  • complete freedom (don’t have to pick a winner if you don’t like any designs)
  • Very professional designs

A win win!   

Happy Hunting,  

Matt Makowicz

Free Audio Book from Erick Simpson!!!

April 8th, 2008

Hello all SMB focused IT providers.  You likely know of my friend, Erick Simpson and MSP University.  He also has some great books and materials to help the SMB consultant and SMB focused IT providers. 

He is giving his downloadable audio book for FREE to anyone who registers for his upcoming webinar THIS Wednesday!  The webinar itself is a good one as it focuses upon AuthAnvil - a fantastic security product from Scorpian software designed for the SMB IT provider.

 So there it is - a great webinar that can help your business, and a free audio book that will help your business.  You have to register for the webinar and complete a survey to get the audio book, ($59 value) and to qualify for a raffle (done during the webinar) for $875 worth of AuthAnvil products.  Register here today!

 Happy hunting!

Microsoft Response Point is “like SBS 4.0″?

April 1st, 2008

Just coming off an exciting weekend at SMB Nation East in NJ, there was a lot of buzz about the Microsoft Response Point telephone system solution.  Some attendees loved it, others didn’t.  In fact, after getting an ‘earful’ from what I consider to be a prominent IT company in the NY area, I took notes on what folks thought about Response Point.  Here goes:

The Not So Great -  

·         No call accounting

·         No provision for any messages or music on hold other than what came with the system

·         No LDAP for Active Directory – must key in all employee names

·         No intercom/paging within phone system (unless use other installed speaker system)

·         1100 contact maximum per user

·         All phones must be on same subnet – i.e. no branch offices

·         No soft phones for telecommuters

·         100 MB mailbox limit (for all user’s mailboxes)

·         Doesn’t integrate outbound with Outlook or CRM (i.e. cannot bring up a contact and click dial)

·         Cannot record a conversation

·         Limited to 2 person (3 party) conference call

While that was an earfull - I also recieved some positive comments from this partner:

·         Seen as SBS 4.0 - i.e. an entry level product not quite there yet with a TON OF POTENTIAL

·         No one else has something like this at this price point (other than maybe Linksys)

·         If MS stays committed to this product, expect great things to come

 

Here’s what I think -

MS Response Point is NOT a robust, feature heavy, universally applicable phone system for small business - not yet anyway.  If you’re familiar with products such as Avaya IP Office, don’t try to compare head to head the two.  Also, if you know the IP office system, you know that a 5-10 person company will likely spend between $12,000 and $15,000 for it, while response Point will be between $2,000 - $3,000. 

The Good news is that Response Point is a great entry level product that will allow most smaller small business customers to get 80%-100% of what they are looking for in a phone system.  It is also an additional revenue stream for you as a Partner to be more of a one stop shop for your customers.

The Better news is that Microsoft also has a higher end software based solution with Live Communications Server which is very powerful.  It is only a matter of time and version releases before these two products get closer and Microsoft (and more importantly, you as a Partner) will have a robust telephone solution for any small business with any level of need.

The Best news is that we’ve seen what Microsoft does when it wants to enter a market.  They enter with a solution that sounds fantastic but when you look under the hood (or look with hindsight) is all one may have hoped for.  (SBS 4.0).  But the deed is done - Microsoft has entered the market and the product just keeps getting better, and Partners have continually increasing revenue opportunities around the product.

So my advice is to begin.  MS Reponse Point may not be perfect, but it is good enough for millions of customers out there who have a need.  You can keep a potential competitor on the outside by offering your customers a solution.  Then, years from now, when Microsoft’s phone system solutions are like SBS 2003 (unbeatable in the Small Biz market), you’ll proudly state that you have been working with the product from the beginning!  - - - - - - - - - - - - - - - - - - -    Also consider that almost every phone system provider needs to get into the network support business to survive in the years ahead.  It is a harder road for them to learn network support than for us to learn phone system technologies - so don’t waste the head start you already have.

 

Happy hunting! 

 

Matt Makowicz

 

SBSC Nascar sponsorship page is live!

March 28th, 2008

Here is the URL for the sign up page, including a link on it to view more details on all of the items included in this package: https://www.49team.com/sbscorder

 

There is an exclusive code you can obtain if you are an SBSC!!!  

 

Here’s a chance to get exposure to the 75 million people that watch NASCAR in the USA!  (that’s 1 out of every 4 men, women & children)

Want your company logo on NASCAR?

March 23rd, 2008

Microsoft is partnering with NASCAR to promote the Small Business Specialist Community (SBSC) brand, i.e. the ‘blue badge’ AND simultaneously giving an opportunity to SBSC partners to promote their business!For under $4,000, an SBSC can get it’s company logo/name on NASCAR’s #49 car! More details can be found at http://blogs.msdn.com/mssmallbiz/What an exposure opportunity!!!   Happy Hunting!!! 

Important info on SBS 2008

March 21st, 2008

In visiting various user groups and IAMCP chapters accross the US, there has been a lot of confusion and subsequent fear about SBS 2008 user limits.

SBS 2008 will continue to allow up to 75 users.

Essentials will allow from 50-300 users.

Apparantly, there was a marketing slide deck circulating out there incorrectly stating that SBS user limit was dropped to 50 and Essentials user limit was 250.

FYI - hope it helps!

 don’t forget to register for SMB Nation to get a great conference in NJ with a Response Point deep dive www.SMBNation.com code: AMBITION

don’t forget to register for SMB Summit in Dallas for a full day on SBS 2008, a full day on Essentials, and two additional days of business trainings. www.SMBSummit.com (register for My and Karl P’s pre day event)

Which “SMB” conference is right for YOUR business?

January 31st, 2008

SMB IT Providers are about to be bombarded with invitations to the 2008 conferences.  This is actually a good thing, in fact a very good thing. 

Choice is good!  It was only 4-5 years ago when the pickings were slim, in fact there was really only one, SMB Nation (www.SMBNation.com).  A few years ago, Microsoft took an idea from Harry Brelsford’s playbook and decided to do a pre-day conference to the World Wide Partner conference and the Microsoft Small Business Symposium was born.  (no link yet - this link goes to the 2007 WPC http://www.microsoft.com/partner/events/wwpartnerconference/).  Then, out West was born a great collaboration of SMB companies and the SMBTN was formed along with the SMB Summit, now in its 4th year (www.SMBSummit.com).  But that’s not all!  Industry guru Jeff Middleton, creator of the widely popular swing migration, decided to put on a different type of conference and 2008 will see his second conference (www.SBSMigration.com).  Other organizations, such as the ICCA, are in a resurgence and are having an SMB focused conference in 2008 as well (www.ICCA.org). 

So many choices!  What is an SMB IT provider to do?  What conference is going to hold the most value?  What conference should you attend?  Most smaller SMB IT providers can usually only budget for one, unless there happens to be another in their backyard.  Even larger players in the SMB space are confused, though deciding what the “deal & feel” for each event will be and trying to determine where to best place their conference budgets.So, for what it’s worth, here is my two cents on the “skinny”, the “deal” and the “feel” of each event.  Of course, because I am focused on helping and training Partners, I will be at all of them - with different content, different focuses, etc.. all aimed with a different attendee in mind. 

So here goes, I hope it proves helpful:In order of the date the conferences occur (you can also check out the www.AmbitionMission.com/events for more info):

  • SMB Nation (East) - NY/NJ March - SMB Nation is the original.  The 3rd annual East derivative of this conference with approx 200+ attendees is geared to “sbsers,” IT consultants and SMB IT providers looking to grow their business.  The event in NJ will have business sessions and a ton of info on Microsoft Response Point, which if you haven’t heard, is Microsoft’s phone system for the SMB Market.

 

  • SMB Summit - Dallas, TX April - the 4th annual conference is shaping up to be a tremendous event.  The focus is two fold for this 4 day conference - the first 2 days are all about Cougar (next version of SBS) & Centro (a mid market version of SBS).  - the last two days are all about business sessions.  One Man shops be warned, a lot of the sessions are geared to IT providers with 3 + employees.  Expect about 500+ partners in attendance.

 

  • SMB Nation (East) - not a typo - in early May, SMB Nation East is in Toronto.  This conference will likely be very similar to the one in NJ with one significant difference - no Response Point (it’s not available in Canada yet).  Our friends in the Great White North don’t get conferences up there too often, especially focused on SMB so I am expecting more than the 200+ attendees than in NY/NJ.  This will be a mostly business focused conference and I’m looking forward to seeing what is all abooot.  (couldn’t help it)

 

  • SBS Migration - New Orleans - May.  Jeff Middleton is not a fan of the normal power point session lecture style conference.  Expect a lot of interaction learning from experts with experience.  This is an intimate (and fun - hey it’s in New Orleans) hands on conference with from 150+ in attendance.  As an added bonus, after the 3 day conference, expect about 1/3 to 1/2 of the attendees to board the Carnival Fantasy cruise ship for another 5 days of interaction with fellow SMB providers and a daily conference session on the ship.  I was disappointed I missed the inaugural conference last year, and have heard all good things and after extensive conversations with Jeff, I know this will be even better.

 

  • ICCA - Washington, DC - early June - I am just getting to know this organization and have spoken at some of their Chapter meetings.  The “Independent” part of the name suggests that this conference will be attended by approx 200+ one man shops looking to grow.  The ICCA is serious about its membership so this should be a valuable event.

 

  • Microsoft Small Business Symposium and WorldWide Partner Conference - Houston, TX, July - this is the big one.  WPC is 3 days preceded by the SB Symposium which is a full day.  While WPC is over $1,000 to attend, the SB Symposium is free to SBSC partners (at least it has been the last 2 years).  WPC will host 15,000 attendees representing 5,000+ partners from around the world.  The SB Symposium reaches the 600-1000 attendee marks.  While some SMB IT providers come in town for the Symposium and then split, I think the WPC is one of the best conferences to attend because you get a chance to see a lot more than you’re used to and meet partners who were small once too… It’s expensive, but I think worth it.  Register early for savings (a good tip for all conferences btw).

 

General conference tips:

  • Come early stay late - plan on arriving the early part of the day prior to the first day - there is always something valuable going on.  There is also always something fun and valuable the evening after the last session.  (hint - don’t book an early morning flight - 11:00 AM should be the earliest)
  • Plan ahead - get an idea of sessions you don’t want to miss and put them on your calendar with reminders before arriving in town.  You will get engrossed in fantastic conversations with other partners in the “hallways” of the event that you may miss sessions you were looking forward to (most are NOT recorded for later viewing)
  • Get a room mate - this cuts your hotel bill (one of the largest travelling expenses) in half
  • Bring LOTS of business cards and notebook paper - also develop a system and put time in your schedule upon returning from the conference for the follow up you’ll want to do - otherwise your investment will be (at least partially) wasted
  • Listen more than you talk - ask partners questions.  People love to talk about their business.  Be willing to share as well.  These conversations will be the most valuable take a ways upon your return home.

Have fun, safe travels, and I will see you at (one of) the conference!Matt Makowicz“Let Ambition Be Your Mission.”

Rooms filling up for SMB Summit in Dallas in April!

January 24th, 2008

If you’re planning to go to SMB Summit this year in Dallas, GOYA and book your room.  The OMNI Mandalay Hotel, which is a beautiful place normally charges $249 and up for rooms per night but the conference block has rooms for only $149.  So register today for the conference and reserve your room.

Conference registration at www.SMBSummit.com

Room reservations at http://www.omnihotels.com/FindAHotel/DallasMandalay/meetingfacilities/SMBsummit2008.aspx

Good luck and see you in Dallas!

Announcing Open Value Subscription licensing

January 18th, 2008

Microsoft will be launching a program on March 3rd called Open Value Subscription (and yes licences purchased under this program can be part of the Big Easy promotion).

Basically, this is Microsoft’s “lease” program for software.  I will explain the program in terms of a customer buying Office Profesisonal:

 FORGIVE ME IF THE NUMBERS ARE OFF - THIS IS JUST TO ILLUSTRATE THE PROGRAM

via OPEN license - customer pays ~$440 now & gets to USE the license forever, etc…

via OPEN VALUE license - customer pays ~$290 now (which is 1/3 the license + SA cost), $290 in a yr, $290 in 2 years and then ~ $110/yr forever to keep benefits

via OPEN VALUE SUBSCRIPTION - customer pays ~$180/yr forever to keep USE RIGHTS & Benefits

Here are some other goodies:

  1. If the customer has Office Pro already EVEN IF OEM (current version or 1 version back) then the FIRST YEAR payment is only ~$90/license
  2. If the customer starts off with 15 PCs, then within the next year, they add 5 more, they can install software and won’t have to pay for 20 until a full year after the agreement started.  This also works down, if the client looses 5 staff, then on the anniversary date they would now only pay for 10 licenses.  (this is trued up or down annually)
  3. It works out to be ~$10 more per license to make the desktop “Company wide” which will encourage more of Windows upgrade licenses and fewer license violations and less headaches with needed upgrades (or downgrades)
  4. OVS licensing is avail for Office Pro, Office SB, Core CAL, SBS CAL, Windows Upgrade, plus SB Desktop Suite & Desktop Pro Suite

 Microsoft has Partner Lice Meeting sessions to learn more:

  • Jan 10th 9:00-10:30 AM PST
  • Jan 17th 9:00-10:30 AM PST
  • Jan 23rd 8:00-9:30 AM PST
  • Jan 29th 11:00-12:30 AM PST
  • Feb 6th 8:00-9:30 AM PST
  • Feb 14th 9:00-10:30 AM PST
  • Feb 19th 1:00-2:30 AM PST
  • Feb 28th 9:00-10:30 AM PST

Ambition Mission Products

Book’s CDBook Cover  

  $99

A guide to selling managed services, faster, easier, & for greater profit by Matt Makowicz

Matt Makowicz’s successful Managed Services Practice has created millions of dollars in recurring revenue. Matt has sold managed services since before the industry had a name for it! Now he is sharing all his secrets to selling managed services! As an MCSE and sales professional Matt unveils his tools, tips, and strategies for sales success.
Matt continues to sell managed services and IT service contracts to small and medium businesses. In addition, Matt now coaches and trains on sales and selling managed services as well as continuing to speak about sales, selling service agreements, and various topics for IT providers to grow their businesses.
He lives in New Jersey with his lovely wife and four children.
Table of contents of „A guide to selling managed services “ 

CD-ROM include with book contains 18 documents, letters, tools and two sample contracts to help jump start your managed services practice!

Choosing A Hosting Provider April 10, 2008

Posted by paragonhost in Business Development, E-Mail, Hosting News, Internet, Internet Protection, ParagonHost, ecommerce.
Tags: , , , , , , , ,
add a comment

Choosing A Hosting Provider

An important step in selecting the right hosting provider for your business is to first identify your hosting requirements such that you can effectively evaluate and compare the different options available. As you begin to define your requirements and consider different hosting providers, consider the following factors.

Customer Care (Support) Services

 

 

It is important to understand the level of Customer Care and Support services that will be available to you as a customer. What type of account team or support staff do they provide and what level of certification and expertise do they have? Are they available to help you with any problems 24×7x365 and what type of response time will they commit to for issues? 

Review the company’s online resource for support to make sure they are user friendly and useful. Do they make it easy to contact them via phone, email and web submission? Consider testing out their responsiveness and level of expertise by submitting an issue to see how well they respond to your inquiry and if they can address your questions. 

Make sure to select a provider that focuses on customer care as a primary objective. Their technical staff should monitor and maintain your site’s performance round the clock and automatically address any problems or performance issues as soon as they arise.

Uptime Guarantees

 

 

What level of uptime guarantee does the company provide? It should be as close to 100% as possible and if its not you should be concerned about their ability to maintain their service levels. Inquire as to the actual uptime levels for the past six months and what their worst/longest outage was during that timeframe. It’s important to remember that when your site is down, its lost productivity and revenues for your business so make sure you select a company that is passionate about sustaining its service level. 

Be sure to get specific guaranteed commitments on network uptime, elapsed time for hardware replacement and elapsed time for on site data restoration. Additionally, in the event of an outage will they provide a credit to the monthly fees and determine the approach taken to determine the credit received based on the severity of the outage.

Bandwidth and Storage

 

 

Many hosting providers today offer generous amounts of disk space. However, depending on the usage of your site, the space requirements may be significantly greater than that which is provided. Carefully review the size of your existing site, plans for how you will evolve it over the coming months/years to determine what level of storage you require. If you require backend databases make sure to take into account growth over time of the database as well as space required for database backups. 

Most providers now give bandwidth allocations of 200 Gb/month or more, which is more than adequate for most small businesses. Make sure to consider your site and how it’s used to ensure this is a sufficient level. If you offer a multitude of downloads or large collections of images/photos, then your bandwidth requirements will be much higher than that of a mostly text based web site. 

Having high speed access is an essential to having a responsive site. Hosting providers offer connectivity to the internet through T1, T3, and, less frequently, OC (Optical Carrier) lines. T1 and T3 lines offer data transfer rates of 1.5 and 43 Mpbs (megabits per second) respectively and OC3 lines offer 155Mbps. The provider should offer a minimum of two OC-3 (311Mbps) lines for connectivity with sufficient bandwidth available for each server being hosted. This bandwidth should also preferably be connected to high speed internet backbone. The connection point to the internet should also be redundant to avoid outages if one of the lines to the internet is lost.

Shared vs. Dedicated Hosting

 

 

In a shared hosting environment, your site is placed on a server that also provides hosting for a number of other businesses. You have your own space, domain, etc, but other people are also using the resources of that server for their sites. There is no risk of your pages showing up on the other businesses site, or vice versa as each site has its own unique set of folders, logins, and so forth. 

Besides the fact that shared hosting costs considerably less, the important consideration for most people is that the hosting company support staff administers the server. If there is a problem with the server, they have to fix it, not you. When the operating system or other system software needs to be upgraded, they do it. All you worry about is your own site and the pages contained on it. 

For a large number of small businesses, shared hosting is more than adequate. In a shared hosting environment, there is no need for you to have technical knowledge of Windows or Unix server administration. That’s not your core business so why would you want to take that on? In some cases however, there may be specific reasons why someone needs to administer their own server. These usually involve people who have specialized requirements. In that case, a dedicated server would be the option of choice. In a dedicated server environment, you have full control over everything; you configure the server the way you want it. It’s almost as if the server were in your home or place of business, except that you are administering it remotely.

Security

 

 

The security of your environment, both physically and digitally, is very important. Determine what type of facility the provider has and how is it secured to ensure only appropriate people have access to your site? How do they control and manage the access such that as staff changes occur they can ensure you site is not at risk by previous employers of the provider? 

What type of firewall systems are employed to keep intruders out of the network? How is data snooping prevented? What steps are talking to ensure a denial of service attack can not be employed against the facility or your site? 

It takes many layers of Internet security, from password protection to firewall barriers to protect your site from determined hackers. Make sure the hosting provider you choose has enough security measures in place to ensure that your data is completely protected.

Server Platforms Offered

 

 

Does the hosting provider offer multiple platforms to selection from (e.g. Windows and Linux) on the latest and greatest equipment? Although it’s possible to host a web site on the CPU of an average personal computer, responsive web sites require high speed SCSI disk drives, lots of memory (ideally memory correcting RAM) and fast microprocessors. Reliable providers host their sites on equipment built to withstand that constant bombardment of web traffic. Inquire as to the hardware used by the provider and the robustness of its configuration to ensure high-availability. Ask about the certifications of the support staff and engineers with regards to the platforms leveraged.

Server and Device Administrations

 

 

What level of access and control will you have over the site? Can you directly access the site and if so over what means? Do they provide FTP access, a web-based administration console, remote control, etc? Make sure that you have the level of control you feel necessary to control your site and manage your companies public image. You need to be able to access the site in a manner that enables you to effectively manage it.

Reporting

 

 

What type of reporting capabilities are offered by the provider? It’s important to have good reporting analysis tools to watch how many people visit your site, where they are coming from and where they go on your site. In addition, it’s also nice to be able to track/audit updates to the site, when they were made and by whom such that if there is ever a issue you can determine who was the last person to modify the site.

Backups

 

 

Backup processes and procedures are critical in the event there is ever a disaster at the provider’s site. Make sure that the site is backed up at least once a day and more frequently if needed based on your specific business requirements. The backups should be kept at an offsite facility such that they are available in the event the primary facility is destroyed. If you leverage databases with your site, make sure the provider is capable of backing up the database and has the skills and a appropriate backup agent that can handle that type of database. What is the time required to restore a site from a previously taken backup? It’s important to understand how long you will be down in the event of hardware or other problem that requires your site be recovered from a backup.

Customer Base

 

 

It’s important to judge a hosting provider by the company they keep. Review their website and look for customer testimonials and reference. Ask in detail about the types of companies they serve and make sure you are a good fit for their business. Is your company comparable to their typical customer or are you too big/small for them? Ask for references of business that are similar in size to your business and preferably located in the same geographical area. Follow up with those references to confirm the service level they have received to date from the provider.

Additional Services

 

And finally, some other services to consider that may be of importance to your business.

  • Does the provider offer fully managed email services on the email platform that you leverage?
  • Do they provide 3-rd party plugin software for discussion forums or blogging?
  • Do they provide eCommerce capabilities such as a shopping cart and merchant accounts?
  • Do they provide Secure Socket Layer (SSL) certificates for secure transactions?
  • Do they offer Internet Marketing services to help you optimize your site so it is found by search engines?

What does CVS mean in relation to Version Tracking March 27, 2008

Posted by paragonhost in Internet, Network 101, ParagonHost, Technology News, scripts.
Tags: , , , , , , , , ,
add a comment

The Concurrent Versions System (CVS), also known as the Concurrent Versioning System, implements a version control system: it keeps track of all work and all changes in a set of files, typically the implementation of a software project, and allows several (potentially widely separated) developers to collaborate. CVS has become popular in the open-source world. CVS is released under the GNU General Public License.

Source: http://en.wikipedia.org/wiki/Concurrent_Versions_System

Remove and Uninstall or Disable ModSecurity (mod_security) March 18, 2008

Posted by paragonhost in Collaboration, Hosting News, Internet, Internet Protection, Linux, Network 101, ParagonHost, cPanel, ecommerce, form-mail.
Tags: , , , , , , , , , ,
add a comment

If ModSecurity is Turned On via your Web Server , then build a .htaccess file and place it in the root of the folder running the script that may be having issues.

Issues such as Web Scripts and Broken Graphics also any script that use’s the Spaw Editor will break the format of the editor button layout, this is due to Mod_Security in effect.

Building a .htaccess file and / or adding the noted commands below will resolve. this.

ModSecurity is an open source embeddable web application firewall, or intrusion detection and prevention engine for web applications. ModSecurity provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring and real-time analysis with no changes to existing infrastructure, by operating as an Apache Web server module mod_security or standalone, and thus increase web application security. However, misconfigured or overly strict rule sets, ModSecurity may cause your website to return various errors such as HTTP 403 Forbidden error or access denied error, login problems, or HTTP 412 Precondition Failed error, or HTTP 406 Not Acceptable error and other false positive symptoms.

To make matter worse, the configuration of ModSecurity rules and filters have to be done manually. Although there are free predefined certified rule set which can be used with ModSecurity out of the box, however the rule sets may be not suitable for each and every environment and may interfere with the operation of websites or blogs, and customizing and modifying the rules may be too sophisticated or complicated for some users. And for some websites that hosted on shared hosting service, the mod_security may be enable by default without options. So in this case, the best solution or workaround for mod security related issues is to disable mod_security filtering and rules.

If you’re using Apache web server (which mostly do), mod_security can be disabled by adding a specific in .htaccess file. Locate the .htaccess file in Apache web root directory (public_html or /var/www/ or others), if it does not exist, create a new file named .htaccess, and add in the following code:

SecFilterEngine Off
SecFilterScanPOST Off

The above entries in the .htaccess will disable the ModSecurity (mod_security) module for the domain.

Uninstallation of ModSecurity (mod_security) from Apache module

The easiest way to remove and uninstall mod_security is to comment out or delete the related mod_security entries from httpd.conf Apache configuration file. The lines that should be removed include:

AddModule mod_security.c
LoadModule security_module modules/mod_security.so
Include “/usr/local/apache/conf/modsec.conf” This line may be different depending on what variant of Linux or Unix you used and the installation location

Save the httpd.conf and restart the Apache. ModSecurity will not be loaded and as if uninstalled.

If you’re using WebHost Manager (WHM), uninstallation is even simpler. Just scroll to cPanel section, and click on Addon Modules. Then scroll to module named modsecurity. It should be checked Install and Keep Updated currently. Just click on Uninstall to remove the mod security feature from Apache web server.

Repair an .ost or .pst file in Outlook February 27, 2008

Posted by paragonhost in E-Mail, Hosted Exchange, Internet, Network 101, ParagonExchange, ParagonHost.
Tags: , , , , , , , , , , , ,
add a comment

Bit off topic from Web Hosting but it does related to mail clients such as Outlook. 

Source: http://office.microsoft.com/en-us/outlook/HA010563001033.aspx 

The file path below may be MSMAPI vs MAPI 

If you are keeping Outlook data on your computer, you are using a Personal Folders file (.pst) or an Offline Folder file (.ost). To prevent data loss, you need to know how to repair these files.

If your .pst file becomes damaged, Outlook includes a tool that may be able to correct the problem without your switching to a backup copy. This tool, the Inbox Repair Tool, is installed on your hard disk when you install Outlook.

If your .ost file becomes damaged, Outlook includes a tool that may be able to correct the problem. This tool, the OST Integrity Tool, can scan and repair .ost files. If that doesn’t completely solve the problem, you can disable the .ost file and create a new one.

Repairing a Personal Folders file (.pst)

You may need to use the Inbox Repair Tool if you open your Outlook .pst file and receive this message:

Unable to expand the folder. The set of folders could not be opened. Errors could have been detected in the file drive:Documents and SettingsuserLocal SettingsApplication DataMicrosoftOutlookOutlook.pst. Quit all mail-enabled applications, and then use the Inbox Repair Tool.

Note  The path to the file specified in the message may vary depending upon the operating system you are using on your computer.

HideTo repair the .pst file

  1. On the Start menu, click Run.
  2. In the Open box, typedrive:Program FilesCommon FilesSystemMapiLocaleIDscanpst.exe

    where LocaleID is the locale identifier (LCID) for your installation of Microsoft Office. For example, the LCID for English (United States) is 1033. For a list of LCIDs, see Microsoft Office Help.

  3. Click OK.
  4. In the Enter the name of the file you want to scan box, type the path and file name given in the error message above.Note  You may not be able to use the Browse button to locate this file because it is located in a hidden folder.
  5. To change the options for logging errors during the scan, click Options. If you choose Replace log or Append to log, the log file is saved to the same directory as the .pst file.
  6. Click Start.
  7. When the file scan is completed, select the Make a backup of scanned file before repairing check box.
  8. Click Repair.

If the file is successfully repaired, you will see a Repair complete message. If the Inbox Repair Tool was unable to repair the file, you will need to use a backup of your file.

HideTo begin using your backup file as your new primary file

  1. Start Outlook.
  2. On the File menu, click Data File Management.
  3. Select the .pst that is damaged, and then click Remove.
  4. Click Add, select Personal Folders File (.pst), click OK, and then select the .pst file you want to use as the new primary file.
  5. Click OK.

Important   You should not rely solely on the Inbox Repair Tool for disaster recovery. A system of regular backups of your .pst file is an important part of preventing data loss. You can back up the file in several ways, including copying it to another location, backing up all of the files on your computer, or by using the Personal Folders Backup utility, available on the Microsoft Office Online site.

Repairing an Offline Folder file (.ost)

You may want to scan and repair your .ost if you:

  • Encounter a large numbers of conflict items.
  • Cannot open particular Outlook items when offline.
  • Receive unexpected synchronization error messages (as shown in the synchronization log in the Deleted Items folder).
  • Receive the message:Unable to expand the folder. The set of folders could not be opened. Errors could have been detected in the file drive:Documents and SettingsuserLocal SettingsApplication DataMicrosoftOutlookOutlook.ost. Quit all mail-enabled applications, and then use the Inbox Repair Tool.

    Note  The file path specified in the message may vary depending upon the operating system you are using on your computer.

In addition, you might be able to open folders in the .ost but get synchronization error messages that do not go away. This happens when a single e-mail message is damaged and the synchronization process cannot correct it. You can use the OST Integrity Tool to fix damaged messages or to move them so you can synchronize successfully.

Important  You may need to run scanpst.exe (see the first procedure above) first if the OST Integrity Tool cannot open the .ost file.

HideTo scan and repair the .ost file

  1. Close Outlook.
  2. On the Start menu, click Run.
  3. In the Open box, typedrive:Program FilesCommon FilesSystemMapiLocaleIDscanost.exe

    where LocaleID is the locale identifier (LCID) for your installation of Microsoft Office. For example, the LCID for English (United States) is 1033. For a list of LCIDs, see Microsoft Office Help.

  4. Click OK.
  5. Click either Scan all folders or Choose folder to scan. If you click Scan all folders, this may take several minutes.
  6. Select the Repair errors check box.
  7. Click Begin Scan.

Details of actions performed during the scan and repair are saved as a message in your Outlook Deleted Items folder with the subject “OST Integrity Check.”

If the Offline Folder file cannot be repaired, you can disable it and create a new one.

HideTo disable the .ost file and create a new one

  1. On the Tools menu, click E-mail Accounts, click View or change existing e-mail accounts, and then click Next.
  2. In the list, click Microsoft Exchange Server, and then click Change.
  3. Click More Settings.
  4. Click the Advanced tab, and then click Offline Folder File Settings.
  5. Click Disable Offline Use.
  6. In the File box, type the path to the file you want to use as the new .ost file. The default file name is outlook.ost. If this file name already exists, you are prompted for a new name.

OWA and Windows Vista - body of message shows X (broken image) February 22, 2008

Posted by paragonhost in E-Mail, Hosted Exchange, Hosting News, Internet, ParagonExchange, ParagonHost, Security Focus, Technology News, Windows, scripts.
Tags: , , , , , , ,
add a comment

Digital Ink Content Is Displayed as a Box with a Red “X” in Messages That You Send by Using Outlook Web Access

View products that this article applies to.
Article ID : 820278
Last Review : October 25, 2007
Revision : 2.4

SYMPTOMS

When a recipient opens a message that you sent by using Microsoft Outlook Web Access (OWA), and the message contains digital ink notes that you copied and pasted from another program (such as Microsoft Windows Journal on a Tablet PC), a box that contains a red “X” is displayed in the message instead of the digital ink content.

You do not experience these symptoms when you compose and send the message by using Microsoft Outlook.
Back to the top

CAUSE

This behavior occurs because the digital ink content is not included as part of the message when you send it by using OWA. When you copy digital ink notes from a source program, the digital note content is created as a temporary .gif file. Although the message appears to contain the image when you paste the digital ink content into the body of the message, the image is not included in the message when you send it.

Although you can add attachments to the body of messages in Outlook, you must install the Secure/Multipurpose Internet Mail Extensions (S/MIME) Control on the computer before you can do so in OWA.
Back to the top

WORKAROUND

To work around this behavior, download and install the S/MIME Control in Outlook Web Access. The S/MIME Control permits you to add attachments to the body of messages in OWA. To install the latest version of S/MIME on your computer:1. Start Outlook Web Access, and then click Options.

2. Under E-mail Security, click Download.

3. Follow the instructions on the screen to install the S/MIME Control on your computer.

After you install the S/MIME Control, OWA includes the digital ink content in a message that is made up of multiple parts and sends it to the recipient. When the recipient opens the message, the image is displayed in the message. Note that in addition to the image, the message also contains a box with a red “X.”

Fifteen Free Tools that Make an IT Manager’s Life Easier February 9, 2008

Posted by paragonhost in Content Watch, Hosting News, Internet, Internet Protection, Network 101, ParagonHost, ScanDefense.com, Security Focus, Technology News, TheSpamBusters.com.
Tags: , , , , , , , , ,
add a comment

BinaryManaging a small or medium sized network can be challenging, over the years I have found these free tools that provide solutions to common IT problems:

  1. Spiceworks - Inventory, monitoring and help desk.
  2. OpenDNS - Reliable, secure outbound DNS that blocks phishing sites and gives you the power to block adult sites, proxies and individual domains.
  3. SSL-Explorer Community Edition - An open-source, browser-based SSL VPN solution that can authenticate against Active Directory and give your users remote access without installing any client-side software.
  4. VMware Server - Server virtualization allows you to test and deploy new servers quickly and easily. Virtual appliances allow you to trial/run complex applications without having to go through the full install proces.
  5. GenControl - A simple desktop remote control program that can temporarily install VNC and connect to another machine on your domain in a matter of seconds.
  6. PaperCut Print Logger - A free print logging application for Windows systems designed to provide real-time activity logs detailing all printer use.
  7. CrossLoop - Simple and secure screen sharing, great for when you have to help out the boss with his home computer.
  8. Hamachi - Instant, zero configuration VPN for when you need more than simple screen sharing.
  9. Montastic - Free website monitoring service.
  10. Sysinternals - An assortment of utilities to help you manage, troubleshoot and diagnose your Windows systems and applications.
  11. PacketTrap pt360 - Network management tools with real time reporting.
  12. Clonezilla or g4u - Hard disk cloning.
  13. Knoppix - A bootable live Linux operating system on CD or DVD complete with troubleshooting and diagnostic utilities.
  14. SyncToy, RoboCopy or rsync - Move those files around.
  15. DNSstuff Tools - DNS, WHOIS,and other network tools.
Source: http://anchorite.org/blog/2008/02/05/fifteen-free-tools-that-make-an-it-managers-life-easier/
Aggregation: ParagonHost, LLC http://www.ParagonHost.com
Scan Defense http://www.ScanDefense.com
Spam Prevention http://www.TheSpamBusters.com