Hi guys,
since my Hermes is gone, I couldn't but stay in touch with technology and so...in the meantime...I couldn't resist and I'm trying to set my Windows Server 2k8 domain with DNS, IIS7, Exchange etc, the latter is in trial right now, can you give a little advice to set everything up?
The actual problem is I don't think I understood how to set DNS properly.
I mean, I saw some of you offer Exchange services using DDNS (mine is @ath.cx), so I guess you have a dynamic ip and if I'm not wrong, you don't have problems sending email to gmail, as I was having instead.
How have you solved this?
I found some pages saying I have to set the TXT spf field in DNS and to set a Reverse DNS zone and I've done the first with Microsoft site builder(don't know if in the right manner) but I can't do the latter...some sites say only my ISP can do it...but have to say I'm quite confused AT ALL...
how have you done?advices of any kind (noob simple guides instead of my entire book with 430+)?
Currently, I did -again- a good format and installed Win Server 2k8 std with only DNS Server Role, IIS7 and Exchange prerequisites (found on MS WebSite).
Let's see if there's something wrong in my conf, before going to Exchange again and find it not working:
Code:
*let's call my pc first name "pc"
*dyndns to my IP (under a NAT, router, then a bridge-switch, with DMZ on and working) @ mydns.ath.cx, switched on wildcards for *.mydns.ath.cx;
*domain mydomain.co.cc with a nameserver pc.mydns.ath.cx;
*dns for primary zone mydomain.co.cc with:
MX mail.mydomain.co.cc. ;
NS pc.mydns.ath.cx. ;
TXT (v=spf1 mx ptr ptr:vser.ilmeglio.co.cc mx:mail.ilmeglio.co.cc a:vser.ilmeglio.co.cc include:vser.ilmeglio.co.cc mx:vser.ilmeglio.co.cc -all) [Microsoft did this, I'm quite unsure of what I inserted there though] ;
mail CNAME pc.mydns.ath.cx. ;
www CNAME pc.mydns.ath.cx. ;
[just added] pc PTR pc.mydns.ath.cx. .
Is all this allright?
[more questions coming...]
When I install AD (dcpromo), do I have to use my mydomain.co.cc OR can I use AD only in my home network (let's say myname.mylocalnetwork) and so separate the two things: Exchange & AD?
If I can, are there -hard- additional modifications to make Exchange accept mails from my real web domain and not my local one?
And what about the "pc" name, does it need the network domain or can I leave it the local one? Will Exchange need changes for this too?
P.S. I'm messing with windows server, domains, dns, dcpromo, AD, exchange, ALL this stuff, from 3 days on only, I've learned just a miiinimal part of it all I think, so treat me as a noob
Infinite thanks.
Way off topic to be sure, but DNS is a confusing beast to set up at times.
Check this page out:
http://rscott.org/dns/
You can set up a rdns table yourself, but unless the lookups are set to go your DNS machines, it won't do any good.
Reverse lookups are usually delegated to whoever the IP is assigned to, normally your ISP. Some ISP's will forward the reverse lookups to your name server of choice, some will change their records to what you request, and others will either give you a blank look or refuse to do anything.
Also keep in mind that any kind of server is against the acceptable use policy of many ISP's, check with yours before opening anything up to the world.
As for the records you listed, I don't know how microsoft does theirs (I run bind on UNIX machines and always found the microsoft way of dealing with domains and 'NT domains' to be severely fscked up and confusing), but the basics are the same, and I already see some problems:
You only have a single NS
Your MX points to a CNAME, not an A
PTR records are used only for reverse lookup tables, not forward tables
(Mods, I would imagine that this should go in the general -> Off-Topic forum)
jdc said:
[...] but the basics are the same, and I already see some problems:
You only have a single NS
Your MX points to a CNAME, not an A
PTR records are used only for reverse lookup tables, not forward tables
(Mods, I would imagine that this should go in the general -> Off-Topic forum)
Click to expand...
Click to collapse
Thanks for your answer!
Actually I'm again starting from 0 after having understood it's better to maintain my home domain off the internet
Don't think my ISP policy is good for me, but perhaps I can obtain something about rDNS...not sure though
About NS, how can I have two if this is the unique pc doing the dns server?Is this a problem of RFC rules?
If I set both mydns.ath.cx and pc.mydns.ath.cx (which both point here) at the registrar would it do the trick?
About MX, mmh how can it point to an A if I have a dynamic IP? I mean ok, when it's all working perhaps my ip will stay one, but what if my router disconnects, or simply power goes down...my ip would change and I can't change it manually everytime, that's because I was pointing to an address hopped again from the other CNAME to my DDNS servers...is this, again, a problem of RFC roules or is simply wrong?Don't know how to solve though
Still have to learn much about forwarding, do you mean I should add it into a primary reverse zone?
Thanks again,
sorry, that's OT of course
Related
Yet another way that your device can be protected is whenever it's able to hit the internet. It would update a dynamic DNS entry on your account at DynDNS.org with hopefully a public IP address it gets and from there, if you have a program like SOTI Pocket Controller Professional, you can instantly gain remote access to the device. That's just one program of many that could benefit from this.
Is there any program for the Pocket PC that updates a dynamic DNS name there?
Any news on programs like this?
Would be very much appreciated!
If you look up posts by OdeeanRDeathshead you will find a discussion somewhere (sorry, don't remember the exact link) that you can't get a public IP over GPRS connection, so unless the phone it self initiates a connection you can not reach it.
This means that unless you device is connected via WIFI a program like this would be useless.
Sorry to be the bearer of bad news.
OK, I understand that.
I found an IP using www.whatsmyip.org. For example 123.123.123.123
I'm using my phone to connect to an Exchange Server. But I only want my phone to reach te server, so I have set up my firewall to forward (NAT) certain ports from source 123.123.123.123 to the Exchange Server. The rest of the IP's are going somewhere else.
But the IP changes of course, guess T-Mobile has more gateways in use. Maybe to another everytime you connect.
Is there a program that sends a query to whatsmyip.org (or another site like this) and then updates the IP address in a DNS record (like dyndns.org). Any help would be appreciated.
Hello,
This may be a strange question, but how do you guys switch SMTP servers? I'd like to access the same mailbox over different connections (gprs, 2 different wifi). Reading mails is not an issue.
But for sending them, I need a different SMTP server for each of the connections (as I suspect everybody does). On my symbian phone, I could change the sending options of a mail, and one of the options is the mail-account used to send it. But this is not possible on the built in Outlook.
How do you guys do it?
(I'm planning to use QMail, which does support changing the account by which a mail is sent; but to make it more comfortable I also am working on a MortScript to change account settings when I want. There were some certificate issues in configuring QMail, but I think I solved it. The reason switching is important to me, is that my GPRS subscription has a volume limit, above which I have to pay extra. So if I can use an alternate connection, I prefer this.)
Jörg
V J said:
Hello,
This may be a strange question, but how do you guys switch SMTP servers? I'd like to access the same mailbox over different connections (gprs, 2 different wifi). Reading mails is not an issue.
But for sending them, I need a different SMTP server for each of the connections (as I suspect everybody does). On my symbian phone, I could change the sending options of a mail, and one of the options is the mail-account used to send it. But this is not possible on the built in Outlook.
How do you guys do it?
(I'm planning to use QMail, which does support changing the account by which a mail is sent; but to make it more comfortable I also am working on a MortScript to change account settings when I want. There were some certificate issues in configuring QMail, but I think I solved it. The reason switching is important to me, is that my GPRS subscription has a volume limit, above which I have to pay extra. So if I can use an alternate connection, I prefer this.)
Jörg
Click to expand...
Click to collapse
Exactly the same q was aksed either here or some other PPC forum some days ago.
My answer (I pretty much know everything about mailer clients and internal database / file formats - see http://www.pocketpcmag.com/blogs/index.php?blog=3&p=569&more=1&c=1&tb=1&pb=1 ) is as follows: just switch your Qmail config files (the one that contains the SMTP server) from, say, a Mort script and restart Qmail.
If your mail server supports SMTP Auth, u don't need to do anything.
In the config pages, click on "my outgoing server requires authentication" then click on "use same settings as incomming"
Should solve the problem IF the smtp supports authentication.
Menneisyys:
Yes, that was my post (sorry, I should have linked to that particular thread). I'm just wondering if I'm the only one finding this a huge issue. Either way, I'm writing scripts as we speak (couldn't have done it without you referring to QMail). I also like to show on the today-screen which "smtp-profile" is active (found some ways of doing this too), and while I'm at it the script will also change PIE settings (not load images on gprs, load images on wifi). I'll make the necessary steps (along with the scripts and required softwares) in some tutorial, for reference.
(I had some issues with QMail, but I needed to add the certificate for my servers first).
armedmetallica said:
If your mail server supports SMTP Auth, u don't need to do anything.
Click to expand...
Click to collapse
Yes, but neither my mobile operator, nor my work, nor my analog dialup provider (still need it) support smtp authoring... Come to think of it, I could always set up a VPN to my work, which will allow me to use their mail server (but the VPN is also traffic limited, and sometimes VERY slow)...
Jörg
V J said:
Menneisyys:
Yes, that was my post (sorry, I should have linked to that particular thread). I'm just wondering if I'm the only one finding this a huge issue. Either way, I'm writing scripts as we speak (couldn't have done it without you referring to QMail). I also like to show on the today-screen which "smtp-profile" is active (found some ways of doing this too), and while I'm at it the script will also change PIE settings (not load images on gprs, load images on wifi). I'll make the necessary steps (along with the scripts and required softwares) in some tutorial, for reference.
(I had some issues with QMail, but I needed to add the certificate for my servers first).
Yes, but neither my mobile operator, nor my work, nor my analog dialup provider (still need it) support smtp authoring... Come to think of it, I could always set up a VPN to my work, which will allow me to use their mail server (but the VPN is also traffic limited, and sometimes VERY slow)...
Jörg
Click to expand...
Click to collapse
Did you finally manage to achieve with something useful ... ? I'm in the same situation and looking for something easy to use to switch from one SMTP to another depending on the channel used (3g or Wifi).
Unfortunately, no...
My current solution is to use my work server: it requires me to set up a VPN first and then log on to it. When doing so, I can use it from anywhere; it works but is far from efficient (starting the VPN takes some time).
I thought of using a windows mobile program to have the equivalent of the hosts file in Windows (this is a small hackers trick: configure the software with a dummy name, and use the hosts file to have this resolve to the IP address you want), but it doesn't allow for easy switching, particularly as I needed a logon for one server. If you need this hosts utility, I should search for it (let me know if you need it); but it doesn't make switching that much easier from changing the settings in the mail client.
A possibility could be to use QMail as the mail client, but this is not possible for me due to some security settings I need (it never could download the mail bodies).
Jörg
Did the Mortscript avenue not pan out? I would of thought this would be something that it could easily solve.
Yes, but apparently the SMTP server settings are not stored in the registry, but in the outlook file which holds the account settings.
Editing this file is possible (founds some references on it), but generally not recommended as it easily is corrupted.
Jörg
gmail's servers?
V J said:
Yes, but apparently the SMTP server settings are not stored in the registry, but in the outlook file which holds the account settings.
Editing this file is possible (founds some references on it), but generally not recommended as it easily is corrupted.
Jörg
Click to expand...
Click to collapse
can't you just setup a gmail account, enable it for POP access, and use their provided SMTP server with your gmail username/password? leave incoming via POP on your existing one...
V J said:
Unfortunately, no...
My current solution is to use my work server: it requires me to set up a VPN first and then log on to it. When doing so, I can use it from anywhere; it works but is far from efficient (starting the VPN takes some time).
I thought of using a windows mobile program to have the equivalent of the hosts file in Windows (this is a small hackers trick: configure the software with a dummy name, and use the hosts file to have this resolve to the IP address you want), but it doesn't allow for easy switching, particularly as I needed a logon for one server. If you need this hosts utility, I should search for it (let me know if you need it); but it doesn't make switching that much easier from changing the settings in the mail client.
A possibility could be to use QMail as the mail client, but this is not possible for me due to some security settings I need (it never could download the mail bodies).
Jörg
Click to expand...
Click to collapse
Well ... no thanks ... I'd like very much to have something easy to use ...
It is like to make sure that when wifi is available than use wifi and drop GPRS.
We can then easily imagine that knowing about an available existing Wifi network, the soft should be able to automatically modify the smtp server accordingly, switching back to "normal" when out of the coverage of the WIFI network ... not really a big deal for good programmer, a trip to the moon for me ...
thanks anyway for your proposal ... wait and see what clever people will bring to us
landwomble said:
can't you just setup a gmail account, enable it for POP access, and use their provided SMTP server with your gmail username/password? leave incoming via POP on your existing one...
Click to expand...
Click to collapse
That wasn't an option for me: my incoming mailserver requires a VPN connection (when using the wifi at work). I think that some internet traffic over the VPN is blocked, preventing me from accessing another SMTP server.
DR400 said:
We can then easily imagine that knowing about an available existing Wifi network, the soft should be able to automatically modify the smtp server accordingly, switching back to "normal" when out of the coverage of the WIFI network ... not really a big deal for good programmer, a trip to the moon for me ...
thanks anyway for your proposal ... wait and see what clever people will bring to us
Click to expand...
Click to collapse
Hehe...
The easiest thing would be something more userfriendly that exploits the possibiliy of using the "hosts" file to alter the IP address of the SMTP server (this is how most of the network switching tools on laptops do it). The downside to this approach is that you cannot change logon settings. In order to do this, they need to be able adjust the settings in the mailclient; either via some interface (not sure this is available), or by altering the configuration file.
Jörg
The gmail route absolutely works for me - no mucking about with scripts etc. I followed this link (http://lifehacker.com/software/email-apps/how-to-use-gmail-as-your-smtp-server-111166.php)
only difference is that the smtp is [email protected]. Follow the instructions to set up gmail with your primary address and bingo.
Robert
Does anyone know of an app that allows your phone to become a web proxy?
Let me explain my situation... I work for a corporation that filters all their internet connections through a web proxy, which sucks cuz I can't visit any of the fun sites... one way around this I've found was to use ICS on my phone but that interferes with the default gateway on the current network.
All traffic on the network by default goes to an internal gateway on the local intranet and it really needs to stay this way because there are too many work ip's and ports to be able to statically route all of them through a specific destination and leave the default gateway as the ICS 192.168.1.1.
I have been able to create static routes to specific ip addresses (like my home computer) which override the default gateway and use ICS instead.. this is great but obviously not that great for web browsing and masking my use on the internet... what I would like to be able to do is set the HTTP proxy to my phone and have it handle all of the redirection... that would allow me to have a single route in the routing tables but span out to wherever I want on the web...
Oh, and yes, I have thought of just setting up a proxy on my home comp and routing through the phone -> home comp -> back through phone but that obviously limits me to the upstream bandwidth of my home network... which isn't TERRIBLE, and is feasible but obviously if I could eliminate the extra jump it would be much much better.
I can handle the routing tables np, they're easy to add from command-line.. problem is I need some kind of a proxy application on the phone that will handle all of the HTTP calls... anyone know of an application such as this?
Thanks
Hm can't say I know of an app that does this... it is planned for one of the upcoming releases of WMWifiRouter but that's still a while away and may give you the gateway issue again.
Chainfire said:
Hm can't say I know of an app that does this... it is planned for one of the upcoming releases of WMWifiRouter but that's still a while away and may give you the gateway issue again.
Click to expand...
Click to collapse
Ya I did more googling and still can't find anything... I just setup dante server on my linux vm at home and got a good socks proxy going.. seems to be working very well.. my upstream on cable is 80k/sec so that's not too bad I guess.
I'll keep an eye on wmwifirouter release notes though thanks
Android, the lovely mess of bastard Linux that it is, is failing to resolve host names into IP addresses. I have tried editing dhcpcd.conf, using the prepend domain name server option. I have tried adding a line to resolve.conf (what the hell is with those funny 8.8 addresses - thanks Google). Both just screw with my wifi connection.
I haven't tried using a static IP setup on the phone yet. Am I to be looking for something in build.prop to change?
I hate the feeling when no one replies to a thread.... you guys know what I mean, right? Whatever, at least it's not mission critical, I can be the DNS server for android.
These apps allow you to remotely access your phone from a web browser. However, they all run a web server on the phone, and I cannot connect to any of the over 3g (Verizon).
LazyDroid Web Desktop
Remote Desktop
Remote Web Desktop
I want to move the web server off phone, and (hopefully) onto private sites.google.com site. App Engine might be necessary, but I'm hoping this could be done solely in JS.
The hosting site would provide the UI, and interact with the phone using C2DM (the magic that powers Chrome2Phone, GMail, and installing apps from the web Market).
The UI is pretty obvious. It just needs a whiz to create HTML, Javascript, etc.
The C2DM backend is a still a bit mystifying to me... and searching for c2dm and javascript does not yield any obvious working implementations. But it seems plausible. Push a command to the phone, phone returns/uploads data to website, and UI updates.
Then there is the Android end. Well, there are the 3 projects above, Tasker for a quasi-hackish approach, and RPC (promising, but it seems like a WIP).
Thoughts? Volunteers? Geniuses?
Ooo... 2 birds with one stone!
This would also kill 2 birds with one stone.
No more typing in dynamic IP addresses! You get to use DNS to handle the connections. Bookmark your site in your desktop browser (it is always the same!). And set a preference in the Android app.
On lazydroid i've in planning some kind of trick that will let you connect behind firewall ... similar to a vpn...
CloudsITA said:
On lazydroid i've in planning some kind of trick that will let you connect behind firewall ... similar to a vpn...
Click to expand...
Click to collapse
I tried it again last week, and it is still unsuccessful. Webkey is currently the only application that I can successfully use to reach my phone.
Now, I could be wrong, but I believe all of these apps run a web server on the phone. I get a lovely, private 10.x.x.x IP address, which I can't reverse the route to. I have tried and failed to get DynDNS to work.
I have been looking into a solution since my original post. I have not had any time to do code squat, but I have loosely figured out all of the parts.
The big architectural difference I have been seeking is removing the server from the phone. I am not an Android expert, but I don't believe it even requires a running service. (Thank you, C2DM.)
With the app-webservice separation, you can work a "protocol" that reduces the overall bandwidth used... and thus improve battery life. Put all the "hard work" on a webserver, and (things get fuzzy here) possibly push it off onto the client browser (JS).
C2DM Browser Links
I could probably make something like WebKey but with C2DM and some more features. If you want you can give suggestions and I'll start making on saturday (after my exams). It would probably be possible in javascript for the actual sending from server and php just for logging in to your google account. The phone would just be registered on the server and no services (just as you wanted )
nebkat said:
I could probably make something like WebKey but with C2DM and some more features. If you want you can give suggestions and I'll start making on saturday (after my exams). It would probably be possible in javascript for the actual sending from server and php just for logging in to your google account. The phone would just be registered on the server and no services (just as you wanted )
Click to expand...
Click to collapse
I am not sure "more features" is necessarily the direction I'm headed. I am focused on making a "seamless" experience (i.e. less separation of phone and computer).
I was headed to App Engine (Python bias + easy Google integration). I have a project created. I haven't pulled together the various examples to make the core, but it seems <naive>simple</naive>. Stir in some templates, CSS, a sprinkling of JS, and voila!
The big "tricky" part that I can't convert from f***ing magic to a clear approach is the data link in the server. I want to avoid any storage to a Google disk, or otherwise, even temporarily. No stored data = easy privacy policy.
nebkat, if you're really chomping at the bit to code, here's my Android client concept.
- C2DM is a wake-up call. (cheat an borrow ChromeToPhone's ID to begin with)
- Connect to web server, send "I'm here," and wait for further instructions (Channels API/Comet/AJAX/.........)
- make the command set extensible
- each command is blockable in the client. (Permission control is set on the phone, not remotely.)
- After N minutes of no activity, send a "good bye," disconnect from the server, and fade into the background.
Don't worry, I'm very experienced with the server side stuff and I know exactly what you want. The only information stored on the sever side would be google account, the device c2dm registration id and some logging features just for statistics. A password could be set on the phone that would be sha512 hashed on the ajax request and would be sent to the phone. Even if a hacker found the hash, it would be useless without being logged in to the persons google account or knowing the server side auth token.
For now i'll just make the reciever, processor and command output and later on the extra security and ui stuff. It will work exactly the same way as Chrome2Phone except it will have server side php and the different commands. The connection from pc to phone will be something like this.
user command -> ajax request -> php c2dm request -> phone
phone -> php server http request -> controller page status
BTW I'm saving up for a Nexus S, how much would people pay for this type of app? There would definitely be a free version, but I just need to get the Nexus S because I have a Galaxy Spica now and it isn't the best for app development. I'm new to how stuff at xda works, would a donate version get me enoguh for the Nexus?
nebkat said:
Don't worry, ... <snip> ... auth token.
Click to expand...
Click to collapse
Alrighty then. I'm feeling like I can stop contemplating implementing this.
BTW I'm saving up for a Nexus S, how much would people pay for this type of app? There would definitely be a free version, but I just need to get the Nexus S because I have a Galaxy Spica now and it isn't the best for app development. I'm new to how stuff at xda works, would a donate version get me enoguh for the Nexus?
Click to expand...
Click to collapse
Since I was learning the ins and outs of App Engine, I read their quota rules and realized if this were popular it would require funding. I don't know where you are going to your web server, but I assume you'll have to pay someone to keep it running. But I had thought about $$$ already.
"Give away the razor, and sell them the blades."
Make the app free, no feature restrictions.
You get your money through various "membership" levels on the server. (See the account levels at fastmail.fm for an example.) So, you can use the app for free, but you only get, say, 2-3 MB of traffic per day, and only X sessions per day. Need more? See the pricing chart.
user command -> ajax request -> php c2dm request -> phone
phone -> php server http request -> controller page status
Click to expand...
Click to collapse
user command -> php server http request -> phone
phone -> php server http request -> controller page status
user command -> php server http request -> phone
lather, rinse, repeat.
C2DM is not deterministic, and acts up in low signal conditions. So, I made a decision to only use C2DM to initiate a session. Once both ends are connected to the server, everything goes over HTTP.
Oh.... and not that we need another Lookout/Phone Finder, but a shared-secret SMS code for the case where "they" have shut down the data connection.
I have my own server nebkat.com and there is nothing on it anyway.
The only other way to make "push" requests to the phone is with WebSockets. It would probably be better than c2dm because we have full control over what gets sent (google limits some requests). The advantage of WebSockets is that they send no header information which means that we could send our messages in 20 to 30 bytes.
I'll look into more detail on friday.
With web sockets won't you need to ensure the phone has a routable, external IP address? I know, for one, t-mobile does not expose an external IP address for their phones. Unless, of course, if the phone is connected over WiFi. C2DM works great for me (I have used a couple of apps with it and it is really useful).
MrGibbage said:
With web sockets won't you need to ensure the phone has a routable, external IP address? I know, for one, t-mobile does not expose an external IP address for their phones. Unless, of course, if the phone is connected over WiFi. C2DM works great for me (I have used a couple of apps with it and it is really useful).
Click to expand...
Click to collapse
No, WS is server initiated and the ip address' shouldn't make a difference.
MrGibbage said:
With web sockets won't you need to ensure the phone has a routable, external IP address? I know, for one, t-mobile does not expose an external IP address for their phones. Unless, of course, if the phone is connected over WiFi. C2DM works great for me (I have used a couple of apps with it and it is really useful).
Click to expand...
Click to collapse
You need an valid external IP address if you are attempting to initiate contact with your phone, which is why the 4-5 apps I've mentioned do not work on carriers like t-mo and verizon.
But the phone can establish a connection, and the carrier NATs (or whatever) will handle the routing for outgoing and incoming data.
I think the right questions are: Will Verizon/T-Mo allow the ports and protocol for WebSockets? Do Android and desktop browsers implement the draft API correctly and consistently?
I like C2DM. I works well when you have a good connection. But there are 3 issues with it.
1) The message size limit is 1024 bytes. Not ideal for file transfers.
2) In a poor signal areas, since the service retries sending messages, you will get delayed and/or duplicate messages. I work in a large "concrete" building, so I get this behavior often enough that I don't want to rely on it.
3) I believe there is a limit on the number of messages you can send. So, hunting around the filesystem could hit this limit (but unlikely in reality... I hope.)
It would be interesting to see exactly how those apps handle all of the data. Do they only use C2DM, or do they hand over to another protocol?
Ok my exams are over and I am starting with it. I'll give updates on this thread