To test if os is in the cdrom all i have to do is shutdown and reboot, correct?
or you could just mount the cdrom
well i need to boot off it to reinstall my os
because i tried halt -p and shutting down from the console
then booting it, but it boots off the previous os
ideas1 - you have to hit F12 on the console to select booting the cdrom
so get your VNC set up, and reboot, and you have about 10 seconds to hit f12
or, you could destroy your boot blocks and reboot, but that's more dangerous. :)
and you're still gonna need the VNC console to do anything
ideas1?
up_the_irons - http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=AS:25795
something to keep bookmarked. :)
dumbish dns question - does your SOA need to be publicly accessible? i've got slaved zones and would like to secure my host as much as I can
the soa host is not listed as an NS
you should (may not be required) adjust your soa to be one of your publically accessable nameservers
most dns software has ways to propogate from non soa zone authorities by specifying an IP, so it should be a moot point what the soa is set to for your propogation purposes
the soa is my master dns server
i guess i can move that to point to one of the ns's
but the ns's slave from my box
thats the typical arrangement, pointing the soa at your host does not have any more of a target than the fact that it is a public accessable nameserver
if you're woried about soa pointing a target toward your system, you've got other things to worry about
guess so- i'll make it an ns
standard deployment and security should dictate you are not concerned about malicous behavior, attracting a DOS or DDOS tends to require a special kind of questionable behavior anyway, other than that, should not worry
point taken
I've literally tried,  and have never found a practical reason you'd want the master hidden.
yeah - there's really no reason - i was concerned about the additional bandwidth usage, but it's minimal so far anyway
hahaha http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=AS:15169
heh - google is one of the biggest sources of malware!
at least their tools that detect it accurately point fingers at themsleves as well. hahaha.
that must be the source of the occasional hiccup where google tries to prevent you from going to google.com
I bet they have that hardcoded now
until the next new employee figures hardcoding is for wimps, lets make the logic right... ;-)
jpalmer: we use a hidden master, but it's mostly for convenience
it's local, we make changes there, they propagate to our secondaries, which are in other geographical locations
those secondaries are the ones visible when you lookup our ns rr's
RandalSchwartz: whoa, nice :)
yeah, keep that on your bookmark bar.
http://www.daemonology.net/blog/2011-01-18-tarsnap-critical-security-bug.html - I know there's a couple of tarsnap users in here.
(The person who reported that bug, Taylor Campbell, was someone I taught introductory programming to ten years ago. He's come a long way!)
mike-burns: if you want to teach me an introductory programming class,  I'm in
heh
lol
mike-burns, where do you teach?
mike-burns: that's kinda impressive, cperciva(l) knows his stuff...
huh, that's a good write up and mea culpa from him too.
Ok, After spending the last four days reading on freebsd I really love a few things... documentation is very well organized, pf is sweet, and it does boot up way faster.
yes, yes, drink the kool-aid  =)
faster than what?
grandma
centos
lol
oh centos seems realyl slow to boot for some reason
i find openbsd kind of slow to boot
compared to ubuntu
but it's the kernel that's slow.. checking floppy drives etc.. seems like there are in built delays
linux 2.0.36 used to be slow to boot
linux 2.2 speed up boot heaps..
annoying was the naming of the devices, eth0 vs em0 rh1 etc etc
why is that?
oh yeh eth0 etc is really annoying
linux is special you change kernels and your ethernet devices all reorder
2.2 changed ethernet order compared to 2.0
it's a long standing issue with linux
for some reason they thought it was sensible to bring up ethernet interfaces in the order the modules load
im going to be honest freebsd reminded me of high school and my days with slackware
which changes over time
linux has "new" fixes to it these days
they do all this shit in udev
but you change an ethernet interface .. just have 1 in a box
and it'll become eth1
when the old one was eth0
seriously, the eth0 way is broken
solaris/bsd/windows etc don't have generic ethernet device #
i ordered two books absolute bsd and the pf book both 2nd ed
acutally maybe windwos has a hoko for that
i haven' tuoched freebsd since ilke 2001 really
drive letters annoy me in windows
lol
i downloaded an iso recently, and it didn't boot in virtualbox
then i downloaded another one, can't remember where that got to
heh
drive letters in windows can be special just like linux
lol oh come on
oh, and linux has that horrible reordering of hard-disks
depending on module loading times too
my linux sense is tingling
used to be hell with a usb flash stick
i don'tknow, linux is fast and random
merky you recommend openbsd?
it's ilke the loose girl that you know is easy
but you don't know what's lingering inside
idk.
i use ubuntu, opensolaris, and openbsd.
root goodness
they all have their benefits / drawbacks.
i thought opensolaris is dead?
i find opensolaris the most confusing to be honest.
i don'tknow, it hasn't crashed on me since oracle boughtthem out
i tried it solaris 10 once and that was that
does that mean it's dead?
solaris 10 doesn't even come with zfs unless you udpate it
openbsd runs on sparcs.
zfs works now?
on solaris 10 yeh
you do updates
it may not work on root
oh yeh, ufs sucks.
i like zfs.
all i ever use is fedora, rhel 5 and now 6 and centos, just tryung bsd
i haven't played with in freebsd
im confused about the roles in bsd's what makes open better than free
or why would i choose for apache server
nothing
plus theo's an asshole
theo?
the guy who runs openbsd
ohhh
i had a chat back and forth with the guy from tarsnap
security officer for freebsd
yeah, colin
gah
my car alternator's fucked
nice guy bad ass support
not charging ?
he's a geek
yeah not charging
i charged it overnight
so i cuold at least not tow it
you did check the battery right?
well it wouldn't jump star
are you in the us?
and even after charging overnight battery light stayed on
nah new zealand
japanese car
auto parts places here in usa tes the alternator for free
same here
generally
it could be the battery though because i had a funny issue where my motorcyle wouldturn of and on
it's still annoying
yeah it is
well thing is
last time
i jump started it they ran a test
and nothing was draining it
and the alternator was working fine
but i still had a flat battery
ran it for a while
and it was fine
then next time wanted to drive it woudln't sart
not even jump start
seems more like the battery not holding charge
do you have a battery tester?
manual or auto?
manual
have you tried push starting it?
nope
battery not holding charge would mean it would jump start
like
true
engine was conking out
as soon as other battery was disconnected
hope not
but hmm,
check all the contacts make sure they clean
i wonder if it's battery too
i dunno i took it to a mechanic
i wonder if it's draining randomly still though
thing is if it's alternator without battery draining
checked fuses?
oops if it's alternator why would the car stop workign?
anything blown?
after working
i dunno how to do that really
i'm a computer geek not an auto geek
i do software :/
depends on the car some cars require more electrical power
it's a celica, i don't think they're common thre?
there
yeah i see them but not often
ahh
they have worse engines in the US on them though
yeah smog law
http://upload.wikimedia.org/wikipedia/commons/3/3d/5th-Toyota-Celica.jpg
they are suppose to help but i think it might make them worse
looks kind of like that
lower performance
i dunno new cars are all higher performance :/
moer efficient
yeah my current car 2008 has a super charger lol
i think 0-60mph is like 9 seconds
mine has 266 hp more like 5.9
american love the hp
heh
5.9 that'd be quite nice
yeah its nice but gas isnt
i get about 30miles per gallon but if i start stepping on pedal too much around 18
Capacity 2.0 litres Normally Aspirated, Power 158 bhp @ 6600 rpm, Torque140 ftlb @ 2800 rpm, 0-60 7.9 seconds, Top Speed 137 mph, Fuel Economy 28.5 mpg, Fuel Capacity 60 litres, Wheel Size14" (205/60 Tyres)
that fuel economy is non-city
and i think that 0-60 time is on the ideal side
yeah
so your car is like over 50% more hp
thing is turbo only works above 3000 rpm if you get the turbo model
which means you have to drive at high revs if you want to  make use of the turbo
turbo is a little diff then super charger
yaeh
how does super charger work
celicas are meant to be high revving anyway though.. 7.2k red line
but i still don't really push above 3000 revs that much
yeah most japanes cars like acura, honda and toyota make high compression engiens
well petrol engines in general rean't so great at low revs
do you guys have those german cars LEON
don't think so?
we have lots of bmws
esp where i live
apparently we have lost of skylines too
nissan that is
http://en.wikipedia.org/wiki/SEAT_Le%C3%B3n
and in other parts of the world they're not usually allwoed
cos too high performance stock
nah never see them
me either
lots of subaru's too
http://t2.gstatic.com/images?q=tbn:UgceHKYfXjK1NM:http://www.subaru.smartcarreview.net/images/subaru-wrx.jpg&t=1
like those things
suburu are nice especially the 4x4
we hardly have any us cars
most subarus are 4x4
err 4wd
lol
us cars eat a ton of gas
and they are huge
yeah
well your car doesn't?
is it US?
yeah
i think in general cars use less gas now
http://en.wikipedia.org/wiki/File:Whiteturbocobalt.png
i used to use quite a lot of gas
cos i reved a lot :/
lol
i think it's gone down a bi
i'm worse when i haven't driven in a while :/
it's like just want to get to the feeling
is yours white?
red
ahh
white is ugly on cars i reckon
well here in the us many goverment cars are white
not all but many
oh weird i still had that celica picture open it looks weird
it doesn't have a spoiler?
nope
i had that removed other wise its identical
it's weird when you find picutres on net
oh celica did't i mean
oh you had your spoiler removed, why?
it was too big
and it looks liek i want to have a racer car but dint quite make it
lol
haha
yaeh
my car loosk slightly racy
for a cheap car
but like it's not lowered, has standard wheels
once you take it off, it just looks like a sport sedan
no big bore exhaust
yeah but the suspension is super nice
no i hage big bore
the quiter the btter
heh
lol if i was 18
you like big bore?
nope
oh you hate?
yes a lot, its annoying
they kind of rumble
yaeh
rrrrrrrrrrrrrr rrrrrrrrrrrrrrrrrrrrr rrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr rrrrrrrRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
it's loud enough without
rrrrrrrrrrrrrrrrrrrrrrrrrrrrrRRRRRRRRRRRRRRRRRRR RRRRRRRRRRRRRRRRRRRRRRRRRRR
see
heh
lol
do people all do hat pod filter thing there?
not sure what you mean
oh it's this weird air filter thing
that doesn't accomplish much
but looks wierd
ohhh cold air intakes
some do
mine came with it
and blow off valves
yeah
so you can hear hem changing gears a mile away
no, i get the speed not the sound
mine is from chevy not aftermarket
heh
you have a motorcycle?
nope
i'd like to one day
i have a small one
800cc
does anyone know of a good dns host?
i used to host with zoneedit
but its starting to becoming a nightmore with there new "gui"
he.net?
for secondary?  or primary?
primary
i just use dbdns
djbdns
which is a dns sever
server
low memory use
you just scp the database around
doesn't give you a gui
i was hoping to to host it but i think that may be the only solution
you just have lines like: =arp.meh.net.nz:174.136.111.234:300
unless i want to pay 15.00 per domian
where last number is ttl
= means it does forward and reverse
not that reverse dns is sent to me or anything
i just set it as a default generally
+ is forward only
i dunno i find it simple enough
seems simple enough
@meh.net.nz:202.49.71.57:a::180
then that's how you do mail
where you can have a, b, c, etc to set precedence
err i'm not sure if that sets precendce acutally
i'm only running 1 mail
then nameservers are like:
.meh.net.nz:202.49.71.57:a:259200
.meh.net.nz:202.36.174.57:b:259200
etc etc
i have 7 on that domain at the moment
does it also handle ipv6
?
kind of
:ipv6.uk.meh.net.nz:28:\040\001\004\160\037\010\022\022\000\000\000\000\000\000\000\002:3600
there's a record creator on the net
interesting
but yeah it's a bit annoying for ipv6
ilke i can't read that
i thought it couldn't do ipv6 at first
ill have to read up on it
do you have more than one ip to host on though?
basically i just have an update script i rnu
which uses ssh keys and scp's data.cdb
http://cr.yp.to/djbdns.html
that's the authors website
he gives his opinions freely
You don't have to set up two DNS servers. Your DNS servers don't have to be more highly replicated than your web servers, mail servers, etc. As an extreme, if you have just one computer for your web server, mail server, and DNS server, then setting up a second DNS server is silly. (Third-party DNS servers are almost always a bad idea.) However, if you're running a large site with many services, you should set up two DNS servers.
which kind of holds true
no use in having dns redundant if can't even access your web site / mail
yeah
but you usually need two name servers to get a domain setup these days
even if it's just two ips on the same box
some people use nsd too
i haven't checked it out myself, been using tinydns for 10 years
now on freebsd is it he same drill as in linux, firewalll, secure ssh, install configure apache,mysql, and php then run websites?
yaeh
i'm glad you're thinking of firewalling first :)
well that usually what i do first
freebsd has pf now
pf is cool :")
yeah i fell it love it
over iptables
heh
i like it how you can reload your config
and if there's an error it won't load anything
rather than running through al ist of iptables rulse
and it has a problem executing one of them
and the syntax makes more sense
does freebsd have runlevel like linux?
not sure
you use runlevels?
yeah mainly when i am troubshooting
looks like multi/single
that's all
you can reboot it and depending on the runlevel some servceis wont boot up
single probably won't start services up
ok
seems straight forward
as it should be :)
im not going to lie i feel like a traitor for using freebsd
instead of openbsd?
linux lol
oh
no-one cares if you use linux or not
my buddies do lol
it's what distribution you use
just tell them it's another version of linux
but more free
haha
i dunno i had a buddy who used to think it was cool i used openbsd
but he wouldn't run it himself
coz blah.  id on't even remember his reasoning
all my buddies are redhat guuys
heh
two of them are rhce
gay
haha
that's like mcse
i dont know about that
it doeesn't prove competence
it proves ability to jump through hoops
lol
some of the stupidest ideas i've heard have come from mcse-certified people :/
yeah me too
and  generally speaking the more people learn from educational places
the mre "ideas" they have
rhce does carry some weight though way more than mcse
that aren't based in the real world
concepts are the real knowlege
heh
ccne holds more wait
lol jlgaddis
ccie hols more wait still
oh by far
weight
you cold probably get a linux job with cisco certification
but ccie is sleep breathing and eating cisco for a couple of years
easier than with redhat certificatin
i have a linux job lol
even though cisco doesn't do linux shit
i'm not to ccie yet
i have a linux/openbsd/opensolaris job
not dedicated enough
yeah me neither
i think ccie is reserved for arrogant cock suckers myself
jlgaddis: are you working on the ccie?
cos really you don't need that to be able to learn what's realyl necessary to know
it's more to be able to say i can do this and this and this and this and this
you would be suprised how many tech dont know tcp/ip
and i'm really smart
and like to flaunt it
lol
i always forget netmasks myself
i use this command called netmask
ideas1: i was, i kinda gave up on it though
i'm like 240/30 .. what's the start/end address?
http://www.flickr.com/photos/jlgaddis/4226147456/
why?
# netmask -r 192.168.255.240/30
192.168.255.240-192.168.255.243 (4)
ideas1: other things i'd rather do with my free time than study 24/7
so the ccnp is probably gonna be it.  ccip, if i ever get around to finishing that.
that a nice rack...no pun intended
god old cisco siwtches are ugly
i have my rhce coming up in may
those are 48 port 10/100 right?
yeah
i like procurve
thats all i really use here
oh god
don't say that word.
lol
there 1000gbt are nice
and not too pricey
1000 gigabit?
yeah
i didn't know such existed
i left an "I <3 JUNOS" sticker in their executive briefing center in roseville
10 gigabit is expensive enough
jlgaddis: really? why the hate?
anythign 10 giga is pricy
because they cause me more trouble than anything else?
well that's just tempting anyway
surely you mean 1000mbit?
im sorry yes
cool :)
when's 10 gigabit coming down in price anyway
i can't download my porn fast enough
heh, 63 results from google for "hate hp" on my web site
jlg: haha
haha
so you love hp?
what do you think of hp computers
err servers
lenovo
they're okay, it's mostly the procurve's i hate
procurves just the switches
we have cisco routers
what made you choose cisco over juniper?
service contracts
cisco can get me parts in 4hrs
oh right
cos it's ok to be offline for 4 hours?
lol
i dunno i use openbsd as routers
switching to juniper would cost us a lot in retraining
it's probably less reliable
jlg: heh i never even thought of that
besides, as soon as you mentioned the j-word, cisco starts throwing more discounts at you
oh cool
lol
hey cisco let's have a joint
wrong j-word =)
damn
should call it a j
alright guys need to head to gym.... hopefully i will talk to you guys later
later
and continue the linux/procurve bash
haha
seeyah
is the american version of openbsd, weaker, you know with like 60% less crypto? lol
nah, the .us version has the backdoors built in  ;)
damn it
thats why i dont use windows
so the openbsd website seems like no one updates
some of the links take me site that look like angelfire
theo's probably too busy being an asshole on the mailing lists to update it
after you mentioned it earlier,  i decided to read on him, i found his website
pictures of him hiking lol