text:
He knew Sharon in the 1960s when he was a producer. He also had great admiration for Sharon's mother Doris fighting for victims rights. He himself had one daughter who was strangled by a former boyfriend. His daughter, Dominque, fell into a coma shortly afterwards and died, having never regained consciousness.
All this made me think of an article Dunne wrote for Vanity Fair April 2001:
Murder Most Unforgettable
Dominick Dunne's Diary
Recuperating from over-radiation, the author found himself drawn back into one of his past's grimmest chapters: August 1969, when Hollywood learned of the murders of actress Sharon Tate, celebrity hairstylist Jay Sebring, and three others by the Charles Manson family – a crime that changed the town forever.
Rudolph Giuliani had better luck with his radiation than I did. Mine turned out to be a disaster. I got over-radiated in a private area and suffered terrible pain-three weeks of it. They don't warn you about the pain. As a result, I've been staying home nights until things clear up, and to my amazement I'm enjoying the quiet life. What with the Internet and the fax and the telephone, I'm always up-to-date on the kind of news that interests me-for instance, what's happening with the Edmond Safra death and the Michael Skakel trial and why Tom Cruise and Nicole Kidman are breaking up. I watched videos of all the Oscar-eligible movies and sent in my ballot to the Academy. You're not supposed to tell how you voted, so I won't. One night in January, as I was channel surfing, I came across a two-hour documentary about the 1969 murder of the actress Sharon Tate and four other people by the so-called Charles Manson family on the E! channel. Oh, God, I don't want to watch that, I thought. I didn't want to dig up those awful memories. But I couldn't bring myself to change channels, and for one whole part of the program I just stood there in front of the set, transfixed, too engrossed even to sit down.
Anyone who was living in Beverly Hills on August 9, 1969, or who was part of the motion-picture world, remembers vividly that Saturday morning, when the news began to filter out that there had been a murderous rampage on Cielo Drive at the home of the film director Roman Polanski. Telephones started to ring all over the community. My brother and sister-in-law the writers John Gregory Dunne and Joan Didion recently reminded me that they had been at the home of my wife, Lenny, from whom I had recently separated, when she got the call from Natalie Wood about the brutal slaying of our friends Sharon Tate and Jay Sebring. Natalie always had the latest news ahead of everyone else, but this kind of news was out of the ordinary. The immediate interpretation, once the shock of the mass murder had set in, was that the huge party we had all been living was over. Suddenly everyone felt unsafe.
"We used to think, Drugs aren't bad, life is great-but it all ended that day," says George Hamilton on the telephone from Los Angeles. George was in Palm Springs when he heard. He was with Alana Collins, whom he would soon marry, and Peter Lawford. "Everyone felt personally involved," he recalls, because so many people from all walks of life had passed though the house on Cielo Drive in the short time that Roman and Sharon lived there. "Roman brought a dark energy to the house," George says. For the next four months, until the Manson family was arrested, there was fear in the air. Who was going to be next?
"We were all running around with guns in our purses," Michelle Phillips of the Mamas and the Papas tells me. "We all suspected each other. It was the most bizarre period of my life. I didn't trust anyone. It could have been anyone, as far as I was concerned. The last conversation I ever had with Sharon was about wallpaper for her nursery. Do you remember Peter Hurkos, the psychic? He put his hand on my stomach and said, 'You have to carry a gun at all times, loaded and cocked.' I carried one for three months. The police were questioning everyone. Everyone was flushing drugs down the toilet. For some reason, they suspected my husband, John Phillips. 'Would your husband have any reason to have any animosity toward anyone in that house?' they asked me. I told them I had had a night in London with Roman. I felt bad about that, because of Sharon."
One day during the O.J.Simpson trial, Warren Beatty suggested that I write about the Sharon Tate murders, but for a long time I resisted the idea. As I reminded Warren, the prosecutor Vincent Bugliosi had covered the case thoroughly in his amazing book, Helter Skelter. Warren said, "Vince knew the bad guys," meaning the Manson gang. "But you and Lenny knew the movie people. You knew the life they lived. It was the crowd from the Daisy that went in and out of the house on Cielo Drive." He was right. We had known them all. The Daisy was the first of the private discotheques in the city, where the young and the rich twisted and boogied away the nights in a town famous for going to bed early. The skirts were short. The girls were beautiful, the guys were handsome. On any given night, if you managed to get in, which could be difficult, you were apt to see Joan Collins, Michael Caine, Ryan O'Neal, Mia Farrow, Jane Fonda, Warren Beatty, the Sinatra sisters, and maybe a Vegas figure or two. The Polanskis were often there. So was Jay Sebring. You could slip out to the garden in back for a snort or a toke. The smell of pot was often in the air. It sounds absurd to call the scene innocent, but it was. Everybody knew everybody. It was a nightly party, even though plenty of dramas took place there. Frank Sinatra, who had taken a dislike to me, once paid the Daisy's maitre d' 50 bucks to hit me. Back then 50 bucks was a lot of money. The place was owned by a glamorous couple named Jack and Sally Hansen, who were very much a part of the scene themselves. They also owned Jax, the wildly successful Beverly Hills shop that changed the cut of women's slacks. One night after the murders, Michelle Phillips was waving a gun around at the bar. Sally Jansen said quietly, "Darling, put the gun away."
There was a lot of gossip the house on Cielo Drive had gotten a notorious reputation after the Polanskis moved in. From the start, people speculated that drugs had been involved. The police had found drugs in Jay Sebring's black Porsche, which was parked outside the house. People were also saying that there videotapes of orgies, including one of two famous stars having sex. (Years later, when I was covering the O. J. Simpson trial, I became friends with Vince Bugliosi, who had successfully prosecuted the Manson family, all of whom received life in prison. I asked him about the dirty videos, and he said no such tapes had ever been found.)
At the time of the murders, I was in New York, executive-producing the film The Boys in the Band. Lenny phoned me with the news, and I flew back to Los Angeles for a few days. People were sending their children out of town for safety, and ours were going to my mother-in-law's ranch outside San Diego. People were buying firearms and attack dogs for protection. Steve McQueen packed a gun at Jay Sebring's funeral, where he gave one of the eulogies. The Tate murders marked the beginning of bodyguards for the famous, and elaborate alarm systems, and high walls and gates.
"My home was on Angelo Drive, right around the corner from Cielo," says Rona Barrett when I telephoned her. At that time, Rona was the reigning queen of gossip in Hollywood, a combination of Hedda Hopper and Louella Parsons for the television age. She was a fret reporter when she went after a story, but she annoyed a lot of people with her fierce tenacity. Once, I saw Mia Farrow throw a drink in Rona's face at a party at Laurence Harvey's in Malibu after Rona had said something on the air that Mia didn't like. I remember that Rona handled the situation with grace. Rona was the first reporter to arrive at the Polanski house after word of the murders leaked out. "I got a call saying something bad had happened at Sharon and Roman's house. I got in the car and went. I got up the driveway and into the parking area. I saw a sedan there. There was a dead body behind the steering wheel. Then a whole group of detectives converged on the property. I saw them covering another body on the lawn. Then the police said, 'Please, leave.'" There were quickly rumors of a hit list of famous people. "Metromedia gave me a private guard," says Rona.
The body behind the steering wheel was an 18-year-old named Steven Parent. He didn't even know any of the celebrities inside the house. He had driven up to visit the caretaker of the property, and he was shot and killed by Manson-family member Charles "Tex" Watkins as he was leaving to go home. The body on the lawn that Rona saw being covered was a Polish friend of Roman's named Voytek Frykowski. After having been shot and stabbed in the living room, where he was sleeping, he had run outdoors, and there he died of his wounds. He was the lover of the coffee heiress Abigail Folger, known as Gibby, another of the five victims. In an interview, Polanski later said about his childhood friend that he had little talent but that he was a charmer. Frykowski was also involved in drugs. To this day, there are those in the community who firmly believe that the murders were the result of a drug deal gone bad between Voytek Frykowski and Charles Manson.
On a recent trip to Paris, I thought of looking up Roman to see if he would talk about the tragedy from his point of view. He was in a horrible position when he returned from England after the murders. There was probably no more photographed man in the world at that moment than Roman Polanski, returning to a home that was now a crime scene with yellow tape around it after his magnificent wife and their about-to-be-born child had both been slashed to death. His close pals, such as Warren Beatty, Jack Nicholson, and Robert Evans, the glamorous head of Paramount Studios, rallied around him. Since there was no place Roman could go without being besieged by reporters, Evans took him in behind the gates of his French manor house off Coldwater Canyon. He also hung out in Betty's suite in the Beverly Wilshire hotel and in a place rigged up for him at Paramount Studios. Meanwhile, word spread that the kinds of movies he made, such as Rosemary's Baby, had helped create the atmosphere for the catastrophe that had come down on him.
Before leaving for Paris, I contacted Bob Evans and Warren Beatty and Jeff Berg, the head of ICM, who is Roman's agent and friend, to see if they would approach Roman about setting up a meting. Bob Evans and I had recently made up after not speaking for many years, and he confided that he felt funny about calling Roman, because they hadn't been in touch for a while. Then Jeff Berg told me that Roman simply didn't want to talk about the murders ever again. I understood that, because I've had my own version of what happened to him. There comes a time when you just can't discuss it anymore. Although I passed his apartment in Paris, I didn't make any attempt to see him. I knew Roman slightly, but we had never been friends. Sharon was the one who was my friend, and I had met her through Jay Sebring, one of the remarkable Hollywood figures at that time. He was the first celebrity barber, and he became part of the scene. He was also part of Warren Beatty's composite character in the film Shampoo.
Jay was a wonderful guy. When he was in a good mood, he could be as funny as anyone I ever knew. I think he had a social hang-up about being a barber, feeling that it put him on a lower step than the crowd he palled around with. He craved acceptance. He lived in the house where Jean Harlow's husband Paul Bern had committed suicide shortly after they were married, and where Hollywood lore has it that Louis B. Mayer, the head of MGM, and Howard Strickling, the chief of publicity, had destroyed his suicide note before the police arrived. Paul Newman and Steve McQueen were Jay's special buddies. They all loved motorcycles. Jay used to get himself up in leather, and an expression of bliss would come over his face when he was gripping the handlebars of his motorcycle. He also drove a Porsche, in which the Police found marijuana and cocaine the morning after the murders. The first time I dropped acid, I dropped it with Jay. He brought it over to my house on Walden Drive one time when Lenny and the kids were at her mother's ranch.
Jay was credited with launching the trend of hairstyling for men. He was called a hairstylist, never a barber. Practically every male movie star in town went to him. He brought out his own line of products. He hired a wigmaker in the San Fernando Valley named Ziggy Geikke, who turned out some of the best rugs in the movie business. Jay had a private room for his steady clients so that they wouldn't have to be seen by the other customers I had a regular appointment every third week, and it was in that room that I met Sharon Tate. She would often be sitting there in a chair, just to be with Jay as he worked. She looked so young that I thought at first she was coming there after school she wore her blond hair straight and long. She was quiet and friendly and smiled a lot at our conversations. Jay was so proud of her. He couldn't stop looking at her. It was as if he couldn't believe he had a girlfriend that beautiful I've never seen a guy more madly in love than Jay was with Sharon.
Sharon wanted to be an actress in the worst way. God knows, she was pretty enough, and one day her big break came. She got a part in a picture called Eye of the Devil, starring David Niven and Deborah Kerr, in which she played a French country girl with the powers of a witch. Sharon was ecstatic, and Jay was ecstatic for her. The movie was being shot in England, and before Sharon left, we drank champagne in Jay's private room and wished her well. What none of us knew that day was that we were seeing the end of Sharon and Jay. In England she met and fell in love with Roman Polanski, who directed her in The Fearless Vampire Killers and co-starred opposite her. Charles Champlin of the Los Angeles Times described her as "a visual adornment" to Polanski. Jay was devastated by the turn of the event. It was painful to see his sadness over losing Sharon.
I lost track of Sharon for a while after that. She made several films, the most important being Valley of the Dolls. In January 1968, she and Roman got married at a London registry office. When they came back to Beverly Hills, they rented the rambling ranch-style house at 10050 Cielo Drive. The owner of the house was Rudi Autobelli, a personal manager for film stars. Terry Melcher, Doris Day's son, had lived there with Candice Bergen before Roman and Sharon. It would soon become a famous party house.
One night in 1969, I was at a party at Tony Curtis's. Tony had fantastic taste in art and furnishings. The first Balthus painting I ever saw was in his house. He had two of them. In those days he lived in a beautiful Mediterranean villa just off Sunset Boulevard in Holmby Hills. Next to Tony lived Jayne Mansfield, in her pink palace with the heart-shaped swimming pool. Tony was recently divorced from his second wife, the German film star Christine Kaufmann, and had just married the beautiful model Leslie Allen. His rose garden was lovely. As I remember it all these years later, there were gravel pathways between the beds of roses and boxwood borders. At one point that night, I went out into the garden, and there was Sharon, all alone, walking on a path by the white roses in full bloom. She was pregnant, and dressed in something white and billowing. It was like a scene in a movie, watching her. She made me think of Daisy Buchanan in The Great Gatsby.
Since she had become Mrs. Polanski, I hadn't seen her as much as I had when she was with Jay. We talked about old times at the barbershop and the marvelous turns her life had taken. I was smoking a joint, and she took a few tokes. Everybody smoked joints back then. It was no big deal. She was joyous about having the baby, and she had never looked more beautiful. She spoke with fret affection about Jay, and told me that he had become a family friend to her and Roman. There were rumors that all was not well in her marriage, but no such thing came up in our conversation. The baby seemed to be the solution to everything. I have always remembered that little interlude, because it was the last time I ever saw her. As always, she was dear, sweet, and utterly nice. After a while we went back in to the party.
William Tennant, who was Sharon's agent, had the horrible task of identifying the bodies. He was close to Roman and Sharon, and Jay cut his hair. He was playing tennis that Saturday morning when he heard about the murders. He got to Cielo Drive around noon, still wearing his tennis whites. After identifying Sharon, Jay, Abigail, and Voytek, he broke down and sobbed. Then he called Roman Polanski in London and broke the news to him. Bill was a handsome young guy who would later become an executive at Warner Bros. Popular about town, he was a regular at the Daisy. We had a mutual friend in a doomed Hollywood agent named Billy Belasco. Billy died in an automobile crash on Sunset Boulevard after he let the waiter he'd picked up at the Palm Restaurant drive his Jenson convertible 80 miles an hour when they were both allegedly on Quaaludes it happened the night before the memorial service Billy was going to host at his house in Bel Air for Sal Mineo, who had been stabbed to death in a garage. Billy was that kind of doomed.
They say William Tennant was never the same after identifying the bodies. Jay had been stabbed and shot. Sharon had been stabbed 16 times, and her baby died in her womb. Whenever I saw him, I wanted to ask what it had been like, but Tennant never talked about it, and I never had the nerve to bring it up. Even 32 years later, he declined to appear on the E! channel film about Sharon Tate and her death.
In the years before Jay was killed, he had been training a young apprentice named Joe Torrenueva to style hair in the manner he had created, as well as to run his ever-expanding business in hair products for men. Joe was the first person I called after I heard about Jay's death. I could hear the grief in his voice. Joe had always understood what a unique character Jay Sebring was, with his own special place in the world of the famous. Today, Joe has a shop in Beverly Hills called Torrenueva, where he caters to a lot of big names in the film and television worlds, many of his customers, like me, used to be Jay's clients, so there's a long history. These days I live on the opposite coast, but every time I'm in Los Angeles, I go and have a haircut with Joe, in his private room. He shows me pictures of his grandkids, and I tell him about my granddaughter, but we always end up talking about Jay. He was a part of our lives that we shared.
The fame Jay craved came to him by way of his death, not his life. He and Sharon were sitting on her bed talking when the killers burst into the room. Jay, lean and trim, could have held his own in any fight, but knives and guns were something else. They got Jay first. Right up to the last moment of his life, his thoughts were with Sharon. Dying, he cried out to the killers to spare her because she was pregnant. The killers didn't care.
Sharon Tate has never faded from my thoughts, either. In 1982 my beautiful actress daughter, Dominique, was murdered. As a way of dealing with our grief, my former wife and I became involved in support groups for parents of murdered children. Through one of those groups we met Doris Tate, Sharon's mother, who had become an advocate for the rights of victims of violent crimes. We found her inspirational. She had turned her loss into an effort to help people going through what she had gone through. Lenny and Doris got to know each other, and Doris brought out a fighting spirit in Lenny that I don't think Lenny knew she possessed. In time Lenny founded her own group, called Justice for Homicide Victims, and the former President Bush presented her with a meal at the White House for her work. Doris is dead now, and so is Lenny.
Watching the E! channel documentary, I was particularly struck by the footage of Doris Tate at the parole hearing for Tex Watkins, who, along with Susan Atkins, had killed Sharon and her unborn child. Doris was there to prevent Tex from ever being granted parole. Oh, boy, was she tough as she spoke directly to him: "What mercy, sir, did you show my daughter when she was begging for her life? Are those …victims…going to walk out of their graves when you get paroled? When will I come up for parole? Can you tell me that?" on and on she went. No crying, no hysterics, just tough, straight talk, laced with contempt. You could see only a side angle of Tex Watkins's face, but I saw shame on it.
I had tears running down my cheeks. "Go, Doris, go!" I yelled at the TV set.
Note: Photos above are from the Vanity Fair issue, and there is one of Dunne with Liz Taylor early in the 1970s, I found a photo of Dunne's beautiful daughter and added it, along with another of Dunne as a journalist and Doris Tate with a photograph of Sharon.


text:
Check out this behind-the-scenes look at how True Blood's special FX team does what they do.
Search site
Recent Posts
Blog Stats
- 112,712 hits
Alexander Skarsgard's BirthdayAlexander Skarsgard's 37th BirthdayAugust 25th, 2013Happy Birthday, ASkars!
Eric Eric Eric Blog Anniversary!Eric Eric Eric Blog Anniversary!January 30th, 2013The anniversary of the day that MyVikingBoyfriend started Eric Eric Eric
MyVIKIBoyfriend blogIn addition to my True Blood love for Eric Northman, I also have an addiction to Korean, Taiwanese and other Asian dramas because of the romance, the humor and the HOT guys! If you're interested in my thoughts on that genre, check out my other Wordpress blog,MyVikiBoyfriend.wordpress.com.

subset: commoncrawl


text:
Chapter 0000: Network Basics
I began my education at a very
early age in fact, right after I left college.
Home - Table Of Contents - Contact Us
CertiGuide for Network+ (http://www.CertiGuide.com/netplus/) on CertiGuide.com
Version 1.0 - Version Date: November 7, 2004
Adapted with permission from a work created by Tcat Houser and Helen OBoyle.
CertiGuide.com Version © Copyright 2004 Charles M. Kozierok. All Rights Reserved.
Not responsible for any loss resulting from the use of this site.


text:
Todd Bowles has landed on his feet with the Arizona Cardinals.
NFL.com's Ian Rapoport reported Saturday that Bowles has agreed to become the Cardinals' defensive coordinator, according to a team source.
Bowles, who served as the Philadelphia Eagles' defensive coordinator under Andy Reid last season, will replace Ray Horton, who was let go by the team this week. Horton landed the Cleveland Browns' defensive coordinator job on Friday.
In terms of defensive coordinator jobs, you could do worse than the Cardinals. Arizona finished 21st in total defense last season, but possesses some pieces. The Cardinals' woeful offense did the defense no favors either, leading to poor field position and time-of-possession issues.
Bowles gives new coach Bruce Arians the fresh start on defense he spoke of during his introductory news conference. Arians cited Horton's pre-existing relationship with Cardinals players as a reason for deciding to go in a different direction.
"It needed to be a football team that was directed by me," Arians said Friday. "And any time there's carry over, you don't want guys being able to go somewhere else to voice their opinion."
Cardinals players could obviously still go elsewhere if they choose, but a fresh face perhaps lessens that chance.
Follow Dan Hanzus on Twitter @DanHanzus.


text:
ESPN's Bill Simmons is a big Boston Celtics fan and was upset that coach Doc Rivers left his team to join the Clippers.
During the NBA Draft broadcast last night, Simmons said that Rivers quit on the Celtics, and was being disingenuous by not fessing up to the match that he wanted out of Boston before they entered full rebuilding mode.
In an incredibly awkward minute of TV last night, Rivers told an ESPN sideline reporter, "I would like to call him an idiot but I'm too classy for that. That's just his opinion, that didn't happen. He really need to know the whole truth, which he doesn't."
The cameras cut back to Simmons, who said, "The truth keeps changing ... When he sticks to a story I'll believe the truth."
Here's the video. There are long pauses of awkwardness ( via USA Today):


text:
As ESPN's Longhorn Network commemorates the first anniversary today and prepares to televise Texas' first two football games of 2012, the company's distribution chief says talks are continuing with cable and satellite groups – and that it took four years for other ESPN properties to reach "critical mass" in audience availability.
David Preschlack, ESPN's senior vice president for affiliate sales and marketing, said that despite suggestions to the contrary, ESPN is talking "to everybody," including Comcast and Time Warner Cable, about picking up the channel devoted to University of Texas sports.
He also indicated that the company will continue to hold a firm line regarding pricing and levels of distribution and that ESPN wants any deals with major distributors to be "in line" with deals already in place with smaller carriers.
"We're happy that we have the distribution that we have, but we're clearly not satisfied," Preschlack said. "These things take time. It took four years to get ESPN3 and ESPNU to critical mass. I'm not telling you it will take four years to get to critical mass for LHN."
Preschlack referred to "mischaracterizations" that talks regarding LHN were not ongoing and added, "We're talking to everybody, including Time Warner and all the big players. … There is nothing more important that I'm working on."
"We are trying to secure distribution agreements exactly in line with the deals we've already cut in the marketplace," he said.
LHN's agreements with smaller carriers, including Grande Communications in Central Texas, and its one national carrier, Verizon FiOS, which is not available in Houston, include LHN in their digital basic or expanded basic tiers.
Larger carriers are believed to be willing to offer the network on their sports packages, which have dramatically smaller distribution levels, but ESPN prefers wider availability.
Preschlack said he would not comment on "the level of negotiations" with any carrier.
"The product is great, and if not for LHN, 90 percent of it would not be able to be seen," he said. "I understand we have some work to do, and when we get to the end, we will be providing a tremendous service to Longhorns."
Longhorn Network, a 20-year, $300 million partnership between ESPN and the University of Texas, debuted on Aug. 26, 2011, with availability in about four million households. The channel will air Texas' season opener against Wyoming on Sept. 1 and its Sept. 8 game against New Mexico.


text:
[Look for the podcast play button below.]
Today I have the distinct pleasure of introducing you to an artist, a legend and an icon. My guest is the one and only BEAU! Before there was the proliferation of talented gay artists we enjoy today, there were a handful of pioneers who challenged convention and broke new ground with their lusty homoerotic images. Beau is one of those pioneers.
Today's show is the latest installment in this series of interviews called The Erotic Mind. These conversations with noted erotic artists, like BEAU, help us understand something of the creative process involved in this specialized art form.
Be sure to check out BEAU's beautiful and seminal artwork and see why he is responsible for launching an entire genre gay male erotica. You can find his work HERE or on his publisher's site HERE.
BEAU and I discuss:
- When, how and why his alter ego — Beau.
- Being an erotic painter, not an erotic illustrator.
- The terrible accident that ended Beau's painting career.
- His models and how he worked with them.
- Putting his soul and breathing life into his work.
- His turn to photography.
- The life of an artist.
See a slideshow of some of BEAU's work. Click on the thumbnails below.
Check out The Lick-A-Dee-Split Connection. That's Dr Dick's toll free podcast voicemail HOTLINE. Don't worry people; no one will personally answer the phone. Your message goes directly to voicemail.
Got a question or a comment? Wanna rant or rave? Or maybe you'd just like to talk dirty for a minute or two. Why not get it off your chest! Give Dr Dick a call at (866) 422-5680.
Look for all my podcasts on iTunes. You'll find me in the podcast section, obviously. Just search for Dr Dick Sex Advice. And don't forget to subscribe. I wouldn't want you to miss even one episode.
Today's Podcast is bought to you by: DR DICK'S HOW TO VIDEO LIBRARY
Podcast: Play in new window | Download


text:
Depression - Signs, Symptoms, Treatment, and Recovery. Our Fairfax, VA Center specializes in treating with Co-Occurring Eating Disorder.
Depression occurs in approximately half of women who meet the criteria for anorexia nervosa. Eating disorders can result in a severely malnourished state, which can lead to physiological consequences such as poor mood states or feelings of worthlessness, which can lead to depression. Alternatively depression itself can result in eating disorders such as anorexia nervosa, binge eating disorder and bulimia nervosa.
Eating disorders are triggered by severe underlying stress and many individuals use disordered eating behaviors such as binging and self-induced purging as ways to self-treat their depression however these poor coping behaviors are known to worsen the depression while causing extreme harm to the body. For example, life stressors, like the demands of puberty, the death of a loved one, a divorce and physical or sexual abuse, can lead to depression. For many individuals, eating disorders are a way to exercise control over a life that's become unmanageable. Ritualistic eating patterns and extreme weight loss can become a poor coping mechanism to suppress overwhelming emotional pain associated with depression.
Anorexia nervosa and depression are known to certain neurological factors, which include the following:
· High levels of cortisol, a hormone that the body produces in stressful situations
· Low levels of serotonin, a hormone that's responsible for mood regulation
· Low levels of norepinephrine, a neurotransmitter that plays a role in emotions and moods
· High levels of vasopressin, which has also been linked with obsessive-compulsive disorder
Because of the complex nature of depression and eating disorders and the overlapping factors of both, it is critical to treat both conditions simultaneously. In addressing underlying factors that are contributing to the progression of eating disorders and depression, it may be discovered that both stem from similar causes; thus the importance in caring for both. Cognitive behavioral therapy, developing positive coping skills and anti-depressant medications are well-known treatment approaches for individuals with depression and eating disorders.
Treatment for this disorder consists of a combination of medications and psychotherapy. Although studies have shown that these medications and psychotherapy approaches can be used alone for mild depression, when used in combination, individuals receive the best outcomes in terms of symptoms relief for moderate depression. The most common pharmacological treatments include antidepressant classes such as selective serotonin reuptake inhibitors (SSRIs), serotonin/norepinephrine reuptake inhibitors (SNRIs), atypical antipsychotics, and tricyclic antidepressants (TCAs). Medication generally takes approximately 6-8 weeks for results to take effect. Psychotherapy includes cognitive behavioral therapy, interpersonal therapy, problem solving therapy and mindfulness-based cognitive therapy.
An antidepressant medication is usually the first-step in the treatment plan for an individual with mild to moderate depression. There is a vast array of medications available and the initial selection often depends on the known medication side effects, safety and tolerability of these side effects, duration of timing it takes for the drug to work, an individual's response to prior antidepressant medications, cost of the medication, interactions with other medication and the individual's preference. Antidepressants take two-six weeks, at the correct dosage, for a clinical response to occur and therefore it is imperative individuals stay motivated and compliant during this time period. Additionally, psychotherapy can be initiated at the start while these medications take their time to produce clinical effects. The following are classes of antidepressants widely used in the general population to treat it:
Our Fairfax, VA Recovery Treatment include Cognitive behavioral therapy and interpersonal psychotherapy are the two most common therapy approaches to treating depressive disorder. Cognitive behavioral therapy focuses on reducing depressive symptoms by recognizing the thought the irrational thought patterns, emotions, beliefs and distorted attitudes toward oneself and their environment that results in symptoms of it. Once the recognition of maladaptive thoughts occurs, an individual can then work on their behavioral patterns to turn these negative symptoms around into positive outlooks, and gain insight and self-appreciation in order to develop behavioral techniques such as self-control therapy, problem solving, and social skill training. Interpersonal psychotherapy focuses on acknowledging the triggers associated with depression such as the loss of a loved one, a stressful social situation, the loss of a job, financial burdens, social isolations or the loss of a romantic relationship. In this form of therapy, depression is viewed as a medical illness and the illness is the cause of the depression. Techniques that involve building relationships, learning coping mechanisms and developing conflict resolution skills can help diminish these triggers and form positive insight in future conflicts. Other forms of psychotherapy that have been implanted to treat it include the following:
Our Fairfax, VA - Center For Discovery Residential Treatment Center specializes in treating Depression and Co-Occurring Eating Disorders with customized treatment for the individual to get well on the way to his/her eating disorder recovery.
For more information, resources, or to consult with an eating disorder treatment specialist, call 631.593.0039


text:
I'm using iscsi-initiator-utils successfully to use some iscsi devices on CentOS 5, and I have some symlinks created by udev in /dev/disk:
# ls -l /dev/disk/by-path/ip-* /dev/disk/by-id/scsi-*
lrwxrwxrwx 1 root root 9 Sep 29 15:41 /dev/disk/by-id/scsi-14f504e46494c45006779706e4d772d746d36582d6869556e -> ../../sdb
lrwxrwxrwx 1 root root 9 Sep 29 15:41 /dev/disk/by-path/ip-192.168.20.149:3260-iscsi-iqn.2006-01.com.openfiler:tsn.0a16ba8cb6c9-lun-0 -> ../../sdb
I know that the by-path one is the IQN of the device, and I presume that the by-id one is a SCSI device identifier.
I would like to know how to get these values myself from e.g. /dev/sdb.
scsi_id -g /dev/sdb returns nothing.
(I know I could map symlinks back and scrap the IDs from the filenames, but that would be redundant: udev is getting those IDs from somewhere, and I'd like to know where).


text:
This question already has an answer here:
If you invent a new word, how do you go about getting this recognised as a real word in dictionaries?
Stack Exchange network consists of 176 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.Visit Stack Exchange
This question already has an answer here:
If you invent a new word, how do you go about getting this recognised as a real word in dictionaries?
This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.
Words are added to a dictionary on the basis of their usage. Before it gets into the dictionary, the word is carefully monitored to see if people use it often and how they use it (context).
Here is a link to an article that explains how a word is added to the Merriam-Webster dictionary.
I would say that any word is a "real" word if it is in some sense established and those using it have a shared concept of what it means. Whether particular dictionaries decide or not to include that word is their problem; it doesn't affect the reality or non-reality of that word. After all, the human species was speaking languages for thousands of years before the first dictionary was invented...
As for the question of on what criteria particular dictionaries decide to include words, this is really specific to the dictionary in question. In more technical dictionaries, or technical words in general dictionaries, it is usually a question of which words the consultant(s) decide ought to be included. For more general language, there's often a sense that some number of clear, attributable examples must be available (so an example where it is clear that the word is in some kind of "mainstream" use, and where its meaning is clear from the context).
If you have coined/come across a word that is in some kind of "accepted" use and you think ought to be included in a particular dictionary, you could always contact its editors with your examples.
How you go about getting it into a dictionary is simple: write your own dictionary. ;-)
Seriously, it's simply that you don't "go about getting it recognized". You get it used by others. The more, the merrier... and finally, the Merriam(-Webster).
You can't do anything other than getting it out there, getting it used. Nobody said it'd be easy, you know.


text:
How to reset the Administrator password in DOORS when it has been lost
Technote (FAQ)
How do you regain access to IBM Rational DOORS if the Administrator password has been lost?
The option to change your password requires logging in to DOORS as Administrator.
When this information is lost or forgotten you will need to contact your DOORS support team to reset the password credentials.
To reset your password: you need to start DOORS in a mode that generates a keycode that you send to support who will use it to generate a one time password to log in.
WARNING: Do not use this procedure when your database properties has System Usernames enabled. It is strongly recommended you perform the procedure while working with a support engineer because keycodes and passwords are session specific and can not be reused.
Starting Rational DOORS with the command-line switch you generate a key that will help you to log in.
Note: Database administrators can control users ability to reset the administrators password.
Information regarding authorized user control is discussed in the note below.
Steps to reset Administrator password
- Create a shortcut for DOORS.exe file on your desktop
- Right-click the shortcut and open the properties
- Go to the SHORTCUT Tab of the Properties dialog box
- At the end of the Target line left click after the closing quote
- Hit the Space Bar once then add -otdbpw ""
"C:\Program Files\IBM\Rational\DOORS\9.3\bin\doors.exe" -otdbpw ""
Note: Rational DOORS administrators who want to control the authentication process to reset the Administrator password can set the database password. When the database password is set, attempts to reset the Administrators' password without this information will result in a Rational DOORS report window, with the message "invalid Password"
When the database password has been set by a DOORS administrator that value needs to be included inside the quotes at the end of the switch. This password for the database, by default,
is not set. Use the DOORS Database Server Admin tool to set the database password; this will prevent unauthorized users without knowledge of this information from resetting the Administrators password. Using this shortcut the DOORS login window will display with an additional Key field
- Starting Rational DOORS from the shortcut displays the login window with the added Key field
This encryption key information is then provided to support who will use it to generate a one time password to be used in that login window
You should not close this window; you need to type in the password provided by support
When the one time password is entered into the login window and you click OK
a dialog box is displayed with the message:
The password for user Administrator has expired, and must be changed before continuing
- Click OK to close the message window and open the Change Password DOORS dialog box
- Supply a new password that meets the requirements setup for password restrictions as defined in the database properties
Once the Administrator password is reset the shortcut can be removed or at a minimum delete the password reset switch and save the shortcut.
Legacy versions of Rational DOORS before 8.3 provided a UNIX-based client.
To reset the Administrator password on this platform:
- Start Rational DOORS and include the switch -otdbpw
doors -otdbpw port@host from $DOORSHOME/bin
- When DOORS starts a key will be returned in the login window
- Send this key to your Rational Support team exactly as it appears
Support will provide a password to log in
For Rational DOORS 5.2
Follow the steps above without the use of quotes (as no database password could be set for this version of Rational DOORS). Although information about Rational DOORS 5.2 is included here, this version is no longer available. If you are using Rational DOORS 5.2, you should upgrade to a supported version as soon as possible in order to receive support.
Related information
How to disable System Usernames without DOORS login
Document information
More support for:
Rational DOORS
General Information
Software version: 8.3, 9.0, 9.1, 184.108.40.206, 9.2, 184.108.40.206, 220.127.116.11, 18.104.22.168, 18.104.22.168, 188.8.131.52, 9.3, 184.108.40.206, 188.8.131.52, 188.8.131.52, 126.96.36.199, 22.214.171.124, 126.96.36.199, 184.108.40.206, 9.4, 220.127.116.11, 9.5, 126.96.36.199, 9.5.1, 184.108.40.206, 22.214.171.124
Operating system(s): HP-UX, Linux, Solaris, Windows
Reference #: 1324457
Modified date: 04 November 2013


text:
I asked Toby to start the poll, because I am interested in the age of the users of the kiteforum.
My age is 56 and the new world champion Aaron Hadlow could be my grandson.
So we have a wide range of riders who enjoy this sport.
Buy second hand gearthiazzz wrote:i'm wondering how young people can afford this sport. I have a normal daytime job and find it very hard to buy new gear every year...
Users browsing this forum: Bing [Bot], brnrbn, collider, Google [Bot], Mike-at-North and 16 guests


text:
Student Activities
Your time at GCC is what you make of it - so why not get involved on campus?
The Student Activities Office, located in S115 in the Student Union, has plenty of opportunity for you to get involved including:
- Over 50 Student Groups
- Student Government Association
- Campus Activities Board, which works to organize fun programs on campus
- Leadership Certificate Program
Upcoming Events
The Student Activities Office collaborates with a variety of student organizations and departments on campus to provide all GCC students fun, unique, and exciting programs and events while they are taking classes.
A complete list of upcoming events can be found on GCC's Event Calendar.


text:
Membership at Hegre.com costs
less than $0.42 a day!
When painters imagine Eve walking in the Garden of Eden it is visions of Marketa that surely spring to mind.
Naked, natural, full of expectation, Petter Hegre has captured Marketa as she strolls through the botanical gardens in the Algarve dreaming girlie dreams and reminding us why this student from Prague is one of the great assets at Hegre.com.
Would you like to comment? Join us today, or sign in if you're already a member.


text:
Loading the content...
Loading depends on your connection speed!
No products in the cart.
Shiv Bhajan by Alka Yagnik & RVM
There are no reviews yet, would you like to submit yours?
Not that bad
Very Poor
Your Review
Name *
Email *
YOGA UNION WITH GOD – The Atman in RVM sing
Shiv Bhajans – My Soul is in Love by Abhijeet Bhattacharya & RVM
Life is meaningless without God by Kavita Krishnamurthy
God Lives Within Us by Mohammed Aziz & RVM
Judaai – Bhajans by Air
Shiv Bhajans by Javed Ali & RVM
Mere Dil Mein Bas Ek Tum Hi Ho by Harshdeep Kaur & RVM
Shiv Bhajans by Anup Jalota & RVM
God Knows Everything by RVM & Sreeram Chandra
Shiv Bhajans The Sun! The Power of GOD! by Talat Aziz & RVM
Shiv Bhajans That Talk to God by Roop Kumar & RVM
God, Come… Live with me! by Sadhana Sargam & RVM
God Lives Within Us by Mahalakshmi Iyer & RVM
Shiv Bhajanas by S.P. Balasubrahmanyam & RVM
Enlightenment – The Atman in RVM Sings
Shiv Bhajans by Suresh Wadkar & RVM
Mantra for Meditation by RVM
Meditate on the Mantra
Om Namah Shivaya
For Peace and Fulfillment
Shiv Bhajans by Anuradha Paudwal & RVM
Shiv Bhajans – Talaash by Udit Narayan & RVM
I am not alone, God is with me by Shaan & RVM


text:
Oracle Application Express 3.2.1.00.10 has just been released and is available for download. The patch set can be downloaded from Metalink (search for patch# 8548651) and the full distribution is available on Oracle Technology Network.
The APEX 3.2.1 Patch Set Note lists the bugs fixed in this patch set. But there is more than bug fixes! Continue reading


text:
Traction Alopecia & Hair Growth Experts
Are you suffering hair loss due to traction alopecia? We can help. Watch the videos of her very successful hair transplant and if you would like to learn more about our hair loss solutions for black women suffering from the effects of traction alopecia. If you have questions, we'd like to answer them for you. It's a big decision and a big financial commitment to get a permanent solution to your hair loss problems. It's a free call and a free consultation. Don't delay, get the information to need to make informed hair transplant surgery choices.
Watch these videos below to see Tanya's hair transplants results beginning with procedure day, after 4 months, after 7 months and finally after 1 year.
4 Months After Her Traction Alopecia Hair Transplant
7 Months After Her Hair Transplant
1 Year After Tanya's Hair Restoration
Call NOW! 800-372-4247 to setup your FREE online consultation with your future hair transplant surgeon! ASK the DOCTOR anything about hair transplants. Get your questions answered!
Here are the top 3 reasons to choose Natural Transplants for your traction alopecia hair transplant How do surgery:
1) Our team of a highly-trained doctors and technicians all have years of experience and are dedicated to performing ONLY hair transplant procedures.
2) We guarantee that our doctors and technicians will give you 100% focus and attention during the hair restoration procedure. You are the only patient of the day!
3) Our hair transplant clinic can achieve up to 6-7 hairs per graft; significantly more than hair restoration competitors.
Top Guidelines Of Before How can and After Hair Transplants
Learn More About Our Hair Clinics | We don't recommend Hair Plugs! Find out how much How do I a real hair transplant costs by calling us on (844) 327-4247 and speak with a friendly hair transplant specialist.
Hair Transplants for Black Women
Traction Alopecia & Hair Growth Experts


text:
CBS' New Political Drama Madam Secretary Calls Téa Leoni Back Into Action
Sep 18, 2014 9:44 PM EDT
When Téa Leoni signed on to headline the new CBS drama Madam Secretary, she knew something had to give. "For me, it was cooking," she tells TVGuide.com with a laugh. "The kids hate my cooking. They totally don't appreciate it!" The push and pu… Read more


text:
A couple of times during the life of this blog, I've posted holiday shopping tips for bus chicks. (This is somewhat amusing, since I'm really, really bad at shopping, but hey.) It recently occurred to me, however, that I've never posted tips for holiday shopping for bus chicks–as in, suggestions for bus-chick-appropriate holiday gift purchases. Of course, there are always the practical options, like a sturdy, compact umbrella (with a strap and cover, of course) or a pair of cute, bus-friendly shoes (at least one young, bus-chick-loving gentleman has managed to get this right), but we've already covered those. And plus, they're pretty predictable.
[I ain't one to hawk products, but] If you're looking for something with a little more flavor, here are some transit-related gift possibilities I've come across this season:
OK, I confess: Despite their rather extreme price (that much for pajamas–really?), I actually purchased these. I needed some warm and roomy (read: tent-like) PJs to accommodate my enormous (and ever-expanding) belly. Too bad they don't come in miniature sizes. Chicklet has decided they're even cooler than her favorite dinosaur pair.
I also purchased these–to facilitate the continued expansion of said belly.
In case you're short on stocking stuffers:
Of course, if the bus chick in your life is not big on "stuff" (as I've mentioned, we transit types tend to be into conserving–both money and the earth's resources), you can't go wrong with an Orca card–with a pass or full e-purse–or a membership to her friendly neighborhood transit advocacy organization.
Happy [ahem] shopping!


text:
Panasonic Broadcast has announced the availability of the BT-LH1700W production-quality high definition/standard definition LCD monitor for studio and field applications. The lightweight 17" monitor produces exceptional color reproduction and gradation, according to Panasonic, and can be AC or DC-powered to work in virtually any environment, from the edit room to the production truck, from newsgathering to field production.
Features including two auto switching SDI/HD-SDI inputs, Waveform Monitoring, and Freeze Frame/Split Screen are all-inclusive in the affordable BT-LH1700W. The BT-LH1700W boasts Panasonic exclusives, including a high-speed response with no blurring; the industry's lowest delay realized by an image-processing circuit that converts interlaced into progressive signals with no visible delays; a Waveform Monitor that graphically displays luminance levels from zero to 110 IRE in any of the monitor's four corners; a Split Screen/Freeze Frame function for scene comparison and critical color matching (live input vs. freeze frame).
The multi-format, self-contained unit is outfitted with a 1280x768 pixel WXGA-resolution panel and faithfully reproduces up to 16.7 million colors. With selectable Color Temperature (D9300K/D6500K/D5600K; User Settable and three variable setting for high and low RGB), the monitor makes it easy to match your standard. Likewise gamma is adjustable and Cine Gamma (Film-Rec) compensation is included, specifically for monitoring with Panasonic's VariCam HD Cinema Camera. With a 3.2" depth and both rack and 75mm/100mm VESA-mountable, the BT-LH1700W is perfect for any broadcast, studio, or edit environment. It is equipped with intuitive, easy-to-use controls, including a menu that can be positioned in five different screen locations; two user-defined buttons that can be set to Waveform Monitor, Blue Only, H, V, H/V Delay, Monochrome, Aspect, Gamma and more; and preset/manual picture adjustments with indicator lights. Frame marker lines (including 4:3, 16:9, 2.35:1), or background shading at 0%, 50% or 100% can be displayed. The BT-LH1700W offers as standard dual SDI inputs with automatic switching between HD and SD.
The monitor is also equipped with one SDI output as well as a component (Y/Pb/Pr), PC RGB, Y/C and composite. It has a wide vertical and horizontal viewing angle of 176 degrees. Diagonal Line compensation reduces the occurrence of jagged noise in the diagonal direction for improved SD response. The monitor is compatible with multiple HD/SD formats including 1080/24PsF, 1080i, 720P and 480P/i.
Other features include 12-Volt 4-pin XLR input; GPI and RS-232C ports for external control of many functions; built-in, amplified stereo speakers; and a red/green tally lamp. It measures 17" W by 12.9" H x 7.9" D (measurements include stand) and weighs 17.8 lbs.
The BT-LH1700W is available now at a suggested list price of $3,400.


text:
System for packet filtering of data packets at a computer network interface
A system for screening data packets transmitted between a network to be protected, such as a private network, and another network, such as a public network. The system includes a dedicated computer with multiple (specifically, three) types of network ports: one connected to each of the private and public networks, and one connected to a proxy network that contains a predetermined number of the hosts and services, some of which may mirror a subset of those found on the private network. The proxy network is isolated from the private network, so it cannot be used as a jumping off point for intruders. Packets received at the screen (either into or out of a host in the private network) are filtered based upon their contents, state information and other criteria, including their source and destination, and actions are taken by the screen depending upon the determination of the filtering phase. The packets may be allowed through, with or without alteration of their data, IP (internet protocol) address, etc., or they may be dropped, with or without an error message generated to the sender of the packet. Packets may be sent with or without alteration to a host on the proxy network that performs some or all of the functions of the intended destination host as specified by a given packet. The passing through of packets without the addition of any network address pertaining to the screening system allows the screening system to function without being identifiable by such an address, and therefore it is more difficult to target as an IP entity, e.g. by intruders.
Latest Sun Microsystems, Inc. Patents:
The present invention relates to screening of data packets sent from one computer network to another. There are numerous ways for a user on a public network to interact with a host machine on a private network, such as in a telnet session, an ftp (file transfer protocol) session, by email (electronic mail), and so on. In addition, computers on a given target network may be requested to carry out certain operations by users outside the network, besides directly connecting the requester's machine.
A conventional internet work 10 is shown in FIG. 1, including a private network 20, a public network 30, and another private network 40. If the private networks 20 and 40 are not provided with firewalls, they are quite vulnerable to intruders.
FIG. 3 shows an internet work 110 where a private network 120 can communicate with another private network 140 via a router or bridge 120, which is controlled by logic (such as a circuit, or typically a processor with associated memory) 150 which controls network interfaces 160 and 170. When a data packet arrives from network 140 addressed to a host and specifying a port on network 120, it is mapped to that host and port by unit 180, and transmitted via interface 160 to the appropriate destination on the network 120. FIG. 3 is also not provided with any security, and hence is available for targeting.
Computer firewalls have therefore been developed, as in the system 50 shown in FIG. 2, where private networks 60 and 100 can communicate with one another via public network 80, but are provided with firewalls 70 and 90, respectively. A problem with conventional computer firewalls (and routers or bridges such as bridge 130 in FIG. 3) in use today is that they participate in IP (Internet Protocol) transactions, and in doing so generate information identifying them as IP machines, which makes them visible for targeting by intruders. For a detailed discussion of this and other types of problems with firewalls, see, e.g. the reference Firewalls and Internet Security by Cheswick & Bellovin (Addison Wesley 1994), and Internet Firewalls and Network Security by Siyan & Hare (New Riders Publishing 1995), which are incorporated herein by reference.
A firewall and packet filtering system should ideally be invisible to intruders so as to help minimize the number of ways in which it can be targeted, while nonetheless filling functions that are appropriate.
Current network security solutions often involve modifications to the networks in addition to the provision of firewalls, which can be complicated and expensive. A system is needed that can be connected to a network substantially without altering it, but providing security against breaches from outside the protected network.
Packet filtering systems are used today to provide security for networks, but conventionally act as routers, having one port or network interface coupled to the protected network and another port to another network or the Internet. As routers, such systems are responsive to IP commands, and in particular may respond to data packets by using their IP addresses. This allows intruders to target them for characterization and attack.
The same type of targeting may be accomplished when addresses within a protected network are known to users outside the network. It would therefore by advantageous to provide a system that can respond to data packets from outside a network without revealing IP address information about either the filtering system or about hosts within the network.
The present invention is directed to a screening system that acts as both a firewall in the conventional sense and a signatureless packet filtering system. A screen is positioned on the network connection between, for example, a public network and a private network that is to be protected from targeting for attack. A port or network interface is provided for each of the two networks, and one or more additional ports are provided to one or more proxy networks.
The screening system includes a packet filtering subsystem or module, which inspects each incoming packet and sends it to an engine, which determines, based upon the packet inspector and other information, what actions should be taken on the packet. The packet is passed to an actions subsystem or module, which executes the appropriate actions.
If the packet's intended destination is a host machine on the private network, it may instead be sent aside to a preconfigured host machine on the proxy network, which executes appropriate operations that the actual host would execute, or different operations as desired. The proxy host generates responses using the IP address of the actual host, so the existence of the proxy network is not detectable. The screening system is not a router and hence does not have its own IP address, so it too cannot be detected in this manner, and is not subject to such operations as trace.sub.-- route, ping, finger, and so on.
The screening system requires no modification to the private or public networks; instead, it can be connected in-line on the network connection, a proxy network can be set up with as many hosts as desired, and security is thereby provided without reconfiguring the private network or altering the network software.
The screening system can be preconfigured to carry out a wide range of other actions on the packets, all subject to predetermined criteria, such as dropping them with or without an error message, logging them, altering them or their headers, and so on. Each of these and other actions can be carried out while maintaining the anonymity of the screening system.
FIG. 1 is a block diagram of a system connecting two computer networks via a public network.
FIG. 2 is a block diagram of a system connecting two computer networks via a public network, using intervening firewalls.
FIG. 3 shows a conventional system including a bridge between two computer networks.
FIG. 4 is a block diagram of an exemplary connection from a private network and a public network to another private network, via firewalls.
FIG. 5 is a block diagram of computer internet work including a packet screening system according to the invention.
FIG. 6 is a functional block diagram of a packet screening system of the invention on an internetwork.
FIG. 7 is a block diagram of an alternative embodiment of the packet screening system of the invention.
FIG. 8 is a block diagram of hardware for implementing the invention.
FIG. 8A is a diagram of another embodiment of the invention.
FIG. 9 is functional block diagram of the invention.
FIGS. 10-11 are flow charts of the method of packet screening according to a preferred embodiment of the invention.
The Hardware of the Invention
FIG. 4 shows an internetwork system appropriate for implementation of the present invention. A public network 200 (or network of networks, such as the Internet) can communicate with a private network or internetwork 210, which includes by way of example an engineering domain network 220 and a corporate domain network 230. A conventional firewall 240 is positioned as shown between the network 220 and the networks 230 and 200. Note that the firewall may, as illustrated, be positioned between a given private network (220) and a public network (200), and also between the private network 200 and other networks (such as 210) which on its own private internetwork. The networking hardware and software can be any suitable conventional networking system, such as Ethernet.
Firewall 240 may be configured as a single machine or as separate machines, one handling the incoming data packets and the other handling the outgoing data packets from network 220, as desired by the implementer. In addition, another firewall specifically for the corporate domain network 230 would normally be used, but is not illustrated in this figure.
Any data packets transmitted from either of the networks 200 or 230 travel via connections 300 or 280 to the firewall 240, which may be conventional except in the respects noted below. Firewall 240 passes allowed data packets via connection 250 to the network 220.
Likewise, data packets from network 220 addressed to destinations within network 200 or network 230 are transmitted over connection 270 to the firewall 240, which passes packets as requested, subject to its security provisions, via connection 310 (if to network 200) or connection 290 (if to network 230). Connections 250 and 270-310 may all be conventional network connections, for example cables, fiber optics, or the like.
FIG. 5 is a logical block diagram of a packet screening system 340 of the invention that can be implemented in an internetwork system 320--which may alternatively be an internetwork such as that shown in FIG. 4; thus, firewall 240 may be replaced by the screening system 340, which is configured to handle all of the conventional firewall functions plus the screening functions described below.
In FIG. 5, a single private network 330 is shown coupled via a standard network interface 410 to the packet screening system (or simply "screen") 340. In addition, public network 350 is coupled to the screen 340 via another standard network interface 425. A third network, proxy network 430, is coupled to the screen 340 via network interface 420.
Using firewall connections such as those in FIGS. 4 and 5, any number N of private networks (which in this case may be considered to include the proxy network) may be coupled via multiple screens 340 of the invention to one another and to any desired number M of public networks. Thus, an N.times.M screening system may be formed; in the example of FIG. 5, N=2 and M=1. See also the discussion below of FIG. 8.
It is equally possible to build a system of the invention without the proxy network, where N=M=1, and where data packets would be passed through without alteration of the IP address in one or both directions, or with some alteration but without adding any IP or other network address of the screening system itself. Such a system is described below in connection with FIG. 8A.
FIG. 6 shows greater detail of the screen 340, which may be a uni- or multiprocessorbased system; in this embodiment, a single processor 390 is shown, coupled to one or more conventional memories (for example, RAM, ROM, EPROM, disk storage, etc.) 400, which store(s) the instructions necessary to execute the operations carried out by the invention. The network interfaces 410-425 are controlled by the processor 390 in conventional fashion.
The private network will typically include many different hosts: examples are a mail host 360; an ftp (file transfer protocol) host 370 for governing ftp connections; and other hosts 380 for other services, such as a WWW (World-Wide Web) server, hosts for rlogin (remote login) and rshell, and so on.
The proxy network 430 includes proxy (or virtual) hosts 435, which preferably are separate computer systems. In the preferred embodiment, the proxy network 430 includes a virtual host mirroring (or acting as proxy for) each of a subset (or all) of the hosts found on the private network 330, in a manner to be described below.
Such virtual hosts in the embodiment shown include a proxy mail server 440, a proxy ftp server 450, and other virtual hosts 460, with a virtual (proxy) host for each actual host desired to be duplicated which may include some or all of the actual hosts. The proxy hosts are "virtual" in the sense that they are not the actual targeted hosts 360-380, but rather mimic the behavior of the those hosts; but they do represent actual hardware and/or software in the proxy network.
Hosts may also be included that are unique to the proxy network. For instance, the proxy network 430 may include a WWW server 445 which is unique to the proxy server, i.e. is not merely a mirror or proxy for a WWW server within the network 330. In this case, when a user from network 350 requests a connection to http: // www.<private.network>.com, he/she will be connected to WWW server 445. Other servers 455 unique to the proxy network 430 may also be provided.
A proxy network may thus include proxy hosts representing actual hosts, and/or proxy hosts with unique servers, in any combination (zero to several of each). Whichever configuration is adopted, the private network 330 and the proxy network 430 together form a single logical or apparent network 345, i.e. a single apparent domain from the point of view of outsiders, such as users on the public network 350, so that when a user attempts to access a service or host of the private network, the request may be shunted aside to the proxy network to either a mirroring proxy host or a unique proxy host, without any indication being given to the user that this has occurred. (Note that "proxy host" may mean that it is a proxy for an actual host, or may mean that it is a host on the proxy network, albeit a unique host.)
FIG. 7 shows an alternate embodiment of the system of the invention, namely a system 325 wherein the proxy network 430 is implemented entirely in program instructions stored in the memory 400 of the screen 340, or as additional processor(s) and memory(-ies) controlled by program instructions stored in one or more of the memories. In this case, the screen 340 and proxy network 430 shown in FIG. 6 constitute separate logical entities, but not separate physical entities (except to the extent that the instructions, data, commands, signals, etc. are themselves separate physical entities). That is, the screen 340 and proxy network may be a single unit In this embodiment, the proxy hosts 360-380 are emulated by the program instructions, so that all of the behavior of any of the actual hosts may be mimicked by a virtual proxy host module. The remainder of the present disclosure is with reference to FIGS. 5-6, but should be understood as applicable as well to the embodiment of FIG. 7.
FIG. 8 is a block diagram of the hardware for implementing the system of the invention, showing additional detail of the screen 340 over that shown in FIGS. 5-6. Like-numbered elements in the drawings are alike; so it will be seen that FIG. 8 additionally shows conventional disk storage 500, and I/O (input/output) devices 510 such as a smart card, keyboard, mouse, monitor, and/or other standard I/O devices are provided, as well as other desired conventional storage or memory 520. The instructions or program modules stored in memory 400 control the operation of the screen 340.
In one embodiment, the screen does not provide conventional user-level access, e.g. does not include the standard keyboard and monitor. This is a security feature to prevent meddling with the screen's configuration. In such an embodiment the screen is administered remotely through a dedicated network port with a secret IP (or other protocol) address that responds only to communications that are authenticated, encrypted and conforming to a dedicated, special-purpose administration protocol. Such a protocol, and the encryption and authentication schemes used, may be developed and/or selected by the screen administrator.
As shown in FIG. 8, the screen 340 may include, instead of a single port 425 (as in FIG. 5) connected to a public network, multiple ports 427 may be provided and are connected to multiple public networks, respectively, and may include one or more additional ports 415 connected to other private network(s) 335. For instance, a private network 335 may be an engineering domain eng.sun.com in a company, while the private network 330 may be a corporate domain corp.sun.con within the same company. The eng.sun.con and corp.sun.con domains may communicate with one another (if desired, through an additional screen of the invention or a conventional firewall, not shown) via connection 337, and form a single private internetwork 355, while both these domains are protected against intrusions from public network(s) 350 by the screening system 340. The proxy network 430 in this embodiment includes proxies for both the eng. sun. con and corp. sun. con domains.
Thus, although in the remainder of the present discussion it is assumed that the communications in question are between a single public network 350 and a single private network 330, the features of the invention may equally well be applied to multiple private networks 330, 335 connected via the screen 340 to multiple public networks 350.
In the system 530 shown in FIG. 8A, a private network 540 is provided with a screening system 540 according to the invention, but without the proxy network. In this and the other embodiments, data packets are transmitted in either direction without alteration of their IP addresses, or alternatively with some alteration but without adding any IP or other network address of the screening system itself. The decision to alter addresses or not can be made on a packet-by-packet basis according to the predetermined criteria.
In the system of the invention (including any of the embodiments of 5-9), the source and destination addresses that are provided with the packet would thus remain (whether altered or not) the sole host identifiers or addresses associated with the packet. In an alternative to this embodiment, the screening system can substitute another network address for either the source address or the destination address (or both), where the newly substituted address is either bogus or belongs to a host other than the screening system. In either case, no network address pertaining to the screening system attaches to a data packet.
As indicated above, the screening system preferably does not even have an IP or other network address, and while it can interpret IP protocol, it is configured not to respond to IP requests. Thus, the screening system avoids detection and hence targeting by intruders.
The operation of the system of FIG. 5-6 will be discussed in detail below in connection with FIGS. 9-11, but should be understood as to apply to the other embodiments of the invention. Each of the operations, actions or functions to be executed by the system of the invention, as discussed above and hereinafter, may be implemented as program instructions or modules, hardware (e.g. ASICs or other circuitry, ROMs, etc.), or some combination thereof.
General Handling of Data Packets
In FIG. 6, when a data packet arrives from the public network 350 addressed to one of the hosts or servers 360-380, it is intercepted by the screen 340. Such a packet typically will include a source address, a destination address, a requested operation and/or service, and other information, such as a message (if it's email), data to be operated on, and so on.
The screen 340 includes instructions stored in memory 400 governing its control of actions to be taken on the incoming (and outgoing) data packets. These instructions include a predetermined set of criteria based upon the aforementioned contents of the data packets (source and destination addresses, type of service, or other information obtainable from the data packets), and based upon other information, such as: the time of day the packet was sent or is received by the screen; the state of the connection between the public and private networks (or the state of the connection to a particular host or service in the private network); and more obliquely obtainable information, such as whether the source address emanates from an expected (inter)network location. This may be done by determining whether the source host is in the expected domain, or it may be done by determining whether the packet arrives at a network interface expected for that packet. For instance, a packet whose source address is identified as a host on private network 330 should not arrive at network interface 425 (in FIG. 6) for the public network 350; if it does, this is an indication that an intruder may be attempting to breach the private network by masquerading as a trusted host. In this case, the screen 340 should drop the packet without reply.
Such screening criteria can be implemented by inspecting the contents of the data packets, by reference to external data (such as connection status and time of day), and by reference to predefined tables or other information useful to implement the criteria and stored in the memory 400. For instance, a table may be provided of all source addresses allowed to communicate with the network 330 correlated with the types of operations and services they are allowed to use, the times of day they are allowed to be connected or to pass packets, the expected locations for the sources (since a connection from an unexpected source may indicate a security problem), the number of times a source is allowed to commence a transaction, the total amount of time (e.g. per day or month) that a particular source is allowed to use services of the network 330, and so on.
The application of the screening criteria lead the screen 340 to take one or several predefined actions or each data packet; these actions are discussed below.
Actions To Be Taken on Packets
Actions are taken on each data packet by the screening system 340, based upon the foregoing criteria and the particular security protocol and level for that packet as determined in advance by the system administrator. For instance, it may be decided that no packets from (or to) any source that is not cleared in advance will be allowed in; in this case, packets from (or to) any other source will be dropped by the screen 340 without further action, either with or without an error message or other communication back to the sender; the sender will have no indication of what has happened to the packet, and there will be no "bounce" message.
This helps prevent attacks on the system. For instance, if a trace.sub.-- route packet is received, instead of following the normal IP procedure of responding to the packet the screen of the invention simply discards it, and the initiator of the trace.sub.-- route command cannot in this way detect the screen.
Topology hiding, i.e. changing the network address of the packet as it passes through the screen, can be done so that it appears that all the packets issuing from the screen come from the same host, even though they are Corning from a multiplicity of sources. This inhibits outsiders attempting to leverage off the knowledge they may gain by learning userid's, host names, etc. within the private network.
Another action can, of course, be to simply pass the packet through to its destination, with or without some alteration based upon predetermined criteria. For instance, it may be decided in advance that all packets from a given host inside private network 330 will have the userid or host ID stripped off, and the packet may be passed through with some other IP source address.
Encryption and decryption may also automatically be executed on certain data packets, with the criteria defined by the system administrator. Along with this it may be desirable to encapsulate a packet and give it a new header with a new IP address, as described for instance in applicant's copending U.S. patent application entitled "System for Signatureless Transmission and Reception of Data Packets Between Computer Networks" by Aziz et al., Ser. No. 08/306,337 filed Sep. 15, 1994, now U.S. Pat. No. 5,548,646, which is incorporated herein by reference.
Packets will normally be logged in the log file storage 640 (especially failed attempts or requests), including whatever information the system administrator decides is important, such as: time of day; source and destination addresses; requested operation(s); other actions taken with respect to each packet; number of requests to date from this source; and so on.
Packets may also be counted, so a running total of the number processed in a certain time period is kept.
Address rewriting is mentioned above; other contents of the packet may also be automatically be rewritten by predefined actions, including rewriting or otherwise altering data or messages carried by packets.
State information about the packets can also be determined, logged if desired, and altered by actions. For instance, TCP/IP (transmission control protocol/internet protocol) status can be affected as desired to establish, maintain or end a connection. In general, the screen can store information about what state each packet is in, and take actions dependent upon that state, including maintaining information about which packet was the initial request, which is the response, and so on; so prior events may have to be stored for some time, but in this case the screen can determine the entire history of a series of transactions and take appropriate actions at each time.
An important action for security purposes is that of sending packets aside to the proxy network 430, which includes servers/hosts as discussed above that execute operations upon The packets as if the proxy hosts were the actual, intended destination servers. Upon execution of such operations, a proxy host may then return a given packet to the sender, i.e. send the packet off with the original sender's address as the destination. That packet will then go through the screen 340, which will subject it to the predetermined inspection criteria, just as when it was first received at the screen from, for instance, public network 350. The criteria will typically have different results for packets emanating from the proxy network 430 or the private network 330; for instance, it may be decided that no hosts outside the public network may institute telnet sessions to the private network, but that hosts inside the private network tray institute telnet sessions to hosts outside the private network.
The fact that the screening system has no network address (EP or otherwise) enables it to carry out its security functions anonymously; notably, it does not act as a conventional network bridge. If the screen 340 provided the functions of a bridge, it would have to respond to IP commands, and hence would be detectable and targetable.
The proxy network has the additional advantage of preventing outsiders from ever actually entering the private network 330; once a user has been allowed access or a connection to a private network, it is much more difficult to restrict his/her actions than if no access at all is allowed. By provided duplicate or mirrored proxy functionality of some of the services of the private network in the proxy network, and/or functionality of unique host or other services (hardware and/or software) in the proxy network, the outside user's requests are met while invisibly preventing him/her from ever actually accessing the private network.
In addition, it may be decided that no such sessions may be instituted at all from within the proxy network, which might compromise security of the private network, since packets from the proxy network in general will otherwise have lower hurdles to overcome to be retransmitted by the screen, since they will be more "trusted" by the system. Allowing the proxy network to initiate TCP sessions might allow a intruder from outside the system to effectively bypass the firewall security if he/she can figure out how to cause the proxy network to institute a TCP session instead of having to do so from the public network.
It may be desirable to allow certain connections to be established from the private network to the public network, but not vice versa. For instance, TCP sessions (such as telnet or ftp) may be initiated by a user within the private network 330 to the public network 350, while blocked from any public network machine to the private network.
In general, all actions taken by the proxy network will pass the packets without identifying the proxy network or any host in it as a separate IP entity. Thus, the packets will, upon being passed or returned after processing, either appear actually to have been processed by the specified destination host (when in fact the proxy host has handled it), or they will be processed to remove, alter, or otherwise obscure the destination address (which is the source address for return packets). In either case, no IP address for the proxy host exists, and none is appended to any packets.
Functional Architecture of the Screening System
FIG. 9 is a functional block diagram corresponding to FIG. 8, but showing the functional modules that are used by the screen 340. In the preferred embodiment these modules are, as indicated above, program instruction modules stored in memory 400 and executed by processor 390.
The modules shown in FIG. 9 include a packet inspector 600 with a process 602-606 for each of the network interfaces 410-425; an engine 610 with rules 620; actions 630 and a log file storage 640; a packet state table 650, which is a conventional hash table; a cache fragmentation module 670 (along with a fragmentation bypass as shown); a packet fragmentor 660 coupled to each of the network interfaces 410-425; and a learning bridge table 680. The connections shown in FIG. 9 refer to logical (software) instructions or hardware instructions or both, depending upon the particular physical implementation of the invention.
The packet inspector 600 includes the instructions for inspecting the contents of the incoming packets based upon the criteria discussed above. That is, each incoming data packet, wherever it comes from, is subjected to packet inspection by the packet inspector 600.
The engine 610 processes incoming packets, and passes them to the actions 630 to execute the appropriate operations on the packets, as discussed above. The actions modules 630 are the modules dedicated to performing these operations.
The log file storage 640 is used to store information about the data packets received at the screen 340, as discussed above. The packet state table 650 is similarly used to store information about states of the received packets.
The fragmentor 660 operates in a conventional manner to fragment packets that are larger than a predefined maximum transmission unit (MTU). This may occur, for instance, where the screen adds information to a packet so as to increase its size past this allowable maximum. A fragmentation cache 670 is used in conventional fashion to implement fragmentation and reconstruction of packets. Fragmentation packets typically include primarily or only an IP header information and data (in particular, no port number is included), and the screen 340 will rebuild the packets as necessary, using the fragmentation cache. That is, the first fragmented packet is stored in the fragmentation cache, as are subsequent fragments, until the last fragmented packet is received, and the packet is then reconstructed.
The fragmentation bypass 675 is used by the packet inspector to bypass the engine operation for fragmented packets for which information is found in the fragmentation cache 670. Thus, when fragmented packets that second or later in the series of fragmented packets are received, this is detected when the packet inspector 600 checks the fragmentation cache 670. In such a case, the newly received fragmentation packet is sent via bypass 675 to the actions 630, rather than via the engine 610.
The learning bridge table 680 allows the screen 340 to act as a conventional learning bridge, i.e. to keep track of which hosts are on which side of the screen, and maintain tables of this information as packets arrive from one host or another at each of the screen's ports (network interfaces).
Operation of the Screening System
FIGS. 10-11 are flow charts showing a preferred embodiment of the method of the invention. When a packet is sent by a host on, for instance, public network 350, it is received at port (interface) 425 of the screen 340. See box 800 in FIG. 10. The packet inspector inspects the contents of the packet as described above (box 810).
If the packet is to be rejected, it is efficient to do this by using the learning bridge table (of source addresses) 680.
One embodiment suitable for implementing packet inspection is shown in the flow chart of FIG. 11, though many variations are possible. In this exemplary flow chart, upon receipt of the packet (box 900), each of the packet headers is inspected in order (box 910), i.e. the physical link (such as IP); the IP header (is it TCP?); the TCP header (as to which port is designated and whether it's an existing or a new connection); and so on.
At box 920 and 940, negative determinations lead to box 930 for appropriate actions; positive determinations lead to box 950, where the designated port is determined, and then to box 960, where it is determined whether this particular connection is allowed, taking into account the information that the packet inspector has at its disposal, including the header information and also the packet contents, source, destination and the other information mentioned above.
If the connection is not allowed, it is blocked (box 970), but otherwise it is allowed, and then the method tests whether it is an initial connection (box 980)--if so, then at box 990 the connection is established, and at box 995 information is stored in the state table 650 (see FIG. 9) to identify the new connection. If not, then the connection is checked at box 1010, and any update information (e.g. new information about the connection) is stored in table 650.
From either step 990 or 1020, the method proceeds to box 1000, i.e. returns to box 810 in FIG. 10.
It will be appreciated as mentioned that FIG. 11 is but one embodiment of myriad possible sequences of tests and operations that may be carried out in the packet inspection phase. The operations executed of FIG. 11 may be carried out by the engine 600 based upon the results of the packet inspection (e.g. at boxes 920, 940, 960 and 980).
Proceeding to box 820 in FIG. 10, the packet is passed to the engine 610, which executes the appropriate predefined operations discussed above. Typically, for firewall/screen 340 this will involve blocking or passing the packets, where if they are passed they may be turned aside to be operated upon by a proxy host in the proxy network 430.
The current packet is thus passed to the actions module 630 for execution of the appropriate actions (box 830), and at box 840 the engine determines whether there are additional actions to be taken, based upon the packet inspector results and its own determination of which actions were appropriate to take. On the first pass through for a given packet, there will be at least one action to take (even if it is only one action, e.g. to drop the packet without further action); so the first time through, box 840 will lead to box 850, where the first action is taken.
The method then proceeds back to box 830, and this loop is completed until all actions determined by the engine have been taken by the actions module. At this point, box 840 leads to box 860, where the screen 340 determines whether there is another packet at one of its input ports (network interfaces). If so, the method begins anew at box 800, and if not, then the method ends at box 870. It may recommence any time a new packet is received.
1. A method for inhibiting targeting of an addressless screening system coupled between a first computer network and a second computer network, including the steps of:
- receiving at the addressless screening system at least one data packet directed from the first network to the second network, the data packet including a source address identifying the first network and a destination address identifying the second network, said addressless screening system being independent of the first computer network;
- inspecting the packet based upon a predetermined criterion;
- if the predetermined criterion is met, passing the packet through to the second network; and
- if the predetermined criterion is not met, then discarding the packet while preventing any response by the addressless screening system to the first network.
2. The method of claim 1, wherein the step of inspecting based upon predetermined criteria includes the step of inspecting at least one of the source address, destination address, source port and destination port for the first data packet.
3. The method of claim 1, wherein the step of inspecting based upon predetermined criteria includes the step of inspecting a type of the requested operation.
4. The method of claim 1, wherein the step of inspecting based upon predetermined criteria includes the step of inspecting a state of the connection between a source in the first network and a destination in the screening system.
5. The method of claim 1, wherein the step of inspecting based upon predetermined criteria includes the step of inspecting the time of day at which the operation is requested.
6. The method of claim 1, wherein the step of inspecting based upon predetermined criteria includes the step of inspecting whether the source is at an expected network location.
7. A protection system for inhibiting targeting of an addressless screening system coupled between a first computer network and a second computer network, the addressless screening system including a processor, a memory coupled to the processor and storing instruction modules executable by the processor, a first network interface coupling the screening system to the first network and a second network interface coupling the screening system to the second network, said addressless screening system being independent of the first network, the protection system including:
- a first said module configured for receiving at least one data packet directed from the first network to the second network, the data packet including a source address identifying the first network and a destination address identifying the second network;
- a second said module configured for inspecting the packet based upon a predetermined criterion;
- a third said module configured for passing the packet through to the second network, if the predetermined criterion is met;
- a third said module configured for discarding the packet while preventing any response by the screening system to the first network, if the predetermined criterion is not met.
8. The system of claim 7, wherein said second module is further configured for inspecting the packet based upon at least one of the source address, destination address, source port and destination port for the first data packet.
9. The system of claim 7, wherein said second module is further configured for inspecting the packet based upon a type of the requested operation.
10. The system of claim 7, wherein said second module is further configured for inspecting the packet based upon a state of the connection between a source in the first network and a destination in the screening system.
11. The system of claim 7, wherein said second module is further configured for inspecting the packet based upon the time of day at which the operation is requested.
12. The system of claim 7, wherein said second module is further configured for inspecting the packet based upon whether the source is at an expected network location.
Referenced Cited
U.S. Patent Documents
|March 18, 1986
|August 27, 1996
|September 24, 1996
|December 31, 1996
|Krause et al.
|February 25, 1997
|April 22, 1997
Other references
- "Firewalls and Internet Security," by Cheswick & Bellovin, Addison Wesley, 1994. "Firewall Routers and Packet Filtering," by Gary Kessler, Feb. 1995. Ip-masq.c from Linux kernel (v.2.0.27), 1994. Ip-fw.c from Linux kernel (v 2.0.27), 1994.
Patent History
Type: Grant
Filed: Feb 4, 1997
Date of Patent: Mar 2, 1999
Assignee: Sun Microsystems, Inc. (Palo Alto, CA)
Inventors: Geoffrey G. Baehr (Palo Alto, CA), William Danielson (Mountain View, CA), Thomas L. Lyon (Palo Alto, CA), Geoffrey Mulligan (Colorado Springs, CO), Martin Patterson (Grenoble), Glenn C. Scott (Mountain View, CA), Carolyn Turbyfill (Los Gatos, CA)
Primary Examiner: David L. Robertson
Law Firm: Finnegan, Henderson, Farabow, Garrett & Dunner, L.L.P.
Application Number: 8/795,374
International Classification: G06F 1338; G06F 1517;


text: I have read through the posts and didn't see any threads on this. Can anyone comment on the use of a shop vac for vacuum bagging a kiteboard? I have a 2hp shop vac. I have done some research and have read some opinions saying that it will work but the vacuum force is far lower than a regular vacuum pump. I have also read about converting tire pumps, air compressors and refrigerator pumps into vacuum pumps. Anybody have success bagging a kiteboard with a shop vac? I'm trying to avoid the $300 +/- cost of a regular pump. Thanks.


text:
Charity Intelligence has rated over 700 charities on a scale of 0 to 4 stars. Below is a list of the 4-star charities that we have found to date, based on our metrics. To see how the star ratings are calculated, please see our methodology page.
If you would like to see all of the ratings that we have completed, including all 3,2,1 and 0-star charities, please register for a subscription with Charity Intelligence and for an annual fee of $20, you can view and compare all ratings.
If you would like to see a charity that is not yet rated, please send us the name of the charity and those charities receiving the most donor votes will be rated.
View ratings on the charities in our database. You can see a list of all 4-Star Charities, or to access all charity ratings become a Subscriber.


text:
Architecture Foundation
The Chicago Architecture Foundation (CAF) is a nonprofit organization dedicated to inspire people to discover why design matters. CAF presents a comprehensive program of tours, exhibitions, lectures, special events, and adult and youth education activities, all designed to enhance the public's awareness and appreciation of Chicago's outstanding architectural legacy.
Chicago Athenaeum
of Chicago
Historical Society
Institute of Architects, Chicago
Historic Preservation Agency
National Trust for Historic Preservation
Hotels of America
National Park Service Office
of Tourism
National Scenic Byways Program This website, maintained by the U.S. Department of Transportation, Federal Highway Administration, includes information on state and nationally designated byway routes throughout America based on their archeological, cultural, historic, natural, recreational, and scenic qualities. Visit the America's Byways Lincoln Highway website for more ideas.
Chicago Itinerary Home | National Register Home