text:
Dick Stoebel of Manchester, Connecticut, is no stranger to hot rods, having started his relationship with everything motorized back in the '50s. Scraping together $50 by the time he was 16, he laid down the cash for a '50 Pontiac coupe and hasn't looked back since. As the decades passed, the teenager's mechanical talents grew; he worked as an engineer by day and rodder by night; continuing to do the majority of the builds by himself in his garage.
Having always held a fascination with automotive styles from the '30s, Dick began a quest almost a decade ago for an original '32 Ford five-window coupe. His research led him to a rolling body and chassis combination located in Nebraska through a site on the Internet. Not being able to travel out to see the car, he asked all the right questions and even found out that the body had been found abandoned in the woods by a pair of game wardens in Minnesota. A deal was made for the car and when it arrived a closer inspection proved that primer and bodywork can hide lots of dirty little secrets, especially in pictures. A thorough evaluation of the body proved that this was indeed one of Henry's children, which had seen better days thanks to poor panel replacement, bad fabrication, and even worse bodywork. Not one to be distracted by the situation, Dick reevaluated the cards he had been dealt and forged on with the build. With the body removed from the chassis, it was time to get busy dialing in the spine with a pocketful of ideas he had been carrying around since he was a teenager. On the plus side, the package deal came with a new, well-designed Deuce chassis from Heinzman Street Rods in Phillips, Nebraska, which was fully boxed, and C'd. For a perfect stance, a 9-inch Ford rear filled with 3.08:1 cogs and suspended in place with a combination of ladder bars from Pete & Jakes, complemented by a Panhard bar and antiroll bar while Aldan Eagle coilover shocks suck up the bumps. To give the car a nose-in-the-dirt attitude, Dick drilled a Super Bell 4-inch dropped axle, which was linked to '40 Ford spindles, an antiroll bar, and four-bars from Pete & Jakes. To add a bit of comfort to the ride, a Posies Super Slide spring and Pete & Jakes tube shocks keep the asphalt as smooth as velvet. For ample stopping power, fluid moves through a Corvette dual master on its way to 10-inch Ford drums out back and 12-inch '59 Buick finned aluminum drums up front, accented by Wilson Welding and Machine '39 Lincoln backing plates. To roll in style, lipstick red Wheel Vintiques steelies wrapped in Coker/BFGoodrich Silvertown wide whites do the job just fine.
When it came to powering the coupe, Dick kept his options open. A conversation with fellow rodder Glenn Sinon confirmed he was pulling a solid running engine and trans combination out of his '47 Ford coupe to make way for a fresh crate engine. Dick picked up the used mill and went right to work cleaning and detailing the '70 Chevy 350ci V-8 while also adding a fresh coat of paint, and polished stainless hardware. Breathing through an Edelbrock Performer intake topped with a matching Performer 600-cfm carb, it comes to life through a PerTronix ignition and dumps its spent gases through a set of Patriot block-hugger headers. Linked to a TH350 tranny shifted by a Lokar stick, the combination gives the coupe more than enough go when the gas pedal gets mashed. After stripping the body down to bare steel, Dick was ready to start his mountainous climb from the bottom up since the lower 6 inches of the coupe needed to be cut off and replaced. Working from experience, whatever patch panels weren't available he made, including a driver side doorskin, which he formed on the garage floor using a boat seat cushion and a soft-faced mallet. From there he laid out the chop and sent sparks flying to lower the lid 4 inches in front and 3-1/2 inches out back combined with a 5-degree layback of the A-pillars. Completing the overall look, he sectioned the original grille shell 1-inch while also pie-cutting the hood tops to allow the beltline to flow perfectly. He then media blasted the body in his driveway and followed with final bodywork till the exterior was as straight as glass. Dick began to spray the PPG single-stage black gloss onto many interior parts as well as the bottom of the car and the firewall in his shop. He contacted good friends Glenn and Jeff Sinon of West Suffield, Connecticut, to final prep the body and lay down its mile-deep finish. The pair also created the wicked flame-job, which was given its final accent by Charlie Decker, aka The One-Armed Bandit.
With reassembly time at hand, Dick credits his hot rod buddies for coming over with the promise of coffee and doughnuts (how could they ever refuse!) to mount the body to the rolling chassis. To bring the build to completion, nothing says hot rod better than a rolled and pleated deep red interior. Dick had Ken's Upholstery of Ellington, Connecticut, cover a modified Glide Engineering seat with yards of supple vinyl while Haneline gauges monitor the vitals and a LimeWorks banjo-styled steering wheel sets the course. Dick's perseverance sure paid off when he fired up the car for the first time and laid down plenty of miles without ever looking back. This is one Deuce that'll motor off into the sunset for decades to come. That's just plain bitchin.'

subset: commoncrawl


text:
Zara Top
Rag & Bone Jeggings
Vintage Fur Vest - Similar
Aldo Boots
Had lunch with my dad today as he decided to try out his photography skills. "Go hail a cab for us" he told me... little did I know he was sneaking in photo #1. He then coined the term "Hailing Hands."
My outfit consists of this amazing fur vest I found in Wisconsin of all places, and a Zara top that is no longer available. Always love all black with a little pop of color.


text:
Samsung has proved several times before that it's not afraid of directly attacking bitter rival Apple (and on occasion its fans), so it should come as no surprise to see the company's latest print ad taking aim at the recently-announced iPhone 5. With the tagline "it doesn't take a genius," Samsung pokes fun at Apple's retail stores (ironically, a setup it's trying to imitate itself), before telling us that "the next big thing is already here." Most of the ad space is taken up with a direct -- though highly slanted -- feature and specification run-down from both iPhone 5 and Galaxy S3.
We'll be the first to admit that the comparison is far from fair, and the iPhone 5 has a lot more going for it than "a totally different plug." Then again, this is an advertisement. Samsung wants you to buy a Galaxy S3, not an iPhone 5, and it's taken a characteristically direct approach to deal with the threat of Apple's latest and greatest smartphone. It's not subtle, and it won't change the minds of die-hard fans, but that's not its purpose. Its purpose is to put the Galaxy S3 on the radar of consumers considering picking up an iPhone 5 on Friday, and that's something we think it'll succeed in doing.
Sure, it's slanted and biased, but that shouldn't come as a surprise. After all, a fair comparison between the two devices wouldn't make for a very good full-page advertisement, would it?
Source: Business Insider


text:
Getting behind the mask with UltraMantis Black
Both punk rock and professional wrestling have their hardcore sects, but rarely do the two cross paths. Enter UltraMantis Black, a mainstay of the Easton-based Chikara Pro independent wrestling promotion, who can now add punk frontman to his list of accomplishments. Earlier this month, the masked UltraMantis teamed up with members of Pissed Jeans to release his debut EP, and will celebrate the release at Voltage Lounge on Thursday as part of Relapse Records' This Is Hardcore Afterparty. The leader of the Spectral Envoy discussed his efforts in the squared circle and on the stage from his home base in the mysterious, storied Parts Unknown.
The Key: How did you move from pro wrestling to punk rock?
UltraMantis Black: I'd been doing music prior to my professional wrestling career, but decided in the past year or two that I wanted to bring that part of UltraMantis Black out. Some of the members of Pissed Jeans approached me about doing something a few years ago and I was a bit hesitant at first because I was concentrating on professional wrestling at the time and didn't really see a way to balance the two. Now I've found a way to bring them together.
TK: How do the two relate in your mind?
UMB: I think they're very similar. Punk rock and professional wrestling have more in common than most people might think. Both the communities and fanbases involved in each are niche audiences. I feel like performing in front of a crowd onstage or within a
wrestling ring, you're trying to entertain, trying to convey a message, trying to display your art form, so I see them both coming together in that way.
TK: Who is UltraMantis Black?
UMB: Ultramantis Black is known as the Mayor of Parts Unknown, a part-human, part-insectoid overlord of professional wrestling. A little bit of evil, a little bit of deviousness, but at the same time bringing a little consciousness back to professional wrestling.
TK: Does the character put forward the same message in both arenas?
UMB: I think so. I've always tried to bring something different to professional wrestling, something that probably wasn't always there. I speak my mind, I speak what I feel will open other people's eyes to my own personal beliefs and philosophies and they way I look at life, and that's probably unorthodox in professional wrestling but I think it's worked. I've developed a fan base in wrestling that's not the typical professional wrestling crowd, and with the band I wanted to bring social and political aspects of punk rock back to hardcore, where I think it's been lacking in recent years.


text:
What is the gospel?It's a straightforward question that yields a remarkable range of responses. Greg Gilbert surveys some characteristic examples on p. 18 of his book on the subject."The good news is, God wants to show you his incredible favor.
We're excited to host our third annual Easter Egg Hunt for Midlothian families and children. It's a great opportunity to connect with your neighbors and learn the true meaning of Easter!Who: Children ages 12 and underWhen: Saturday, April 15, at 11:00amWhere: 14111 Sovereign Grace Drive, Midlothian, VA 23114For more information, email Craig Smith or call the church office at 804-379-2551
One of my favorite Kingsway traditions occurs annually on the Sunday before Thanksgiving. Our church lines up behind a microphone and takes turns expressing gratitude to God for the ways he has blessed us over the last year. I have distinct memories of men, women and children praising God in the midst of the most painful life circumstances.
We were buried therefore with him by baptism into death, in order that, just as Christ was raised from the dead by the glory of the Father, we too might walk in newness of life. For if we have been united with him in a death like his, we shall certainly be united with him in a resurrection like his. (Romans 6:3-4) Baptism Sundays are some of my favorite meetings of the entire year.
Do I really need to be a member of a particular, local church? Ever heard that question before? Maybe you've even asked it yourself.


text:
Tuesday, March 9, 2010
Step in the right direction
First, and most likely out of force of habit, I tuned into Raw
at 9:00, when I was presented with yet another conversation between Shawn Michaels and The Undertaker. I'm into the storyline and can't wait to see their rematch at WrestleMania 26, but how much is left for either man to say? It's Michaels' career vs. 'Taker's streak. I know.
After 30 seconds into that segment, I remembered TNA. Over on Impact, we had Hogan "brothering" his ass off in the ring. Been there, done that, for close to three decades now. But wondering how Abyss and Styles would factor into the resolution of this feud, I decided to stick around. Glad I did because Sting came back and wigged out. Now, most of us in the office knew Sting would be back last night, but we didn't expect him to bash Hogan and Abyss with his baseball bat. Likewise, we expected Rob Van Dam to show up. But we had no idea he would squash Sting within seconds or that Sting would treat him like a human pinata. (BTW, did anybody else notice how small TNA security came up last night-holding Hogan and Van Dam when Sting was the one swinging a baseball bat the whole time?)
And there were other surprises. The Jeff Hardy main event run-in wasn't one of them, nor was the return of Shannon Moore, nor even The Beautiful People Knockouts tag team title win . But the three-way X division title match involving Frankie Kazarian, Daniels, and Doug Williams was an excellent match and Eric Bischoff's X division "pep talk" added some juice. The impromptu match/brawl between Syxx-Pac and and Eric Young was as spirited as anything on either show.
Meanwhile on Raw, we had a six-Diva tag match, Randy Orton fighting with Cody Rhodes and Ted DiBiase Jr. and Triple-H throwing yet another temper tantrum, this time in the direction of Sheamus. Really, was there anything on Raw that we haven't seen over and over again at this point?
Bottom line: TNA has something going for it right now that WWE doesn't, and that's unpredictability. I'm as jaded as they come and I found myself compelled to stay with Impact despite the show being built around Hulk Hogan and his woes. My only real complaint about Impact was the main event. With men like Styles, Angle, and now RVD, on the roster, you simply can't give Flair and Hogan 20-plus minutes at that point in the show. But for 100 minutes last night, not knowing what to expect made Impact the more interesting ... oh, hell, I'll say it ... better show.
Frank Krewda
6 comments:
- Pro Wrestling Illustrated said...
Impact's March 8 Nielsen rating was a disappointing 1.0, but that's not necessarily disastrous news to TNA and Spike TV execs.
Of course, they were hoping to match the 1.5 they scored on January 4, and they certainly would have settled for what had become their Thursday night average of 1.3. What this shows me is that, like any other TV show, Impact is going to need time to gain traction in a new time slot.
Since Raw's numbers were also down on March 8, it indicates to me that some WWE viewers sampled Impact, and I would have to think they liked what they saw and could be back for more. That has to be encouraging.
Spike shouldn't insult our intelligence with lame releases stating that they believe a significant number of viewers DVR'd the show to watch it later on. I'm sure that's comforting to advertisers; plenty of people watch the commercials when watch shows on their DVR! They should just be honest and admit that while they were not pleased with the rating, they were pleased with the show and will continue to work hard to reach their goals.
It'll be interesting to see what happens next week. Since the show is taped, there probably won't be any surprise appearances, so we'll find out how many people were actually hooked by the talent and story lines. Plus, a fella by the name of Steve Austin will be guest-hosting Raw.
I think Impact will eventually find its footing and do as well or better than it did on Thursday nights, but for now, the only champagne corks you're likely to see popped by anyone connected with TNA were already done so by The Beautiful People.
--Stu Saks/PWI Publisher
- March 10, 2010 at 9:26 AM
- Michael said...
I was wondering what was going on with this blog. I'm glad you started updating it again. I like to check it on a regular basis for your great PWI staff opinions.
I thought Monday night was good. I agree that TNA was more exciting and interesting. The X Division match was awesome. On Raw, Triple H was boring as usual. And, Undertaker and HBK were regurgitating what we've heard many times. I'm sure the match will be a classic, but that segment went on way too long. WrestleMania should be fabulous, and I'm glad that TNA has decided to go head to head with WWE. In the end, this can only mean good things for wrestling fans.
I just got my PWI Almanac in the mail. I'm looking forward to reading it:)
- March 10, 2010 at 9:38 PM
- John said...
Don't be surprised with Sting. With the increased frustration between him and Hogan and Bischoff and Dixie Carter signing Hulk Hogan, it was natural for Sting to respond the way he did. I just didn't expect it to come this soon. This could lead to another team, or a "rebel" angle against the company for signing Hogan. And unlike Angle, he won't be swayed as easily because he's been on this road before in WCW and it nearly ruined his reputation and he didn't even know it at the time.
- March 11, 2010 at 10:19 AM
- John said...
- This comment has been removed by the author.
- March 11, 2010 at 10:20 AM
- John said...
- This comment has been removed by the author.
- March 11, 2010 at 10:20 AM
I sure hope that TNA pulls its socks up (as Chris Jericho once said in an interview with Bob Smith) and gets its act together. Right now, they might have the better talent roster but they're not using it properly.
- April 7, 2010 at 11:30 AM


text:
Recognized in 2013 as the official botanical gardens of the state of Tennessee, the University of Tennessee Gardens located in Knoxville, Jackson and Crossville are part of the UT Institute of Agriculture. Some 4,000 annuals, perennials, herbs, tropical plants, trees, shrubs, vegetables and ornamental grasses are evaluated each year. Both the Knoxville and Jackson gardens are TN Certified Arboreta. The gardens are open during all seasons and are free to the public.
View gardening tips for the entire year.
Contact us:
Mailing Address: Department of Plant Sciences 252 Ellington Plant Sciences Bldg. 2431 Joe Johnson Drive Knoxville, TN 37996 Phone: (865) 974-7324 Fax: (865) 974-1947 Email: firstname.lastname@example.com
UT Gardens, Crossville
UT Gardens, Jackson
The University of Tennessee Institute of Agriculture
Knoxville, TN 37996
Personnel Directory
Disclaimer · Indicia · EEO/AA Statement/Non-Discrimination Statement
· Privacy Notice


text:
In most of life's endeavors, it's often less important how you start, and more important how you finish. In trying to accomplish fitness goals, it's usually in the summer months that people tend to take a step backwards. Here are some tips to put yourself in position to have a winning fourth quarter.
In most of life's endeavors, it's often less important how you start, and more important how you finish.
In sports like football, it's often said that it's the fourth quarter where games are won and lost.
In the unofficial "fitness calendar," we've just passed "halftime" and are entering the important "stretch run." Most people start by making a New Year's resolution and begin exercising and eating right in January. It's typical for these people to start off strong, making progress and feeling better about themselves. Many even make it into the spring months, spurred on by the desire to get a better beach body.
But it's usually in the summer months that people tend to take a step backwards. Visits to the gym become less frequent. Food and alcohol consumption increases. Goals that were once so clear become blurred by the haze the descends during these dog days of summer.
But it's what happens next that determines whether you'll finish the year on track, or whether you'll be making the same resolutions next January. The "second half" is now under way. And the "fourth quarter" of fitness will be here before you know it. Here are a few tips for making sure you finish strong:
1. START NOW – The first thing you need to do is to shake off the sluggishness of summer and acquire a sense of urgency. It's now early August. If you slacked off in June and July, don't wait any longer to get yourself back in the groove. If you find yourself saying things like, "I'll wait until September to get back to the gym," that will likely turn into, "I'll wait until October," and then, "maybe after the holidays," and then, "next year."
Exercise again now. Clean up your diet now. Write down your goals again now. The clock is ticking.
2. MAKE A PLAN – Chart the remainder of the year. If you have a summer vacation still ahead of you, make that part of your plan, but not part of an excuse. Think ahead about the holidays and the fact that you may be a little busier during those weeks. Then examine the remaining weeks and calculate how many workouts you can get in between now and the end of the year. Think of what you want to achieve and write down realistic goals you can reach by then.
Without a plan, you're like a quarterback without a playbook; you're going to get sacked.
3. CHANGE IT UP – Warm weather isn't the only reason we sometimes abandon our workouts during the summer months. Sometimes we do it because we're bored with them. What seemed new and fresh in January can became stale and counterproductive a few months later. So, why are you still doing the same workout?
Summer is great time to change things up because there are more options. The warmer weather allows you to try outdoor exercise, like running, biking and swimming.
If outdoor workouts aren't your thing, stay inside but change your routine. Our bodies are designed to adjust to whatever we put them through. So, keep your body guessing. Change the types of exercises you do, the amount of weight you lift, the number of sets and reps you do, the amount of rest you give yourself between exercises, and so on.
Life is all about making adjustments, and your workouts are no different. Just like the football coach who adjusts his plays at halftime and leads his team to a come-from-behind win in the second half, so to can you "win" this game of personal achievement and end the year in better shape than you started it.
Frank Shelton is a certified fitness trainer and the owner of The Village Gym. He can be reached at 376-3060 or firstname.lastname@example.com.


text:
When creating an outdoor living room, be sure to choose patio furniture that suits your style as well as your needs. This all-weather wicker furniture offers a sleek contemporary look that's practically maintenance free. Juxtaposing the dark brown wicker against a light blue outdoor cushion and light, natural accessories gives this space a relaxing, spa-like feel. Adjustable outdoor chaises flank a patio umbrella that provides cooling shade, while a privacy screen helps block curious eyes.
|Outdoor Living Spaces
<< Previous
Next >>


text:
I know there`s only one dev here ( Hi antto! ) but anyway:
Has anybody ever tried to use a better compiler, to have smaller code size; like this one:
http://microcontrollershop.com/product_ ... ts_id=5051
I have downloaded it here:
seems to be working fully, not sure. Now who is able to setup a "solution"? It`s the kind of thing I`m NOT used in:(


text:
iLoveToCreate DIY Silvered and Glittered Frames
Cheap and Easy (Crafts)
Margot Potter The Impatient Crafter
Miss Avalon was sick this week, so I stepped in! How fun are these DIY Silvered and Glittered Frames?! Would you believe I scored these at our local Habitat for Humanity Re(store) for a whopping .40 cents? I've started a new feature on my blog called Cheap and Easy (Crafts) and these fit the bill. All it took was a little paint, glue and glitter to spruce them right up, add some cut to fit vintage Christmas cards...and...shazam! Cheap and easy! You can do this with any ornate plastic or wood gold frames, they're easy to find at thrift stores, flea markets or even new at the discount stores. Use unfinished wood for a shabby pickled finish. You can find the paint, glue, glitter and pouncer all at iLoveToCreate!
Here's how you can make your own DIY Silvered and Glittered Frames faster than you can say, "Kris Kringle!"


text:
|General software and network General OS-independent software and network questions, X11, MTA, routing, etc.
|Thread Tools
|Display Modes
My first Gateway and LAN having issues
Hello BSD people,
For the past few week, this is my first attempt at actually hooking computers together in any kind of fashion. I read a lots of examples and no matter what I tried my set-up would not working completely and this is the best I came up with so far ...
From my internel Windows LAN machine I can ping the Gateway but I CANNOT ping any website by name or number (ping yahoo.com or 184.108.40.206). I also cannot surf the INTERNET using any web-browser, IE, Opera or Firefox.
On the GATEWAY machine I can ping to the out-side by name or number but I CANNOT ping my own internal Windows LAN machine.
At one point I could not even ping a website by name because of my packet filter rules (I know nothing, just using something I found) so I disconnected pf by way of rc.conf to see how far I could get. As you see I been stopped again and I have ran out of ideas for trial and error by adding or disconnecting stuff. It's like the only thing available to do is pull-the-plug and call it quits
Kind of long but here's all the info I could find. If there is more related files I would really like to know where FreeBSD put them so I can add it to this list.
Could someone please tell me what am I'm doing wrong or what did I forget to do? Networking is not as hard as I once thought but I am shock after all of these days of reading and what-nots, I'm stuck.
Thanks in advance
........................ From Gateway machine numeric IP addresses will
........................ ping but named IP addresses will not ping.
bash-4.1# ping -c 4 yahoo.com ping: cannot resolve yahoo.com: Host name lookup failure bash-4.1# ping -c 4 220.127.116.11 PING 22.214.171.124 (184.108.40.206): 56 data bytes 64 bytes from 18.104.22.168: icmp_seq=0 ttl=57 time=94.823 ms 64 bytes from 22.214.171.124: icmp_seq=1 ttl=57 time=93.725 ms 64 bytes from 188.8.131.52: icmp_seq=2 ttl=57 time=91.254 ms 64 bytes from 188.8.131.52: icmp_seq=3 ttl=57 time=85.232 ms --- 220.127.116.11 ping statistics --- 4 packets transmitted, 4 packets received, 0.0% packet loss round-trip min/avg/max/stddev = 85.232/91.258/94.823/3.712 ms bash-4.1#
........................ /etc/rc.conf
........................ NOTE: I tried pf commented-out
........................ or not and it still can't ping by (IP) name
ifconfig_re0="DHCP" ifconfig_re1="inet 10.0.10.2 netmask 255.255.255.248" gateway_enable="YES" ## pf_enable="YES" ## pf_rules="/etc/pf.conf" ## pf_flags="" ## pflog_enable="YES" ## pflog_logfile="/var/log/pflog" ## pflog_flags="" natd_enable="YES" natd_interface="re0" natd_flags="-dynamic"
........................ /etc/hosts
::1 localhost localhost.my.domain 127.0.0.1 localhost Computer-0.jj.my.com
........................ /etc/host.conf
# Auto-generated from nsswitch.conf hosts dns
........................ /etc/resolv.conf
search gateway.2wire.net nameserver 192.168.1.254
........................ /var/db/dhclient.leases.re0
lease { interface "re0"; fixed-address 192.168.1.35; option subnet-mask 255.255.255.0; option routers 192.168.1.254; option domain-name-servers 192.168.1.254; option domain-name "gateway.2wire.net"; option dhcp-lease-time 86400; option dhcp-message-type 5; option dhcp-server-identifier 192.168.1.254; option dhcp-renewal-time 43200; option dhcp-rebinding-time 75600; renew 1 2010/6/28 03:54:24; rebind 1 2010/6/28 12:54:24; expire 1 2010/6/28 15:54:24; } lease { interface "re0"; fixed-address 192.168.1.35; option subnet-mask 255.255.255.0; option routers 192.168.1.254; option domain-name-servers 192.168.1.254; option domain-name "gateway.2wire.net"; option dhcp-lease-time 86400; option dhcp-message-type 5; option dhcp-server-identifier 192.168.1.254; option dhcp-renewal-time 43200; option dhcp-rebinding-time 75600; renew 1 2010/6/28 04:22:52; rebind 1 2010/6/28 13:22:52; expire 1 2010/6/28 16:22:52; }
........................ so I guest pf is running
device pf device pflog device pfsync options ALTQ options ALTQ_CBQ # Class Bases Queuing (CBQ) options ALTQ_RED # Random Early Detection (RED) options ALTQ_RIO # RED In/Out options ALTQ_HFSC # Hierarchical Packet Scheduler (HFSC) options ALTQ_PRIQ # Priority Queuing (PRIQ) options ALTQ_NOPCC # Required for SMP build
........................ Both ethernet cards are active.
........................ but pf is commented-out in the rc.conf
........................ commented-out or not, still can't ping by name
re0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500 options=389b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_UCAST ,WOL_MCAST,WOL_MAGIC> ether 00:14:d1:1a:22:35 inet 192.168.1.35 netmask 0xffffff00 broadcast 192.168.1.255 media: Ethernet autoselect (1000baseT <full-duplex>) status: active re1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500 options=389b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_UCAST ,WOL_MCAST,WOL_MAGIC> ether 00:14:d1:1b:19:62 inet 10.0.10.2 netmask 0xfffffff8 broadcast 10.0.10.7 media: Ethernet autoselect (1000baseT <full-duplex>) status: active plip0: flags=8810<POINTOPOINT,SIMPLEX,MULTICAST> metric 0 mtu 1500 lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384 options=3<RXCSUM,TXCSUM> inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4 inet6 ::1 prefixlen 128 inet 127.0.0.1 netmask 0xff000000 pflog0: flags=0<> metric 0 mtu 33200 pfsync0: flags=0<> metric 0 mtu 1460 syncpeer: 18.104.22.168 maxupd: 128
........................ From Windows LAN machine I can ping Gateway
........................ but I cannot surf the INTERNET with any
........................ web-browser I tried to use.
Microsoft Windows XP [Version 5.1.2600] (C) Copyright 1985-2001 Microsoft Corp. C:\WINDOWS\system32>ping 10.0.10.2 Pinging 10.0.10.2 with 32 bytes of data: Reply from 10.0.10.2: bytes=32 time=7ms TTL=64 Reply from 10.0.10.2: bytes=32 time=2ms TTL=64 Reply from 10.0.10.2: bytes=32 time=2ms TTL=64 Reply from 10.0.10.2: bytes=32 time=2ms TTL=64 Ping statistics for 10.0.10.2: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 2ms, Maximum = 7ms, Average = 3ms C:\WINDOWS\system32>
IP address: 10.0.10.3 Subnet mask: 255.255.255.248 Default gateway: 10.0.10.2 Computer Name: Computer-1
So I set the Sygate firewall on the Windows machine to Allow-All
and it still fail. This is what I get from Sygate. Lucky I
have it insstalled or I would see no info.
126310 10.0.10.7 137 10.0.10.3 137 Outgoing allowed ntoskrnl.exe 126311 10.0.10.3 137 10.0.10.7 137 Incoming Allowed ndisuio.sys 126312 10.0.10.3 137 10.0.10.7 137 Incoming Allowed 126313 10.0.10.7 137 10.0.10.3 137 Outgoing Allowed ntoskrnl.exe 126314 10.0.10.3 137 10.0.10.7 137 Incoming Allowed ndisuio.sys 126315 10.0.10.3 137 10.0.10.7 137 Incoming Allowed 126316 10.0.10.7 137 10.0.10.3 137 Outgoing Allowed ntoskrnl.exe 126317 10.0.10.3 137 10.0.10.7 137 Incoming Allowed ndisuio.sys 126318 10.0.10.3 137 10.0.10.7 137 Incoming Allowed
Here is the ipconfig information from the Windows LAN machine.
C:\WINDOWS\system32>ipconfig Windows IP Configuration Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : IP Address. . . . . . . . . . . . : 10.0.10.3 Subnet Mask . . . . . . . . . . . : 255.255.255.248 Default Gateway . . . . . . . . . : 10.0.10.2 C:\WINDOWS\system32>
C:\WINDOWS\system32>netstat -an Active Connections Proto Local Address Foreign Address State TCP 0.0.0.0:135 0.0.0.0:0 LISTENING TCP 0.0.0.0:445 0.0.0.0:0 LISTENING TCP 10.0.10.3:139 0.0.0.0:0 LISTENING TCP 127.0.0.1:1026 0.0.0.0:0 LISTENING UDP 0.0.0.0:445 *:* UDP 0.0.0.0:500 *:* UDP 0.0.0.0:1025 *:* UDP 0.0.0.0:4500 *:* UDP 10.0.10.3:123 *:* UDP 10.0.10.3:137 *:* UDP 10.0.10.3:138 *:* UDP 10.0.10.3:1900 *:* UDP 127.0.0.1:123 *:* UDP 127.0.0.1:1900 *:* C:\WINDOWS\system32>
I just pin-pointed for sure that GATEWAY cannot ping WWW by name when pf_enabled ="YES" (and nothing else pf)
Also I re-installed Windows-XP, I uninstall the firewall, Windows update and such. I updated the TCP/IP setting to same as listed above. I plug into the Netgear switch and to my surprise the Gateway can now ping the client. But client situation has not change. The client can ping Gateway but not the WWW. I'm beginning to believe this is normal. I am really new at this. Hands-on is differences than reading a pack of documentation and difference ideas all over the INTERNET and never remembering much because you never had the chance to try, and when you do, half the stuff don't work for your setup or machine anyway.
Now I think it's the pf rules that is holding me back. I found these examples on the net and like them so much because it has lots of stuff to learn from.
I need some experienced people to comment out or add what is needed for my small LAN which consist of one FreeBSD gateway, one XP machine for surfing the INTERNET and one FreeBSD/Arch-Linux machine for building routers and firewalls and such (more on the learning side)and maybe a one more machine running a webserver for practice.
Here is the rule set.
May I ask that I would like it Stealth ready, but not Stealth enabled. The first half is difference but I save it to be included with-in the bottom half if possible. Could some of you guys make changes and post a few comments on why it should be use. If it end with only 3 rules that works, I'll still be happy. I saved more than a dozen of pf examples but I never knew what to do with them. It been hard enough just learning FreeBSD and Arch-Linux command-line mode. I been working at it all day and night and I don't have it correct yet. How do you guys do it?
Thanks again
Hope someone who know-how come to read all of this. It's kind of lonely down here in the networking department. I may have to change my career plans.
### Stealthed Example: ### ext_if = "fxp0" ### int_if = "dc0" ### lan_net = "192.168.0.0/24" # Code: blocking ICMP completely stealthed to attackers # ICMP # pass out/in certain ICMP queries and keep state (ping) # state matching is done on host addresses and ICMP id (not type/code), # so replies (like 0/0 for 8/0) will match queries # ICMP error messages (which always refer to a TCP/UDP packet) are # handled by the TCP/UDP states ##### pass out on $ext inet proto icmp all icmp-type echoreq code 0 keep state ##### pass in on $ext inet proto icmp all icmp-type echoreq code 0 keep state # UDP # pass out all UDP connections and keep state ####### pass out on $ext proto udp all keep state # pass in certain UDP connections and keep state (DNS) ##pass in on $ext proto udp from any to any port $udp_in keep state # TCP # pass out all TCP connections and modulate state ####### pass out on $ext proto tcp all modulate state ## Or ####### block in all ####### block return-icmp in on $ext_if from any to $ext_ad port auth quick ####### pass in on $ext_if from any to $ext_ad port smtp quick
################################################################ # define defaults and macros ################################################################# oif = "re0" # macro name for the NIC facing the public internet lif = "re1" # for NIC facing Local area network if you have one dns1 = "{22.214.171.124, 184.108.40.206.}" # my ISP's Domain name server IP address dhcp = "184.108.40.206" # my ISP's DHCP server IP address ob_state = "flags S/SA modulate state" # outbound ib_state = "flags S/SA synproxy state" # inbound ################################################################# # define run time global defaults ################################################################# set block-policy drop # Sets the default block behavior to # packet is silently dropped set state-policy if-bound # states are bound to the interface # they're created on set loginterface $oif # gather statistics on this interface scrub out on $oif all random-id scrub reassemble tcp ################################################################# # define Nat if you have LAN ################################################################# #nat on $oif from $lif to any -> ($oif) #nat on $oif from 10.0.10.0/29 to any -> ($oif) #pass quick on $lif all # No restrictions on LAN Interface pass quick on lo0 all # No restrictions on Loopback Interface ####################################################################### # Interface facing Public Internet (Outbound Section) # Interrogate session start requests originating from behind the # firewall on the private network # or from this gateway server destined for the public Internet. ####################################################################### # Allow out access to my ISP's Domain name server. # $dsn1 must be the IP address of your ISP s DNS. # Get the IP addresses from /etc/resolv.conf file pass out quick on $oif proto tcp from any to $dns1 port 53 $ob_state pass out quick on $oif proto udp from any to $dns1 port 53 keep state # Allow out access to my ISP's DHCP server for cable or DSL networks. # This rule is not needed for user ppp type connection to the # public Internet, so you can delete this whole group. pass out quick on $oif proto udp from any to $dhcp port 67 keep state # Allow out non-secure standard www function pass out quick on $oif proto tcp from any to any port 80 $ob_state # Allow out secure www function https over TLS SSL pass out quick on $oif proto tcp from any to any port 443 $ob_state # Allow out send $ get email function # pass out quick on $oif proto tcp from any to any port 110 $ob_state # pass out quick on $oif proto tcp from any to any port 25 $ob_state # Allow out Time # pass out quick on $oif proto tcp from any to any port 37 $ob_state # Allow out nntp news # pass out quick on $oif proto tcp from any to any port 119 $ob_state # Allow out secure FTP, Telnet, and SCP # This function is using SSH (secure shell) pass out quick on $oif proto tcp from any to any port 22 $ob_state # Allow out non-secure Telnet (ID/PW passed as clear text) pass out quick on $oif proto tcp from any to any port 23 $ob_state # Allow out FBSD CVSUP function pass out quick on $oif proto tcp from any to any port 5999 $ob_state # Allow out ping to public Internet pass out quick on $oif inet proto icmp from any to any icmp-type 8 keep state # Allow out whois PC to public Internet pass out quick on $oif proto tcp from any to any port 43 $ob_state # Allow out non-secure (ID/PW passed as clear text) # active FTP in responce to remote FTP client pass out quick on $oif proto tcp from any port 20 to any $ob_state # Allow out non-secure (ID/PW passed as clear text) # active FTP for gateway & LAN users # If you want to use the pkg_add command to install application packages # on your gateway system you need this rule. # pass out quick on $oif proto tcp from any to any port 21 $ob_state # Block and log everything that s trying to get out. # This rule enforces the block all by default logic. block out log quick on $oif all ################################################################# # Interface facing Public Internet (Inbound Section) # Interrogate packets originating from the public Internet # destined for this gateway server or the private network. ################################################################# # Block all inbound traffic from non-routable or reserved address spaces block in quick on $oif from 192.168.0.0/16 to any #RFC 1918 private IP block in quick on $oif from 172.16.0.0/12 to any #RFC 1918 private IP block in quick on $oif from 10.0.0.0/8 to any #RFC 1918 private IP block in quick on $oif from 127.0.0.0/8 to any #loopback block in quick on $oif from 0.0.0.0/8 to any #loopback block in quick on $oif from 169.254.0.0/16 to any #DHCP auto-config block in quick on $oif from 192.0.2.0/24 to any #reserved for doc's block in quick on $oif from 188.8.131.52/23 to any #Sun cluster connect block in quick on $oif from 22.214.171.124/3 to any #Class D $ E multicast # Block public pings block in quick on $oif inet proto icmp all icmp-type 8 # Block ident block in quick on $oif proto tcp from any to any port 113 # Block all Netbios service. 137=name, 138=datagram, 139=session # Netbios is MS/Windows sharing services. # Block MS/Windows hosts2 name server requests 81 block in log quick on $oif proto tcp from any to any port 137 block in log quick on $oif proto udp from any to any port 137 block in log quick on $oif proto tcp from any to any port 138 block in log quick on $oif proto udp from any to any port 138 block in log quick on $oif proto tcp from any to any port 139 block in log quick on $oif proto udp from any to any port 139 block in log quick on $oif proto tcp from any to any port 81 block in log quick on $oif proto udp from any to any port 81 # Allow traffic in from ISP's DHCP server. This rule must contain # the IP address of your ISP's DHCP server as it's the only # authorized source to send this packet type. Only necessary for # cable or DSL configurations. This rule is not needed for # user ppp type connection to the public Internet. # This is the same IP address you # used in the outbound section. pass in quick on $oif proto udp from $dhcp to any port 68 keep state # Allow in standard www function because I have apache server pass in quick on $oif proto tcp from any to any port 80 $ib_state # Allow in secure FTP, Telnet, and SCP from public Internet # This function is using SSH (secure shell) pass in quick on $oif proto tcp from any to any port 22 $ib_state # Allow in non-secure Telnet session from public Internet labeled # non-secure because ID/PW passed over public Internet as clear text. # Delete this sample rule if you do not have telnet server enabled. #pass in quick on $oif proto tcp from any to any port 23 $ib_state # Allow in non-secure (ID/PW passed as clear text) # active FTP from remote client pass in quick on $oif proto tcp from any to any port 21 $ib_state # Allow in non-secure (ID/PW passed as clear text) # responce to active FTP for gateway & LAN users pass in quick on dc0 proto tcp from any port 20 to any $ib_state # Block and log all remaining traffic coming into the firewall. # This rule enforces the block all by default logic. block in log quick on $oif all ################### End of rules file ##############################
Here it say " $dsn1 must be the IP address of your ISP s DNS.". I looked at my DSL Broadband Link, "DSL Connection Details" and there are in-fact two Domain Name Server, Primary and Secondary but below, these numbers in the same positions don't seem to work for me. This may not be a typo and is meant as the author say, but I got a feeling it could been written for his static address and not dynamic addressing. Just another guest for now, so here is what I did. ..
I just replaced it with "my" IP address from the resolv.conf like this dns1 = "192.168.1.254" and now I can ping from Gateway by name and number with this full rule set included, where before I had to comment out pf rules. So the code seems kind of backward... I'm not sure but at lease I am making some progress. Here's the link I got the tip from. It make all of this seem so easy but i still got other issues.
I'll try to re-find the link I cut-and-paste these pf rules from. I got a too many HOT web-pages saved on my hard drive.
dns1 = "{126.96.36.199, 188.8.131.52.}" # my ISP's Domain name server IP address dhcp = "220.127.116.11" # my ISP's DHCP server IP address
# Allow out access to my ISP's Domain name server. # $dsn1 must be the IP address of your ISP s DNS. # Get the IP addresses from /etc/resolv.conf file pass out quick on $oif proto tcp from any to $dns1 port 53 $ob_state pass out quick on $oif proto udp from any to $dns1 port 53 keep state
Last edited by sharris; 28th June 2010 at 09:08 PM.
I hope you recognize that the probability for success attainable with such a methodology is quite low.
As for sources of information on pf(4), Hansteen's manuscript is one of the better free introductions on the subject:
When it comes to home networking, & especially for those that are doing it the first time with no prior experience, the best rule is to start simple. Given that you are going to have multiple machines connected to the Internet through a common gateway, understand pf(4) first. No points are awarded for blind guessing.
Once you are comfortable with setting up NAT on the external gateway, connect to it one machine. At this point, do all ping tests by IP address. If all internal machines are being assigned fixed IP addresses, ping between all machine will only work if you have the subnetting correct. Don't bother with pinging by names until all machines can interact with each other at the IP address (Layer 3) level.
Once you can get two machines to talk to each other by IP address, add a third. Once all three can communicate as expected, add a fourth, etc. As more machines are added to the internal network, the higher the probability that subnetting problems may arise. Understand the subject well.
Your posts mention problems with accesses by name. This is the last problem you should correct. It is unclear from your posts if you have your own DNS server for your internal network, or whether you are under the incorrect impression that your ISP's DNS server will allow you to communicate on your internal network by name with the same nameserver. Recognize that name resolution can also be done at the hosts(5) file level so you don't have to dedicate a machine to act as a DNS server. Also recognize that name resolution is not a requirement. If only a handful of machines are being connected together, you should be able to remember their IP addresses. Yes, it may not be as easy, but ensure that the network works before layering on name resolution.
Again, start simple. Don't try to introduce name resolution until you are perfectly clear that all nodes in the network can talk to each other by their IP address only.
Networking is deceptively simple given that (most likely) Category 5 cables are simply being plugged into RJ45 connectors on network cards/hubs/switches. One does need a basic understanding of the following:
Hello ocicat,
... with here, what you really want to use is probably a rule which says
pass inet proto tcp from ep1:network to any port $ports keep state
to let your local net access the Internet and leave the detective work to the antispoof and scrub code.
I wouldn't thought scrub code had anything to do with this even if I had knew what scrub code does.
Thank you very much for the keys to it all ocicat including your post which is as great to me as Hansteen's manuscript itself... I will not be back until I get most of this my head and some. It may take me days ...
Thanks again ocicat
Development on pf(4) is aggressive on OpenBSD. pf(4) has undergone a number of syntax changes during recent OpenBSD versions. I expect this trend to continue indefinitely.
The Book of PF is based on Hansteen's manuscript, however the book is a few years old now as a second edition will be published tentatively in August 2010. Because of this, I would not recommend the first edition. Otherwise, the first edition was one of the better sources of pf(4) information.
If you have other questions about networking, it will help if you post a diagram of your network including interface names & IP addresses. This will help clarify topology & subnetting correctness.
I been reading all of what you suggested. The problem is each document will links you to 5-10 others. I can't help it, so I click to review them, before you know it I'm reading forums threads all over the world while never completing the first document. I did pick-up a few details in it entirety and many bits and pieces from everywhere that is locked in my head and will be there when needed but nothing that I tried gave my Window LAN machine Internet access. It's overwhelming testing working and non-working example, piecing stuff together and not having a clue if it's what you really need or not. Than you learn FreeBSD is not OpenBSD and all code don't work the same. I even believe FreeBSD 8.0 is either using a older version of PF or missing needed scripts. I found the clue and I don't have a life time to try to prove it. I did save the thread I think. And also something keep killing my moused function. You can't pin-point nothing when your in the heat of studying something else.. I hit some kind of <pfctl> with flag than latter notice my mouse is gone. I'll post the cause when I catch it. That was a many detour, now I have do a search for WHY, while the machine reboot. Nothing on the net. I bet no one even knows it exist but me or a few non-xWindows peoples learning pf the hard way. What ever the case something is not right and I don't think it's personal. My next step is to switch the rc.conf lines around and put moused at the bottom and see what happen, if I can ever get to it. I am only a member of very few forums and I like to keep it that way so I don't get confuse with tons of login-in and passwords just because I have another question I just thought of by reading their threads. So I'll break so I can work on my Network Diagram. I don't think it's perfect and it may be missing a thing or two but it should present a fairly clear picture of what I'm trying to do. Don't know if this entire thread has too much information, so here are my final questions. And yes, I'm wore out but I had a ball trying and is going back to read more after I post this long note. I think pf is the great and I hope they don't break it or that the FreeBSD kernel get an overhaul before its to late.
Question 1)
It don't matter right now, but for future knowledge, what detail-information (net-numbers) are we not suppose to post since this is more about network security?
Here's my topology
one Gateway with pf
one switch
and three systems
I am no good with math. I really want to start with the lowest number if possible, like 10.0.0.0 or 172.16.0.0 for the gateway so when I plug in each LAN computer I can start with number 1 to match the switch number but since I made it this far I been to afraid to try it. Working in command-line mode is not fast, fun or easy to me yet. This is based on the example I posted way above. I do wonder why it starts with 10.0.10.2 and not 10.0.0.0 or 10.0.10.0.
Question 2)
What is the logic behind that?
Question 3)
Would someone correct my diagram numbers or make it better?
Question 4)
Is there a strong working pf example for this type of LAN set-up?
------------- -------------- The | | 2-Wire DSL | Internet | < < RJ-11 > > | Network Name | [Access-Point = 00:00:00:xx:xx:xx] WWW | | 2WIRETTT | [resolv = 192.168.1.254] ------------- -------------- v v cat-6 Patch-cables v ----------------------------------------------- | 192.168.1.35 255.255.255.0 192.168.1.255 | [re0 = 00:00:e0:xx:xx:xx] | Gateway-pf DHCP 192.168.1.254 | [machine-0] | 10.0.10.2 255.255.255.248 10.0.10.7 | [re1 = 00:00:e1:xx:xx:xx] ----------------------------------------------- v v cat-5e cross-over cable v --------------------- v | NETGEAR gigabit | v | 1 2 3 4 5< < < < --------------------- v v v v v v v v v cat-6 Patch-cables v v v v v v v v ---------------------------------- v v | ArchLinux-FreeBSD - Developer box | v v ---------------------------------- v v | IP Address 10.0.10.5 | [reX] v v | Subnet Mask 255.0.0.0 | [machine-3] v v | Gateway 10.0.10.2 | [reX = 00:00:a3:xx:xx:xx] v v ----------------------------------- v v v v v v v --------------------------------- v | Jail Web-Server - E-Mail - MySQL | v --------------------------------- v | IP Address 10.0.10.4 | [reX] v | Subnet Mask 255.0.0.0 | [machine-2] v | Gateway 10.0.10.2 | [reX = 00:00:a2:xx:xx:xx] v --------------------------------- v v v ---------------------------- | Windows XP surf Internet | ---------------------------- | IP Address 10.0.10.3 | [reX] | Subnet Mask 255.0.0.0 | [machine-1] | Gateway 10.0.10.2 | [reX = 00:00:a1:xx:xx:xx] ----------------------------
No expert here...
In a search for a configuration for your
diagram above (without reading the first
few posts again). I did a web search :
pfconf pfctl 192.168 "gateway box"
On the first page, this link:
LOTS...LOTS of information (some maybe
outdated. ) You may wish to compare its
setup with what you have done so far.
The reason initially for the search was to find a
very large and commented pf.conf containing
192.168... I do not know whether the search
found one larger than that in the page linked
FreeBSD 12.0-CURRENT
drones.com is the kind of tutor I like. They talk like real people and tell their true experence instead of trying to please one group, the possible big money topic or us. As they teach they cover many other things that sometime is deeply relates to task at hand that you're interested in ... like this statement that answered the problem of what I notice all along but still had to accept what the docs or tutor instrustions say until I figure out how to ask the question so it don't get over-looked in the bunch. Now the bunch has to be answered just to get back to the main question. I have even have more question while reading pf and the rest.
This is suppose to use DSL Primary and Secondary DNS... It don't work and only your drones.com may be explaining why WoW!!!
dns1 = "{22.214.171.124, 220.127.116.11.}" # my ISP's Domain name server IP address dhcp = "220.127.116.11" # my ISP's DHCP server IP address
This is backward but it caused something to start working:
dns1 = "192.168.1.245" # my resolv dhcp = "68.xx.158.x" # 1 number above my Secondary DNS:
Last edited by sharris; 2nd July 2010 at 10:40 PM.
I don't want to lose these links so I'll edit this list so they can all be found in one place. Some things are just too good to be miss. Also here is where I found the posted pf sample and where I got interested in pf:
An address of 10.0.0.0 with no explicit subnet mask implies a /8 network with a subnet mask of 255.0.0.0. Given that any IPv4 address represents a network component & host component, 10.0.0.0 has no host bits set. This situation is known as the "subnet address" & should not be assigned to any specific host. Neither should a host be assigned the address where all host bits are set to one -- in this case 10.255.255.255 -- which is used as the broadcast address for the 10.0.0.0/8 subnet.
Note that the formatting of this paper has problems with displaying exponents.
Another good introduction to subnetting is:
And by the way, Hansteen discusses the fundamentals of what you need to focus on here in the beginning at the following:
Thanks you ocicat
Actually, I went back to school to learn Web Site Development, Database and now I got this fall semester to reach Web Administration. If it was not for you motivating me to study PF the proper way, I would just be a dummy with a piece of paper, just learning how-to at somebody networking company. School is good to fire you up but what I just learned in a week would put a second year Networking professional in a state of shock. Not saying I understand it all but every night after 18 hours the computer screen text became fuzzy where I can't see it any longer until I sleep, where I read and test even more as I sleep. So yes ocicat, I been doing my home work and found other ways to skin the cat just in case.
Anyway, I just need a small LAN to sit behind a router where one machine works as a server running Apache, MySQL and PHP and another machine to browser the web-pages from the internal server, only. This way I can do cross-browser coding in peace (no possible hacking or strange effects from the out-side world causing me confusion). I wanted a dedicated a machine to do some cron screen scraping running off of perl code but since its very little I think the GATEWAY machine may be able to do the job with no problems, I hope.
The reasoning I am writing this is I just realized, THIS set-up I now have may be what I needed all along because the only machine that need to touch the INTERNET is the gateway, so no need to NAT and fight with PPPoE for a while. All of that will fall into place as I learn how to build jails under FreeBSD running Apache and such. This may send me back to NAT, but only internally, so I know I am not out the woods just yet and I don't plan to give up completely for this easy way out.
Just wanted you to know and to send out a big ...
Thanks You
PS: And thanks for answering those list of questions so clearly. Some things I just don't get no matter how many time I read that single founded line. I need the full translation to street english. These questions been with me like forever. The kind that get over-looked in the heat of discussion. We all read an answer like "why hide, lets share". Now it's 5, 10 or even 20 years latter when you finally get an answer. I'm a living witness to that fact.
1995: Dollar Bill, how do you divide a zero? ... 2001: A byte has 8 bits, a zero is a byte.
Be back to post solutions soon
Last edited by sharris; 5th July 2010 at 07:36 AM.
I hate to bring this up again but I'm still working with the same stuff above and having no success with firewall turn on or not. I notice every example I see on the INTERNET, every one has two numbers in their resolv.conf, but I only have one since the day I started. I even done a dd zero disk and a new install of FreeBSD 8.0 I still only get one entries. Do anyone have any idea of what this is all about or what I should do about it. I'm thinking to call tech-support but they seem to only talk Windows. I also notice the DNS numbers are not the same. I found this but I don't know what I can do with it to have normal resolv like everybody else.
192.168.1.254 - Router and Modem Default IP Address
22.214.171.124 - ip-adress.com/whois
Internet Connection Details
Connection Type: PPPoE
Username: firstname.lastname@example.com
Internet Address: xx.xxx.xxx.xxx
Subnet Mask: 255.255.255.255
Default Gateway: xx.xxx.xxx.xxx
Primary Domain Name Server: 18.104.22.168
Secondary Domain Name Server: 126.96.36.199
Configuration Server Post: Successful
My resolv.conf is:
search gateway.2wire.net
nameserver 192.168.1.254
The rest of the world get something like:
search gateway.2wire.net
nameserver 126.96.36.199
nameserver 220.127.116.11
PS: Would a PPP for PPPoE configurastion setup solve the problem? I think I need a service_tag number... I been trying.
Last edited by sharris; 6th July 2010 at 09:32 AM.
Not uncommon.. you don't have to stick with using your ISP's DNS server either, is a few alternatives that you can use.
BSDfan666, thanks for the link. I learn a lot there and it all came down to what ocicat said "It could be that your ISP is only providing one DNS server.". What the ... so the standards have changed on this noob clock and they did not tell FreeBSD.
Anyway, after failing to configure PPPoE (don't know why I ended up there) I finally went back to OpenBSD and FreeBSD pf documentation with BSDfan666 find in mind and after testing everything possible with a smaller rule set I came to find I was using all the wrong numbers. I thought it was my syntax.
Internet Connection Details
Connection Type: PPPoE Username: firstname.lastname@example.com Internet Address: xx.xxx.xxx.xxx : not for me but the freaking ISP IP address Subnet Mask: 255.255.255.255 Default Gateway: xx.xxx.xxx.xxx : I thought this was the freaking modem/router Primary Domain Name Server: 18.104.22.168 : the real DNS address Secondary Domain Name Server: 220.127.116.11 : and its missing DNS
lease { interface "re0"; fixed-address 192.168.1.xx; : My freaking real IP address
search gateway.2wire.net nameserver 192.168.1.254 : Now I got three IP addresses + a three DNS combo
Anyway, in the end even all of what I just said is still no excuse because it was "ONLY" here where I was using all the wrong address's all along, while blindly changing things elsewhere back-to-back. Thinking I had 3 IP's and 1 DNS did kind of make things confusing and took me from dumber to DUMBER by the day
pass in on $_LAN inet proto tcp from any to 10.0.0.1 port 8880 keep state pass out on $_WAN inet proto tcp from any to any port www keep state pass out on $_LAN inet proto tcp from any to 192.168.1.35 port 3389
Thanks for everything guys... I learn so much about DHCP, DNS, PPPoE and much more that I bet could land me a job with the TIA or ISO without a degree. I going to love pf .. I never understood BSD so well until now. It won't take me a life time now just to get it.
Where is the SOLVE button? Or please mark this as SOLVE
Thanks again
... but than again I may need to come back if I get trap sorting out these rules. I still want to use the one by Hermelito already posted. I might have a time sorting things out and understanding every detail. I rather for it all to be in one place for future reference.
# 1
I been tring to refind this for a week.
I glance through it months ago.
Last edited by sharris; 8th July 2010 at 12:39 PM.
Your questions are becoming more & more FreeBSD-centric. This is fine, & it is the consequence of moving forward, but you need to be posting in the FreeBSD sections. Many regulars do not read outside of the sections in which they have familiarity, & at this point, you need to be seeking the advice of those familiar with the terrain.
ocicat, I intent to. I was just hiding down here at BOOT-CAMP to learn something I always wanted to know about, pf. The members here are educated and some self-made OS professional. Network operating systems is more serious than I thought and it's very time consuming. I had to make sure I am really ready to take the dive. I realize there is no better way to understand UNIX* than to know low-level firewalling, Packet Filtering. To know it is to know the Whole Wide WEB.
It won't be long before I hit the FreeBSD General and Security forum to talk emulators, jails and such. I can't go up there acting silly, not knowing nothing like I did down here. I'm the kind of person who do well reading half of a book but with UNIX it's a difference ball-game. .. It's like you said, in a very nice way, a few times, sound to me you said "read them" .. so I did as deep as I could. When I go up stairs, I'll know more about my own topic before posting a question about it. This PF thing was from ground up. I really knew nothing, nada, zip but a dream of seeing 2 computer talk to each other. Now I even know "ALL
" (well nearly) it does from the sec you click the switch.
|Thread Tools
|Display Modes
Linear Mode
|Similar Threads
|Thread Starter
|Last Post
|Another gateway box question
|FreeBSD General
|11th November 2008 09:15 PM
|antivirus gateway
|OpenBSD Security
|14th September 2008 04:02 AM
|FreeBSD Gateway
|FreeBSD Ports and Packages
|11th July 2008 05:31 AM
|Problem at the install with a pc gateway
|FreeBSD Installation and Upgrading
|4th June 2008 07:47 PM
|Dual WAN gateway.
|OpenBSD Security
|2nd June 2008 09:00 AM


text:
West Africa's premiere sustainable surf retreat
Kwepunha Retreat is a sustainable beachside retreat that caters to those with a sense of adventure and a desire to give back to local communities. We invite international tourists, traveling surfers, volunteers, expats, Liberian Nationals, and all like-minded individuals who have a concern for the greater good of the community of Robertsport, Liberia to come enjoy the natural beauty and amazing waves of this emerging destination. Kwepunha Retreat proudly offers an array of accommodations, activities and services to ensure each guest has a unique and highly memorable experience while staying with us.
About Us
FInd our more information about our vision, projects, partners and the people here that help us make everything we do possible!
Take a look at the different properties, rooms, activities and services available to guests visiting or staying with us.
Get involved
Learn how you can help us with our community initiatives by donating, volunteering or being part of a University led trip.


text:
The front deck of John Chaney's house barge features a 180-degree
water view of the Ship Canal, working tug boats and the hulls of giant
ships under repair. His neighbors' barges nudge two sides of a marina
pier where the only sound late in the afternoon is the gentle slap of
waves against the floating homes.
But the peaceful, quintessentially Seattle lifestyle of living on the
water is threatened, Chaney and his neighbors say, by changes to the
city's shoreline regulations, which could make some floating homes
"We're part of the rich diversity of Seattle's waterways. But many of
us feel that our way of life and our homes are imperiled by the city's
proposed rules," said Chaney, vice president of the Lake Union
Liveaboard Association.
Seattle is completing the first update since 1987 to its Shoreline
Management Program. The proposed legislation is in its third draft and
runs more than 300 pages.
It covers all development and uses along the city's waterways, from
heavy industrial plants to boat sales to the replacement of piers and
pilings. Its overarching goal, say city officials, is that new activity
doesn't create a net loss of ecological function.
The City Council plans to get the revisions to the state by the end of the year.
The three pages or so regulating residential uses over water have
generated the most controversy, defining the types of liveaboard homes
that should be allowed.
Houseboats - floating residences that are permanently moored to docks
and are hooked up to the city sewer system - are legal. But new ones
would be prohibited under the proposed rules, said Bryan Stevens,
spokesman for the city Department of Planning and Development, which is
writing the code revisions.
He said the city is running out of undeveloped shoreline and, under
state rules, living on the water is not a priority use. State law
requires that water-dependent activities such as port facilities,
marine-related businesses and recreation be given preference.
Residents of other types of liveaboards - house barges and floating
homes not connected to the city's sewer system - say the new rules place
them in a legal limbo.
In 1990, the city prohibited new house barges. Thirty-four existing
ones were grandfathered in, but they were required to pump their sewage
and capture their graywater - the runoff from showers, dishes and
washing machines.
The city doesn't regulate boats - and it is legal to live on one -
but the boats have to be navigable. Planning Department officials say
that no floating home that's legal now will be illegal under the
proposal. But liveaboards say the city hasn't enforced the rules for 20
years and homes and barges over the water have proliferated.
The city estimates that as many as 150 current floating residences
are illegal. And officials say some people are trying to skirt the
restrictions by claiming that structures that look a lot like houses,
but float, are actually vessels and so not subject to city regulations.
And some residents have bought barges and paid monthly moorage fees
at marinas with the understanding that they were legal residences, only
to now find out that they aren't. They aren't capturing their graywater
and say that no one else legally living aboard a vessel is required to.
"It's very concerning. When I bought it, nobody said anything," said
Anamarie Aliste, an artist who lives up the dock from Chaney at the
Nickerson Marina between Fremont and Ballard. Her residence looks a lot
like the barges seen on the canals of Europe, but it isn't one of the 34
house barges the city grandfathered in.
Some liveaboard residents are pleased with the city's proposed
regulations. They say that without them, marina operators would rent to
houseboats and barges, rather than recreational boats, because they
could get higher moorage fees and not worry about vacancies.
"We support the right of the city to regulate its waters, and that
includes difficult decisions about how to best protect the aquatic
environment," said Gail Luhn, president of the Shilshole Liveaboard
She said that about 300 of Shilshole's 1,400 slips are rented to
liveaboards. Shilshole has strict regulations that require residents to
document their sewage pumping and to protect water quality, something
she said the new city regulations would extend to all liveaboards.
The city currently requires marinas to provide toilets, showers and
laundry facilities to minimize the discharge of graywater from boats,
but Luhn said that some of the illegal house barges and houseboats have
dishwashers and washing machines that discharge directly into the lakes
and Puget Sound.
City Council members say they're leery of adopting regulations that
might wipe out the value of floating homes and barges that were
purchased in good faith that they were legal.
But they say they also have a legal duty to protect shoreline uses and water quality.
"I'm a softhearted geek for living on the water. I don't want to do
anything that makes those go away," said Council President Sally Clark,
after a recent tour of house barges at the Nickerson Marina.
But, she added, "How do we set rules that are fair to the majority
while also capturing bad actors who may be dumping their waste?"
Councilmember Richard Conlin, chair of the Planning and Land Use
Committee, said the council is trying to strike a balance between giving
legal liveaboards security while at the same time making clear that
it's not permissible to live on something that's not a boat.
Conlin said some existing house barges and floating homes might meet the definition of a vessel, but some clearly do not.
"We're trying to find a path where people can be reassured they have a
legal boat. But people also need to take responsibility when they buy
something that it meets the city's codes."
At the Nickerson Marina, Chaney said his house barge likely will be
legal under the new regulations. It's got a motor and a steering wheel.
It's traveled up and down Puget Sound.
He's asked the City Council to grandfather in existing liveaboards
like those at Nickerson Marina. And he's collected more than 800
signatures in support.
Another neighbor, Pat Aylward, said that members of the house-barge
community are good stewards of the water and live in a very small
ecological footprint, typically smaller than 400 square feet.
Like what you read?
Want to know when we have important news, updates or interviews?
Join our newsletter today!
Send to your friends!


text:
Woody Woodbeck Sounds Off On Miley Cyrus
Woody Woodbeck is an Emmy Nominated TV Producer who has a vast background in the Entertainment world working in radio, TV and print media. He has garnered much attention after a few hit viral videos this past year (Call Me Maybe - Weho Queens Redux, Shit Weho Queens Say) and through his vast social media following. Woody can be found at www.twitter.com/hollywoody.
@Karen... It would seem like you're the one who has spent too much time obsessing over Miley and her antics... BTW isn't watching t.v. a privilege, not a "right"? At least that's what I teach my children, so perhaps that's why I don't need to spend my time on various forums being "outraged for the children." It's also common sense for me to understand television programming and what is expected in VMA performances, MTV, VH1, etc..., so it's very easy for me to turn the channel to something more appropriate for my children if I feel something is crossing the line. It seems apparent you have the inability to do so. Start paying attention to your kids! You said that people who think the world revolves around celebrities are the biggest problem.. so please, take a look in the mirror.
Let me tell you something,my kids donot tune into miley or any other trash in my house but my children do go outside my home and trash such as hers is very easily accesible and since I'm not with them always I can't control what they do , and my problem is not with the sluty way she dresses or other wise my only problem is her sexual suggestions and let me tell you something if your kids are old enough to go to outside your home without you then you don't know what hour children do and if you think you do then your funny and you wear blinders and if they aren't then you will certainly eat your words one day.im sick of people like you who say just don't watch it when you know kids will.sadly that's why so many kids suffer being bullied and much more because nobody wants to do nothing but set in their secure little world and blame the parents and that sir isn't going to help our young but if you feel good with blaming everyone but the one responsible then I'm big ok with that your the sad one
Wow it just doesn't seem that complicated to me . Cyrus is an entertainer am, an artist . Her gig in the VMA's were hardly that bad , and if they were why Mr . Thick getting off scott free ? If as a parent you don't think your kid should see this stuff , then turn off the the TV . Now this Lexi person , wow , thanks for warning me about this wordy guy ! I've not met him yet , he is a friend of a friend . He must be very convincing , sorta like the gay Mussolini. Getting all of west Hollywood hooked on drugs and booze and whorish behavior ! And here I always thought it was the VIP roof top bar at Koontz was to blame ! Thanks for the warning ! Kaviat Emptor ( you do know that in Latin that means " waitress , the caviar is empty ! " CIO Lexy !
OMG! These comments are insane? What kind of people write such hateful vitriol just because someone asked people to stop judging some chick so harshly. I've got very little time for Miley's current antics (but I've seen worse & far more serious bad behaviour from celebrities a lot older than her), I'm also not a fan of her music but I understand what the writer of this article is saying. He's asking grown men and women to behave like grown men and women instead of bitchy schoolyard bullies. Judging by the comments he's got I see his plea has fallen on deaf ears and the bullies have turned on the writer as well. Congrats! You suck at life.
I can say what I want I'm as free to express my opinion as miley is to show her ass.and obviously you aren't a parent and if you are wait till you get bit
in the ass one day by your child imitating those they grew up respecting,and if not then you better remember your own wand I'm sick of people like you feeling like the best way to solve such thvulgar actions are to make the kids turn off tv .Well sir my kids have rights just as much right as her and is it to much to ask to rate trash as it should be.My gosh what's wrong with you people that you no longer care about kids.All you worry about are those that won't miss you if your gone tomorrow nor do they care. Do you all not see all the violence at our kids and a the sex and violence that's shoved in their faces don't help.Really people grow the hell up and concentrate on what's real your not going to gain by idolizing her though she will gain by your priorities in life being all wrong. You enjoy your thoughts and may it not bite you in the ass one day and you have to eat your words and I will fight for kids everywhere and their rights .enjoy your day
I have a lot of opinions about Miley. I think she's got a lot of talent and potential but I can't handle the tongue thing!! What is with the tongue?! And I can do without the naked pictures... and guess what...here's the magic, I don't click on the link- and presto! I don't see the picture. I have managed to not even see the Miley twerking. It's not impossible!!! Anyway, that's the great thing about people... Everyone is going to have an opinion. HOWEVER. If you are a parent and you are upset because a celebrity, and not just Miley, ANY celebrity, for that matter, doesn't fit into the box of what you think is a role model for your children, YOU ARE THE PROBLEM. YOU are supposed to be the role model for your child. If you've been successful at it, a single VMA performance is not going to unravel "instilled morals" and the way in which you raised your child. And if it does, evaluate your parenting methods. BECAUSE if Miley Cyrus is the reason your child no longer behaves "the way they're supposed to", there are larger problems afoot. Take some responsibility and stop putting people in boxes. Celebrities AREN'T your children. Be a good parent. Pay attention to your children. Inform them, teach them, and talk to them. Then, you won't have time to be on the internet complaining about how someone else's child is corrupting yours.
and might I add that one performance is not what has gotten myself or other parents angry and it is people who think the world revolve around celebrities THAT ARE THE PROBLEM,and only you know if that's you and furthermore she started out decent and got the respect of these kids and got them looking up to her. NOT THE PARENTS.do you don't set out to earn your fortune by pulling children in then disrespecting them and showing them no values when you no longer need them.so in the future you might want to know the whole situation of these things before you go throwing your opinions and blame around
Well them how do you know about the pictures or tongue.my kids watched VMA for austin and one dir.so don't tell me they shouldn't watched it.VMA knew young girls would watch solely for these two and if you feel it was to much for them to warn parents of what was coming them sir you have the problem
I hope all our young realize that using ones mind is far more rewarding .as far as grown men making comments to miley well sir your funny because she knows very well grown men are going to follow her because if the show she gives and the photos ,I mean really my 14 year old daughter was on twitter and saw a link to a site where miley posed for pictures and in those pictures she was so vulgar that it was funny my 80 year old mother was grossed out by her because she was so not pretty.now lets get real you ,her and the rest of us know grown men do enjoy looking and if you think it's awful of grown men to look at these photos could you tell me who you feel should view them or us it that you know our children will see them and those are the ones whom should view them in your opinion or who then.And we as parents have every right to be upset as my daughter was not aware of a drug name Molly before miss miley made it public and how good it was,and I'm sure my daughtet was not the only one or how good pot makes her feel,I wonder if the rest of us would make that statement if it would go unnoticed by authorities or throwing a cigarette out the window after wondering how all the fires get started.So bottom line is we made her and her daddy and we have every right to have out say as she has every right to act like her mind will get her nowhere only using her body but she has no right to do it in front of our young and people such as yourself need to put her and her appearances with a appropriate rating because no matter how any if you feel our children have rights and us the parents need to come together and demand rights for our children
You sir are a hypocrite,you say we have nothing to go with Miley's career,well big shot where would she be without the same people you say have nothing go go with her.As a matter if fact where would you be without us common folks?How high and mighty would you be if no one watched your movies?And if you say Miley's family had money and she didnt need us ,you might want to remember there are ones like myself who remember a time when Billy Ray needed everyone and played in clubs depending on us to come support him as we did so Dont you forget WE put him where he is and you say Miley has a right to do as she wants and it is up to us parents to teach our children the wrongs,guess your saying Miley's parents didnt care if she turned out as she is or didnt have that talk you refer to.And you sir are wrong because when a girl like miley cyrus starts her career only by the admiration if our young children and sets her aim early on at winning the devotion of our young children no she does not have a moral right to disrespect these children who have made her what she is.If she act out her fantasies she has no right to do this in front of our children and anyone who disagrees with this sadly contributes to what's wrong with our world today.Many have said her VMA performance was right it was the fault of the parents for letting our children watch,well let me burst some bubbles ,many kids such as my own were not watching for her it was for austin,one direction,etc.so lets get real ,those in charge knew when these certain ones were going to appear and they have do many young girls follow every where they go that these young girls would be watching and I think there should have been a warning iof the content of Miley's performance before it came on,surely that isn't to much for you to agree with.I have tried to form a group that will insist if this is the material celebrities want to put out there then it should be done completely away from the eyes of our children and should not be easily viewed by our children.so why you may feel this behavior is ok it is not ok in front of our children.Some of us as parents still have morals and try to instill decency in our children and that's our right .We ALL know of the many obstacles our children face,all the violence that is aimed at innocent children,all the suicide of our young who try go measure up.And I'm sorry for you or anyone who thinks using ones body to make money is ok ,
Ms. Vyrus has the audacity to shove her nasty self down our throats, and we are not allowed to spit Ms. Vyrus out? She is a public figure like any other has been ala Britney Spears, so she is shouldn't be immune to criticisms. We all have opinions, if you can't take the heat get out of the limelight!
I don't think the the spokes person for the junkies, whore, drug dealer and addicts of WEHO, shouldn't be telling people what's right or wrong. Your day will come for all the people you offer and started on drugs and your dirty lifestyle. You are no right to say anything, you should not be taken as an example, you are an embarrassment for the gay scene, and part of a shit whole full of drity hookers and loosers. Make sure you clean your nose, it's always white.
So, you are criticizing the critics for being critical?
And now that Miley has decided to ridicule and make light of mental illness can we be critical of her for that? Seeing as that does affect millions of people. Much like when we call out hateful homophobia. Or will you be criticizing our critiques on that too?


text:
Our strawberry pie has been an Eat'n Park favorite since 1954! There's a reason it's been around that long … it's fantastic!
To make sure everyone gets a chance to try it, we'll be sending out a coupon for a FREE slice of strawberry pie to all of our email club members the week of May 10th.
If you're already a member, check your inbox the week of May 10 for your coupon. And if you're not already part of the club, what are you waiting for?? Join now! Sign up by May 9 to get your coupon, good for a FREE slice of Strawberry Pie with your meal. As a member, you'll get lots of other great perks, including coupons for your birthday and anniversary, special invitations, and other offers worth over $40 every year!
Why are you still reading? Click here to join now – fresh, delicious Strawberry Pie awaits you!


text:
Social media provides businesses with an unprecedented level of access to their customers. And with Facebook, Twitter, LinkedIn and others only growing in popularity, most businesses now recognize the value of engaging people through these platforms. This may involve prospecting (using paid ads or relevant content to attract new customers or business partners), recruiting new employees, announcing new products or sales or responding to customer satisfaction issues in a public forum.
But a trend that's even more new is integration between these platforms and customer relationship management (CRM). As critical as CRM is to a company's sales and customer service experience, businesses that fail to integrate this with their social media marketing will soon find themselves behind the curve.
This guide is designed to help buyers in the very new market of social CRM software identify the capabilities they'll need and make the right decision. Here's what we'll cover:
What Is Social CRM Software?
What Type of Buyer Are You?
Market Trends to Understand
Social CRM involves the integration between customer relationship management software and social media tools like Facebook, Twitter, LinkedIn or others. At the heart of it is an ability to manage the large number and range of interactions for which a business might want to use social media. To that end, features often include:
|Social media monitoring
|There are a number of programs that scour the Web or particular social media platforms to find instances of your brand name being mentioned or references to problems that your product solves. Depending on your strategy and the other capabilities of the social analytics software you choose, this could be delivered to you with custom analytics (that, for example, mine for customer sentiment rather than social interaction) or be distributed in a way that allows you to respond appropriately.
|Social media platforms and communities
|There are a number of programs that scour the Web or particular social media platforms to find instances of your brand name being mentioned or references to problems that your product solves. Depending on your strategy and the other capabilities of the social analytics software you choose, this could be delivered to you with custom analytics (that, for example, mine for customer sentiment rather than social interaction) or be distributed in a way that allows you to respond appropriately.
|Automated responses
|Some solutions provide a way to respond automatically to social media cues, allowing you to retweet messages or provide stock responses to commonly asked questions with a minimum of personnel time.
|Internal collaboration
|For companies with multiple people responding to messages, the system needs to be able to route messages to the appropriate person within the organization, and/or to open and close customer service issues that come through this channel.
|Marketing integration
|The ability to organize new followers into demographics allows for much more efficient sales and marketing tactics. This application category would also include the ability to monitor sharing/subscription statistics on emails and blogs.
|Contact management
|If your strategy requires translating followers into contactable leads, integration with other contact management tools will be a vital part of your social solution.
The benefits of social media CRM should be obvious: it allows you to track and manage data at unprecedented levels of detail, giving you the opportunity to engage your customers in ways you never would have been able to before. It's worth noting, however, that social CRM is about much more than the software solution itself. For most companies the benefits will only be realized with a well-conceived customer relationship management program already in place. Otherwise, you run the risk of coming across like a five-year-old driving a Ferrari—very flashy, but without the ability to drive your company where it needs to go.
The entry cost for social CRM tools has never been lower. Many programs offer a free solution for smaller users, and in a field that's leading the software industry in terms of Web-based solutions, up-front costs are often nil.
That being said, there are some differences in buyers. The two main types are:
Enterprise buyers. If you've invested in or are considering a company-wide CRM product with contact management, marketing automation and/or help desk management or if you're looking for additional industry-specific software (e.g., field service management, contract management etc.), then seamless integration is likely more important than specific features. For this, you'll want a CRM product with social capabilities, rather than something with a dedicated focus in the social media space.
Best-of-breed buyers. As a rule, smaller businesses tend to be less focused on enterprise-wide application and more focused on maximum effectiveness at particular activities. If this is the case, focus on the features as you make your purchasing decisions. Many social media management tools straddle the space between social media and CRM, so concentrating on the functions you need can yield you a product that delivers exceptional functionality for a very reasonable outlay.
As you do a comparison of the best social customer relationship management software for your needs, keep these trends in mind. How your vendor fits with these trends could have a big impact on their viability.
Our service is simple and 100% free to customers like you because software vendors pay us when we connect them with quality leads. You save time and get great advice. Vendors get great referrals. It's a win for everyone!