text:
14:00 - 00:00 hours
07:00 - 12:00 hours
Children and extra beds
All children are welcome. There is no capacity for extra beds in the room.
WiFi is available in the hotel rooms and is free of charge.
Free private parking is possible on site (reservation is not needed).
Pets are not allowed.
Credit Cards
The property reserves the right to pre-authorise credit cards prior to arrival.
Hotels Extra Charges
13 % VAT is included. 0.50 % City tax is included.
Browse our collection of tours, activities and shore excursions. Book online now with our fast, secure and easy to use reservation system. Get discount with your coupon code by using it at the checkout page! Special offer to our site visitors!
Santorini View is operated by Atlantis Software E-Services, a reliable travel agency licensed by the Greek National Tourism Organization with registry number ΜΗ.Τ.Ε. 0206E70000659501.


text:
Toll-Free: 1-877-323-0001 Intl Phone: 1-212-219-1191
On Sale !
Whats New
Order Info
Contact Us
Shopping Cart
Advanced search
Baby Favors and Things
Favor Packaging
Favor Boxes
> Scalloped Edge Favor Boxes -Pack of 25
Baby Shower Favors
Favor Cake Kit
NEW Baby Favors
Baby Shower Favors
Baby Shower Games
Baby Shower Gifts
Unique Baby Favors
Baby Shower Decor
Baby Shower Supplies
Nursery Decor
Baby Invitations
Baby Favor Frames
Baby Favor Themes
Candle Baby Favors
Cupcake Party Favors
Edible Baby Favors
Personalized Favors
Religious Favors
Silver Baby Favors
Favor Packaging
Birthday Favors
And Baby Things
Red Tag Deals!
Your cart
Cart is empty
View cart
Orders history
Recently Viewed
No recent products.
Parcel Tracking
Privacy statement
Terms & Conditions
Rubber Ducky Mini Gable Boxes - Set of 12
Scalloped-Edge Favor Boxes - Pack of 25
Scalloped Edge Favor Boxes -Pack of 25
Detailed Images:
Scalloped Edge Favor Boxes -Pack of 25
These Scalloped Edge Favor Boxes are available in more than 30 Stardream colors plus Chocolate matte Finish and glossy white. You may also use our seals, labels and ribbons to create your own theme for an additional cost.
Box size : 3 x 2 x 4 7/8
Pack of 25
Ribbons, labels, and place cards are NOT included.
Leaves our warehouse in 3-5 business days.
Transit time not included.
Select Color
Stardream Mars - BX8204
Stardream Jupiter - BX8203
Stardream Azalea - BX8202
Stardream Rose - BX8201
Stardream Ruby - BX8213
Stardream Punch - BX8206
Metallic Alpine - BX8205
Stardream Flame - BX8209
Metallic Lilac - BX8225
Stardream Vista - BX8226
Metallic Gold Leaf- BX8222
Metallic Luster - BX8214
Stardream Gold - BX8208
Stardream Amber - BX8207
Stardream Bronze - BX8212
Stardream Copper - BX8210
Stardream Antique Gold - BX8211
Stardream Peach - BX8218
Stardream Fairway - BX8224
Stardream Serpentine - BX8223
Stardream Aquamarine - BX8221
Stardream Lagoon - BX8215
Stardream Iris Blue - BX8216
Stardream Silver - BX8220
Stadream Opal - BX8217
Stardream Quartz - BX8219
Stardream Onyx - BX8227
Metallic Cappuccino - BX8229
Metallic Pewter - BX8230
Metallic Snow - BX8228
Chocolate - BX8129
White Glossy - BX8139
Metallic Butter - BX8232
Metallic Beige - BX8231
Stardream Bluebell - BX8233
Metallic Lime - BX8234
Add to cart
Detailed images
Recommended products list
Personalized Little Peanut Glass Coaster (Set of 12)
Baby Blocks - set of 12
Optical Dots Lime Wallpaper
Send to friend
Your name:
Your e-mail:
Recipient's e-mail:
Type the characters you see in the picture. (If you do not see any picture here, please enable images in your web browser options and refresh this page):
Get a different code
Send to friend
Rubber Ducky Mini Gable Boxes - Set of 12
Scalloped-Edge Favor Boxes - Pack of 25
Copyright © 2003-2019 Baby Favors and Things
Baby Shower Favors, Birthday Gifts and Baby Gifts.
Questions? Feedback?
powered by
Olark live chat software

subset: commoncrawl


text:
|Attention: DocWiki has reached EOL and will be decommissioned January 25, 2019.
Internetwork Design Guide -- Increasing Security on IP Networks
From DocWiki
(→Privileged Mode)
|Line 416:
|Line 416:
==== Privileged Mode ====
==== Privileged Mode ====
Use the '''RW''' keyword of the '''snmp-server community''' command to provide privileged access to your routers via SNMP. The following configuration command sets the agent in the router to allow only SNMP set-request messages sent with the community string "private":
Use the '''RW''' keyword of the '''snmp-server community''' command to provide privileged access to your routers via SNMP. The following configuration command sets the agent in the router to allow only SNMP set-request messages sent with the community string "private" :
snmp-server community private RW 1
snmp-server community private RW 1
|Line 424:
|Line 424:
access-list 1 permit 18.104.22.168
access-list 1 permit 126.96.36.199
access-list 1 permit 126.96.36.199
access-list 1 permit 188.8.131.52
snmp-server community private RW 1
snmp-server community private RW 1
=== Controlling Access to Network Servers That Contain Configuration Files ===
=== Controlling Access to Network Servers That Contain Configuration Files ===
Revision as of 04:45, 25 August 2009
Network security is a broad topic that can be addressed at the data link, or media, level (where packet snooping and encryption problems can occur), at the network, or protocol, layer (the point at which Internet Protocol (IP) packets and routing updates are controlled), and at the application layer (where, for example, host-level bugs become issues).
As more users access the Internet and as companies expand their networks, the challenge to provide security for internal networks becomes increasingly difficult. Companies must determine which areas of their internal networks they must protect, learn how to restrict user access to these areas, and determine which types of network services they should filter to prevent potential security breaches.
Cisco Systems provides several network, or protocol, layer features to increase security on IP networks. These features include controls to restrict access to routers and communication servers by way of console port, Telnet, Simple Network Management Protocol (SNMP), Terminal Access Controller Access Control System (TACACS), vendor token cards, and access lists. Firewall architecture setup is also discussed.
Understanding Cisco's Approach to Network Security
When most people talk about security, they mean ensuring that users can only perform tasks they are authorized to do, can only obtain information they are authorized to have, and cannot cause damage to the data, applications, or operating environment of a system.
The word security connotes protection against malicious attack by outsiders. Security also involves controlling the effects of errors and equipment failures. Anything that can protect against a deliberate, intelligent, calculated attack will probably prevent random misfortune as well.
Security measures keep people honest in the same way that locks do. This case study provides specific actions you can take to improve the security of your network. Before going into specifics, however, it will help if you understand the following basic concepts that are essential to any security system:
- Know your enemy
- This case study refers to attackers or intruders. Consider who might want to circumvent your security measures and identify their motivations. Determine what they might want to do and the damage that they could cause to your network.
- Security measures can never make it impossible for a user to perform unauthorized tasks with a computer system. They can only make it harder. The goal is to make sure the network security controls are beyond the attacker's ability or motivation.
- Count the cost
- Security measures almost always reduce convenience, especially for sophisticated users. Security can delay work and create expensive administrative and educational overhead. It can use significant computing resources and require dedicated hardware.
- When you design your security measures, understand their costs and weigh those costs against the potential benefits. To do that, you must understand the costs of the measures themselves and the costs and likelihoods of security breaches. If you incur security costs out of proportion to the actual dangers, you have done yourself a disservice.
- Identify your assumptions
- Every security system has underlying assumptions. For example, you might assume that your network is not tapped, or that attackers know less than you do, that they are using standard software, or that a locked room is safe. Be sure to examine and justify your assumptions. Any hidden assumption is a potential security hole.
- Control your secrets
- Most security is based on secrets. Passwords and encryption keys, for example, are secrets. Too often, though, the secrets are not really all that secret. The most important part of keeping secrets is knowing the areas you need to protect. What knowledge would enable someone to circumvent your system? You should jealously guard that knowledge and assume that everything else is known to your adversaries. The more secrets you have, the harder it will be to keep all of them. Security systems should be designed so that only a limited number of secrets need to be kept.
- Remember human factors
Many security procedures fail because their designers do not consider how users will react to them. For example, because they can be difficult to remember, automatically generated "nonsense" passwords are often found written on the undersides of keyboards. For convenience, a "secure" door that leads to the system's only tape drive is sometimes propped open. For expediency, unauthorized modems are often connected to a network to avoid onerous dial-in security measures.
If your security measures interfere with essential use of the system, those measures will be resisted and perhaps circumvented. To win compliance, you must make sure that users can get their work done, and you must sell your security measures to users. Users must understand and accept the need for security.
Any user can compromise system security, at least to some degree. Passwords, for instance, can often be found simply by calling legitimate users on the telephone, claiming to be a system administrator, and asking for them. If your users understand security issues, and if they understand the reasons for your security measures, they are far less likely to make an intruder's life easier.
At a minimum, users should be taught never to release passwords or other secrets over unsecured telephone lines (especially cellular telephones) or electronic mail (email). Users should be wary of questions asked by people who call them on the telephone. Some companies have implemented formalized network security training for their employees; that is, employees are not allowed access to the Internet until they have completed a formal training program.
- Know your weaknesses
- Every security system has vulnerabilities. You should understand your system's weak points and know how they could be exploited. You should also know the areas that present the largest danger and prevent access to them immediately. Understanding the weak points is the first step toward turning them into secure areas.
- Limit the scope of access
- You should create appropriate barriers inside your system so that if intruders access one part of the system, they do not automatically have access to the rest of the system. The security of a system is only as good as the weakest security level of any single host in the system.
- Understand your environment
- Understanding how your system normally functions, knowing what is expected and what is unexpected, and being familiar with how devices are usually used, help you to detect security problems. Noticing unusual events can help you to catch intruders before they can damage the system. Auditing tools can help you to detect those unusual events.
- Limit your trust
- You should know exactly which software you rely on, and your security system should not have to rely upon the assumption that all software is bug-free.
- Remember physical security
- Physical access to a computer (or a router) usually gives a sufficiently sophisticated user total control over that computer. Physical access to a network link usually allows a person to tap that link, jam it, or inject traffic into it. It makes no sense to install complicated software security measures when access to the hardware is not controlled.
- Security is pervasive
- Almost any change you make in your system may have security effects. This is especially true when new services are created. Administrators, programmers, and users should consider the security implications of every change they make. Understanding the security implications of a change is something that takes practice. It requires lateral thinking and a willingness to explore every way in which a service could potentially be manipulated.
Controlling Access to Cisco Routers
It is important to control access to your Cisco routers. You can control access to the router using the following methods:
- Console Access
- Telnet Access
- Simple Network Management Protocol (SNMP) Access
- Controlling Access to Network Servers That Contain Configuration Files
You can secure the first three of these methods by employing features within the router software. For each method, you can permit nonprivileged access and privileged access for a user (or group of users). Nonprivileged access allows users to monitor the router, but not to configure the router. Privileged access allows the user to fully configure the router.
For console port and Telnet access, you can set up two types of passwords. The first type of password, the login password, allows the user nonprivileged access to the router. After accessing the router, the user can enter privileged mode by entering the enable command and the proper password. Privileged mode provides the user with full configuration capabilities.
SNMP access allows you to set up different SNMP community strings for both nonprivileged and privileged access. Nonprivileged access allows users on a host to send the router SNMP get-request and SNMP get-next-request messages. These messages are used for gathering statistics from the router. Privileged access allows users on a host to send the router SNMP set-request messages in order to make changes to the router's configurations and operational state.
Console Access
A console is a terminal attached directly to the router via the console port. Security is applied to the console by asking users to authenticate themselves via passwords. By default, there are no passwords associated with console access.
Nonprivileged Mode Password
You configure a password for nonprivileged mode by entering the following commands in the router's configuration file. Passwords are case-sensitive. In this example, the password is "1forAll."
line console 0 login password 1forAll
When you log in to the router, the router login prompt is as follows:
User Access Verification Password:
You must enter the password "1forAll" to gain nonprivileged access to the router. The router response is as follows:
Nonprivileged mode is signified on the router by the > prompt. At this point, you can enter a variety of commands to view statistics on the router, but you cannot change the configuration of the router. Never use "cisco," or other obvious derivatives, such as "pancho," for a Cisco router password. These will be the first passwords intruders will try if they recognize the Cisco login prompt.
Privileged Mode Password
Configure a password for privileged mode by entering the following commands in the router's configuration file. In this example, the password is "san-fran."
enable-password san-fran
To access privileged mode, enter the following command:
router> enable Password:
Enter the password "san-fran" to gain privileged access to the router. The router responds as follows:
Privileged mode is signified by the # prompt. In privileged mode, you can enter all commands to view statistics and configure the router.
Session Timeouts
Setting the login and enable passwords may not provide enough security in some cases. The timeout for an unattended console (by default 10 minutes) provides an additional security measure. If the console is left unattended in privileged mode, any user can modify the router's configuration. You can change the login timeout via the command exec-timeout mm ss, where mm is minutes and ss is seconds. The following commands change the timeout to 1 minute and 30 seconds:
line console 0 exec-timeout 1 30
Password Encryption
All passwords on the router are visible via the write terminal and show configuration privileged mode commands. If you have access to privileged mode on the router, you can view all passwords in cleartext by default.
There is a way to hide cleartext passwords. The command service password-encryption stores passwords in an encrypted manner so that anyone performing a write terminal and show configuration will not be able to determine the cleartext password. However, if you forget the password, regaining access to the router requires you to have physical access to the router.
|Although encryption is helpful, it can be compromised and thus should not be your only network-security strategy.
Telnet Access
You can access both nonprivileged and privileged mode on the router via Telnet. As with the console port, Telnet security is provided when users are prompted by the router to authenticate themselves via passwords. In fact, many of the same concepts described in the "Console Access" section earlier in this article apply to Telnet access. You must enter a password to go from nonprivileged mode to privileged mode, and you can encrypt passwords and specify timeouts for each Telnet session.
Nonprivileged Mode Password
Each Telnet port on the router is known as a virtual terminal. There are a maximum of five virtual terminal (VTY) ports on the router, allowing five concurrent Telnet sessions. (The communication server provides more VTY ports.) On the router, the virtual terminal ports are numbered from 0 through 4. You can set up nonprivileged passwords for Telnet access via the virtual terminal ports with the following configuration commands. In this example, virtual terminal ports 0 through 4 use the password "marin":
line vty 0 4 login password marin
When a user telnets to a router IP address, the router provides a prompt similar to the following:
% telnet router Trying ... Connected to router. Escape character is '^]'. User Access Verification Password:
If the user enters the correct nonprivileged password, the following prompt appears:
Privileged Mode Password
The user now has nonprivileged access to the router and can enter privileged mode by entering the enable command as described in the "Privileged Mode Password" section earlier in this article.
Restricting Telnet Access to Particular IP Addresses
If you want to allow only certain IP addresses to use Telnet to access the router, you must use the access-class command. The command access-class nn in defines an access list (from 1 through 99) that allows access to the virtual terminal lines on the router. The following configuration commands allow incoming Telnet access to the router only from hosts on network 126.96.36.199:
access-list 12 permit 126.96.36.199 0.0.0.255 line vty 0 4 access-class 12 in
Restricting Telnet Access to Cisco Products via TCP Ports
It is possible to access Cisco products via Telnet to specified TCP ports. The type of Telnet access varies, depending upon the following Cisco software releases:
- Software Release 9.1 (11.4) and earlier and 9.21 (3.1) and earlier
- Software Release 9.1 (11.5), 9.21 (3.2), and 10.0 and later
Earlier Software Releases
For Software Release 9.1 (11.4) and earlier and Software Release 9.21 (3.1) and earlier, it is possible, by default, to establish TCP connections to Cisco products via the TCP ports listed in Table: TCP Port Telnet Access to Cisco Products (Earlier Releases).
Table: TCP Port Telnet Access to Cisco Products (Earlier Releases)
|TCP Port Number
|Access Method
Telnet (to virtual terminal VTY ports in rotary fashion)
SNMP over TCP
2001 through 2999
Telnet to auxiliary (AUX) port, terminal (TTY) ports, and virtual terminal (VTY) ports
3001 through 3999
Telnet to rotary ports (access via these ports is only possible if the rotaries have been explicitly configured first with the rotary command)
4001 through 4999
Telnet (stream mode) mirror of 2000 range
5001 through 5999
Telnet (stream mode) mirror of 3000 range (access via these ports is possible only if the rotaries have been explicitly configured first)
6001 through 6999
Telnet (binary mode) mirror of 2000 range
7001 through 7999
Telnet (binary mode) mirror of 3000 range (access via these ports is possible only if the rotaries have been explicitly configured first)
8001 through 8999
Xremote (communication servers only)
9001 through 9999
Reverse Xremote (communication servers only)
10001 through 19999
Reverse Xremote rotary (communication servers only; access via these ports is possible only if the ports have been explicitly configured first)
When configuring rotary groups, keep in mind that access through any available port in the rotary group is possible (unless access lists are defined). Cisco recommends that if you are using firewalls that allow in-bound TCP connection to high-number ports, remember to apply appropriate in-bound access lists to Cisco products.
The following is an example illustrating an access list denying all in-bound Telnet access to the auxiliary port and allowing Telnet access to the router only from IP address 184.108.40.206:
access-class 51 deny 0.0.0.0 255.255.255.255 access-class 52 permit 220.127.116.11 line aux 0 access-class 51 in line vty 0 4 access-class 52 in
To disable connections to the echo and discard ports, you must disable these services completely with the no service tcp-small-servers command.
|If the ip alias command is enabled on Cisco products, TCP connections to any destination port are considered valid connections. You may want to disable the ip alias command.
You might want to create access lists to prevent access to Cisco products via these TCP ports. For information on how to create access lists for routers, see the "Configuring the Firewall Router" section later in this article. For information on how to create access lists for communication servers, see the "Configuring the Firewall Communication Server" section later in this article.
Software Releases 9.1 (11.5), 9.21 (3.2), and 10.0 and Later
With Software Release 9.1 (11.5), 9.21 (3.2), and any version of Software Release 10, the following enhancements have been implemented:
- Direct access to virtual terminal lines (VTYs) through the 2000, 4000, and 6000 port ranges has been disabled. If you want to keep access open, you can set up one-to-one mapping of VTY-to-rotary ports.
- Connections to echo and discard ports (7 and 9) can be disabled with the no service tcp-small-servers command.
- All Cisco products allow connections to IP alias devices only on destination port 23.
For later releases, a Cisco router accepts TCP connections on the ports listed in Table: TCP Port Telnet Access to Cisco Products (Later Releases) by default.
Table: TCP Port Telnet Access to Cisco Products (Later Releases)
|TCP Port Number
|Access Method
SNMP over TCP
Auxiliary (AUX) port
Auxiliary (AUX) port (stream)
Auxiliary (AUX) port (binary)
Access via port 23 can be restricted by creating an access list and assigning it to virtual terminal lines. Access via port 79 can be disabled with the no service finger command. Access via port 1993 can be controlled with SNMP access lists. Access via ports 2001, 4001, and 6001 can be controlled with an access list placed on the auxiliary port.
Terminal Access Controller Access Control System (TACACS)
Nonprivileged and privileged mode passwords are global and apply to every user accessing the router from either the console port or from a Telnet session. As an alternative, the Terminal Access Controller Access Control System (TACACS) provides a way to validate every user on an individual basis before they can gain access to the router or communication server. TACACS was derived from the United States Department of Defense and is described in Request For Comments (RFC) 1492. TACACS is used by Cisco to allow finer control over who can access the router in nonprivileged and privileged mode.
With TACACS enabled, the router prompts the user for a username and a password. Then, the router queries a TACACS server to determine whether the user provided the correct password. A TACACS server typically runs on a UNIX workstation. Public domain TACACS servers can be obtained via anonymous ftp to ftp.cisco.com in the /pub directory. Use the /pub/README file to find the filename. A fully supported TACACS server is bundled with CiscoWorks Version 3.
The configuration command tacacs-server host specifies the UNIX host running a TACACS server that will validate requests sent by the router. You can enter the tacacs-server host command several times to specify multiple TACACS server hosts for a router.
Nonprivileged Access
If all servers are unavailable, you may be locked out of the router. In that event, the configuration command tacacs-server last-resort [password | succeed] allows you to determine whether to allow a user to log in to the router with no password (succeed keyword) or to force the user to supply the standard login password (password keyword).
The following commands specify a TACACS server and allow a login to succeed if the server is down or unreachable:
tacacs-server host 220.127.116.11 tacacs-server last-resort succeed
To force users who access the router via Telnet to authenticate themselves using TACACS, enter the following configuration commands:
line vty 0 4 login tacacs
Privileged Access
This method of password checking can also be applied to the privileged mode password with the enable use-tacacs command. If all servers are unavailable, you may be locked out of the router. In that event, the configuration command enable last-resort [succeed | password] allows you to determine whether to allow a user to log in to the router with no password (succeed keyword) or to force the user to supply the enable password (password keyword). There are significant risks to using the succeed keyword. If you use the enable use-tacacs command, you must also specify the tacacs-server authenticate enable command.
The tacacs-server extended command enables a Cisco device to run in extended TACACS mode. The UNIX system must be running the extended TACACS daemon, which can be obtained via anonymous ftp to ftp.cisco.com. The filename is xtacacsd.shar. This daemon allows communication servers and other equipment to talk to the UNIX system and update an audit trail with information on port usage, accounting data, or any other information the device can send.
The command username <user> password [0 | 7] <password> allows you to store and maintain a list of users and their passwords on a Cisco device instead of on a TACACS server. The number 0 stores the password in cleartext in the configuration file. The number 7 stores the password in an encrypted format. If you do not have a TACACS server and still want to authenticate users on an individual basis, you can set up users with the following configuration commands:
username steve password 7 steve-pass username allan password 7 allan-pass
The two users, Steve and Allan, will be authenticated via passwords that are stored in encrypted format.
Token Card Access
Using TACACS service on routers and communications servers, support for physical card key devices, or token cards, can also be added. The TACACS server code can be modified to provide support for this without requiring changes in the setup and configuration of the routers and communication servers. This modified code is not directly available from Cisco.
The token card system relies on a physical card that must be in your possession in order to provide authentication. By using the appropriate hooks in the TACACS server code, third-party companies can offer these enhanced TACACS servers to customers. One such product is the Enigma Logic SafeWord security software system. Other card-key systems, such as Security Dynamics SmartCard, can be added to TACACS as well.
Simple Network Management Protocol (SNMP) Access
SNMP is another method you can use to access your routers. With SNMP, you can gather statistics or configure the router. Gather statistics with get-request and get-next-request messages, and configure routers with set-request messages. Each of these SNMP messages has a community string that is a cleartext password sent in every packet between a management station and the router (which contains an SNMP agent). The SNMP community string is used to authenticate messages sent between the manager and agent. Only when the manager sends a message with the correct community string will the agent respond.
The SNMP agent on the router allows you to configure different community strings for nonprivileged and privileged access. You configure community strings on the router via the configuration command snmp-server community <string> [RO | RW] [access-list]. The following sections explore the various ways to use this command.
Unfortunately, SNMP community strings are sent on the network in cleartext ASCII. Thus, anyone who has the ability to capture a packet on the network can discover the community string. This may allow unauthorized users to query or modify routers via SNMP. For this reason, using the no snmp-server trap-authentication command may prevent intruders from using trap messages (sent between SNMP managers and agents) to discover community strings.
The Internet community, recognizing this problem, greatly enhanced the security of SNMP version 2 (SNMPv2) as described in RFC 1446. SNMPv2 uses an algorithm called MD5 to authenticate communications between an SNMP server and agent. MD5 verifies the integrity of the communications, authenticates the origin, and checks for timeliness. Further, SNMPv2 can use the data encryption standard (DES) for encrypting information.
Nonprivileged Mode
Use the RO keyword of the snmp-server community command to provide nonprivileged access to your routers via SNMP. The following configuration command sets the agent in the router to allow only SNMP get-request and get-next-request messages that are sent with the community string "public":
snmp-server community public RO 1
You can also specify a list of IP addresses that are allowed to send messages to the router using the access-list option with the snmp-server community command. In the following configuration example, only hosts 220.127.116.11 and 188.8.131.52 are allowed nonprivileged mode SNMP access to the router:
access-list 1 permit 184.108.40.206 access-list 1 permit 126.96.36.199 snmp-server community public RO 1
Privileged Mode
Use the RW keyword of the snmp-server community command to provide privileged access to your routers via SNMP. The following configuration command sets the agent in the router to allow only SNMP set-request messages sent with the community string "private" :
snmp-server community private RW 1
You can also specify a list of IP addresses that are allowed to send messages to the router by using the access-list option of the snmp-server community command. In the following configuration example, only hosts 18.104.22.168 and 18.104.22.168 are allowed privileged mode SNMP access to the router:
access-list 1 permit 184.108.40.206 access-list 1 permit 18.104.22.168 snmp-server community private RW 1
Controlling Access to Network Servers That Contain Configuration Files
If a router regularly downloads configuration files from a Trivial File Transfer Protocol (TFTP) or Maintenance Operations Protocol (MOP) server, anyone who can access the server can modify the router configuration files stored on the server.
Communication servers can be configured to accept incoming local area transport (LAT) connections. Protocol translators and their translating router brethren can accept X.29 connections. These different types of access should be considered when creating a firewall architecture.
Setting Up Your Firewall Architecture
A firewall architecture is a structure that exists between you and the outside world to protect you from intruders. In most circumstances, intruders are represented by the global Internet and the thousands of remote networks it interconnects. Typically, a network firewall consists of several different machines as shown in Figure: Typical firewall architecture.
Figure: Typical firewall architecture
In this architecture, the router that is connected to the Internet (exterior router) forces all incoming traffic to go to the application gateway. The router that is connected to the internal network (interior router) accepts packets only from the application gateway.
The application gateway institutes per-application and per-user policies. In effect, the gateway controls the delivery of network-based services both into and from the internal network. For example, only certain users might be allowed to communicate with the Internet, or only certain applications are permitted to establish connections between an interior and exterior host.
The route and packet filters should be set up to reflect the same policies. If the only application that is permitted is mail, only mail packets should be allowed through the router. This protects the application gateway and avoids overwhelming it with packets that it would otherwise discard.
Controlling Traffic Flow
This section uses the scenario illustrated in Figure: Controlling traffic flow via the firewall router to describe the use of access lists to restrict traffic to and from a firewall router and a firewall communication server.
Figure: Controlling traffic flow via the firewall router
In this case study, the firewall router allows incoming new connections to one or more communication servers or hosts. Having a designated router act as a firewall is desirable because it clearly identifies the router's purpose as the external gateway and avoids encumbering other routers with this task. In the event that the internal network needs to isolate itself, the firewall router provides the point of isolation so that the rest of the internal network structure is not affected.
Connections to the hosts are restricted to incoming file transfer protocol (FTP) requests and email services as described in the "Configuring the Firewall Router" section later in this article. The incoming Telnet, or modem, connections to the communication server are screened by the communication server running TACACS username authentication, as described in the "Configuring the Firewall Communication Server" section later in this article.
Configuring the Firewall Router
In the firewall router configuration that follows, subnet 13 of the Class B network is the firewall subnet, whereas subnet 14 provides the connection to the worldwide Internet via a service provider:
interface ethernet 0 ip address B.B.13.1 255.255.255.0 interface serial 0 ip address B.B.14.1 255.255.255.0 router igrp network B.B.0.0
This simple configuration provides no security and allows all traffic from the outside world onto all parts of the network. To provide security on the firewall router, use access lists and access groups as described in the next section.
Defining Access Lists
Access lists define the actual traffic that will be permitted or denied, whereas an access group applies an access list definition to an interface. Access lists can be used to deny connections that are known to be a security risk and then permit all other connections, or to permit those connections that are considered acceptable and deny all the rest. For firewall implementation, the latter is the more secure method.
In this case study, incoming email and news are permitted for a few hosts, but FTP, Telnet, and rlogin services are permitted only to hosts on the firewall subnet. IP extended access lists (range 100 to 199) and transmission control protocol (TCP) or user datagram protocol (UDP) port numbers are used to filter traffic. When a connection is to be established for email, Telnet, FTP, and so forth, the connection will attempt to open a service on a specified port number. You can, therefore, filter out selected types of connections by denying packets that are attempting to use that service. For a list of well-known services and ports, see the "Filtering TCP and UDP Services" section later in this article.
An access list is invoked after a routing decision has been made but before the packet is sent out on an interface. The best place to define an access list is on a preferred host using your favorite text editor. You can create a file that contains the access-list commands, place the file (marked readable) in the default TFTP directory, and then network load the file onto the router.
The network server storing the file must be running a TFTP daemon and have TCP network access to the firewall router. Before network loading the access control definition, any previous definition of this access list is removed by using the following command:
no access-list 101
The access-list command can now be used to permit any packets returning to machines from already established connections. With the established keyword, a match occurs if the TCP datagram has the acknowledgment (ACK) or reset (RST) bits set.
access-list 101 permit tcp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 established
If any firewall routers share a common network with an outside provider, you may want to allow access from those hosts to your network. In this case study, the outside provider has a serial port that uses the firewall router Class B address (B.B.14.2) as a source address as follows:
access-list 101 permit ip B.B.14.2 0.0.0.0 0.0.0.0 255.255.255.255
The following example illustrates how to deny traffic from a user attempting to spoof any of your internal addresses from the outside world (without using 9.21 input access lists):
access-list 101 deny ip B.B.0.0 0.0.255.255 0.0.0.0 255.255.255.255
The following commands allow domain name system (DNS) and network time protocol (NTP) requests and replies:
access-list 101 permit udp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 53 access-list 101 permit udp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 123
The following command denies the network file server (NFS) user datagram protocol (UDP) port:
access-list 101 deny udp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 2049
The following commands deny OpenWindows on ports 2001 and 2002 and deny X11 on ports 6001 and 6002. This protects the first two screens on any host. If you have any machine that uses more than the first two screens, be sure to block the appropriate ports.
access-list 101 deny tcp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 6001 access-list 101 deny tcp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 6002 access-list 101 deny tcp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 2001 access-list 101 deny tcp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 2002
The following command permits Telnet access to the communication server (B.B.13.2):
access-list 101 permit tcp 0.0.0.0 255.255.255.255 B.B.13.2 0.0.0.0 eq 23
The following commands permit FTP access to the host on subnet 13:
access-list 101 permit tcp 0.0.0.0 255.255.255.255 B.B.13.100 0.0.0.0 eq 21 access-list 101 permit tcp 0.0.0.0 255.255.255.255 B.B.13.100 0.0.0.0 eq 20
For the following examples, network B.B.1.0 is on the internal network. Figure: Controlling traffic flow via the firewall router.The following commands permit TCP and UDP connections for port numbers greater than 1023 to a very limited set of hosts. Make sure no communication servers or protocol translators are in this list.
access-list 101 permit tcp 0.0.0.0 255.255.255.255 B.B.13.100 0.0.0.0 gt 1023 access-list 101 permit tcp 0.0.0.0 255.255.255.255 B.B.1.100 0.0.0.0 gt 1023 access-list 101 permit tcp 0.0.0.0 255.255.255.255 B.B.1.101 0.0.0.0 gt 1023 access-list 101 permit udp 0.0.0.0 255.255.255.255 B.B.13.100 0.0.0.0 gt 1023 access-list 101 permit udp 0.0.0.0 255.255.255.255 B.B.1.100 0.0.0.0 gt 1023 access-list 101 permit udp 0.0.0.0 255.255.255.255 B.B.1.101 0.0.0.0 gt 1023
|Standard FTP uses ports above 1023 for its data connections; therefore, for standard FTP operation, ports above 1023 must all be open. For more details, see the "File Transfer Protocol (FTP) Port" section that follows.
The following commands permit DNS access to the DNS server(s) listed by the Network Information Center (NIC):
access-list 101 permit tcp 0.0.0.0 255.255.255.255 B.B.13.100 0.0.0.0 eq 53 access-list 101 permit tcp 0.0.0.0 255.255.255.255 B.B.1.100 0.0.0.0 eq 53
The following commands permit incoming simple mail transfer protocol (SMTP) email to only a few machines:
access-list 101 permit tcp 0.0.0.0 255.255.255.255 B.B.13.100 0.0.0.0 eq 25 access-list 101 permit tcp 0.0.0.0 255.255.255.255 B.B.1.100 0.0.0.0 eq 25
The following commands allow internal network news transfer protocol (NNTP) servers to receive NNTP connections from a list of authorized peers:
access-list 101 permit tcp 126.96.36.199 0.0.0.1 B.B.1.100 0.0.0.0 eq 119 access-list 101 permit tcp 184.108.40.206 0.0.0.0 B.B.1.100 0.0.0.0 eq 119
The following command permits Internet control message protocol (ICMP) for error message feedback:
access-list 101 permit icmp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
Every access list has an implicit "deny everything else" statement at the end of the list to ensure that attributes that are not expressly permitted are in fact denied.
File Transfer Protocol (FTP) Port
Many sites today choose to block incoming TCP sessions originated from the outside world while allowing outgoing connections. The trouble with this is that blocking incoming connections kills traditional FTP client programs because these programs use the "PORT" command to tell the server where to connect to send the file. The client opens a "control" connection to the server, but the server then opens a "data" connection to an effectively arbitrarily chosen (> 1023) port number on the client.
Fortunately, there is an alternative to this behavior that allows the client to open the "data" socket and allows you to have the firewall and FTP too. The client sends a PASV command to the server, receives back a port number for the data socket, opens the data socket to the indicated port, and finally sends the transfer.
In order to implement this method, the standard FTP client program must be replaced with a modified one that supports the PASV command. Most recent implementations of the FTP server already support the PASV command. The only trouble with this idea is that it breaks down when the server site has also blocked arbitrary incoming connections.
Source files for a modified FTP program that works through a firewall are now available via anonymous FTP at ftp.cisco.com. The file is /pub/passive-ftp.tar.Z. This is a version of BSD 4.3 FTP with the PASV patches. It works through a firewall router that allows only incoming established connections.
Applying Access Lists to Interfaces
After this access list has been loaded onto the router and stored into nonvolatile random-access memory (NVRAM), assign it to the appropriate interface. In this case study, traffic coming from the outside world via serial 0 is filtered before it is placed on subnet 13 (ethernet 0). Therefore, the access-group command, which assigns an access list to filter incoming connections, must be assigned to Ethernet 0 as follows:
interface ethernet 0 ip access-group 101
To control outgoing access to the Internet from the network, define an access list and apply it to the outgoing packets on serial 0 of the firewall router. To do this, returning packets from hosts using Telnet or FTP must be allowed to access the firewall subnetwork B.B.13.0.
Filtering TCP and UDP Services
Some well-known TCP and UDP port numbers include the services listed in Table: Well-Known TCP and UDP Services and Ports.
Table: Well-Known TCP and UDP Services and Ports
|Port Type
|Port Number
File Transfer Protocol (FTP)-Data
Simple Mail Transfer Protocol (SMTP)-Email
Terminal Access Controller Access Control System (TACACS)
Domain Name Server (DNS)
TCP and UDP
Trivial File Transfer Protocol (TFTP)
SUN Remote Procedure Call (RPC)
Network News Transfer Protocol (NNTP)
Network Time Protocol (NTP)
TCP and UDP
Simple Management Network Protocol (SNMP)
SNMP (traps)
Border Gateway Protocol (BGP)
TCP and UDP
TCP and UDP
Open Windows
TCP and UDP
Network File System (NFS)
TCP and UDP
CERT Advisory
The Computer Emergency Response Team (CERT) recommends filtering the services listed in Table: CERT Advisory on TCP and UDP Services and Ports.
Table: CERT Advisory on TCP and UDP Services and Ports
Port Type
Port Number
DNS zone transfers
TFTP daemon (tftpd)
link-commonly used by intruders
TCP and UDP
BSD UNIX r commands (rsh, rlogin, and so forth)
512 through 514
line printer daemon (lpd)
UNIX-to-UNIX copy program daemon (uucpd)
Open Windows
TCP and UDP
X Windows
TCP and UDP
|Cisco recommends that you filter the finger TCP service at port 79 to prevent outsiders from learning about internal user directories and the names of hosts from which users log in.
Input Access Lists
In Software Release 9.21, Cisco introduces the ability to assign input access lists to an interface. This allows a network administrator to filter packets before they enter the router, instead of as they leave the router. In most cases, input access lists and output access lists accomplish the same functionality; however, input access lists are more intuitive to some people and can be used to prevent some types of IP address "spoofing" where output access lists will not provide sufficient security.
Figure: A host that is spoofing illustrates a host that is "spoofing," or illegally claiming to be an address that it is not. Someone in the outside world is claiming to originate traffic from network 220.127.116.11. Although the address is spoofed, the router interface to the outside world assumes that the packet is coming from 126.96.36.199. If the input access list on the router allows traffic coming from 220.127.116.11, it will accept the illegal packet. To avoid this spoofing situation, an input access list should be applied to the router interface to the outside world. This access list would not allow any packets with addresses that are from the internal networks of which the router is aware (17.0 and 18.0).
Figure: A host that is spoofing
If you have several internal networks connected to the firewall router and the router is using output filters, traffic between internal networks will see a reduction in performance created by the access list filters. If input filters are used only on the interface going from the router to the outside world, internal networks will not see any reduction in performance.
|If an address uses source routing, it can send and receive traffic through the firewall router. For this reason, you should always disable source routing on the firewall router with the no ip source-route command.
Configuring the Firewall Communication Server
In this case study, the firewall communication server has a single inbound modem on line 2:
interface Ethernet0 ip address B.B.13.2 255.255.255.0 ! access-list 10 deny B.B.14.0 0.0.0.255 access-list 10 permit B.B.0.0 0.0.255.255 ! access-list 11 deny B.B.13.2 0.0.0.0 access-list 11 permit B.B.0.0 0.0.255.255 ! line 2 login tacacs location FireWallCS#2 ! access-class 10 in access-class 11 out ! modem answer-timeout 60 modem InOut telnet transparent terminal-type dialup flowcontrol hardware stopbits 1 rxspeed 38400 txspeed 38400 ! tacacs-server host B.B.1.100 tacacs-server host B.B.1.101 tacacs-server extended ! line vty 0 15 login tacacs
Defining Access Lists
In this example, the network number is used to permit or deny access; therefore, standard IP access list numbers (range 1 through 99) are used. For incoming connections to modem lines, only packets from hosts on the internal Class B network and packets from those hosts on the firewall subnetwork are permitted:
access-list 10 deny B.B.14.0 0.0.0.255 access-list 10 permit B.B.0.0 0.0.255.255
Outgoing connections are allowed only to internal network hosts and to the communication server. This prevents a modem line in the outside world from calling out on a second modem line:
access-list 11 deny B.B.13.2 0.0.0.0 access-list 11 permit B.B.0.0 0.0.255.255
Applying Access Lists to Lines
Apply an access list to an asynchronous line with the access-class command. In this case study, the restrictions from access list 10 are applied to incoming connections on line 2. The restrictions from access list 11 are applied to outgoing connections on line 2.
access-class 10 in access-class 11 out
It is also wise to use the banner exec global configuration command to provide messages and unauthorized use notifications, which will be displayed on all new connections. For example, on the communication server, you can enter the following message:
banner exec ^C If you have problems with the dial-in lines, please send mail to helpdesk@Corporation X.com. If you get the message "% Your account is expiring", please send mail with name and voicemail box to firstname.lastname@example.com, and someone will contact you to renew your account. Unauthorized use of these resources is prohibited.
Securing Nonstandard Services
There are a number of nonstandard services available from the Internet that provide value-added services when connecting to the outside world. In the case of a connection to the Internet, these services can be very elaborate and complex. Examples of these services are World Wide Web (WWW), Wide Area Information Service (WAIS), gopher, and Mosaic. Most of these systems are concerned with providing a wealth of information to the user in some organized fashion and allowing structured browsing and searching.
Most of these systems have their own defined protocol. Some, such as Mosaic, use several different protocols to obtain the information in question. Use caution when designing access lists applicable to each of these services. In many cases, the access lists will become interrelated as these services become interrelated.
Although this case study illustrates how to use Cisco network layer features to increase network security on IP networks, in order to have comprehensive security, you must address all systems and layers.
Recommended Reading
This section contains a list of publications that provide internetwork security information.<a name="wp4065"> </a> Books and Periodicals
Cheswick, B. and Bellovin, S. Firewalls and Internet Security. Addison-Wesley.
Comer, D.E and Stevens, D.L., Internetworking with TCP/IP. Volumes I-III. Englewood Cliffs, New Jersey: Prentice Hall; 1991-1993.
Curry, D. UNIX System Security-A Guide for Users and System Administrators.
Garfinkel and Spafford. Practical UNIX Security. O'Reilly & Associates.
Quarterman, J. and Carl-Mitchell, S. The Internet Connection, Reading, Massachusetts: Addison-Wesley Publishing Company; 1994.
Ranum, M. J. Thinking about Firewalls, Trusted Information Systems, Inc.
Stoll, C. The Cuckoo's Egg. Doubleday.
Treese, G. W. and Wolman, A. X through the Firewall and Other Application Relays.
Requests For Comments (RFCs)
RFC 1118. "The Hitchhiker's Guide to the Internet." September 1989.
RFC 1175. "A Bibliography of Internetworking Information." August 1990.
RFC1244. "Site Security Handbook." July 1991.
RFC 1340. "Assigned Numbers." July 1992.
RFC 1446. "Security Protocols for SNMPv2." April 1993.
RFC 1463. "FYI on Introducing the Internet-A Short Bibliography of Introductory Internetworking Readings for the Network Novice." May 1993.
RFC 1492. "An Access Control Protocol, Sometimes Called TACACS." July 1993.
Internet Directories
Documents at gopher.nist.gov. The "Computer Underground Digest" in the /pub/cud directory at ftp.eff.org. Documents in the /dist/internet_security directory at research.att.com.


text:
|Attention: DocWiki has reached EOL and will be decommissioned January 25, 2019.
Collecting Trace and Debug Information
From DocWiki
(→Related Topics)
(→Enabling Syslog)
|Line 70:
|Line 70:
To collect trace and debug information, you must enable syslog for Cisco ER).
To collect trace and debug information, you must enable syslog for Cisco ER).
To enable syslog for Cisco ER, see the [[ # Collecting Information from Syslog |
To enable syslog for Cisco ER, see the [[ #Collecting Information from Syslog | Collecting Information from Syslog]] section.
[[Category:Emergency Responder]]
[[Category:Emergency Responder]]
Revision as of 09:52, 11 October 2010
Collecting Trace and Debug Information
When you contact Cisco Technical Support for help with a problem that you are having with Cisco ER, Cisco might request that you collect trace and debug information.
Because collecting trace and debug information will affect Cisco ER's performance, you should only turn on tracing and debugging at Cisco's request. The generated information is for Cisco's use in resolving product problems.
Use the following sections to learn about:
Enabling Detailed Trace and Debug Information for Cisco Emergency Responder
To enable detailed trace and debug information for Cisco ER, follow these steps:
Step 1 From the Cisco ER web interface, select Cisco ER Group > Server Settings.
- Cisco ER opens the Server Settings page.
Step 2 From the left column, select the server from which you need to collect debug or trace information. Cisco ER displays the settings for the server.
Step 3 Scroll down to the debug package and trace package sections and select the packages that Cisco Technical Support has requested.
The lists in each section are identical; make sure that you select the package in the list that Cisco requested. Packages selected in the Debug list generate trace information plus extra debug data. If Cisco requests that you select all packages, click Select All for the appropriate list.
The available packages include:
- CER_DATABASE—The database subsystem, covers the log information generated by the database access code.
- CER_REMOTEUPDATE—The remote update subsystem, which manages updates between servers.
- CER_PHONETRACKINGENGINE—The phone tracking subsystem, which runs the phone tracking and switch-port and phone update processes.
- CER_ONSITEALERT—The onsite alert subsystem for notifying onsite alert personnel.
- CER_CALLENGINE—The call engine subsystem, which routes and processes calls.
- CER_SYSADMIN—The system administration web interface subsystem.
- CER_TELEPHONY—The telephony subsystem, used for interactions with Cisco Unified CM.
- CER_AGGREGATOR—The aggregator module covers all Cisco ER server communication and data handling with the phone tracking engine. The module includes the search and lookup of tracked data for the subsystems like cluster, Administration, Cisco IP SoftPhone and call routing.
- CER_GROUP—The Cisco ER server group subsystem, used for communicating between servers within a group.
- CER_CLUSTER—The server cluster subsystem, used for communicating between Cisco ER groups in a cluster.
Step 4 Click Update to save and activate your changes.
- Cisco ER begins generating the requested trace and debug information.
|The traces for Cisco ER can be collected from either Cisco ER Serviceability web interface or by using the command line interface.
Step 5 When you have finished generating debug and trace information, click Clear All for each section in which you have made a selection to turn off debug and trace. Then, click Update to complete the change.
Related Topics
Enabling Syslog
To collect trace and debug information, you must enable syslog for Cisco ER).
To enable syslog for Cisco ER, see the Collecting Information from Syslog section.


text:
Egypt is exploding. More than a thousand people have been killed and thousands imprisoned in past weeks, and now it seems, ironically, that former strongman Hosni Mubarek, who ruled the country for 30 years, will be released from prison.
Egypt is exploding. More than a thousand people have been killed and thousands imprisoned in past weeks, and now it seems, ironically, that former strongman Hosni Mubarek, who ruled the country for 30 years, will be released from prison.
My heart weeps for the Egyptian people, as I have spent a lot of time there and have many, many Egyptian friends.
I remember a young boy named Mustafa helping me pick up trash, his smile wide enough to break your heart. The revolution was only a few months old, and he was celebrating being in a newly freed country by cleaning it up.
The North African Youth for Peace Conference was across the street, and upon seeing the two of us, I was asked to speak at the conference. I relished the idea of speaking to these bright young people from all over North Africa. They were determined to set their respective countries on a course of peace and democracy. And they were very optimistic.
The next day, two young children, a boy and a girl about 5 years old, helped me in my work. When we were finished, I asked them their names. "Ahmed," said the boy. But I couldn't hear what the girl said, so I leaned forward and asked again, tilting my right ear toward her so I could hear better. She quickly sprang up and kissed me on the cheek and then ran away. A woman in a nearby car, witness to the scene, laughed at the surprised look on my face. That kiss is one of my most cherished memories.
I was invited to go to Tahrir Square for a demonstration and was afraid to go. I was a foreigner, and mere months before thousands of people were killed there. Would I be killed?
When I got to the square, I was ashamed at being afraid. It was a love-in. Muslims, Christians and Jews were very publicly hugging each other. Parents with many small children were happily wandering around, completely at ease. Military people and police officers were chatting with the demonstrators. I don't even want to call them demonstrators. They were celebrators. Everyone there was celebrating the Arab Spring coming to Egypt. Mubarek was in jail, and they were free.
It came at a cost. The cost of many lives — lives of people not afraid to go to Tahrir Square even though there was a strong possibility they would die. And many did.
The crackdown and killing of peacefully protesting Islamists (I'm not talking about violent protesters here) will only radicalize them. More and more will turn to the crazy side, like the al-Qaida fanatics. In fact, al-Qaida is using the madness in Egypt to recruit more members. Killing only begets more killing. And if al-Qaida can tell someone the bullets that killed a family member were paid for by the United States, selling the U.S. as "the Great Satan" is easier.
When I look at Israel and the way it treats the Palestinians, I can see a never-ending cycle. Perhaps the one lesson Israel's leaders should have learned from thousands of years of oppression that has forged them into such a fiercely intellectual and resourceful people, is not to oppress people. And they have not learned it. Nor have the current leaders of Egypt.
"Egypt is done," a friend told me the other day. "There will never be peace there."
But one might have said that about the United States during the Civil War. Think about it. Ninety years after America shook off the shackles of English rule, this country was at war with itself. Hundreds of thousands of people died, exponentially more than have died during the troubles in Egypt. If the Civil War were to take place today, with today's weapons, how many more would die? The weapons of today can kill so much more efficiently.
As I write this, there is speculation about the U.S. suspending military aid to Egypt. The government is saying it has not suspended aid, but some political insiders say it has. Apparently the next installment is some $585 million. Will that check be sent?
I hate to think that military aid from a country that is relatively free, and knows what it's like to fight and die for that freedom, would end up providing modern weapons to kill or enslave Mustafa, or the cheek-kissing little girl and her brother, or those young people working for peace in North Africa, or the celebrants in Tahrir Square. Or anyone, anywhere.
In 1987, celebrating the 750th anniversary of Berlin, U.S. President Ronald Reagan waved at the Berlin Wall and called out to Russian President Mikhail Gorbachev. "Mr. Gorbachev, tear down this wall." The wall came down a few years later.
I am no Ronald Reagan, and I'm sure many people will write in assuring me that I am indeed no Ronald Reagan. But today I would like to call out to Barack Obama: "Mr. Obama, tear up that check."


text:
Columbia (South Carolina)
South Carolina. It is in the approximate geographic center of the state, and is one of the first planned cities of the United States. It is also home to the main campus of the University of South Carolina, and to the Army's Fort Jackson. Located in close proximity to two seemingly forever-growing metros, Atlanta, Georgia and Charlotte, North Carolina, Columbia still has a while to go before quite reaching max metro status, but the city's recent rapid growth indicates South Carolina's capital city is beginning to blossom as other Southern cities have in the past decade. As of 2006, estimates for the population of the city proper is 122,819, with an urban core population of about 420,000, and a metro area population of about 725,000.
Get in
By car
Columbia is easily reached by Interstate 20, Interstate 26 and Interstate 77, or by U.S. Highway 1.
By plane
Columbia is served by the Columbia Metropolitan Airport (CAE).
There are non-stop flights to Columbia Metropolitan Airport from the following cities (some cities may be seasonal or only offer service certain days of the week): Atlanta, Charlotte, Chicago, Cincinnati, Dallas Fort Worth, Detroit, Fort Lauderdale, Houston, Memphis, New York, Philadelphia and Washington.
By train
An Amtrak station is located at 850 Pulaski Street in the Vista. Columbia sits on the main north-south line on the East Coast. Trains depart daily for Miami and New York; however, most of the trains pass though Columbia at night, and are frequently delayed.
Get around
Most people use a car to get around Columbia, but more pedestrian-friendly areas of the city include downtown, The Vista, the University Hill/USC area, and Five Points. There is bus service around town provided by provided by CMRTA [26]. It is generally geared towards locals rather than tourists. Taxi service is also available 24/7 if one calls in advance, and can usually be hailed on the street in Five Points and The Vista at night.
Siebels House and Garden One of the best gardens in the city. Is free to walk through and surrounds the oldest house in Columbia.
Some of the most popular ones include, the Blue Marlin, which features seafood prepared in the South Carolina Lowcountry tradition; Bull Market Restaurant, which serves Southern cuisine with a Greek Mediterranean flair; Dianne's on Devine, an upscale fine dining restaurant offering Italian dishes; the Hampton Street Vineyard, best known for its extensive selection in fine wines; and SakiTumi Grill & Sushi, which specializes in Pacific Rim cuisine. In all, Columbia offers over 450 dining options. Terra in the West Bank/State St. area in West Columbia is a new upscale eatery that has caught the attention of locals.
Passable regional chain restaurants have locations in and near town, including Five Guys Burgers and Fries, Mellow Mushroom Pizza, Moe's Southwest Grill, Groucho's Deli, Atlanta Bread Co, Firehouse Subs and Sonic Drive-In (many 24h).
Columbia has a diverse, extensive array of restaurants to choose from, most notably those in the historic Congaree Vista district, Five Points, and along Devine Street.
Get out


text:
After 27 years with the Kansas Highway Patrol (KHP), Lt. Keith Dreiling has decided to retire.
"I really enjoyed my time with the highway patrol, Dreiling said, "but it's time to move on and look for new opportunities."
After 27 years with the Kansas Highway Patrol (KHP), Lt. Keith Dreiling has decided to retire.
"I really enjoyed my time with the highway patrol, Dreiling said, "but it's time to move on and look for new opportunities."
Dreiling completed his training at the Training Academy in Salina, and then was told where his duty station would be, Dodge City.
"Back then, you didn't know where they would place you until you completed training," Dreiling said. "Nowadays, they give you a little more warning."
Dreiling was happy to be stationed in Dodge. Although he is originally from Victoria, he had graduated from Dodge City Community College, and had worked previously in Cimarron, so he knew the area pretty well. His wife, Linda, was also from Ashland, so in many ways Dreiling said the move felt like going home.
From 1985 to 1993 Dreiling worked in Dodge City, and he still has many fond memories of that time. A few that still stick out in his mind include the Excel riots that occurred in late 1992, a few jail escapes and multiple wrecks.
But more than anything, Dreiling remembers the people he worked with, many of whom are still here in Dodge.
"I made several friends during my time in Dodge," he said, "people I'm still friends with to this day."
In December 1993, Dreiling transferred to the Kansas Turnpike, stationed in Emporia. He stayed there until 2005, when he transferred to Governor's Security in Topeka. In 2007 he transferred once more, this time to the patrol's General Headquarters, then in 2008 he transferred one final time to the Professional Standards Unit where he remained until his retirement.
Dreiling said he's not exactly sure what he would like to do now, but he does plan to stay in the Topeka area, near both his children.
"My son and daughter both live a few hours away from us where we are now," Dreiling said. "It's nice to be close to them, and my parents, and my wife's parents aren't too far away either."
During his career with the Patrol, Dreiling served as a field training officer for Technical Trooper Jim Keltner, retired Capt. Daniel Meyer, and Trooper Ryan Filson, now a deputy U.S. marshal. He was one of five troopers in the state assigned to the Commercial Vehicle Enforcement Pilot Project in 1991; received a KDOT ProActive Traffic Enforcement Award in 1999; and served on the Meet and Confer Team in 2000 and 2004, according to a recent press release from KHP.
"When I first applied to be a highway patrolman, I just did it because it was something that had always interested me, and I thought I'd be good at it," Dreiling said. "And I have really enjoyed my time here."


text:
Moderators: Three Stars, dagny, pfim, netwolf
pittsoccer33 wrote:wouldnt cooking in a pan with butter like that fill my kitchen with smoke?
this might be a dumb question, but what kind of pan? like what id make brownies in?
columbia wrote:My technique:
Heat up a cast iron pan in the oven at 500.
Sear the steak for about a minute per side on high heat and finish in the oven to your liking.
pittsoccer33 wrote:what about cast iron is better than my family dollar skillet? ill buy one if it will help
viva la ben wrote:Flipping the steak only once is key.
Froggy wrote:Please advise someone using a moderately nice 12" stainless frying pan on a $30 wal mart hot plate in a small basement apartment. Asking for a friend...
tifosi77 wrote:pittsoccer33 wrote:what about cast iron is better than my family dollar skillet? ill buy one if it will help
Nothing can take or hold on to heat better than cast iron. That means when you spend 20 minutes pre-heating your pan to over 400° F or more you won't lose much if any of that heat energy when you add your room temperature steak to the pan. That means quicker and more thorough searing. And that means more deliciousness.
Users browsing this forum: No registered users and 11 guests


text:
We are officially home safe and sound with only minor mishaps to report (lost baggage, sweating from quick layover transitions, and the like). The fact that I am sitting in 25 degree weather currently makes the past 3 weeks even more surreal. It is nearly impossible to believe we were lying on the beach in Adelaide post-game just 36 hours ago.
Yet, here we are, at the end of this wonderful journey. First and foremost, I would be remiss not to express our deepest gratitude for the financial generosity from our parents, alums, friends, and fans. Without you, this trip would not have been possible, nor would it have been the remarkable adventure you have heard about each day via this blog. Kangaroo Island, dinners, and the Great Barrier Reef would not have happened without you- not to mention our groceries for dinner! We are so grateful that you all could give us the chance to experience Australia the way we did.
|Overlooking Pennington Bay on Kangaroo Island.
Off the field, we got to know each other, the kind of knowledge that comes with spending every waking moment together- and sharing beds. Finally being reunited as a team in Hanover was the best possible way to start this trip. The juniors reincorporated seamlessly and we are elated to have them back. Our adventures in Australia made us grow as people by facing our fears (birds for some, heights for others), by maturing as leaders, and by learning how to be the best teammates possible.
Highlights off the field included the Great Barrier Reef Trip. Copious sun, a boat deck to ourselves, and magnificent wild life stand out in particular to me. We enjoyed having the freedom to explore the city of Sydney and see its famous beaches, acclaimed Chinatown, and the zoo with the most active animals I have ever seen. Sydney, Cairns, and Adelaide all provided very different looks at the country/continent of Australia. Sydney seemed young, metropolitan and easy-going. I must say, I was totally jealous that Wally Cook '95, our very own alum, is living there. Cairns was much more of a tourist experience with activities galore, some of the funniest shopping, and an emphasis on exploration. And lastly, Adelaide seemed the most genuine- it did not scream tourism, but still had a bustling town and a very livable atmosphere. Maybe it was because we did what was most normal for us there- played lacrosse.
|Making friends with local wallabys.
All the best and happy holidays!
Courtney Bennett '13


text:
Saturday, March 25, 2006
To our readers...
Just want to say thanks for all the support, even from traditional rivals. We've said it before but we'll say it again (and keep saying it), it's much appreciated.
As we said in the post that started this little firestorm, each of our contributors does this site for free. There is no advertising and we've been too damn lazy to open a CafePress account to try to sell anything. It's just a hobby and passion in order for us to talk, bitch and have a few laughs about some of our favorite topics (like the above-mentioned scantily clad co-eds). Thus, the fun of doing it comes from your emails and comments (yes, we're easily amused).
As such, unlike Mr. CowherdItSomewhereElseFirst in his reply to one of our readers, we appreciate the blogging and sports board community. Without it, we might as well just go back to emailing each other. If you notice, unlike a lot of sites that are "pro" a certain team, unless it's particularly vulgar or offensive (or that one LSUoverSC dude putting up the same link over and over again), we leave comments up - those that like the site and those that don't. That's the beauty of it.
Some have commented that this is a "great" thing for us due to the increase in traffic. But whether we have a million visitors in a day or just Wangs's mom, the pay is the same. While it's nice to have all the new readers, we'd prefer they were reading our material (and voting in the our Blog Co-ed Showdown). Besides, keeping up with all this new traffic makes for a bitch of a time pulling off the charade that is each of our real jobs.
Also, some of you have said we should sue or get him fired or worse, make him move to Columbus (sorry, old habits). But this isn't and never was about money or a man's job. Put simply, it was just about wanting credit where credit was due. Had Mr. CowherdItSomewhereElseFirst said, "Sorry, my bad" - or anything close - that would have been the end of it. Instead, he had to be even "douchebaggier" in his response. I guess that's the most disappointing part.
Most of all, we realize this isn't important in the grand scheme of things. If you read the site regularly, you know we don't take ourselves too seriously. And next week I'm sure we'll be back to the usual stuff. But this whole thing just sort of sucked on our end.
In any event, just our long winded way of saying thanks for the support. It's appreciated.
The M Zone Gang
33 comments:
ESPN did not give you the credit that you earned when they used the article you wrote just as ESPN did not give LSU the credit it deserved when it won the National Championship under the rules all teams agreed to and then gave not just some of, but most of, the credit to another team.
Not a good feeling is it?
- March 24, 2006 8:49 AM
well, this Buckeye will keep stopping by from time to time!
and, oh yea - FUCK MICHIGAN!
see, things are already settling back to normal. 8-)
- March 24, 2006 8:52 AM
- Wangs said...
- This comment has been removed by a blog administrator.
- March 24, 2006 9:24 AM
- John Frum said...
Anon 5:49 :
Did I miss something? Back in 2003 I was sure that I heard on ESPN, on every other sports show I watched or listened to, and in every newspaper or magazine I read, that LSU won the BCS Championship game and thus were awarded the USA Today/ Coaches poll national championship, including the crystal football trophy that goes along with it.
Sure sounds like LSU got credit for what they earned.
I also heard that USC won the final AP poll and were thus awarded the AP national championship in that year. USC likewise got credit for what they earned.
Now, since LSU was given full credit by everyone for what they earned, the USA Today Coaches Poll National Championship; and USC was given full credit for what they earned, the AP Poll National Championship, I see absolutely no parallel betwen these two events and and the ESPN/M-zone issue, where the M-Zone did NOT get the credit they earned or deserved.
- March 24, 2006 9:29 AM
The BCS is an independent group, apart from the Coaches Poll. It would exist with and without the Coaches' Poll association with it. Its legitimacy derives from the fact that all the major conferences agreed to its contract.
The BCS, not the Coaches Poll or the AP Poll, is the purveyor of national championships ever since the major conferences agreed to the BCS' stipulations.
- March 24, 2006 9:46 AM
- Wangs said...
Good fucking grief - the first two comments are from LSoooser and Columbus.
Yost, can't you come up with some thing the Victoria Secret folks will steal? Please.
- March 24, 2006 9:53 AM
- John Frum said...
Anon 6:46 :
As you seem so familiar with what the BCS contract says why don't you post it here so we can all review it rather than just hear your interpretations of it?
I know I am especially interested in both the clause that makes the BCS the official "purveyor of national championships.." and the clause where the conferences agree to prevent the Coaches and AP Polls from continuing to award National Championships.
- March 24, 2006 9:56 AM
Onepete loser go home and finish your whittlin'. You don't see anyone on this blog whining about the 97 split with my huskers do you? Fact of the matter is only a few OCD sufferers from LSU seem to give a rats ass about 2003. Funny but weren't you going to use the sears tropy image on your pathetic billboard until you realized that the image was copyright material? This is about getting credit for copyrighted material and even you half wits should understand that, after all your ugly ass billboard should is a not so sparkling monument to what happens when copyrights are infringed upon (almost).
- March 24, 2006 10:57 AM
- huskerosta said...
Onepete loser go home and finish your whittlin'. You don't see anyone on this blog whining about the 97 split with my huskers do you? Fact of the matter is only a few OCD sufferers from LSU seem to give a rats ass about 2003. Funny but weren't you going to use the sears tropy image on your pathetic billboard until you realized that the image was copyright material? This is about getting credit for copyrighted material and even you half wits should understand that, after all your ugly ass billboard is a not so sparkling monument to what happens when copyrights are infringed upon (almost).
Sorry about the grammar error on the original post but I just had my third bloody mary.
- March 24, 2006 11:03 AM
Welcome to the BCS Era that started in 1998.
Legitimacy of the true National Championship now comes from the member schools agreeing to a system. It no longer rests in the ballots of a few coaches and media members, many who are not competent or caring enough to submit accurate ballots. That is, after all, why the member conferences agreed to the BCS.
- March 24, 2006 11:04 AM
- Wangs said...
Huskersota - thank you for reminding us of that retirement present Phil Fulmer gave The Honorable Dr. Tom Osborne just because he was still upset about his girl Peyton losing the Heisman to our man Charles. It was Phil's #4 vote in that illigimate coaches poll that the LSoosers seem to think means something that cost us the coaches poll. And shouldn't that really be renamed, the assistant athletic director's poll since they usually do the voting because their school's coach is too busy on Saturday afternoons to really observe and analyze other teams to have any clue how to rank them.
The real point is - polls by writers and assistant athletic directors / interns are useless. College football needs a playoff so we can settle this on the field.
- March 24, 2006 11:11 AM
The fact is, CFB does have a playoff already, even if it is a one game playoff.
The BCS was constituted because athletic directors were sick of both the Coaches and the AP determining the national champion(s). So they came up with a system that would use those traditional, yet flawed, systems and add to them a more objective component.
Look at the precious AP Poll. You do know that in 2003, one AP voter voted Michigan #2 and LSU #3 in the final poll. Nonsense like that, and a coach voting 97 Michigan #4 (rather than #2, which is what they deserved) is the precise reason the BCS is here.
The winner of the National Championship Game is the Champion. Winning the Coaches or AP polls now is nice, but really means nothing.
- March 24, 2006 11:15 AM
that's an interesting way to look at it. it is true that they give the championship trophy away before anyone votes.
- March 24, 2006 11:28 AM
Wangs, The 'honorable' TO crack I'm sure is in reference to the LP incident. I wish the man never wore a husker uni but I can't do anything to change that. Fact is a lot of folks believe LP had a huge impact on the outcome of the Tenn. vs. Nebraska game in 97. Those people should be reminded of LP's backup, one Ahman Green, not a bad back in his own right. As far as Phat Phil goes I think he was more pissed about his team getting punked than he was about a Heisman when he cast his vote. I would bet that if Michigan truly took care of business against cryin ryan nobody would have denied the blue their due. Phat Phil will have his day one way or another. I would bet it happens by either choking on a ham sandwich or by the NCAA hammering him for the backdoor recruiting tactics that Tennessee and its alums are famous for. By the way whatever happened to Kelly Baraka? I know we wanted him bad and he just seemed to vanish.
I would love to see a playoff system as well but I'm not holding my breath.
- March 24, 2006 11:41 AM
I found your site through a link on a USC board. I think its great. Cowherd is a thief. I have noticed that Sports Talk hosts hate message boards, my theory is that they view them as competition, because both are competing for the same group of people. You guys should email the issue to his competitors on Sporting News etc -- maybe they will mock him.
- March 24, 2006 11:41 AM
I must say, it is quite entertaining for LSU fans to continue to show the rest of the world how many morons are from that area.
To clarify some things about who agreed to what, being that no one has ever seen the BCS contract, LSU fans are sure good at making stuff up. It has never been reported that the AP agreed to anything, and it has never been reported that individual schools agreed to anything. What has been proven is that the BCS itself acnknowledges the split title, and being that all schools of the 6 power conferences belong to the BCS, seems to me that all schools acknowledge the split title, except for a few fringe LSU fans.
- March 24, 2006 11:43 AM
- SurNation said...
Hey, why don't you guys just write him again and say that he told you to "Sit on it" or "Up your nose with a rubber hose". I wonder if Ralph Malph and Horseshack will come after me. Who cares.
Don't say this is Cowturd either. I don't Cowturd will last a day in SurNation. There is not alot of people that look like him either.
- March 24, 2006 11:49 AM
- BaggyPantsDevil said...
Hey, this "brewing controversy" is mentioned in Cowherd's Wikipedia entry. As is a link to The M Zone. Welcome to the big time. OK, welcome to it's just Wikipedia.
- March 24, 2006 12:02 PM
- Becky said...
I do have to wonder how no matter what you boys on the MZone are talking about, it comes back to LSU and USC. Very odd.
Until there's a playoff, there's a chance this stuff can happen; most of us a mature enough to understand that. I'd rather have an "even Steven" in place than to have to listen to one school consistently whine that they were robbed for the next three-plus years. Oooh, wait, never mind...
As for the plagiarism, good to see the Worldwide Leader incorporates such strict standards. Even our local sports radio guys know enough to credit where they saw the funny article or poll, or say, faux Wunderlich test.
- March 24, 2006 12:09 PM
- Becky said...
Make that "are mature." Carry on.
- March 24, 2006 12:10 PM
- Wangs said...
Huskersota - wow! did I accidently touch a nerve? Sorry.
Isn't Dr. Tom Osborne a Member of Congress? I think that means as an elected official he is properly addressed as "The Honorable." I was trying to respect him and you thought otherwise. So sorry.
Becky - please please please do not associate those LSoosers with this blog! While I respect their focus, what they care about does seem meaningless, irrelevant, and pathetic. I actually think less of LSoooser now than before I ever heard of this 2003 "controversy" about the "coaches/assistant ad/intern" poll that they think is so important.
- March 24, 2006 12:21 PM
Sent to the ESPN Ombudsman...
I am writing to express my concern over the unattributed use of material by ESPN Radio's Colin Cowheard during his "Real Wonderlic Test" segment. The material clearly came from michiganzone.blogspot.com and was unattributed.
While this was likely a mistake, the right thing to do would have been to admit the mistake and give fair credit. By refusing to do so and by referring to the website as merely "whiners," his show discredits the integrity of ESPN as a legitimate source of sports news. Just because Mr. Cowheard is involved in sports talk and just because M Zone is a blog does not mean that the rules of attribution somehow do not apply.
All the website is seeking is fair credit, even when they have a legitimate copyright infringement claim. I strongly suggest you take action.
- March 24, 2006 12:28 PM
I want to know what is the first email you sent him. Did you say, "Hey man we heard you segment, we just wanted to let you know we created it. We would appericate it if you could give us some credit. I mean we write stuff like this all the time. We do it for no money and help the poor, just to let you know. Maybe we can help each other we wash your back, you wash ours. But not to rough we senseitive."
Or was it, "Damn you POS. How dare you take something you did not do. You better give us the credit, before we go wolverine on you. Don't you know we help the poor. You wanna play rough we can although we are senseitive."
- March 24, 2006 12:39 PM
Sorry wangs whenever I get even the most remote sense that someone is bringing up the LP incident it just sets me off. Probably has to do with the fact that it's brought up 1000 times a year. I used to think TO was as pure as the driven snow but now the man is going to run for govenor. I have to wonder if feeding his ego isn't at the top of his agenda and not the higher calling that he and most of his supporters want people to believe. Maybe said ego is why he thought he could re-institute LP and get away with it and not be called to task. I mean who dares question the great TO. I still appreciate his record and what he means to the state but I don't think the man is a god.
Anyways love your blog and hope you guys get the props you deserve.
PS maybe tOSU, LSU and Colorado could start their own conference. It would be like participating in a soccer melee without actually having to watch soccer.
- March 24, 2006 12:56 PM
Hey onepeat guy
"The BCS is an independent group, apart from the Coaches Poll." "It no longer rests in the ballots of a few coaches and media members, many who are not competent or caring enough to submit accurate ballots."
Wrong and wrong. How do those two teams make it to the BCS game? I thought polls played a pretty heavy role in the process. I guess that I was wrong - along with everyone else that pays even the slightest bit of attention to college football. Thanks for setting us all straight.
- March 24, 2006 2:55 PM
And Cowherd is just a Michigan hater. There was no way he was going to credit any blog affiliated with the school. I even heard him rip Tom Harmon for being a "bust" in the NFL. Ignore the fact that there was this little thing called WWII when Harmon graduated and that he decided to go be a fighter pilot instead of play football. Yeah that makes sense, ignore the fact that he's hero with more balls than Cowherd will ever have and focus on the fact that after having to bail out of two planes during WWII, Harmon's body wasn't quite what it was when he played college ball. Good job Colin.
God I fucking hate that douchey little bastard. He didn't last long in the Detroit market, let's all hope he won't be much longer in any market.
- March 24, 2006 3:01 PM
ESPN & Cowherd are resposible for acknowleding the M blog. It is shameful & deceitful not to.I like UM always root for them except for one game. No not that outlaw program in columbus, O. but as a subway-alum for U of Notre Dame. I always read your column via EDSBS. Keep up the funny & illuminating reporting. Go Blue. I mean IRISH
- March 24, 2006 3:48 PM
Hey Jim.....not to get too far off topic, but the term outlaw program is better served for schools that have had books written about its on-campus debauchery...
I guess "Under the Tarnished Dome" would suffice this requirement...stick to the topic at hand...jerky!
You shouldnt be casting stones...you might hit Touchdown Jesus in the nutsack.
M-Zone...the buckeye nation is behind ya....and I am not even going to call out another school, while writing this comment (Jim, you can stop taking notes now)
- March 24, 2006 3:58 PM
I think you're going about drawing attention for it all wrong(by attention, I mean from ESPN to get the credit you deserve). You should start harassing OTHER ESPN radio shows since Cowherd is such an ass. If everyone sent stuff about Cowherd to Dan Patrick, Mike and Mike, and whoever else has shows and kept sending them, then, even if those guys didn't mention it on air, you gotta think they'd mention it to Cowherd. Trying to embarass him in front of his peers is probably the best way to get to him. I've listened to him some and he seems like the sort of guy who might say, "If you don't like me, then don't listen." He's such an idiot that he wouldn't realize that if people don't listen then he loses his job. So, I say mass email the OTHER espn radio shows and bring it to their attention instead. If they get bugged enough, then they're bound to say something to him or it will at least make him unpopular(although I doubt a lot of people are rushing to hang out with him as it is).
- March 24, 2006 5:21 PM
No, that is called harrasment.
Just ask him for his check for the day he metioned you test.
Then you give him props for generating for traffic for you on your site.
- March 24, 2006 5:33 PM
I think "Steve" or whoever he is needs help. He is so obsessed with denying the AP that he has lost all touch with reality. Yes, Steve, you distort and fudge the facts. Once again, you're called out: What do the conferences, athletic directors and the BCS have to say? I know you would never think of following through. That's just the point. If you pick the fight it's up to you to come up with the evidence. Your claims have all been refuted and going to the source would be the nail in your termite-riddled coffin.
For my intelligent pals from LSU, John David Booty has been suffering from back spasms and they are not sure what to make of it at this time. He had an epidural and they have even suggested surgery (oh no....). He's a good kid and doesn't deserve this. We'll keep our fingers crossed.
- March 24, 2006 8:08 PM
Ted K. Aren't you the uni-bomber. "under the Golden Dome"written by two clowns from SI. Yeah I remember it, a frosh superstar no classes, big suv, star qb,$500 from a booster ,star TE. assualt on a non atletic student. Yeah I remember that seems like yesterday.
- March 24, 2006 9:05 PM
"Termite-riddled coffin..." USC wins on imagery as well as merit.
- March 27, 2006 2:01 PM


text:
- Inside Athletics
- Tickets
- Fan Zone
- Media Zone
- Social
- Shop
- Donate Now
JOHNSON CITY (Sept. 27, 2012) – The ETSU Department of Intercollegiate Athletics announced Thursday the Bucs have teamed up with TextCaster to launch a new text messaging communications service to its fans called "Buc Updates" for the 2012-13 season.
The "Buc Updates" brand will consist of score alerts, while also allowing fans the opportunity to stay up-to-date with Buccaneer athletic news free of charge. In addition, weather delays will be sent out via the TextCaster service and fans can become eligible to win prizes during special in-game promotions.
Fans can elect to opt in or out at any time, and have the option to receive updates on every Buccaneer athletic team or selected sports by clicking in the individual sport boxes on the sign up page.
Click here to sign up for the free service or visit http://my.textcaster.com/asa/Default.aspx?ID=f5524229-7890-4372-9b63-b7d5150ae0d8.
The service is now active online and the first 200 fans to sign up will be eligible to win a special Buccaneer prize pack. Also, the ETSU Athletic Media Relations Department will include links to its stories for smartphone users. The link will direct TextCaster users the ETSUBucs.com mobile site.
For more information on Buccaneer athletics, visit ETSUBucs.com.


text:
Saturday, May 5, 2018
This 3D optical illusion will make you question the shape of reality - Nexus Newsfeed
Posted by Linda Joy Adams at 12:45 AM
No comments:
Subscribe to: Post Comments (Atom)
An informal news letter of all kinds of news and comments on the news. Specific intent is to 'track' mergers and acquisitions at the highest levels in our world and the impact these have on individual rights. This blog was started to aid me keep track for my personal benefit. It evolved into a shared content with anyone interested.


text:
After the senior bowl, I only the Seahawks linked to one potential first round player. And it didn't make sense, cause he's a massive dude, and I didn't think we needed a massive dude.
So I decided to dig deeper, and after looking at several hours of full game clips, I'm seeing what they are buying into.
Jonathan Jenkins is a massive man that can move.
He is easy to find on film, not just because of his size, but because he is the guy also moving upfield . . . Whether by brute strength, first step, or slicing through the blockers, he's almost always 5 yards deep in seconds.
When he's not gassed he's relentless, with surpassingly agile feet. He played all overGeorgia's line, including NT and at RED's LDE position (albeit in a 3-4). He reminds me of a bigger, more athletic version of Red.
When I watch Jenkins, I see the Seahawks. A unique and versatile player. Pit him in the middle and I don't think tea,s will have a choice but to double team him.


text:
Fresh Aromatic classic fragrance
Topnote- Fresh Peppermint and Orange Blossom Midnote- Essences of Lavender and Jasmine Drydown- Sensual Amber and Musk
All orders ship within 1 business day
(Weekends & US Federal Holidays are not business days)
Free Standard Shipping on all orders to the USA (no minimum)
Estimated transit to delivery 5-10 business days
Expedited Shipping options to the USA are available for faster shipping. The costs can be calculated after adding items to your cart & submitting your US zip code. The costs are calculated by the carrier based on the weight of your order
Canada shipping is available. The costs are calculated by the carrier based on the weight of your order and your zip code.
*These rates do not include possible duties or customs, which may be levied directly by Canadian authorities. These additional costs are the responsibility of the buyer.
You may return items, in their original condition, within 30 days of delivery. We'll also pay the return shipping costs if the return is a result of our error (you received an incorrect or *defective item, etc.). Please visit our Shipping & Returns page for further info.
You should expect to receive your refund within a few days of its return & inspection
If you need to return an item, simply login to your account, view the order using the 'Complete Orders' link under the My Account menu and click the Return Item(s) button. We'll notify you via e-mail of your refund once we've received and processed the returned item
* Items that smell different to an individual are not considered defective. Smell is subjective and can vary by many combinations of external and internal factors. As retailers, we sell products purchased directly from manufacturer's, distributors and other reputable suppliers.