[00:00] trying to make a gfx or wireless nic work [00:00] yeai dont mind messing with a server (even then, not a fan - id rather get it working and not touch it) [00:00] oh I love fiddlin [00:00] hehe [00:00] in fact [00:00] mine is currently broke [00:00] as a result [00:00] yep, understood.. many do. Just not me :P [00:01] i dont use osx because im stupid (as the win/linux people say), but because im lazy... in that regard, at least. [00:01] I think windows it the 'hardest' of the lot [00:01] overall anyway [00:02] well part of it is that i dont like the whole open source philosophy [00:02] oh you don't? [00:02] aw okay [00:02] no. Sharing code and such is wonderful... it really is... im all about sharing knowledge [00:03] But when software A depends on software B being version x, and software C depends on software B being version y, and something breaks... ARGH. [00:04] Similar situation with java... i could run my packetshaper gui, but not my firewall gui, because each depended on a different version of java being installed. drove me nuts having to run a VM for one of them [00:04] kind of an offtopic example, but same idea [00:05] I think "dependencies" is high up there in the Reasons for Computer Frustration "Hall of Fame" [00:07] As I've always said "Linux works great, until it doesnt" [00:08] I always hear about how well ubuntu works and how easy it is... which is fine, until something breaks. Then you're screwed. [00:08] Unless you know what you're doing. [00:08] lol.. in which case you are not screwed [00:08] bit of a conundrum that [00:09] so basically, IPv6Freely, you are saying RTFM? [00:09] :) [00:09] But an OS thats supposedly computer illiterate friendly and so easy to use that requires you to know what youre doing to fix problems... well.. thats kind of a contradiction [00:09] hmm up_the_irons have you ever put NetBSD on a vps for anyone? [00:09] nesta: no [00:10] up_the_irons: make my damn vps :P [00:10] <3 [00:10] okay, do you know is the IPV6 setup on OpenBSD similar to that on FreeBSD ? [00:10] google is not much use atm :S [00:11] mmm native ipv6 on arp... woot [00:11] IPv6Freely: patience patience. i have a large order in front of you, an existing customer ordered 6 more VMs. After I'm done with that order, I'll move into yours and the others I got this morning [00:11] yes, it rox my sox [00:11] IPv6Freely: :) [00:11] oh darn. no worries i guess [00:11] nesta: it is not really the same, config files are very different [00:12] yeah [00:12] IPv6Freely: you'll be set up in the next couple hours though, no problem [00:12] okay I guess it is re-install time for me hehe [00:12] * up_the_irons gets back to work [00:12] damn MAC/ACL have screwed me [00:12] ;-/ [00:12] no problem up_the_irons ill be asleep im sure. :) [00:13] :) [00:14] 64-bit fbsd8 right? [00:15] yeah [00:15] cool [00:16] *** nakano_ is now known as nakano [00:36] * nesta twiddles thumbs while the OS re-installs [01:01] *** LT has joined #arpnetworks [01:02] *** Lefty has joined #arpnetworks [01:07] IPv6Freely: your VPS is baking... [01:08] mmmh baked VPS [01:08] yummy [01:11] *** schmir has joined #arpnetworks [01:20] wooooo [01:24] what do you guys use for vnc on osx? [01:24] IPv6Freely: use chicken of the vnc [01:24] it's the only one that works lol [01:24] no copy paste function [01:24] k [01:32] stupid question time [01:32] how do i use F12 with a mac keybord? function+F12 just brings up my osx dashboard :S [01:32] *** Lefty has quit IRC (Remote host closed the connection) [01:36] got it, just unmapped function+F12 since F4 does dashboard anyway [01:38] heh so much for following that zfs tutorial [01:39] IPv6Freely: ZFS tutorial no good? [01:39] i try gpart destroy ad0 and it says device busy [01:41] i c [01:41] i suck at the internet [01:41] haha [01:42] i guess i cant follow this word for word afterall [01:45] *** Lefty has joined #arpnetworks [01:45] aha! magic [01:46] "gpart delete -i 1 ad0" first :) [01:46] apparently i win at the internet... or at least my google-fu is strong [01:49] you are funny and silly hehe :P [02:13] damn it, i got it to work all the way down to "zfs unmount -a" [02:22] wooo all done [02:39] * dxtr just came back from work [04:42] *** ziyourenxiang has joined #arpnetworks [05:51] argh [05:51] up_the_irons: are you around? [06:21] *** ziyourenxiang has quit IRC (Quit: ziyourenxiang) [06:32] *** rVn_- has quit IRC (Quit: bye.) [07:08] *** schmir has quit IRC (Remote host closed the connection) [07:19] *** schmir has joined #arpnetworks [07:20] *** schmir has quit IRC (Remote host closed the connection) [07:47] *** vtoms has joined #arpnetworks [07:57] *** RandalSchwartz has joined #arpnetworks [07:57] where is the server physically located? I'm updating my geo record for stonehenge.com [07:57] wilshire annex, or something like that [08:13] Is there an easy way to do dynamic DNS with BIND? [08:19] from dhcp or something else? [08:38] it would have to be a remote update client. [08:38] Similar to the way dyndns or no-ip works. [08:39] a bit of googling - http://www.oceanwave.com/technical-resources/unix-admin/nsupdate.html [08:39] You Too can Google On Your Own for such Tasty Treats!(tm) [08:39] oh - nsupdate would be my recommendation [08:40] http://linux.yyz.us/nsupdate/ [08:40] I just googled for "bind dyndns" [08:40] many hundreds of hits [08:40] is a useful link [08:47] Cool. [08:47] Or... are there any services out there that will not charge me to delegate a subdomain for dynamic DNs. [08:47] i do it the cheating way [08:47] freedns.afraid.org looks promising. [08:48] also, they run FreeBSD. [08:48] CNAME? :) [08:48] :) [08:48] saves a lot of hassle ;) [08:55] yeh. maybe I should just do that. lots easier. [09:00] *** nakano is now known as nakano_ [09:17] *** LT has quit IRC (Quit: Leaving) [11:03] *** vtoms has quit IRC (Quit: Leaving.) [11:07] *** vtoms has joined #arpnetworks [11:15] sooo... i did the zfs freebsd tutorial, but now no ssh to my vps :( [11:19] anyone who can answer a possibly dumbassed xmonad question? [11:20] IPv6Freely - did you remember to enable ssh? :) [11:20] you have to add that to /etc/rc.conf [11:20] installed it on the current ubuntu. The xmonad xsession it sets up works, but is ... barren. Xmonad doesn't seem particularly happy running inside of gnome though. When I change the wm from metacity -> xmonad with gconftool it ... works... sort of? As soon as gnome starts it seems to trample all over xmonad though. [11:21] draws the background over xmonad, hijacks keyboard etc. [11:21] ... sshd_enable=YES [11:21] you should be able to log in on the console though [11:21] that's not ssh [11:21] even though you're sshing to get there. :) [11:22] * RandalSchwartz stops talking until IPv6Freely faces this way again [11:22] RandalSchwartz: haha nope, never put that in. [11:22] im used to default installs where everything is just done for you in sysinstall :P [11:22] so you should be able to access the login prompt on the console [11:22] yea console is no problem [11:22] and login as root from there [11:22] then fix everything else [11:23] ok freebsd noob question - can i apply the changes i made in rc.conf without rebooting? [11:24] sorta [11:24] if you know which rc.d they map to, yes [11:24] you can say /etc/rc.d/sshd start, for example [11:25] for something installed from ports, it's in /usr/local/etc/rc.d/something [11:26] with a few exceptions, MUMBLE_enable maps to [/usr/local]/etc/rc.d/MUMBLE start [11:26] yea i know about that stuff [11:26] so its just a matter of manually starting whichever daemon ive changed [11:26] I imagine you could just run /etc/rc, but that might have nasty second-time consequences [11:26] fair enough, thanks [11:27] I never trust running initialization twice :) [11:27] yeah understood [11:27] * RandalSchwartz wanders off [11:28] haha thanks man :) ssh working now [11:30] crisis averted. [11:30] * jdoe stabs haskell [11:49] *** cedwards has quit IRC (Changing host) [11:49] *** cedwards has joined #arpnetworks [11:55] *** vtoms has quit IRC (Quit: Leaving.) [11:57] ... and somehow it broke sound. Haha. [12:08] *** vtoms has joined #arpnetworks [12:24] yeh [12:24] don't run /etc/rc :) [12:24] It does a lot of things. [12:24] some of which you may not want ) [12:33] especially if you're remotely connected ;) [12:34] hahah right.l [12:37] wb RandalSchwartz [12:54] mmm does anyone here know.. if I install a base 8.0 system can I just csup source for 8.1 and upgrade straight to it or do I have to update the 8.0 first and then go to 8.1 ? [12:55] I didn't see anything in the 8.1 release notes that would imply that you had to be at the very latest 8.0 [12:56] ... http://www.freebsd.org/releases/8.1R/announce.html [12:56] cheers RandalSchwartz [12:56] I musta done some voodoo on my install yesterday, no idea why it went all pear shaped [12:56] hehe [12:56] try try again as they s ay [12:57] and this - http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html [12:57] and /usr/src/UPDATING, apparently [12:57] poop. [12:57] shit. [12:57] *** awyeah has quit IRC (Quit: EPIC5-1.1.2[1638] - amnesiac : A)bort, R)etry, I)gnore, V)alium?) [12:57] yeah I can buildworld in my sleep pretty much [12:58] but post install things were very odd [12:58] nice quit msg there [12:58] *** awyeah has joined #arpnetworks [12:59] wb awyeah [12:59] Something got screwed up with my terminal and I couldn't fix it. [13:00] and why the hell do I not ever resolve [13:00] Can any of you resolve my address to the proper hostname? [13:00] what's your address? :) [13:00] oh [13:00] 2607:f2f8:7400::2 [13:01] yes it resolves for me [13:01] did you get DNS delegated yet? [13:01] Non-authoritative answer: [13:01] 2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.7.8.f.2.f.7.0.6.2.ip6.arpa name = excelsior6.awyeah.net. [13:02] Yeah. then why can't freenode resolve it. [13:02] I got NXDOMAIN for that same query [13:02] wtf. [13:02] so maybe it depends on which nameserver [13:02] does ZFS work with multiple partitions? [13:02] Weird. I haven't updated my DNS in a long time. [13:02] RandalSchwartz - can you dig it? [13:02] do you have a secondary that isn't refreshing? [13:02] what's the dig syntax? [13:03] dig 2607:f2f8:7400::2 AAAA [13:03] i need to get dns working for ipv6 on my vps [13:03] yeh dig is not work for me awyeah [13:03] yeah dig can't find either [13:03] So you got NXDOMAIN on dig? [13:03] hrmph. [13:03] nslookup worked for me though [13:04] I get no answer [13:04] how does dig show NXDOMAIN? [13:04] sorry, I always use "host" not "dig" now [13:05] dig doesn't even work for me when I use @localhost on my box. [13:05] weird. [13:05] hah - this time with +trace on, I see it goes to arp, and arp delegates to 206.125.173.26 and 202.157.182.142 [13:05] maybe one of those aren't refreshed [13:06] i need to buy a domain name to use with my vps [13:06] all of my domains suck :-/ [13:06] hehe [13:07] I was drunk when I bought most of them [13:07] i really want to get ipv6 going on mine, but i dont know how ipv6 dns works [13:08] ahh - this is interesting - http://www.intodns.com/0.0.4.7.8.f.2.f.7.0.6.2.ip6.arpa [13:08] but id absolutely love having a website on ipv6 :) [13:08] see the red fails down below [13:08] ns1.awyeah.net is not responding to dns [13:09] hmmmmm [13:09] i could do ipv6freely.com :P [13:16] Still can't figure out what's going on. weird. [13:19] you mean you think ns1.awyeah.net is responding? [13:19] or you don't know why it isn't? [13:19] what part of "what's going on" are you missing? [13:21] I'm pretty sure the nameserver is responding, try again (it's the box I'm on, and when I loaded the intodns.com page it worked) [13:21] i'm also having issues with my dig syntax [13:21] dig +trace stopped before finishing too [13:21] hrm. [13:22] gave two nameservers for 0.0.4.7.8.f.2.f.7.0.6.2.ip6.arpa. [13:22] but then nothing past them [13:22] what was your full command line? [13:23] oops - getting pulled into meeting [13:23] sorry [13:26] well first, I had a bad record in the forward DNS for awyeah.net. [13:37] according to http://dnssy.com/report.php?q=0.0.4.7.8.f.2.f.7.0.6.2.IP6.ARPA [13:37] the NS records are different between my stuff and ARP's stuff [13:38] and crappers, my nameserver didn't appear to return an SOA record. [14:00] *** vtoms has quit IRC (Remote host closed the connection) [14:00] *** vtoms has joined #arpnetworks [14:00] *** vtoms has left [14:17] *** schmir has joined #arpnetworks [14:20] jdoe: xmonad works great with gnome on Lucid, but I didn't enable it with gconftool. Instead I followed: http://www.haskell.org/haskellwiki/Xmonad/Using_xmonad_in_Gnome under "2.1 A Simple Hybrid Alternative" [14:21] RandalSchwartz: server is physically located at: 900 N. Alameda, Los Angeles, CA 90012 [14:33] *** vtoms has joined #arpnetworks [14:33] *** vtoms has left [14:34] cool. now I just need to get lat/lon for that [14:34] up_the_irons: Hey, could you check something for me real quick+ [14:34] 34.058682, -118.235303 [14:35] and now convert that to HMS [14:38] up_the_irons! Fine! Ignore me then .) [14:41] 03-Aug-2010 14:43:12.646 security: info: client 173.88.161.245#64606: query (cache) '2607:f2f8:7400::2/PTR/IN' denied [14:41] Why the hell is it denying! [14:41] up_the_irons: yeah that wasn't the issue. [14:41] I wonder if it thinks it isn't authoritative for that. [14:41] up_the_irons: if I started xmonad from "xmonad.desktop" it worked fine, and fucked up as soon as I ran /etc/X11/Xsession or whatever. [14:42] I needed to tweak xmonad.hs to tell it to give space for the gnome panels etc. [14:45] jdoe: ah yeah, import GnomeConfig or some shit [14:45] i had to do that too [14:46] You said shit! [14:46] shit [14:46] You said shit! [14:46] ... [14:46] * dxtr giggles [14:47] shitshitshitshitshit [14:47] :( [14:47] You couldn't be awesome and see if you actually got my money? I got a receipt but can't for the love of god find something to you in my bank log [14:47] up_the_irons [14:48] dxtr: if you got a receipt, you were charged [14:48] well then [14:48] Problem solved :P [14:48] up_the_irons: not sure if GnomeConfig alone does it, or if I needed the manageHooks crap [14:48] either way, it was a disappointing experience with a distro package :P [14:49] jdoe: you need a couple other lines, yeah [14:50] *** IPv6Free1y has joined #arpnetworks [14:50] ahoy [14:51] *** IPv6Freely has quit IRC (Quit: leaving) [14:51] *** IPv6Free1y is now known as IPv6Freely [14:51] *** IPv6Freely has quit IRC (Changing host) [14:51] *** IPv6Freely has joined #arpnetworks [14:52] up_the_irons: yeah I dunno. I'm sure I'll give it another shot, xmonad.hs is just so ... it makes perl look like prose. [14:52] I needed to stop fucking around and get some work done :P [14:53] jdoe: LOL. Haskell is funny, you either love it or hate it. All the funny operators go over my head. i'm just smart enough to copy & paste the right stuff, and change some lines to do what i want [14:54] up_the_irons: it's not really that I love it or hate it, it's that it means nothing to me. [14:54] up_the_irons: so I can cut and paste shit from the example configs and have it mostly work. Maybe. And have no idea what any of it actually does. [14:54] ie "layoutHook = avoidStruts $ layoutHook gnomeConfig" [14:54] wtf is that. [14:54] jdoe: welcome to xmonad :) [14:54] no kidding. [14:54] haha. [14:54] jdoe: yeah, no idea; it just seems to work :) [14:55] Haskell makes Perl look sane. :) [14:56] Or is it Perl that makes Haskell look insane? [14:56] or <+> which I gather is some sort of operator, but... no idea what it does. [14:57] it's a tie fighter :) [14:57] jdoe: i'm still wondering what "|||" does ;) [14:58] "illogical or" [14:58] double wall [14:59] lol [14:59] hi up_the_irons [14:59] "illogical or", I like that. [14:59] sorry for all this messing [14:59] ;/ [14:59] ie. OpenBSD requests [14:59] lol [15:03] bbiab [15:06] what. the. hell! [15:07] I think my nameserver thinks it isn't authoritative for the reverse stuff. [15:07] When I do allow-recursion { any }; - then I try to look it up, i get NXDOMAIN [15:07] otherwise it refuses it [15:12] *** nuke` has quit IRC (Ping timeout: 240 seconds) [15:13] *** schmir has quit IRC (Ping timeout: 258 seconds) [15:17] * awyeah gives up [15:27] Okay. So it doesn't think it's authoritative for any of my reverse zones. [15:27] But all of my forward zones are A-OKAY [15:30] awyeah - can you pastebin the relevant lines from your masterconf [15:31] wooo irssi on my new vps [15:31] zone "0.8.0.3.8.f.2.f.7.0.6.2.ip6.arpa" { type master; file "master/2607:f2f8:3080"; }; [15:31] that's what I have [15:32] RandalSchwartz: is that your zfs tutorial? [15:33] no - this is to help awyeah [15:33] no im askig if you wrote that [15:33] nope. where is it? [15:34] Ahh - it was cribbed from this channel though :) [15:34] oh. http://wiki.freebsd.org/RootOnZFS/GPTZFSBoot/ [15:34] I couldnt do the gpart destroy ad0 without doing gpart delete -i 1 ad0 first [15:34] I thought you meant this - http://wiki.arpnetworks.com/wiki/ZFSonFreeBSD [15:35] Yes - you have to add that. I should update that wiki page [15:35] since the disks come already configured [15:35] yea [15:35] also right at the end where it says "zfs unmount -a" i couldnt do that, said device busy [15:35] i could do all the set mountpoint lines too, except the legacy line [15:36] But... my install seems to be working [15:36] Yes that's my syntax as well [15:37] It also doesn't think it's authoritative for my IPv4 PTRs. [15:38] *** sbp_ has quit IRC (Quit: ( www.nnscript.com :: NoNameScript 4.22 :: www.esnation.com )) [15:39] IPv6Freely - did you cd out of zroot [15:39] and were you also out of the chroot shell? [15:39] perhaps you didn't exit the chroot shell [15:39] awyeah - can you pastbin your zone file? [15:39] maybe I can compare it to mine [15:40] RandalSchwartz: i typed everything exactly as written [15:41] Not that that answers your questions, but yeah. [15:41] omfg. [15:41] dig @localhost -t PTR 2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.7.8.f.2.f.7.0.6.2.IP6.ARPA [15:41] Oh well, the only thing i wasnt able to do is "zfs set mountpoint=legacy zroot", but my install seems to be working fine [15:42] ;; ANSWER SECTION: [15:42] 2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.7.8.f.2.f.7.0.6.2.IP6.ARPA. 172800 IN PTR excelsior6.awyeah.net. [15:42] it probably presumed legacy, or something [15:45] *** UncooL has joined #arpnetworks [15:45] Anyway, so I'm pretty sure that I am configured properly now. [15:45] up_the_irons - any chance you can check your reverse delegation for the subnets assigned to my VPS? [15:49] awyeah - my dig worked [15:49] no wait [15:49] failed [15:49] no - worked [15:49] darn it - I don't grok dig very well [15:50] heheh [15:50] *** UncooL has quit IRC (Quit: .) [15:50] *** awyeah has quit IRC (Quit: Reconnecting) [15:50] uh - weird. host failed [15:50] but dig worked [15:51] are you sure you have dots in the right places in your reverse? [15:51] *** awyeah has joined #arpnetworks [15:51] can you please paste your master zone somewhere? [15:51] it tried to look up a name under my default domain [15:51] which clearly, your name shoudln't be [15:52] just a quick sec. Check this out. [15:52] querying my own reverse worked fine [15:52] dig -x 2607:f2f8:7400::2 +trace [15:52] You get a good answer (excelsior6.awyeah.net) [15:52] if you don't do +trace, you don't get a good answer. [15:52] yeah, that's similar to what I'm seeing [15:53] I bet that when you use +trace, it goes and looks it up at each nameserver [15:53] when you don't, it just looks it up at your nameserver. [15:53] ahh, might be a bad cache [15:54] but still, something is different... because your names are trying to be looked up under my default domain [15:54] I think you left out a period somewhere. [15:54] it's easy to miss. [15:55] You *do* have '.' after all your NS hosts, right? [15:55] like for me, it's NS red.stonehenge.com. [15:55] and NS ns1.he.net. [15:55] Yes [15:55] note the ending periods [15:55] and then I have: [15:55] $ORIGIN 0.0.0.0.0.8.0.3.8.f.2.f.7.0.6.2.ip6.arpa. 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 IN PTR red.stonehenge.com. [15:56] ugh [15:56] ffs [15:56] hi up_the_irons :( [15:56] that's so I don't have to have all those 0's :) [15:56] I remember having to count them though. :) [15:56] Yeah I mean I'm fairly familiar with the syntax... I'm pretty sure it's correct, named-checkzone gives me no errors [15:56] must be a cache then [15:56] and my server does appear to be answering authoriitatively [15:56] authoritatively [15:56] you're hosed until TTL :) [15:56] yeah [15:56] I hope it was a low TTL [15:57] try dig @excelsior.awyeah.net -x 2607:f2f8:7400::2 [15:57] wow - a lot of the top-level nameservers are talking to me in v6 [15:57] nice [15:57] especially since he.net says in general, v6 is faster than v4 [15:58] probably thanks to he.net :) [15:58] anyway, back to $DAYJOB [16:04] *** nuke` has joined #arpnetworks [16:06] /wii nuke` [16:06] wah [16:06] :) [16:07] cool so i have this vps [16:07] now... what to do with it... [16:09] is it FreeBSD ? [16:09] of course :) [16:10] well you should update to the newest release, get the latest patches [16:10] well thats no fun :P [16:11] there is a FreeBSD exploit for the all unpatched ones at the moment [16:11] local root [16:11] it's advisable :) [16:11] bah. ill have to look into doing that, im assuming its not like it used to be [16:12] hehe [16:14] I made this wayyyyy back. its not still done like this is it? http://3fives.com/tmp/freebsd.html [16:16] http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html [16:16] use the Handbook [16:16] looks pretty much the same [16:17] uhhh [16:17] no [16:17] okay, it does to me [16:17] okay [16:19] meh, ill do all that when i really have nothing better to do [16:20] it's fun if you ask me [16:20] but whatever [16:20] heh thats far from fun :P [16:20] I wouldn't go around adding any users until you do though [16:20] it's fun for me :) [16:20] i just have my user and my root user [16:20] since you cant ssh as root :P [16:20] ah okay [16:21] well you _can_ [16:21] but [16:21] not advisable [16:21] because of the security hole? [16:21] sure [16:21] k [16:21] more /usr/src/UPDATING [16:21] I mean if you ssh keys I _suppose_ it's "okay" [16:21] but I still would not [16:22] until ive updated you mean? [16:22] hm? no I just mean you could use ssh keys to ssh in as root because then no one could sniff a pass [16:23] but it's not advisable nonetheless [16:25] oh gotcha [16:25] okay so i should follow that rebuilding world part of the handbook top to bottom [16:26] yes sir, at the moment I am having issues but generally that *just works* [16:26] I am noobin it up at the moment [16:26] :'( [16:26] why does it have the makekernel stuff at the top and then again half way down? [16:26] well it gives a few example [16:26] s [16:26] diff scenarios [16:26] im very confused [16:27] 24.7.1 tells you do the buildworld and buildkernel, and then 24.7.7.2 has you doing make buildworld again [16:27] it is kinda confusing but basically its just, make buildkernel && make buildworld && make installkernel && reboot to single user && cd /usr/src && mergemaster -p && make installworld && mergemaster && Reboot [16:27] yeah its just different ways [16:27] if you read closely [16:28] jesus christ this stuff is way too complicated [16:40] Do you guys have any pro-tip for backing up configuration files? [16:40] rsync /usr/local/etc and /etc to somewhere? [16:41] dxtr: I just tar them up and bring em home with scp [16:41] nesta: Well I have a lot of configuration files :D [16:42] Thing is I didn't know about that local root exploit. Now I've got to re-install my VPS(!!!) just to be sure [16:42] And firsthing I do is update it [16:43] tar -cvvpzf /usr/backup/localetc.tar.gz /usr/local/etc& [16:43] etc [16:43] thats what I do [16:43] then chown then .gz's to a user and scp them home [16:43] I tend to do things a bit funny though so :) [16:43] ymmv [16:44] Hehe [16:57] ... alright... been mostly productive... time to fuck around with xmonad again... [16:58] xmonad is cool [16:58] wtf, irssi just said "day changed to 04 Aug 2010"... wtf timezone is this in [16:59] GMT-1? :P [16:59] fail [16:59] depends on what ya set it to [16:59] :P [16:59] UTC [16:59] i set it to PDT last night. its definitely not midnight PDT [17:00] aka "real time" :P [17:00] the One True Time :) [17:00] at least you didn't set it to swatch time :) [17:01] IPv6Freely - what does "date" say? [17:01] jdoe: since i went through the xmonad dance again recently, here's my build log of xmonad on my netbook: http://pastie.org/private/afxnwva4wjujbxb4k4laxw [17:01] might help, might not; take what you like [17:01] Wed Aug 4 00:03:44 PDT 2010 [17:02] yeah, that's wrong [17:02] heh [17:02] ntpdate ntp.pool.org [17:02] that'll snap it to the right time for now [17:02] just hope you haven't done any makes for a while [17:02] yea looking at ntp config in the handbook [17:02] ntp is already configged [17:02] just enable it [17:02] ntpdate_enable=YES [17:03] ntpd_enable=YES [17:03] then /etc/rc.d/ntpd start [17:03] do NOT edit the ntp conf file [17:03] it's already correct out of the box [17:03] Where do I start if I'd like to reinstall? [17:04] I mean, where do I insert the CD? :P [17:04] tharrr we go. [17:04] the DVD is already installed [17:04] I know the rest [17:04] just hit f12 during boot up [17:04] Oh, neat [17:04] and remember to wipe ad0 :) [17:04] thanks RandalSchwartz i was doing that as you were typing it ;) [17:04] up_the_irons: right on, thanks. I'm trying to preserve as much of gnome as I can though, I just want something better than metacity :) [17:04] RandalSchwartz: dd if=/dev/zero of=/dev/ad0? :P [17:05] up_the_irons: ... so if you have any xmonad.hs-fu that's not specific to dzen, gwmenu or whatever I'm all ears. [17:05] Tue Aug 3 17:06:09 PDT 2010 yay [17:05] not really necessary, unless you have hostile local root users [17:05] in which case, you have a bigger problem [17:05] it'd have to be someone who can read the raw disk [17:06] otherwise, freebsd does a pretty good job of handing you zeros on new blocks [17:06] RandalSchwartz: Well, I'm installing because I might've gotten my VPS rooted (Here I was thinking FBSD 8.0-RELEASE was kind of safe :P) [17:06] right - but you're wiping it [17:06] as in, new install [17:06] RandalSchwartz: something I used to like doing was going to linode, provisioning a new machine with the smallest disk I could get away with (like a 400MB debian install or wahtever) and then creating a virtual disk with the rest of my quota [17:06] Yeah [17:06] the bits that aren't part of the blocks are meaningless [17:06] ... and scraping it for ssh keys, gnupg keyrings etc. [17:06] apparently linode doesn't/doesn't wipe disk before providing it to users. [17:07] ewww ouch [17:07] (I just did it as a PoC, no malicious intent) [17:07] remind me to continue to not recommend linode :) [17:07] I dunno. [17:07] I recommend here now. [17:07] but if someone doesn't like it for whatever reason, I still recommend linode. [17:08] * IPv6Freely completely lost [17:08] (arpnetworks has more of a small-company feel, some people are skittish about that) [17:08] IPv6Freely? what are you lost about now? [17:08] whatever you guys are talking about [17:08] it's not for you then. :) [17:08] clearly :) [17:08] dxtr: fbsd 8.0 IS safe. You did something to fuck it up ;) [17:08] (probably) [17:09] jdoe: Well, local root exploits are making me paranoid ;) [17:09] you have untrusted local users? [17:09] I guess I'm lucky that way [17:09] all my local users are trusted [17:09] they all have root too :) [17:10] RandalSchwartz: Well, one [17:11] dxtr: there haven't been many of those in 8. I think there's been one or two things that required a reboot. freebsd-update is your friend. You DO cron it, right? ;) [17:11] you should put that untrusted user in his own jail :) [17:12] RandalSchwartz: Yeah, "I'll do that later" :D [17:12] Have been my motto for a couple of weeks [17:12] haha. [17:12] jailing probably isn't a silver bullet if it's an escalation in the kernel, but it's... generally a good idea. [17:15] * RandalSchwartz wanders off [17:30] up_the_irons: you got some props here: http://news.ycombinator.com/item?id=1569559 [18:12] *** cmeiklejohn has quit IRC (Quit: leaving) [18:14] up_the_irons :p [18:14] *** dxtr has quit IRC (Remote host closed the connection) [18:14] *** dxtrr has joined #arpnetworks [18:18] *** cmeiklejohn has joined #arpnetworks [18:32] *** dxtrr has quit IRC (Quit: Reconnecting) [18:32] *** dxtr has joined #arpnetworks [18:38] cmeiklejohn: fuck hackernews :P [18:39] that site/feed is such garbage. [18:39] ... props are awesome and all, I just felt like venting some HN rage ;) [18:40] heh [18:40] ok then. [18:42] *** dxtr has quit IRC (Read error: Operation timed out) [18:42] *** dxtr has joined #arpnetworks [18:47] *** dxtr has quit IRC (Read error: Operation timed out) [18:50] *** dxtr has joined #arpnetworks [19:10] hey he.net has a DNS service now. [19:10] * awyeah adds another slave [19:10] any idea how i manually set my nameservers for my v6 and v4 reverse? [19:10] cmeiklejohn: ah cool! [19:11] yeah, I'm moving all of my domains to he.net [19:11] one at a time of course [19:11] thats what i wanna use :P [19:11] I'm just going to use them as a slave for now, I like bind. [19:11] bind doesn't like me. [19:11] but I like bind. [19:11] especailly because you get *five* slaves all over the *world* for free [19:11] ive got all my stuff there. [19:11] fast fast slaves [19:11] all but one are v6 too [19:12] now if up_the_irons would fix my reverse, I coudl advance to the *next* level on the ipv6 certification [19:13] RandalSchwartz: I got my stuff there too -- got my Sage cert too ;) [19:13] wait, they slave on *all* their DNS servers? [19:14] Yes. [19:14] host -t ns stonehenge.com [19:14] my stuff is in six places around the world [19:14] I'm up to profession, waiting on guru [19:14] professional [19:14] RandalSchwartz: cool [19:17] hmmmm [19:17] awyeah: hrmm/ [19:17] ? [19:18] hi [19:20] i probably have kids in more countries. [19:21] smokey: ? [19:21] o/~ I've got friends... in low places... o/~ [19:22] where the whiskey drowns .. [19:22] glenlivet here. [19:22] 12 years old. [19:22] <3 [19:23] shopping for more cigars now... [19:23] "I like my whiskey like I like my women..." :) [19:23] really? cheap and nasty? [19:23] "18 year old" [19:24] glennfiddich has an 18 year old single malt i think [19:24] they do [19:24] The Macallan 25. Nectar of the GOds [19:24] the green bottle [19:24] $450 a fifth [19:24] and worth the $20/shot [19:24] ? [19:25] smokey? [19:25] jdoe said my name... [19:25] i like nice cigars to much to bother with spending to much on single malt scotch/whiskey ....single malt is good enough... i am partial to makers mark and glenlivet... [19:25] oh [19:25] the makers mark cigars are awesome to. [19:25] lol [19:26] lol [19:26] * jdoe is a CERTIFIED IPV6 NEWBIE [19:26] same here :x [19:26] smokey: you were asking you to set nameservers for reverse. [19:26] smokey: and I was asking (poorly) for you to elaborate ;) [19:27] ipv6 is crap...noone uses it...maybe 10% of the internet even has access to ipv6 natively right now....from their own isps.... [19:27] right now my v4/v6 use ns1/2.arpnetworks.com i'd like to switch em to ns(1-5).he.net [19:27] time to eat. [19:27] i submitted a ticket..now i wait! [19:28] ive lived in 5 states over the past 3 years ...and never had an isp offer native ipv6 [19:28] :/ [19:29] and setting up ipv6 tunnel is justmore trouble than its worth.. [19:30] twiggz - your (minority) opinion is noted, and will go on your permanent record. [19:30] * RandalSchwartz grins [19:30] truth is, we're outta v4 in a year or so [19:30] and yes, major ISPs are spinning up v6 projects [19:30] thats what they say, sure. [19:31] and have you seen tunnelbroker.net? [19:31] you can have a v6 tunnel in about 10 minutes [19:31] and sure, "spinning up" does not = OFFERING IPv6 [19:31] or miredo, to get a tunnel anywhere you're natted [19:31] so... [19:31] twiggz - you live in the US, apparently [19:31] yes, i do. [19:31] internationally, the story is different [19:31] i know. [19:31] the US is hogging most of the remaining v4 [19:32] because we know we're backwards :) [19:32] RandalSchwartz: seems unlikely, there's still a ton of space that can be reclaimed. [19:32] (re: running out) [19:32] we also get to have guns. [19:32] jdoe - not politically [19:32] damn us! [19:32] not politically? I'm talking about reserved blocks, not assigned /8s [19:33] the reserved blocks are running out [19:33] about a year left [19:33] thats what they said a year ago [19:33] sorry, its true. [19:33] heh, yes, we've been running out for quite some time. [19:33] ... and while I'm sure it's coming soon, I don't think it's coming *that* soon. [19:33] a year ago they said "we wont have any left in a year" [19:33] it has slowed down a bit [19:33] a year passes....i still get ipv4 addys [19:33] but it won't *keep* slowing down [19:34] the recession helped. :) [19:34] best guess is 322 days now [19:34] under a year [19:34] ill bet you money [19:34] for real [19:35] noones running out of ipv4 addys in 322 days [19:35] hell [19:35] ill give you 340 dys. [19:35] shit, i should give you a year. [19:35] probably two... [19:36] if ipv4 addys were so scarse ...my isp would have a real problem with giving each of my 6 pcs and laptops in the house their own ipv4 address... [19:40] if i hooked up another hub to the hub i have...id get more ipv4 addys ...lol.. [19:41] no need for it...i dont have enough boxen. [19:43] or fingers? [19:48] kvm switches are useful :) [19:51] but yea, "ill bet a fiddle of gold against your soul" that in a year noones running out of ipv4 addys. [19:52] we heard ya [19:52] good. [19:52] ;p [19:52] since that statement is already false, you already lose [19:52] you have to justify wanting a /27 or bigger these days [19:53] all the way up to ARIN [19:53] haha, you cant possibly know its false. [19:53] I just gave my evidence [19:53] you are guessing. [19:53] no - that's fact [19:53] and so is arin. [19:53] ask up_the_irons [19:53] anyway, you've proven your ignorance. we can stop now [19:54] ok, we'll see in a year [19:54] they said the same crap last year [19:54] it didnt happen [19:54] lol [19:57] hrm [19:58] truth is, people are always going to be getting laid off, fired, quitting jobs.....and not being able to afford their internet ......the economy is not getting any better here.....so its a safe bet...in a year they will still not have run out of ipv4 addresses no matter what up_the_irons or arin says. [19:58] bet me money. [19:59] troll is obvious troll. [19:59] only thing worse than a troll is a fail troll [19:59] :-X [19:59] sorry, im not the one calling people names. [19:59] not to mention im right. [19:59] np [19:59] you must have thought I was referring to you then? [20:00] ...ahh [20:00] :) [20:00] just because some op in this channel and arin guesses so does not make his arguement correct. [20:00] hehe [20:00] covering my ass :) [20:00] i dont care what you think of me. [20:00] *** j3m has quit IRC (Read error: Operation timed out) [20:00] ipv4 does not care what you think of it either [20:00] yep. [20:00] *** j3m has joined #arpnetworks [20:00] thats why it will still be available a year from now. [20:01] so why all the to do [20:01] :D [20:01] nice blog [20:01] dont worry, i like my arp vps...ill be around for atleast a year (im sure you hope not), so we'll see. [20:02] i dont think i have a blog. [20:02] i have a ning social network for my irc network...and posted a few bits on it....but i dont blog.. [20:03] if i blogged....id also have to carry a pastel colored powerbook to barnes n nobles every weekend... [20:04] (or put apple made POS *book in place of powerbook) [20:04] * twiggz shrugs [20:07] *** j3m has quit IRC (Ping timeout: 240 seconds) [20:11] *** j3m has joined #arpnetworks [20:33] lol [20:48] "ARIN, RIPE and APNIC, and the Internet community are conducting discussions on the question whether organizations that require IPv4 addresses can acquire them from other organizations." [20:48] man I hope they kill that. A market for IPv4 addresses is pretty much the worst possible way to address this. [20:48] Yup [20:49] speculating in the spot market on a /17 :) [20:51] and certain legacy organizations with /8's would make out like banshees [20:51] not really fair [20:52] comcast would reassign me from its 4/8 pool hourly [20:52] "no packet for an hour? you lose your address!" [20:52] DHCP valid times of 90 seconds :) [21:08] *** nesta has quit IRC (Quit: leaving) [21:08] *** nesta has joined #arpnetworks [21:14] yeah. [21:14] haha. When I requested an IPv6 allocation (incorrectly, but whatever) my provider thanked me for using it. [21:14] I lol'd. [21:17] I have, I think 3 or 4 ipv6 /48's now [21:17] so I can enumerate all the grains of sand in the earth a few times over. :) [21:28] I asked for a /64 because honestly I'm just going to fuck around. [21:28] up_the_irons is of course correct and I should have requested a /48 [21:29] yeah - you get a /64 just for the routed tunnel :) [21:29] the rest of /48 [21:29] is for all of your dinking around [21:32] yep. [21:32] oh well. [21:32] I can always bug them, they haven't actually GIVEN me the allocation yet. [21:33] hrm. [21:33] * jdoe stabs the he ipv6 thing. [21:34] I don't tunnel to home and links doesn't have js. I'll be a newbie forever ;) [21:50] *** nesta has quit IRC (Remote host closed the connection) [21:54] *** nesta has joined #arpnetworks [23:06] *** adxp has joined #arpnetworks [23:06] any staff here? [23:16] *** schmir has joined #arpnetworks [23:30] *** adxp has quit IRC (Read error: Connection reset by peer) [23:30] *** adxp has joined #arpnetworks