Paul's Down-Home Page

I missed this in all the hubbub here at el rancho, but Alexander Nikolayev posted a terrific treatment of the Exchange 2003 SP2 anti-spam process at the Exchange team blog. He covers how the new SPF/Sender ID filtering process works in conjunction with the existing filtering features. Exchange 2003 SP2 is the only spam filter that Microsoft’s using for their 90,000+ worldwide mailboxes; I think that’s a pretty strong endorsement of its capabilities.

Just got the press release: Microsoft is buying FrontBridge, a hosted message hygiene service provider. This is primarily interesting because of FrontBridge’s strength in compliance solutions; they have a broad range of services built around compliance for email and IM. Their hosted anti-spam services got good props from eWeek, but I think the combination of their data centers (which promise a 99.999% uptime SLA) and their compliance services opens the door for MS to diversify beyond Windows OneCare into a broader scope of direct service provision. I can’t wait to see what part they play in the promised Exchange 12 updates for better compliance and message hygiene.

Unless you read the “Book of SP1” very closely, you might have missed out on the fact that Windows 2003 SP1 enables auditing of metabase object access. The IIS documentation for the feature is of little help, since it’s missing some steps. This can be very handy for Exchange administrators, given how much heavy lifting the IIS core components do. IIS MVP Ken Schaefer has written a simple explanation of how to configure metabase auditing here.

Here’s an interesting development: IBM made a Notes-related acquisition, buying PureEdge. PureEdge makes a set of XML-based forms tools– not too dissimilar from another familiar XML tool, InfoPath. Could it be that IBM is feeling the pain of having a relatively poor XML story in Notes and Domino? Are they trying to play catch-up? Maybe.

Microsoft is widely reported to be preparing a server-based version of InfoPath, which would give them a pretty complete story for form management on the client, the server, and the back-end (via WSS, SPS, and BizTalk). Looks like form-based application development will become another front in the IBM-MS platform battle. I’ll be interested to see how (or if) IBM integrates the new solutions into its products; clearly it’s too late for Domino 7.x, so I’d expect these to be part of a future Workplace technology release in some form.

Ever get tired of trying to explain (or, worse, remember) the difference? Check these handy diagrams: RAID-10 and RAID-0+1.

Update: edited to fix a bad link for the first diagram (thanks, Devin!)

Now I’ve heard everything: this article describes (with a straight face, I’m sure) how to set up a Linux box running VMware to use Postfix as the SMTP front-end and Exchange 5.5 as the mailbox store. Why you’d want to do this is beyond me. For an encore, I hear the author’s going to write an article on how to run Lotus Notes 4.0 on a PlayStation Portable.

John Denker has written a superb essay on why ID “theft” shouldn’t be a problem, and how we already have all the tools to prevent it from being one. Excerpt:

it shouldn’t matter if somebody knows who I am. Suppose somebody can describe me — so what? Suppose somebody knows my date of birth, social security number, and great-great-grandmother’s maiden name — so what?
It’s only a problem if somebody uses that identifying information to spoof the authorization for some transaction.
And that is precisely where the problem lies. Any system that lets identifying information serve as authorization is so nonsensical that it is hardly worth discussing. I don’t know whether to laugh or cry.

He goes on to draw the distinction between entity authenticaiton and transaction authentication, and goes on to propose a couple of schemes for breaking these into two separate mechanisms instead of the conflated mess we now have. Well worth a read for anyone interested in security.

Ironically, my last two UPDATE columns have been on mobility topics– and now I’m somewhere with no mobile access!
So here I am in Farmerville, Louisiana. What’s there? Not much (rimshot). Seriously, I’m here with my family visiting the beautiful Lake D’Arbonne State Park for our annual family reunion-style get-together. Whoever the State of Louisiana hired to build this place did a terrific job; the scenery is beautiful, the cabins are clean, spacious, and comfortable, and the wildlife is abundant. One thing’s missing, though: connectivity. Ideally, I wouldn’t have to work this week, but I do, so I’ve been arranging my schedule to work when everyone else is asleep. The problem is getting information to and from the people I work with.
Last year, we stayed in the same place, and I noticed that my Verizon cellphone worked fine. I figured that my aircard would give me data service. Problem #1: Alltel is actually the local network provider, as I found when I noticed the “Extended Roaming” indicator on my Treo. No aircard, and no data service on the Treo. The local public library has a few Internet terminals, but they’re a) unstable b) locked down and c) on a network that won’t allow me to plug in my laptop. Last year, I was able to cadge a few minutes from the nice lady who owns the local Radio Shack franchise, but that clearly wasn’t a scalable solution. I didn’t think she’d welcome seeing me twice a day every day, no matter how many batteries I bought.
The solution came from an unexpected quarter. I asked the lifeguards at the park pool, the folks at the public library, and the staff at the Radio Shack whether there were any public Internet points or cafes nearby. No one had a clue. While racking my brain to think of local businesses from which I could beg bandwidth, I remembered the McDonald’s at the corner of La-2 and Bernice Highway– a mere five miles from the park. A quick call to Devin netted me the information I sought: the local McD’s did in fact have Wayport WiFi. Last night I rolled in, opened the laptop, and downloaded the 400+ messages that accumulated since I got here on Saturday. Today I made a grocery store run and stopped off for a Quarter Pounder and some email; I’ll be heading back later tonight for another delivery.
I guess that means that I have to officially retract all the crap I gave McDonald’s about their food. It’s still not my favorite, but I’m willing to put up with a lot for the ability to keep my customers happy by delivering my work on time. It says a lot about their franchise consistency that even a small town like Farmerville rates WiFi in the store.