[00:00] drives are power hogs [00:00] so the 2nd CPU, rated at 80W, didn't hit the radar [00:00] I was *very* suprised by that actually [00:00] it makes the decision of 1 CPU or 2 a non issue [00:00] yea it is interesting [00:00] besides just the cost of the sucker [00:02] nevertheless, I just pulled the trigger on ordering another box [00:02] this time, I'm getting the L5430's [00:02] same as E5430 but low voltage [00:02] 50W TDP [00:02] nehalems? [00:03] no, one generation earlier [00:03] the 5400's, not 5500's [00:04] nehalems are still too expensive [00:04] ah [00:04] nehalems are damned fast though [00:05] have two 5520's in a box at work [00:05] compared against another box that has a 5420 in its noticable [00:05] For VMs, I don't think the CPU is the main bottleneck. I could get the extra speed, but I'd still max out at disk I/O [00:06] ballen: what is the box doing though? [00:06] 5520 box is running ESXi [00:06] 5420 is a web server [00:06] F' it, maybe my *next* box I'll try the 5500's [00:06] ESXi is a hungry mother though [00:06] oh and its loves those CPUs [00:07] hahaha [00:07] I have... 10 vms running now [00:07] or so [00:07] going to run out of disk space before anything [00:07] ballen: let me know when you get to 30 ;) [00:07] doesn't touch the CPUs [00:07] yea I don't have the disk space [00:07] at least with my current provisioning [00:08] I do have like 22 gigs of ram free too [00:08] dbgi: i'm not gonna set your rdns up w/ RFC 2317, like the FAQ says, I want to try the "regular" class C style; meaning, you don't have to change much on your side [00:08] ballen: you must give 'em a lot of disk [00:08] yea using local SAS drives [00:08] in RAID 5 [00:08] only had 1.4T [00:09] my devs do bio work, so they VMs need a retarded amount of space [00:09] up_the_irons ok cool thanks man [00:09] best $7k we spent though [00:10] dropped 5 servers so far in my env [00:10] and put them on this box [00:11] ballen: nice [00:12] if you ever need to p2v a FreeBSD, let me know ;-) [00:12] FreeBSD box* [00:12] up_the_irons im learning this while im doing it, so easier is better, i appreciate it [00:12] ugh... classless reverse dns deligation... [00:12] though im not sure what you mean by class c style [00:14] ballen: p2v?:) [00:14] physical to virtual [00:14] moving a metal install to a vm [00:16] ah gotcha [00:16] i've done plenty of those, not w/ freebsd though [00:17] dump and restore work surprisingly well for it [00:17] just boot with a FreeBSD 8 "live" cd [00:17] and put into the cd fixit env [00:18] s/put/boot [00:18] ftp over the dump file [00:18] partition, etc [00:18] restore [00:18] make sure fstab works for the new env [00:18] make sure rc.conf is fixed for the new env [00:18] good to go [00:19] also if you have a custom kernel... install the generic one before doing the dump [00:20] dbgi: what are the IP(s) / hostnames of your DNS servers? [00:21] ballen: yeah, sounds similar to how i p2v'd linux boxes [00:21] damnit to freaking hell Ferret doesn't compile on OS X [00:21] 206.125.172.78 up_the_irons [00:22] dbgi: ok [00:23] my friend coil in here is helping me, hes knows freebsd really well and admin sum servers, and had done dns, just never from a vps with ips owned by a company like this [00:24] so its kinda a learning experiance for us both [00:32] non RFC 2317 sub-class C delegation is new to me too ;) [00:32] but recently i've read -- http://homepages.tesco.net/J.deBoynePollard/FGA/avoid-rfc-2317-delegation-example-1.html#SuperdomainBIND [00:33] dbgi: is your bind running now? [00:34] up_the_irons yes its running now [00:35] ok [00:36] omg, thats so much better [00:36] rfc-2317 is hell [00:36] rfc 2317 is easy, be a man [00:36] ;) [00:36] hah [00:36] i've set it up for countless of people and it wasn't that hard.. [00:37] i actually having trouble getting his example working [00:37] its just urgly [00:37] ugly* [00:42] dbgi: can i log into your VM and look at your dns setup? [00:43] yes sure [00:44] ok [00:45] dbgi: hah, you did an RFC 2317 "style" setup ;) [00:45] 64/28.172.125.206.in-addr.arpa [00:45] wrong zone name [00:45] my friend coil did it [00:46] hes been helping cause i dont know much about it [00:46] whats wrong with it up_the_irons? can u fix it by any chance? [00:47] dbgi: workin on it [00:47] thank you so much [00:49] why are there so many search engines written in java... [00:49] dbgi: resolver was only listening on localhost; fixing... [00:49] whats wrong with java? [00:50] oh ok [00:50] it means I need to install JVM... and thats not happening on FreeBSD [00:50] ballen: why are the Hive guys trying to abstract the integer? which is already an object in Java. and Object of an Object [00:55] i don't get why there is that 'a.ns.*' glue record in the bind example [00:55] why don't i straight "NS" it to the downstream [00:56] coil [00:56] thats fine to me [00:56] *** Guest13375 has joined #arpnetworks [00:56] *** Guest13375 is now known as scoil [00:56] there coil is [00:56] scoil [00:56] hi [00:56] [03:56] <@up_the_irons> i don't get why there is that 'a.ns.*' glue record in the bind example [00:56] [03:56] <@up_the_irons> why don't i straight "NS" it to the downstream [00:57] yea idk either [00:57] i know very little about bind, coil knows it pretty well [00:57] i wouldn't say i know it pretty well [00:57] o ok' [00:58] better then me then [00:58] scoil: dbgi: i think i have it almost working [00:58] you know, no other place could u get help like this from the people who work and run the company [00:59] sweet up_the_irons, thats awesome [00:59] yeah never seen this before [00:59] we both appreciate it very much [01:00] hehe, no problem [01:00] seriously though, its awesome [01:01] I aim to please [01:01] just what are you doing [01:01] so i'll know [01:01] * dbgi is a customer for life i think [01:02] scoil: i'll let u know once i'm done [01:08] dig: couldn't get address for 'a.ns.71.172.125.206.in-addr.arpa': not found [01:08] ugh [01:18] i am hating bind right now... [01:18] sorry man [01:18] up_the_irons: should use djbdns ;-) [01:19] ballen: i've been meaning to switch for a long time, just too many projects... [01:19] * ballen was very much kidding [01:19] dbgi: not your fault; i'm trying a different delegation scheme here, that should be easier for customers in the future, so it is worth the time spent [01:20] ballen: well, getting away from bind would be nice. i want to switch resolution to "unbound" and delegation to "nsd" [01:20] kk [01:21] if i dall asleep im really sorry [01:21] ill read up in here if i do [01:22] up_the_irons: ever hear of http://xapian.org/ [01:22] another search engine [01:22] with a ruby lib here: http://github.com/ryanb/xapit [01:25] ballen: sounds familiar [01:25] dbgi: no problem, don't wait up ;) [01:25] you sure? [01:25] ill read up in here when i get up ok [01:25] my eyes are all blurry [01:26] and really, thanks you soooooooooooooooooo much for the help, i really appreciate it [01:27] up_the_irons: it powers gmane.org's search [01:27] dbgi: no problem, get some rest :) [01:27] ballen: ah, nice [01:28] thanks, gnight all [01:31] l8r [01:31] alright.. for the record, i can't get that dude's instructions to work; switching back to regular RFC 2317, which has never been a problem in the past [01:38] mmk [01:39] also for the record... I'm fairly sure there's no way to do fuzzy logic search with a key/value db that doesn't involve load the entire contents of a set into memory first [01:40] the only workable model I could come up with is storing permutations of the data and do normal include? on the set [02:13] dbgi: i *think* your rdns is working; i dunno why I had so much trouble with this one after I put it back to RFC 2317... maybe things are cached somewhere, you had a long TTL. I'm just gonna leave it alone for now; see the changes I did to /etc/namedb [03:00] *** ballen is now known as ballen|away [03:00] *** Nat_UB has quit IRC (pratchett.freenode.net irc.freenode.net) [03:01] *** Nat_UB has joined #arpnetworks [04:59] Moanin [04:59] elo [05:21] morn' [05:26] Hey up_the_irons [05:27] Can I run dns for ipv6 on an ipv4-only host? [05:29] yeah but why would you want to? [05:30] I'd like to run reverses etc for my stuff, but our primary dns boxes are ipv4 [05:31] Either that, or I need to add another IP to this box to satisfy the two dns requirement [05:31] you can do it, there's no technical reason you can't [05:33] Alright, thanks [05:33] np [05:35] Have you got sample reverse zone files up anywhere (for v6)? [05:39] http://www.isi.edu/~bmanning/v6DNS.html#named.conf [05:41] Yeah, but I thought ip6.int was deprecated over ip6.arpa? [05:43] i use ip6.arpa [05:43] And we are assigned /64s? Or /48s? [05:49] /48 [05:51] Okay, got a few too many 0's in my config [06:08] Well howbout that crap... use the right prefix length in the reverse zone and it actually starts responding :) [06:22] Much as I like Sinatra's minimalism, it doesn't give you anything. If I built my own Tender I'd use Rails and Searchlogic. Maybe throw some freetext search engine at it if I discovered a perf problem. [06:22] And if I wanted to host my own blog I'd just use Wordpress. [06:23] But that's me; I'm lazy. [06:25] if anyone is interested in KVM and OpenBSD: http://scie.nti.st/2009/10/4/running-openbsd-4-5-in-kvm-on-ubuntu-linux-9-04 [06:25] hot of the presses [06:25] *off [06:25] cool [06:26] cd $bed [06:30] g'night [08:17] O.o [09:17] 11:46 Host 66.172.125.206.in-addr.arpa not found: 2(SERVFAIL)a [09:20] that's from my isp's dns [09:20] but i see it works from the vps [09:23] *** ballen|away is now known as ballen [09:36] *** sentabi has joined #arpnetworks [09:40] up_the_irons: .... did you sleep last night? [09:41] up_the_irons doesn't sleep; he waits. [09:42] scoil: did you try resolving that reverse pointing your client at arp's DNS server [09:42] would be a good troubleshooting step [09:43] no i havent [09:43] myfet.us [09:43] ? [09:43] heh [09:43] yea [09:43] jeev: wierd [09:43] what [09:43] scoil, check how much longer it's cached for [09:44] 3600 [09:46] yea it doesn't work on my arp box either [09:46] scoil what is the IP of you VPS [09:46] your* [09:46] ballen, probably 206.125.172.66 [09:46] ;) [09:46] jeev: just checking [09:46] well thats one of them [09:46] the ns is 206.125.172.78 [09:47] Using domain server: [09:47] Name: 206.125.172.78 [09:47] Address: 206.125.172.78#53 [09:47] Aliases: [09:47] Host 66.172.125.206.in-addr.arpa not found: 5(REFUSED) [09:47] oh [09:47] so I be able to query it scoil? [09:47] directly [09:47] should* [09:47] nslookup 206.125.172.66 [09:47] ;; Got SERVFAIL reply from 208.79.88.7, trying next server [09:47] ;; Got SERVFAIL reply from 208.79.88.7, trying next server [09:48] ** server can't find 66.172.125.206.in-addr.arpa: SERVFAIL [09:48] > server 206.125.172.78 [09:48] Default server: 206.125.172.78 [09:48] Address: 206.125.172.78#53 [09:48] > 206.125.172.78 [09:48] Server: 206.125.172.78 [09:48] Address: 206.125.172.78#53 [09:48] ** server can't find 78.172.125.206.in-addr.arpa: REFUSED [09:48] 66.172.125.206.in-addr.arpa is an alias for 66.64-79.172.125.206.in-addr.arpa. [09:48] 66.64-79.172.125.206.in-addr.arpa domain name pointer myfet.us. [09:49] so what does this mean [09:49] refused [09:50] means your BIND server refuses to serve it [09:50] could be a few things [09:50] make sure theres no ACL's etc [09:50] can you query other domains on it remotely [09:50] Using domain server: [09:50] Name: 206.125.172.78 [09:50] Address: 206.125.172.78#53 [09:50] Aliases: [09:50] Host google.com.cfl.rr.com not found: 5(REFUSED) [09:50] scoil, it still says 3600 ? [09:51] lol wtf google.com.cfl.rr.com [09:51] i asked for google.com not google.com.cfl.rr.com [09:51] heh [09:51] scoil: your local dns prefix [09:51] jeev: iidk how do i check [09:51] query for google.com. [09:51] note the ending . [09:52] Using domain server: [09:52] Name: 206.125.172.78 [09:52] Address: 206.125.172.78#53 [09:52] Aliases: [09:52] Host google.com not found: 5(REFUSED) [09:52] Sounds like recursion is disabled [09:52] yea basically BIND won't do recursive lookups for you [09:52] which is good [09:53] for this type of server [09:53] whats the zone entry for the reverse zone [09:54] zone "64-79.172.125.206.in-addr.arpa" { type master; file "/etc/namedb/206.125.172.64-79.rev"; }; [09:55] reload named and check the log file any errors [09:56] rndc: neither /etc/namedb/rndc.conf nor /etc/namedb/rndc.key was found [09:56] using freebsd? [09:57] /etc/rc.d/named restart [09:57] yeah fbsd [09:58] no errors [09:59] on the local machine can you query for the IP? [09:59] using its self for the dns yes [10:00] not arp's dns [10:00] *** coil_ has joined #arpnetworks [10:00] but it resolves? [10:00] then it sounds like its not the zone file, but an issue with how named is serving the zone [10:00] *** coil_ is now known as Guest89298 [10:02] but its working? [10:02] well your local dns resvolves locally... so the zone file locally works fine [10:02] well i'm just confused with what freenode is doing [10:03] by chance could you paste your named.conf into a pastie [10:03] how come freenode was able to resolve it [10:03] yeah let me load up pastebin [10:03] hmm [10:03] that is interesting [10:04] *** Guest89298 is now known as scort [10:04] *** scort has quit IRC (Client Quit) [10:05] mephisto looks good [10:06] yea its decent, has had a history of long terms of inactivity though [10:06] ahh [10:06] http://pastebin.com/m3a370f22 [10:06] theres also Feather that uses Merb [10:07] ballen, the one you told me.. requires a server and stuff man [10:07] i dont want to get into things where i need to make sure another db is running in the background [10:07] it's too much [10:15] scoil: 68.172.125.206.in-addr.arpa. 3537 IN CNAME 68.64-79.172.125.206.in-addr.arpa. [10:15] so the CNAME is showing up [10:17] nvm, thats just upsteam [10:17] i.e. Arp's NS server [10:17] which is a good thing, but doesn't help [10:19] grrrrrrrrrr [10:19] i want to set up my blog [10:19] what do i do [10:19] i already got the tagline for it [10:19] ahmadinejad.org, calm down -- it's just a domain name. [10:19] lol [10:24] wonder if up_the_irons has tried VIA from starbucks [10:24] if it's anything like the chipset, it'll fail [10:24] i tried it [10:25] scoil: add allow-query { any; }; to options section at the top of named.conf and restart named [10:27] also for good measure use /etc/rc.d/named forcerestart [10:28] ok [10:29] named not running? (check /var/run/named/pid). [10:29] wrote key file "/var/named/etc/namedb/rndc.key" [10:29] Starting named. [10:31] *** coil_ has joined #arpnetworks [10:31] hey it resolves [10:31] *** coil_ is now known as Guest77531 [10:33] oh only on freenode [10:33] god named is gay [10:33] ;D [10:34] it doesn't appear to, to me [10:34] * ballen is confused [10:34] jeev: it really is [10:34] works for me from other servers [10:34] what really is [10:35] named [10:35] ahh yea [10:35] coil: well with that option in there you should also have: recursion no; [10:35] and allow-query-cache { none; }; [10:36] ok [10:36] so people can't use your named server to lookup anytihng but your domains [10:36] eh [10:36] you could enable that [10:37] i use djbdns :) [10:37] coil: alright thats all I got so far. I need some breakfast and coffee [10:37] tinydns foR LiFe [10:37] jeev: you would [10:37] ok [10:38] i enabled those [10:38] or added the options [10:38] eh [10:41] coil: is this a /28 [10:41] yes [10:41] starting at .64? [10:42] yea [10:42] change your zone entry to: zone "64-28.172.125.206.in-addr.arpa" { [10:42] and make sure you zone file matches [10:43] do i have to change the serial [10:43] meh [10:43] not for now [10:45] so 206.125.172.64-79.rev would be 206.125.172.28-64.rev? [10:45] you don't need to change the filename [10:46] this probably is equivalent to what was there, but worth a shot [10:47] ohhh [10:47] note: its zone "64-79.172.125.206.in-addr.arpa" [10:47] err [10:47] 64-28 [10:47] i.e. 64/28 [10:47] yeah got you [10:48] k, I'll be back in a bit [10:49] http://www.simpledns.com/lookup-dg.aspx [10:49] go there [10:49] trace it [10:49] let me know if it works [10:49] i used to have the way to do it from command line [10:49] i forgot [10:50] jeev: yea deligation is working correctly in this case [10:50] *** ballen is now known as ballen|away [10:50] -> Authority: NS-record for 64-79.172.125.206.in-addr.arpa = 206.125.172.78 [10:50] it shouldn't continued to trace to his server [10:51] *** coil__ has joined #arpnetworks [10:51] what about ipv6, do i have to do the same setps with it [10:51] get it delegated first? [10:55] *** coil__ has left [11:12] *** Guest77531 has quit IRC ("Reconnecting") [11:12] *** coil_ has joined #arpnetworks [11:12] *** coil_ is now known as Guest24065 [11:13] *** ballen|away is now known as ballen [11:52] *** Fudgezilla has joined #arpnetworks [11:52] Go fuck yourselves [11:52] *** Fudgezilla has quit IRC (Client Quit) [11:56] *** ballen is now known as ballen|away [12:00] lol [12:02] *** ballen|away is now known as ballen [14:00] *** ballen is now known as ballen|away [14:28] *** ballen|away is now known as ballen [14:33] scoil: coil Guest24065 ballen: I wouldn't change the zone name, it must match what I have in mine: http://pastie.org/private/k4jlwvgr6gxp32tv5s5sg [14:33] IPv6 is also delegated (just did that now) [14:33] IPv6 is way easier [14:33] 0.0.2.4 IN NS 206.125.172.78. [14:33] yea like I told him they're pretty much equivalent [14:33] that's all there is to it [14:34] his server is refusing a query [14:34] directly to it [14:35] mm.. indeed [14:35] although i thought i saw that working last night [14:35] (it was refusing) [14:35] dig @206.125.172.78 66.64-79.172.125.206.in-addr.arpa. [14:35] ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 23321 [14:36] out of zone, or named not allowing queries [14:36] yeah [14:37] ok so change it back? [14:37] change the zone? [14:44] 64-79.172.125.206.in-addr.arpa [14:50] the zone name *must* match what I have in my DNS: 64-79.172.125.206.in-addr.arpa [14:50] gtg, bbl [14:57] up [14:57] damnit [14:57] *** timburke has quit IRC (Remote closed the connection) [14:57] did you try VIA from starbucks [14:57] like it [14:57] ? [14:58] *** timburke has joined #arpnetworks [14:58] ok i changed it [14:59] and i'm getting refused to myself now [14:59] Host 66.172.125.206.in-addr.arpa not found: 5(REFUSED) [14:59] that's from the vps [14:59] paste [14:59] config to pastebin [15:00] http://pastebin.com/m55602bd9 [15:00] the .rev file contents [15:01]