Information Services are carrying out some essential systems maintenance on the 11th August 2009, 10:00-10:30 which affects the following ResNet systems:

Our current network devices have served ResNet well over the last 6 years but they are starting to get to the end of their useful lives.  In the past it has been possible for one compromised computer to disrupt access for many users in the same hall.  New switches have many more features that will help maintain the high availability that our users expect, even when other machines on ResNet are ‘misbehaving’.

We will be updating this blog post with progress several times per day during the phases so please check back for updates.

Phase 0 (Completed)

Starting on Monday 15th June and ending Wednesday 17th June we are upgrading one cabinet per morning in the Hawthorns.  Please consider the entire residence ‘at risk’ during these 3 days but we expect that users will only see a single 2 hour outage.

Phase 1 (Mon 6th July to Fri 17th July)

All other ResNet locations will be upgraded over two weeks starting Monday 6th July and ending Friday 17th July.  Again, please consider the entire residence ‘at risk’ during these 10 working days but we expect that users will only see a single 2 hour outage.

For the last two weeks we have been logging users’ wireless ResNet usage and have just made this viewable (if you have any) via MyResNet

Because wireless, unlike wired, ResNet usage includes internal usage we are not yet including this in your weekly allowance – it’s just for information.  We will be monitoring wireless usage to make sure it’s not being abused by individuals.  We believe that our wired weekly usage allowance is very generous, so excessive use of the wireless should not be necessary.

As part of our on-going effort to make the internet a safer place for your computer to be, Information Services have started filtering out a list of 30,000+ websites which are known to host malware (spyware, adware, viruses etc) – This makes it harder for the bad guys to install unwanted software on your computer without your knowledge.

Most of the time this will happen in the background and you won’t notice it.  If your computer tries to visit a website which is on the list of sites that we filter, you may occasionally see a message which says that the site your computer is trying to access has been blocked.  If this happens, don’t panic, It’s a good thing!  The system has stopped your computer from doing something dangerous!

If you want to see an example of the type of message you would receive, see this link: http://blackhole.isys.bris.ac.uk/ (NB: This link is only available within the University Of Bristol network)

We’re doing our best to ensure that the list only contains websites which are dangerous, although with a list of sites this big it’s possible that we’ll make mistakes and block things that we didn’t intend to.  If you think we’ve blocked something by accident, the web page you see will contain instructions for getting in touch with us and we can lift the block on that site.

It’s important to note that we’re only filtering out websites which are known to install unwanted software on your computer.  We’re not making any moral decisions about page contents, or otherwise censoring legitimate sites, and you will not get in trouble for encountering a page on the block list. (Although if you generate a lot of blocked requests we might offer to help you clean up your computer!)

Technical details for those who are interested:
We’re importing a list of known-bad domains from several reputable sources, and collating them into one list.  This list is then being fed to the University DNS servers.  If your computer requests a web page from a domain which is on the list, the DNS servers provide you with the IP address of aserver on the University network instead of the real IP address.  The server on the University network then displays the message saying “we don’t think you wanted to do that!”

This is similar to how the ResNet registration network works, where whatever website you try to access, you get redirected to the ResNet registration page.

The Student Laptop Clinics will be starting again on Friday 9th January and will run until Friday 20th March. As usual we are in the Student Refectory in the Hawthorns from 2pm to 5pm Monday to Friday.

For more information please see http://www.bristol.ac.uk/is/computing/advice/homeusers/help/laptopclinic/

Please read on for an important message to all ResNet users – even if you’ve left Bristol for the Christmas vacation.

Shortly before the end of term we had an outbreak of a nasty virus on ResNet, called DNSChanger. DNSChanger hijacks your Internet settings and redirects your traffic to malicious websites under the control of the attacker. For example, you might think you are going to Google, but actually you are going to a malicious website which will take control of your computer, try to steal your credit card numbers and bombard you with adverts. The virus spreads by passing on malicious configuration information to other computers on the same local network, like ResNet.

Even if you’ve left Bristol, please check now to see if your computer has a problem with this virus:

1. Click Start (then Run in Windows XP), then type cmd in the box. A black command window should open.
2. In the black command window type nslookup google.com
3. Something like the following should be displayed:

Server: newsapphire.resnet.bris.ac.uk

Address: 137.222.223.236

Non-authoritative answer:

Name: google.com

Addresses: 209.85.171.100
72.14.205.100
74.125.45.100

We’re interested in the numbers on the second line (137.222.223.236 in our example). If you are on ResNet then these should start with 137.222 (the range for University of Bristol). If you are at home then they could start with anything.

If the address starts 85.255 then you may have a problem. This is a block of addresses in the Ukraine which the attackers are using. Do this further check:

• Click Start (then Run in Windows XP), then type ncpa.cpl in the box.
• Under the LAN or High-Speed Internet section, right-click the Local Area Connection and select Properties.
• Highlight Internet Protocol Version 4 (for Vista) or Internet Protocol (for XP) and select Properties.
• Click Advanced…
• Click the DNS tab

If you saw 85.255 in nslookup but the DNS server addresses box is blank or has other numbers then the good news is that you are not infected (by this particular virus version). You did see 85.255 in nslookup though. This means that another computer on the same local network has passed on the wrong settings and websites you visit may not be what they appear. Shut down your computer and restart it later. Go back to the command prompt and type nslookup google.com – if the 85.255 address has gone you are now OK.

If you have any entries in the DNS server addresses box and they begin with 85.255 then unfortunately the DNSChanger virus is on your computer. Your computer is under remote control and you can’t trust any websites you visit – definitely don’t type in any credit card numbers as these will be monitored and stolen.

The only way to recover from this DNSChanger virus is to wipe and re-install your operating system from the original manufacturer’s CDs. We’ve not found any antivirus tools that can clean the system once infected (some tools do claim to clean DNSChanger, but only work against older versions, not this one). First backup any documents and other important work you need to keep, then follow the manufacturer’s instructions to wipe and reinstall. If you don’t have the original CDs phone the manufacturer – they should send you copies for a small postage charge.

General advice for all ResNet users

Before you come back to Bristol next term, please make sure your anti-virus software and Windows Updates are up-to-date. Go to Control Panel, Security Centre, and make sure everything is marked green.

Find your manufacturers recovery CDs while you are home for Christmas and bring them back to Bristol, just in case you need them.

Generally be suspicious and careful when using the Internet – is this website, email or instant message what it appears to be? If in doubt please ask. You can contact the IT Help Desk 24 hours a day, even over the vacation, on 0117 928 7870.

Update by Mark 18/12/2008

FAQs

Q1)    I have MAC OSX, does this affect my computer?

A1)    In general, OSX is unlikely to be compromised by the DNSChanger as it’s a Windows Virus but it’s possible to be using the rogue DNS servers if they were assigned to you by a compromised computer on your local network.  On ResNet requests to external DNS servers are now blocked so you’ll just have a computer that won’t connect to any web sites, including this one!

It’s a good idea to check your current DNS server settings though:

• In Finder, click Applications
• Under Utilities, click Terminal
• In the Terminal window, type one or both of the commands below until you get some information returned:

ipconfig getpacket en0
or
ipconfig getpacket en1

• Look for the domain_name_server ip address. Anything starting 85.255 is bad.

Two days into Freshers Week and we already have 4000 students connected to ResNet!

If you need help connecting please give us a ring on 89001 free from your room. Phone lines are now open 24 hours a day, 7 days a week. It has at times been difficult to get through, especially in the early evening. From 8am-5pm calls are answered by the ResNet team and from 8pm until 8am by the out of hours Help Desk.

If you’ve rung and found lines engaged or been kept in a queue we’re sorry – we are answering as many calls as we can at this very busy time of year. Everyone wants an Internet connection immediately to stay in touch with friends and family, and we want to get people connected as soon as possible.

If you prefer we can also arrange room visits to come out and help you connect up in your room, at a cost of £16. We can fix many problems for free over the phone though, so please try calling first.

Welcome to ResNet for all new students!

Can’t connect to ResNet?

Please phone us on 89001 free from your room (0117 92 89001) if you need technical support.

From 8am-5pm Mon-Fri calls are answered by the ResNet team.
From 5pm-2am and at weekends calls are answered by the Out of hours Help Desk – they can also help with ResNet.

Most people connect up to ResNet with no problems. Everyone wants Internet as soon as they arrive, so this is a very busy time for ResNet. We take on extra staff and answer as many calls as we can, but please accept our apologies if you have difficulty getting through. Lines are open 8am-2am, so please try later (or earlier!) Please don’t bring any laptops in to us – we don’t have the resources to look at them at the moment.

For the very latest info and tools to help with ResNet see our knowledgebase

Need to pay for ResNet?

You can connect first if you haven’t already paid – everyone on ResNet gets a 7 days free trial (longer for students at Langford). Then pay in person by cheque, cash or card at the Computer Centre, Tyndall Avenue. Unfortunately online payments aren’t available – we’re working on them but they aren’t ready for the start of term. You can print an application form and return it by post if you prefer.

New packages – ResNet Standard and ResNet Max
New for ResNet this year are two different ResNet packages, ResNet Standard & ResNet Max. We recommend ResNet Max to people who do a lot of video and other downloads. If you don’t know if you are a light or heavy user try ResNet Standard—you can upgrade from Standard to Max later if you wish.

New Freewire phone

Freewire Phone provides cheap calls to landlines and international numbers, and free calls to other Freewire users. It is a piece of software available for Windows & Mac. You need speakers + mic or a headset to use it.  Freewire phone will work anywhere – so your friends and family can also download it to keep in touch free of charge.

Problems with Freewire TV?

Freewire TV provides BBC1, E4, Film4 etc to your computer over ResNet. It is now available in almost all residences, and the signal is turned on to all rooms by default. If you have any problems with Freewire:

• First check service is available in your residence and room using www.resnet.bristol.ac.uk/myresnet
• Then check firewall settings
• If still having problems contact Freewire Support

ResNet available in more residences

The ResNet service is now available at Hillside/Woodside for the first time. We’ve also extended ResNet to more of the houses on St Michaels Hill and Osborne Villas.

ResNet Wireless extended

The trial ResNet Wireless service is now available at Northwell House, Richmond Terrace, Winkworth House (with 115 Queens Road within the next few weeks). ResNet wireless is not as fast or reliable as wired ResNet, but is very convenient. We’re testing wireless  to gain experience before gradually providing it to more residences in future years.

Don’t know your username & password?
Go to StudentInfo/new or visit the IT Help Desk at the Computer Centre, Tyndall Avenue, 8am-5.30pm Mon-Fri with some ID.

Remember that all new students need to change their password soon after registration.

Laptop clinics coming soon
With funding from the Alumni Foundation we have a new student laptop clinic which will be coming soon. Laptop clinics start weekday afternoons from Wednesday 8th October and  can advise on laptops which run slow or have similar problems.

The summer vacation has now started, and during this period only we can provide ResNet to students from other universities staying in Bristol accommodation over the summer. There is a charge of £20 for this for any period from 30th June to 22nd September.

NB: Unfortunately we can’t provide ResNet to holidaymakers or other people with no educational status.

To get ResNet, see ResNet over the summer for details and an application form.

Each year a large number of students join the team to run ResNet. We are now recruiting for both technical and administrative positions for the 08-09 academic year.

A job with ResNet offers competitive pay (around £10/hour) and excellent experience while working with and helping other Bristol students. It can be hard work but is very enjoyable, a chance to develop your skills, and great experience for future employers.

Jobs available start in September and some continue during term time for the rest of the 08-09 year.

The closing date for applications is 10am, Thursday 22nd May. For more details or to apply please see http://www.bristol.ac.uk/is/computing/advice/homeusers/resnet/about/behindscene/vacancies08.html