[00:03] *** smokey has quit IRC (Ping timeout: 260 seconds) [00:10] i wonder if he was doing a survey [00:19] *** IPv6Freely has quit IRC (Remote host closed the connection) [00:21] *** adxp has quit IRC (Read error: Connection reset by peer) [00:21] *** adxp has joined #arpnetworks [00:41] *** nesta has quit IRC (Remote host closed the connection) [00:46] *** nakano_ is now known as nakano [00:54] *** nesta has joined #arpnetworks [00:55] *** nesta has quit IRC (Client Quit) [00:55] *** nesta has joined #arpnetworks [00:58] *** LT has joined #arpnetworks [01:19] *** dbgi-- has joined #arpnetworks [01:20] *** adxp has quit IRC (Read error: Connection reset by peer) [01:21] *** adxp has joined #arpnetworks [01:23] *** dbgi has quit IRC (Ping timeout: 276 seconds) [02:19] *** dbgi-- is now known as dbgi [02:19] *** dbgi has quit IRC (Changing host) [02:19] *** dbgi has joined #arpnetworks [02:23] *** adxp has quit IRC (Read error: Connection reset by peer) [02:23] *** adxp has joined #arpnetworks [02:26] *** schmir has quit IRC (*.net *.split) [02:26] *** jn has quit IRC (*.net *.split) [02:27] *** jn has joined #arpnetworks [02:40] *** schmir has joined #arpnetworks [03:27] *** adxp has quit IRC (Read error: Connection reset by peer) [03:27] *** adxp has joined #arpnetworks [03:44] *** nuke` has quit IRC (Ping timeout: 258 seconds) [04:22] *** nuke` has joined #arpnetworks [04:28] *** adxp has quit IRC (Read error: Connection reset by peer) [04:28] *** adxp has joined #arpnetworks [05:16] *** adxp has quit IRC (Read error: Connection reset by peer) [05:16] *** adxp has joined #arpnetworks [05:29] *** schmir has quit IRC (Remote host closed the connection) [05:53] *** ziyourenxiang has joined #arpnetworks [06:00] *** nakano is now known as nakano_ [06:06] *** schmir has joined #arpnetworks [06:07] *** adxp has quit IRC (Ping timeout: 276 seconds) [06:11] *** adxp has joined #arpnetworks [06:12] *** nakano_ is now known as nakano [06:23] *** schmir has quit IRC (Remote host closed the connection) [06:43] *** fink_ has joined #arpnetworks [06:48] mornin' [06:49] *** awyeah has quit IRC (Quit: Reconnecting) [06:49] *** awyeah has joined #arpnetworks [06:50] hrmph. [06:53] just upgraded my VPS to freebsd 8.1 \o/ [06:53] went smooth as it could, i love freebsd-update :) [06:53] zfs gpt boot? [06:53] nope [06:53] i'm not crazy [06:53] ahh, simpler. :) [06:53] :) [06:53] i need things to 'just work' [06:54] me too. but I like snapshots and rollbacks [06:54] oh yeah, zfs is nice... i'm just not happy to use it in production *just* yet [07:00] * RandalSchwartz wanders off to $DAYJOB [07:03] *** adxp has quit IRC (Read error: Connection reset by peer) [07:03] *** adxp has joined #arpnetworks [07:03] :q! [07:03] lol [07:05] *** dbgi has quit IRC () [07:11] So [07:11] How would I secure my fresh, new freebsd installation? [07:12] If I don't have enough space to jail my users [07:13] *** vtoms has joined #arpnetworks [07:13] on arpnetworks? should have enough space :-) [07:13] yeah - even the smallest plans can run a jail [07:13] they nullmount back to your existing /bin etc [07:13] or rather a bin built for all jails [07:13] dxtr: http://erdgeist.org/arts/software/ezjail/ [07:16] ezjail rocks [07:17] +1 [07:17] :D [07:18] dxtr: Get rid of the users [07:18] Then shutdown -h now [07:19] heh... I'm stuck on the guru level of he.net ipv6 certification [07:20] turns out, using he.net as a secondary for my domain is actually stopping me from getting he.net certification! [07:20] ns1.he.net is ipv4 only (!!!) [07:20] so my nameservers aren't all reachable from v6 [07:20] "a clever trap they have laid, and I fell for it!" [07:22] *** woremacx has quit IRC (Ping timeout: 260 seconds) [07:24] the handbook's method to construct jails is quite straightforward as well. [07:24] ezjail just makes it way easier to manage afterwards, plus bringing up a new jail just takes a few seconds [07:25] but yes, the handbook method is fine too if you're just after one or two standalone jails [07:31] bob^^: i've done both and i find ezjail really saves on the drudgework [07:32] agreed :) [07:34] i'll give it a try then. :-) [07:39] *** adxp has quit IRC (Read error: Connection reset by peer) [07:39] *** adxp has joined #arpnetworks [07:39] *** woremacx has joined #arpnetworks [07:57] Is it safe to compile a new kernel with a new cnofiguration without first rebuilding world? [07:57] It's the same version and everything. Just a different kernconf [07:57] if it's the same version and nothing's been updated, you'll be fine [07:57] Cool [07:57] just don't let kernel and world get out of step... Bad Things (tm) will happen [07:57] :) [07:58] Hehe [08:00] I don't need support for "USB Serial Devices", right? :P [08:00] are you using USB Serial Devices? [08:00] On the VPS? [08:00] you never said it was for your vps :) [08:00] i wouldn't think you'd need that, no [08:01] I thought it was obvious, sorry :) [08:01] :) [08:01] Do I need any USB support for thinks to function? [08:01] things* [08:01] i'm not sure [08:01] let me check on mine [08:01] yeah :) [08:01] i've not *noticed* any USB (apart from a usb mouse, but i don't need/use that nayway) [08:02] I wanna disable as much as possible [08:02] don't see anything in dmesg.boot that looks to use USB [08:03] you're not going to save a huge amount by removing those sorts of things though imho [08:03] these days i tend to run everything with GENERIC tbh [08:03] hehe [08:03] Just playing around :) [08:04] hehe [08:04] it's not quite the same as the old days where saving a couple of MBs made a huge difference when your box only had 16mb to start with :D [08:04] Hehe [08:05] yeah. I run GENERIC, but I change the name is all. [08:05] I used to bother pulling modules on my *old* sparc machine, but now it's not worth it. [08:05] exactly :) [08:11] cedwards, i suppose you don't use freebsd-update, since you rename GENERIC to something else? [08:11] *** adxp has quit IRC (Read error: Connection reset by peer) [08:11] *** adxp has joined #arpnetworks [08:13] i <3 freebsd-update so very much [08:18] ziyourenxiang: I build everything. [08:19] with ccache it really doesn't take long. On one machine I can do a kernel in <1m and world in <5m. [08:20] i like freebsd-update, but i also want IPsec, so i can't run GENERIC... bummer... any suggestion for a user-space site-to-site VPN thingie? i know of openVPN. [08:21] openvpn is superb, i can highly recommend it [08:22] somehow it feels a bit "impure" to run TCP over SSL (assuming that's what openVPN does) [08:22] not really ssl [08:22] it has its own encryption [08:22] and yes, I highly recommend openvpn as the best solution [08:22] since it tunnels using UDP, not TCP [08:22] tcp over tcp is troublesome [08:23] ah, it uses UDP? didn't know that. ok, will give it a whirl. [08:23] and you can use either layer 3 or layer 2 [08:23] with layer 2, it's a bit fatter packets, but you can tunnel *anything* [08:24] eseentially, your interface looks like a participant on the remote net [08:25] i'm looking to tunnel something like zero MQ or one of those AMQP thingies among 2-3 servers. [08:25] I really need to learn openvpn too. something on my (long) list of topics. [08:26] the one thing that won't work is behind-NAT to behind-NAT [08:26] the server has to have a public face [08:26] the client can be behind-NAT though [08:26] well.. behind NAT to behind NAT will work, with port forwarding [08:26] it works fine providing you configure it correctly [08:26] presuming you have a public IP too [08:26] well yes [08:27] there are some ISPs that never give you a public IP [08:27] my advice there would be [08:27] "it's NATs... all the way down!" [08:27] move to an actual ISP [08:27] at the moment my two servers are all arpnetworks VPS. at some point i expect to have one or more linux 64bit servers (to run GLASS). any of you guys run linux on arpnetworks? [08:28] indeed. but there are some solutions (like hamachi) that don't require public IPs [08:28] jus' sayin'. [08:28] meh [08:28] i'd hardly call hamachi a solution [08:28] but whatever floats your boat [08:28] well *I* would never use it either [08:28] ziyourenxiang: i'm sure plenty of chaps use linux around here too :) [08:29] openvpn works fine on linux as well - i've done freebsd > linux > windows with openvpn, no problems at all [08:30] hmm, if all my machines are on arpnetworks maybe i might just use GRE for tunneling and rely on higher layers to provide security. [08:30] GRE is tcp over tcp though, right? [08:30] you'll have openvpn up and running in five minutes :) [08:30] GRE is anything-over-ip [08:30] indeed it is [08:31] i've done some horrible things with GRE in my time :) [08:31] but they work! [08:32] ok, i'll try openvpn next. i've done GRE before too and know that it surely works. [08:33] of course it works, and stop calling me shirley. :) [08:33] heh [08:55] feh, tcp tunnels. [09:01] *** adxp has quit IRC (Ping timeout: 260 seconds) [09:01] *** vtoms has quit IRC (Quit: Leaving.) [09:01] *** adxp has joined #arpnetworks [09:04] +1 openvpn [09:08] *** IPv6Freely has joined #arpnetworks [09:08] well... i learned the hard way that binary system updates dont play well with zfs at this point. [09:09] *** nakano is now known as nakano_ [09:12] I ran across this issue: http://forums.freebsd.org/showthread.php?t=8958 (except the accepted fix doesnt want to work for me) [09:15] *** LT has quit IRC (Quit: Leaving) [09:23] Err [09:23] Did console.cust.arpnetworks.com just go down? [09:24] Oh no it didn't [09:24] *** BeBoo_ has joined #arpnetworks [09:24] about how long does it take for a vps to be setup? [09:24] usually under 24 hrs [09:26] Cool. I'm excited :D [09:27] It's pretty awesome, that's for sure. Except for me having to wipe mine and start over because im an idiot :P [09:27] :o [09:27] Thats not good. What happened? [09:28] I rebuilt w/ ZFS, and apparently freebsd's binary system upgrades (to go to 8.1) dont play well with zfs [09:28] http://forums.freebsd.org/showthread.php?t=8958 <--- that, except their fix doesnt work for me [09:29] excuse the ignorance but what's different about ZFS? [09:30] hell if i know... its supposed to be better :P [09:30] was just about to read this: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/filesystems-zfs.html [09:30] not that ill understand a single word of it [09:33] IPv6Freely: you should ask RandalSchwartz [09:34] fink_: about my broken system or about zfs in general? [09:34] yours [09:39] humph... i dont know whats the deal with my vps, i connect w/ chicken of the vnc and it appears to connect but i get no window [09:39] love that program [09:40] doesn't seem to work with VirtualBox though [09:40] virtualbox's vnc that is [09:41] IPv6Freely: i like cotvnc too, but i've had better luck with jollysfastvnc w/arpnetworks [09:42] IPv6Freely: I got that too earlier with tightvnc [09:42] Just connect a couple of times [09:43] hmmmm [09:43] *** BeBoo_ has quit IRC (Quit: ::: (tekN1X) :::) [09:43] frustrating [09:44] no luck :( fail [09:45] there we go.. shut down the vps and booted. now i can get in [09:45] RandalSchwartz: awake? :) [09:48] booted into fixit... says to chroot into my installation, which should just be "chroot /zboot" right? [09:48] zroot rather [09:51] hehe [09:51] you guys and your ZFS [09:51] I don't understand why you love heart ache so much [09:51] UFS rox [09:52] lol@ufs [09:52] zfs=future [09:52] yeah well guess what [09:52] it's present day [09:52] :) [09:52] the future is yet to come :P [09:52] nesta: it's great, on a dedicated server, but to use it on a vps looks downright ridiculous to me [09:52] yes DaCa [09:53] DaCa: i'm using it now on root on an arp vps [09:53] yea i think im just gonna build a standard install [09:53] i dont think ill get anything out of it [09:53] zfs snapshot management rules [09:53] does ZFS just get installed to /root ? [09:53] I am kinda confused about that [09:53] what about multiple partitions [09:53] *** dxtr has quit IRC (Changing host) [09:53] *** dxtr has joined #arpnetworks [09:53] there's a tutorial on the freebsd wiki [09:53] no idea [09:53] http://wiki.freebsd.org/RootOnZFS/GPTZFSBoot [09:53] i just followed that [09:54] yeah I saw it but it does not really makew it clear about multiple paritions [09:54] unless I totally missed it hehe [09:54] whihc is likely [09:54] no clue. [09:54] dxtr: how was the re-install? great success? [09:56] nesta: Yeah. Been doing stuff for a couple of hours now [09:56] ah okay, did you get all the seperate partitons okay? [09:58] hmm now i cant even do a default install [09:58] unable to find device node for /dev/ad0s1b in /dev! The creation of filesystems will be aborted [09:59] IPv6Freely: the first time i followed that tutorial; the second time i did this: http://anonsvn.h3q.com/projects/freebsd-patches/browser/manageBE/create-zfsboot-gpt_livecd.sh [09:59] that was with 8.0 release [09:59] it was pretty awesome [10:00] cool but that doesnt help me with either issue im having [10:03] whats your issue? you can't do an install? [10:03] just erase you disk man [10:04] well first the zfs was broken, then i tried wiping and starting over and it wont let me [10:05] how do i erase a disk? ive always just done that and partitions in sysinstall [10:08] I think... im just going to cancel my account. [10:09] sounds a bit hasty [10:10] they provide you with a perfect working installation [10:10] and i break it [10:10] people decide to do all sorts] [10:10] yeh [10:10] you can easily fix [10:10] :) [10:10] apparently not [10:10] are you booted to cd? [10:10] i was [10:10] well go back, why give up? [10:10] now im at a boot: prompt [10:10] the devil loves a trier [10:11] i have no idea how to reboot from here [10:12] log into your webpanel that Arp provides for you, IPv6Freely [10:12] ok [10:12] you can shut it down there [10:12] and then boot it [10:12] booting.. [10:13] okay in the sysinstall main menu [10:13] okay [10:13] do a standard install [10:13] when you go to the disk part don't do anything just shout me :) [10:13] yeah im in that part [10:15] okay you select the drive yeh? [10:15] then it brings you to black screen [10:15] yea [10:15] the fdisk partition editor [10:15] see the middle line? it has 'freebsd' on it [10:15] press down arrow to get to it [10:15] then press d [10:15] then press a [10:16] i have "unused, unknown, unknown, unknown, unused" [10:16] ok [10:16] just delete [10:16] all [10:16] basically [10:16] go to all them [10:16] and press [10:16] d [10:16] once [10:16] k all unused. this is how i normally do it [10:16] tell me when you done that [10:16] k [10:16] done [10:16] press arrow back up to top [10:16] then press [10:16] a [10:17] yep [10:17] now i have ad0s1 freebsd [10:17] cool [10:17] go to that one [10:17] and press [10:17] s [10:17] done [10:17] press q [10:17] k [10:17] now choose yes for the bootmanager [10:17] like the top option is fine [10:18] ya [10:18] done? [10:18] k [10:18] now [10:18] what size is your hard drive [10:18] 20GB [10:18] i usually just do auto here too [10:18] is that what you would like to do? [10:18] sure why not [10:19] you can carry on now as normal [10:19] it should fdisk just fine [10:19] if not then you got me :) [10:19] yeh go with auto [10:19] just auto and then q to get out [10:20] auto and then q [10:20] now i was gonna use "user" here since im gonna cvsup src anyway [10:20] yeah sure [10:21] jsut get to the fdisk hehe [10:21] asking where to install from, i pick CD obviously [10:21] yep [10:21] *** nakano_ is now known as nakano [10:21] *** nakano is now known as nakano_ [10:21] *** nakano_ is now known as nakano [10:21] okay, the final yes/no window. "last chance, are you sure?" [10:21] YES [10:21] :D [10:22] same error as before [10:22] * nesta crosses fingers [10:22] lol [10:22] wow okay ZFS really *is* evil [10:22] hey IPv6Freely don't worry when up_the_irons is here he will reinstall for you np :) [10:22] its part of the contract [10:23] http://a.imageshack.us/img401/2599/screenshot20100804at102.png [10:23] wowee [10:23] thats a funny one alright [10:23] *thumbs up* [10:23] I am sure there is some sensical explanation [10:23] okay, IPv6Freely .. ya got me. [10:23] :) [10:23] lol [10:24] had zfs, zfs broke, tried to install normally, and failsauce. Thats the summary of my last two days :P [10:24] I have thus far steared clear of it [10:24] for I knew all of this lay before me [10:24] :D [10:24] I heeded the warning calls of others lost in the wilderness [10:24] i made the mistake of trying to do a binary upgrade from 8.0 to 8.1, which apparently is broken if you use zfs [10:25] ah yes I never binary upgrade [10:25] id never done it before, i figured id try it [10:25] I always upgrade via fresh source and build it [10:25] its much more fun [10:25] freebsd-update is boring imho [10:25] me too, though i dont find it fun :P [10:25] :P [10:25] i didnt know binary upgrades even existed [10:26] until a couple days ago [10:26] ya gota make it fun hehe, dangerous kernel options etc.. [10:26] ha. no. [10:26] im not a tinkerer [10:26] playing with MAC and ACL and ttoally breaking your shit [10:26] i want it to just work [10:26] like I did the other night [10:26] lol [10:26] i hate computers, i have zero interest [10:26] aww come on [10:26] thats not true clearly [10:27] no really... if i ever had to do sysadmin shit id go nuts [10:27] you have a FreeBSD vps [10:27] most 'normal' people [10:27] ]have NOidea what that is [10:27] the only reason i got a vps is because the shell i have gets rebooted every night and therefore sucks for screen+irssi. [10:27] rebooted every night? [10:27] dang [10:27] sometimes not [10:28] but when i log in and do screen -r and it says no screen to be resumed... man does that ever piss me off [10:28] but you don't care about computers [10:28] :P [10:29] i dont. i care about irc :P [10:29] hahaha [10:29] i want my irc and dont want to have to mess with shit to get it [10:29] a shell is also super useful for testing my networks from the outside [10:34] Hmm... [10:34] but otherwise i hate computers. thats why i use a mac, because everything just works and i can spend my time doing my work rather than dicking with my OS [10:35] Exactlt what is "cputime" in login.conf? I'm thinking it essentially says how long a proccess can run ("Use the cpu") [10:39] *** Lefty has quit IRC (Remote host closed the connection) [10:39] *** schmir has joined #arpnetworks [10:41] *** koan has quit IRC (Read error: Connection reset by peer) [10:41] *** koan has joined #arpnetworks [10:41] *** fink_ has quit IRC (Quit: fink_) [10:42] *** cedwards has quit IRC (Read error: Connection reset by peer) [10:43] *** cedwards has joined #arpnetworks [10:44] IPv6Freely, whatever i want to do on my VPS, i try first on a vbox instance on my laptop... if nothing else i get familiar with the procedure and screens. [10:45] oh ok, didn't see that bit where you say you don't do sysadmin :-) [10:46] heh yea [10:49] Next project: OpenVPN on my VPS. [10:49] So I can have "local" network access to it. [10:49] That's probably pretty easy. [10:50] About to configure VPN today actually. [10:50] Though, its a Juniper SSL VPN appliance, so slightly different :P [10:51] heheh yeah. [10:51] purpose-build. [10:51] built. [10:51] Although, JunOS is based on FreeBSD I think. [10:51] sort of [10:51] It runs on top of freebsd [10:52] not really based on it [10:56] *** schmir has quit IRC (Remote host closed the connection) [11:00] heh... got an answer back from he.net about how to pass their test [11:00] "remove ns1.he.net from your list" [11:00] great. :) [11:00] lol [11:00] * up_the_irons anticipates a support ticket [11:01] RandalSchwartz: want me to remove it from your rdns? i happen to be in my name server right now... [11:01] *** Lefty has joined #arpnetworks [11:03] *** vtoms has joined #arpnetworks [11:04] Hey, you guys can help me :D [11:04] Exactly what is "cputime" in login.conf? I'm thinking it essentially says how long a proccess can run ("Use the cpu") [11:05] hiya up_the_irons :) [11:05] * up_the_irons has no idea what cputime is [11:06] man login.conf [11:06] dxtr: I believe that is the case. [11:07] but it's not how long it can run, it's how long it can RUN [11:07] ie actually be on the cpu. [11:07] man login.conf says it's a limit on cputime [11:07] ;) [11:07] right. [11:07] it actually says "CPU USage Limit" [11:07] :P [11:08] which does indeed explain it a bit more [11:08] up_the_irons - I think it only matters on the forward [11:08] so lemme see if that fixes it yet [11:08] RandalSchwartz: roger [11:08] since I'll put it back in after I get my badge. :) [11:09] any idea why a line like this won't work .. pass in quick log on $ext_if inet proto tcp from group { bakeneko } to $iplist port $ssh flags S/SA keep state [11:09] heh [11:09] seems to be an issue with the group part of the rule [11:10] man page is useless and google is like 'what?' [11:10] >_< [11:15] *** ziyourenxiang has quit IRC (Quit: ziyourenxiang) [11:26] *** adxp has quit IRC (Read error: Connection reset by peer) [11:26] *** adxp has joined #arpnetworks [11:30] *** nakano is now known as nakano_ [11:35] *** nakano_ is now known as nakano [11:37] *** BeBoo_ has joined #arpnetworks [11:37] =] [11:38] hi BeBoo_ :))) [11:38] long time [11:38] hey nesta, how are ya [11:38] super duper [11:40] great to hear [11:41] just waiting for my new vps to be created :D [11:41] (impatiently) [11:41] niiiice [11:41] FreeBSD? [11:41] lol [11:41] of course [11:41] excellent [11:41] yeah, element talked me into getting my own VPS since i keep taking his over [11:42] haha [11:42] so i figured if i'm getting my own, i want a freebsd one, not linux [11:42] how is he doing? [11:42] hell yeh [11:42] pretty good, we've both been busy busy [11:42] his b'day is coming up [11:42] anything exciting? [11:42] ahhh [11:42] we're goin to the shore [11:43] not really exciting... bought a PS2 and a bunch of games we miss playing [11:43]