The DNS thing is really just a symptom of the actual problem, that his VPN is misconfigured.
You shouldn't be allowed to be directly connected to the internet at the same time you're directly connected to your VPN. It's exactly the same security risk as if he had a personal DSL line installed at his desk and was on both networks. If his machine is compromised, it can be spread to other trusted (or maybe if he's lucky, only semitrusted) machines.
If you're splitting your connection between a VPN tunnel and a non-VPN protected internet connection, you're a security risk to your infrastructure.
Have your administrator configure full tunnel support where ALL of your traffic goes through the encrypted tunnel. That solves a security problem AND it fixes your DNS problem because you don't use your local internet provider's DNS servers.
I think you're overpricing the fuel a bit. I've got an average sized car (04 Hyundai Elantra) with a 12 gallon tank, and gas is sitting at around $2.05 here. Even if you double the tank, you're still at half the $100.
I believe it. My coworkers in NYC don't own cars, because monthly parking and insurance is equal to the cost of the payment. They all rent cars if they have to go somewhere.
I actually have coworkers who still have valid licenses but haven't actually driven a car for 10 years. It's a load of fun when they come to our NJ office;-)
Those are also the people I see on CNN every time there's some sort of economic turmoil.
"Suzy and John have had to make massive cuts in their spending. Suzy can only afford to go to pilates twice a week, and John has had to drop his countryclub membership and start using public courses".
Places (NYC is the poster child) that have a high population density get effective mass transit, meaning subways or good light rail service. Other places get ineffective light rail and/or buses.
In a highly populated area, a single stop can serve thousands of people, where as most places in America measure thousands of people per square mile. It just doesn't work out for mass transit in places like that. What service is available is universally slow and underfunded, usually with heavy subsidization by the local government.
You can thank the suburbs and the 1940/50s dream of everyone owning their own home. The "American Dream", a 60 year old invention that caused the massive economic build up of Detroit and the eventual collapse. It also helped out the environment a lot. Nevermind, I'm digressing.
I think it would be great down time to write or work on stuff that takes 5 hours of concentration that you rarely get in other places.
That's actually why I like taking the train so much. It takes longer to get there, but I can't be distracted by all the "normal" things, so I work on stuff that doesn't get attention often.
You must be a fellow (amatuer, like me?) volcano-seismo-doomsday-ologist:-) Not many people would have known not just the island, but the volcano's name at the drop of a hat. Nice!
I would think Long Island would take the brunt of force from the New Haven area. Echoes are bound to hit, but they're much lighter than the initial impacts.
I suppose a sufficiently powerful quake from the right direction in the NE could send a wave down the sound. Talk about racking up the property damage...
That's exactly what I do. I have 10Mb down and 2Mb up FIOS in NJ and I pay $50 because I don't watch their TV. I use an antenna for what I can get and everything else is watched online.
Sure, the Verizon guy knocks on the door every week or so asking if we want a package deal, but the boiling oil is becoming more effective.
I didn't say anything about licenses or Class A (though Class A is still really standard jargon and everyone knows what you mean when you say it). Licenses is a little weird, yea.
Awesome idea. We'll give Google 1/40, The government can 2/40, IBM will get 3/40, etc etc etc
Same problem. The ipv6 is not a "bad" idea, it's just sort of like...imagine in 1950s if the phone company decided "we could go with area codes to subdivide numbers to prevent running out, or we could use letters AND numbers".
Can you imagine the upheaval?
In a lot of ways, that would have been even easier to deal with, because everyone's phone was owned by AT&T. New phones could have been issued without too much problem.
No, imagine it instead in the mid 1980s. Ma Bell doesn't own the phones any more, in fact there are tons of cheap phones available, cell phones are starting to come out, and there are still rotary AND push button phones.
That's more like what the IPv6 switch is like. Do you give the new people 2 numbers, so that grandma can still call them? How long is it before you stop accepting legacy phones that only have 10 dialing options? How the hell do you get DTMF to work with 36 numbers? Do we need area codes? It would be weird without them, but we don't really need them.
The equivalent of these questions are still being asked. Just a couple of months ago, there was a huge to-do about NAT and IPv6. "IPv6 is a world without NAT". The hell it is. My internal routers don't get publicly routable IP addresses, even if I have to NAT back to IPv4.
When the wrinkles get ironed out, we're going to wonder how we ever did without it. During the transition, it's going to be hell for everyone (with the possible exception of the clueless end user, who might have to buy a new router at most).
Slashdot Mirror
You're right. It all boils down to misconfigured VPN
The DNS thing is really just a symptom of the actual problem, that his VPN is misconfigured.
You shouldn't be allowed to be directly connected to the internet at the same time you're directly connected to your VPN. It's exactly the same security risk as if he had a personal DSL line installed at his desk and was on both networks. If his machine is compromised, it can be spread to other trusted (or maybe if he's lucky, only semitrusted) machines.
Full tunnels for the VPN will solve the problems.
But that's only a problem when they're connected to the VPN. Don't surf porn while on the VPN, don't get fired. Win/Win
Just disconnect to download your porn and you're good.
If you're splitting your connection between a VPN tunnel and a non-VPN protected internet connection, you're a security risk to your infrastructure.
Have your administrator configure full tunnel support where ALL of your traffic goes through the encrypted tunnel. That solves a security problem AND it fixes your DNS problem because you don't use your local internet provider's DNS servers.
I was thinking "Man, Tofer needs to learn about offsite backups"
I think you're overpricing the fuel a bit. I've got an average sized car (04 Hyundai Elantra) with a 12 gallon tank, and gas is sitting at around $2.05 here. Even if you double the tank, you're still at half the $100.
I believe it. My coworkers in NYC don't own cars, because monthly parking and insurance is equal to the cost of the payment. They all rent cars if they have to go somewhere.
I actually have coworkers who still have valid licenses but haven't actually driven a car for 10 years. It's a load of fun when they come to our NJ office ;-)
Those are also the people I see on CNN every time there's some sort of economic turmoil.
"Suzy and John have had to make massive cuts in their spending. Suzy can only afford to go to pilates twice a week, and John has had to drop his countryclub membership and start using public courses".
The real problem is population density.
Places (NYC is the poster child) that have a high population density get effective mass transit, meaning subways or good light rail service. Other places get ineffective light rail and/or buses.
In a highly populated area, a single stop can serve thousands of people, where as most places in America measure thousands of people per square mile. It just doesn't work out for mass transit in places like that. What service is available is universally slow and underfunded, usually with heavy subsidization by the local government.
You can thank the suburbs and the 1940/50s dream of everyone owning their own home. The "American Dream", a 60 year old invention that caused the massive economic build up of Detroit and the eventual collapse. It also helped out the environment a lot. Nevermind, I'm digressing.
It's the population density.
Damn, I've already commented in this thread, but I LOL'd.
I think it would be great down time to write or work on stuff that takes 5 hours of concentration that you rarely get in other places.
That's actually why I like taking the train so much. It takes longer to get there, but I can't be distracted by all the "normal" things, so I work on stuff that doesn't get attention often.
I canna change the laws of physics
your signature should totally be in the latin
"Ego sum rex Romanus et super grammaticum"
Coming soon...WinAmp plugins to XOR your MP3 collection
You must be a fellow (amatuer, like me?) volcano-seismo-doomsday-ologist :-) Not many people would have known not just the island, but the volcano's name at the drop of a hat. Nice!
You're talking about La Palma.
And yea, no one is really sure what will happen when it goes into the sea. It depends a great deal on how it goes, I suppose.
My money is on Yellowstone violently erupting, which shakes apart La Palma.
Which gets the attention of the martians...
I would think Long Island would take the brunt of force from the New Haven area. Echoes are bound to hit, but they're much lighter than the initial impacts.
I suppose a sufficiently powerful quake from the right direction in the NE could send a wave down the sound. Talk about racking up the property damage...
I think there might be something wrong with your timeline...
That's exactly what I do. I have 10Mb down and 2Mb up FIOS in NJ and I pay $50 because I don't watch their TV. I use an antenna for what I can get and everything else is watched online.
Sure, the Verizon guy knocks on the door every week or so asking if we want a package deal, but the boiling oil is becoming more effective.
It sounds like OS X with the OS 9 compatibility layer...
Except for the part where OS 9 wasn't better than OS X
Forgive my ignorance, but I've never been to one of these movies.
When you're watching this in 3d, do you have the polarized glasses on, or is there some other trickery afoot of which I am unaware?
Thanks for the links, I'll check them out.
Maybe you meant to reply to the parent?
I didn't say anything about licenses or Class A (though Class A is still really standard jargon and everyone knows what you mean when you say it).
Licenses is a little weird, yea.
Awesome idea. We'll give Google 1/40, The government can 2/40, IBM will get 3/40, etc etc etc
Same problem. The ipv6 is not a "bad" idea, it's just sort of like...imagine in 1950s if the phone company decided "we could go with area codes to subdivide numbers to prevent running out, or we could use letters AND numbers".
Can you imagine the upheaval?
In a lot of ways, that would have been even easier to deal with, because everyone's phone was owned by AT&T. New phones could have been issued without too much problem.
No, imagine it instead in the mid 1980s. Ma Bell doesn't own the phones any more, in fact there are tons of cheap phones available, cell phones are starting to come out, and there are still rotary AND push button phones.
That's more like what the IPv6 switch is like. Do you give the new people 2 numbers, so that grandma can still call them? How long is it before you stop accepting legacy phones that only have 10 dialing options? How the hell do you get DTMF to work with 36 numbers? Do we need area codes? It would be weird without them, but we don't really need them.
The equivalent of these questions are still being asked. Just a couple of months ago, there was a huge to-do about NAT and IPv6. "IPv6 is a world without NAT". The hell it is. My internal routers don't get publicly routable IP addresses, even if I have to NAT back to IPv4.
When the wrinkles get ironed out, we're going to wonder how we ever did without it. During the transition, it's going to be hell for everyone (with the possible exception of the clueless end user, who might have to buy a new router at most).
They missed the RFC 1918 memo