#arpnetworks 2011-02-08,Tue

↑back Search ←Prev date Next date→ Show only urls(Click on time to select a line by its url)

WhoWhatWhen
***LT has joined #arpnetworks [00:13]
................... (idle for 1h32mn)
adkaruil has joined #arpnetworks [01:45]
............. (idle for 1h3mn)
adkaruil has quit IRC (Ping timeout: 255 seconds) [02:48]
............ (idle for 56mn)
nbari|away is now known as nbari
nbari has left
[03:44]
....... (idle for 31mn)
ziyourenxiang has joined #arpnetworks [04:15]
......... (idle for 42mn)
ziyourenxiang has quit IRC (Quit: ziyourenxiang)
ziyourenxiang has joined #arpnetworks
[04:57]
jlgaddis has quit IRC (Read error: No route to host) [05:13]
jlgaddis has joined #arpnetworks [05:19]
............ (idle for 56mn)
vmmello has joined #arpnetworks
ziyourenxiang has quit IRC (Quit: ziyourenxiang)
[06:15]
.......................... (idle for 2h5mn)
tuv_ is now known as tuv
tuv has quit IRC (Changing host)
tuv has joined #arpnetworks
B3nj1 has joined #arpnetworks
[08:22]
B3nj1anyone to talk to about a purchase? [08:26]
bob^^probably best to just ask B3nj1 :) [08:28]
B3nj1I want to talk about pricing/costs so easier probably to do it pvt [08:28]
bob^^depending on what your question is we might be able to help - up_the_irons is the only ARP employee
(the rest of us are just customers i think)
[08:28]
B3nj1ah kk [08:29]
***fink has joined #arpnetworks
vmmello has quit IRC (Quit: cd ../)
robotarmy has joined #arpnetworks
[08:37]
toddfb3nj1: if your question is generic we can perhaps help here, but the website lays the groundwork for costs in general [08:50]
..... (idle for 21mn)
***LT has quit IRC (Quit: Leaving)
robotarmy has quit IRC (Remote host closed the connection)
[09:11]
..... (idle for 24mn)
jpalmer has quit IRC (Quit: leaving)
jpalmer has joined #arpnetworks
jpalmer has quit IRC (Client Quit)
jpalmer has joined #arpnetworks
HighJinx has quit IRC (Ping timeout: 276 seconds)
[09:35]
....... (idle for 34mn)
HighJinx has joined #arpnetworks [10:16]
......... (idle for 42mn)
jlgaddis has quit IRC (Read error: Connection reset by peer)
jlgaddis has joined #arpnetworks
[10:58]
heavysixer has joined #arpnetworks
ChanServ sets mode: +o heavysixer
jlgaddis has quit IRC (Read error: No route to host)
jlgaddis has joined #arpnetworks
[11:11]
cedwards has quit IRC (Ping timeout: 240 seconds)
cedwards has joined #arpnetworks
w0ls0n has joined #arpnetworks
[11:19]
w0ls0nafternoon all [11:25]
finkhi [11:25]
w0ls0nquestion for you all. I have ipv6 working on pfsense and I can ping ipv6.google.com. There are docs in the handbook about setting up a static ipv6 address but I cannot do that. Is there a way to set it up so routing works if freebsd is assigned an ipv6 address?
I am using ht.net for my ipv6 tunnel
and I am also curious if there is a way to make ipv6 work on winblows XP
[11:25]
Sheathyes [11:26]
w0ls0n... [11:33]
***robotarmy has joined #arpnetworks [11:34]
jpalmerw0ls0n: on XP from a command prompt (administrator access) type "ipv6 install"
ipv6 is installed, it's just disabled on XP.
[11:35]
coobraS
ohh
[11:36]
w0ls0nI did do that already
ipv6.google.com just times out
it does ping from pfsense though
[11:37]
jpalmerare you passing protocol 41? is your pfsense sending RA's? does your XP machine have an address other than the link-local? [11:38]
w0ls0nin order ... probebly not. I would have to check and all the XP machines get 2 2001:470: ips
is protocol 41 something I can forward as a rule in pfsense?
[11:39]
jpalmerI don't use pfsense, so i can't answer that.
you'll need to pass protocol 41, and make sure pfsense is set to pass packets from one interface to the next.
[11:40]
w0ls0nhmmm
Ok I see a box that says
NAT encapsulated IPv6 packets (IP protocol 41/RFC2893) to:
I would put my ipv4 WAN address there
[11:41]
jpalmerI don't use pfsense, I'm not sure what thats for in particular. [11:45]
w0ls0nit's the only section I see for Protocol 41
googled around and found this
http://www.mail-archive.com/support@pfsense.com/msg19106.html
[11:45]
jpalmerI'd suggest consulting the #ipv6 channel, or the #pfsense channel (or both)
there ae some guys from he.net on #ipv6, and I'd hope the people on #pfsense are more familiar with it than I am ;)
[11:46]
w0ls0nok
thanks for trying :-)
[11:46]
***w0ls0n has left [11:46]
toddfDual Stack is bad.
er ..
IPv4-compatible IPv6 address is bad. block them with prejudice.
[11:59]
rfc2893 talks of A6 which is deprecated and no longer used even [12:07]
***robotarmy has quit IRC (Remote host closed the connection)
robotarmy has joined #arpnetworks
[12:15]
jdoetoddf: "ipv4-compatible ipv6"? [12:19]
jpalmerI believe he's referring to the ::ffffff:1.2.3.4 style addressing. similar to the one bit.ly accidentally published to DNS not that long ago. [12:20]
toddfNAT encapsulated IPv6 packets (IP protocol 41/RFC2893)
unless that means 'ipv4 header ip-protocol-41 ipv6 tunnel' stuff ..
if you're doing filtering with pf and ipv6 beware that you must not block icmp6 otherwise ndp won't work (v6 equivalent of arp); you can block no more than this for things to work:
match out inet6 proto icmp6 icmp6-type { neighbrsol routersol echoreq timex } tag ICMP
match in inet6 proto icmp6 icmp6-type { neighbradv neighbrsol routeradv echoreq echorep fqdnrep timex unreach } tag ICMP
pass tagged ICMP
[12:22]
jpalmerdig AAAA forvo.com <-- heh [12:24]
toddf(obiously other ways to skin that same cat of behavior, but that's from a `working' system of mine
)
yecht
[12:24]
crazedi need to fix my pf rules
so lazy though
[12:25]
up_the_ironstoddf: i'm not very familiar with pf syntax, but given pf is so "readable", i actually understood exactly what those statements mean; pf ftw [12:33]
toddf;-)
the echoreq/echorep is not mandatory but I personally consider it so considering it gives more false warnings than true security and/or usefulness
[12:36]
up_the_ironsah [12:44]
***robotarmy has quit IRC (Remote host closed the connection) [12:48]
............... (idle for 1h13mn)
amdprophet has joined #arpnetworks [14:01]
...... (idle for 27mn)
vapor has quit IRC (Ping timeout: 260 seconds)
vapor has joined #arpnetworks
[14:28]
amdprophet has quit IRC (Ping timeout: 240 seconds) [14:40]
amdprophet has joined #arpnetworks
amdprophet has quit IRC (Client Quit)
amdprophet has joined #arpnetworks
[14:47]
..... (idle for 21mn)
shattWhat would a /96 from 2a00:dd0:0:17::1/64 be?
if I wanted to split 2a00:dd0:0:17::1/64 into a bunch of /96s.. what would it be? this ipv6 calc i am using sucks
[15:08]
........ (idle for 35mn)
***robotarmy has joined #arpnetworks [15:43]
up_the_irons2a00:dd00:0000:1700:0000:0000:0000::1/96
i believe
actually
2a00:dd00:0000:1700:0000:0000::/96
2a00:dd00:0000:1700:0000:0001::/96
2a00:dd00:0000:1700:0000:0002::/96
2a00:dd00:0000:1700:0000:0003::/96
etc...
shatt: ^
scratch the first
[15:44]
....... (idle for 30mn)
jdoeI think you still have an extra... not octet... extra... whatever.
no I'm wrong, ignore me.
shatt: http://en.linuxreviews.org/IPv6_subnet_matrix_table too.
[16:17]
***amdprophet has quit IRC (Ping timeout: 255 seconds) [16:27]
vapor has quit IRC (Ping timeout: 272 seconds)
vapor has joined #arpnetworks
[16:37]
crazeddoes pf have a way of testing rulesets before applying them? [16:44]
Sheathyes
-n Do not actually load rules, just parse them.
a manual is a wonderful thing.
[16:45]
crazedthat it is [16:51]
Sheaththats pfctl btw if you haven't figured it out :) [16:51]
crazedhehe i did, i figured it was that
don't know why i asked instead of manualing first
[16:54]
Sheathits easier to ask i guess [16:54]
***Sheath is now known as muskyhusky [17:03]
crazedany tips for this ruleset? http://arpnetworks.pastebin.com/97d1xHY5
hm i guess i could drop $ext_if and just use egress everywhere
[17:05]
***crazed_ has joined #arpnetworks
crazed has quit IRC (Ping timeout: 260 seconds)
[17:16]
finkcrazed_: service pf check
(on freebsd 8)
[17:18]
***crazed has joined #arpnetworks
crazed_ has quit IRC (Ping timeout: 260 seconds)
crazed has quit IRC (Read error: Operation timed out)
crazed has joined #arpnetworks
[17:22]
crazeddamn.. state table [17:28]
.... (idle for 16mn)
***amdprophet has joined #arpnetworks [17:44]
.... (idle for 18mn)
Zuul_ has joined #arpnetworks
Zuul has quit IRC (Ping timeout: 250 seconds)
[18:02]
..... (idle for 21mn)
cubelogic has quit IRC (Remote host closed the connection) [18:25]
...... (idle for 25mn)
zeshoem has joined #arpnetworks [18:50]
HighJinx has quit IRC (Ping timeout: 240 seconds) [18:57]
........... (idle for 50mn)
HighJinx has joined #arpnetworks [19:47]
HighJinx has quit IRC (Read error: Connection reset by peer)
HighJinx has joined #arpnetworks
[20:01]
jdoe has quit IRC (*.net *.split)
zeshoem has quit IRC (*.net *.split)
zxvff has quit IRC (*.net *.split)
vapor has quit IRC (*.net *.split)
crazed has quit IRC (*.net *.split)
cmeiklejohn has quit IRC (*.net *.split)
nuke` has quit IRC (*.net *.split)
toddf has quit IRC (*.net *.split)
Jareth has quit IRC (*.net *.split)
Ehtyar has quit IRC (*.net *.split)
tuvwx has quit IRC (*.net *.split)
hsbt has quit IRC (*.net *.split)
ajwak95 has quit IRC (*.net *.split)
cubelogic has joined #arpnetworks
zeshoem has joined #arpnetworks
crazed has joined #arpnetworks
vapor has joined #arpnetworks
Jareth has joined #arpnetworks
Ehtyar has joined #arpnetworks
ajwak95 has joined #arpnetworks
tuvwx has joined #arpnetworks
cmeiklejohn has joined #arpnetworks
nuke` has joined #arpnetworks
toddf has joined #arpnetworks
hsbt has joined #arpnetworks
zxvff has joined #arpnetworks
jdoe has joined #arpnetworks
calvino.freenode.net sets mode: +o toddf
crazed has quit IRC (*.net *.split)
cmeiklejohn has quit IRC (*.net *.split)
nuke` has quit IRC (*.net *.split)
toddf has quit IRC (*.net *.split)
cubelogic has quit IRC (Ping timeout: 240 seconds)
crazed has joined #arpnetworks
cmeiklejohn has joined #arpnetworks
nuke` has joined #arpnetworks
toddf has joined #arpnetworks
calvino.freenode.net sets mode: +o toddf
HighJinx has quit IRC (Read error: Connection reset by peer)
HighJinx has joined #arpnetworks
[20:13]
robotarmy has quit IRC (Remote host closed the connection) [20:34]
HighJinx has quit IRC (Read error: Connection reset by peer)
HighJinx has joined #arpnetworks
[20:41]
.... (idle for 18mn)
HighJinx has quit IRC (Read error: Connection reset by peer)
HighJinx has joined #arpnetworks
Zuul_ is now known as Zuul
[21:01]
fink has quit IRC (Quit: fink) [21:14]
HighJinx has quit IRC (Read error: Connection reset by peer)
HighJinx has joined #arpnetworks
garrydolley has joined #arpnetworks
[21:21]
garrydolleyHello from android [21:24]
***robotarmy has joined #arpnetworks [21:29]
HighJinx has quit IRC (Read error: Connection reset by peer)
HighJinx has joined #arpnetworks
[21:41]
garrydolley has quit IRC (Ping timeout: 272 seconds)
garrydolley has joined #arpnetworks
HighJinx has quit IRC (Read error: Connection reset by peer)
HighJinx has joined #arpnetworks
garrydolley has quit IRC (Ping timeout: 255 seconds)
robotarmy has quit IRC (Remote host closed the connection)
[21:56]
.... (idle for 15mn)
HighJinx has quit IRC (Read error: Connection reset by peer)
HighJinx has joined #arpnetworks
[22:21]
.... (idle for 18mn)
HighJinx has quit IRC (Read error: Connection reset by peer)
HighJinx has joined #arpnetworks
[22:41]
HighJinx has quit IRC (Read error: Operation timed out) [22:55]
HighJinx has joined #arpnetworks [23:03]
adkaruil has joined #arpnetworks [23:11]
adkaruilCan I pay with paypal? [23:15]
Jarethadkaruil: http://support.arpnetworks.com/kb/billing/do-you-accept-paypal [23:19]
adkaruil:( [23:20]
***nerdd has quit IRC (Ping timeout: 240 seconds)
HighJinx has quit IRC (Read error: Connection reset by peer)
[23:20]
up_the_ironsadkaruil: we are looking into adding PayPal support, but right now we don't support it, sorry [23:22]
***HighJinx has joined #arpnetworks [23:23]
adkaruilI'm looking forward to it, do you have any timeframe for pp support? [23:24]
up_the_ironsadkaruil: not yet [23:27]
***HighJinx has quit IRC (Read error: Operation timed out)
amdprophet has quit IRC (Quit: amdprophet)
zeshoem has quit IRC (Ping timeout: 246 seconds)
[23:39]
Gup_the_irons: I thought PayPal was full of risks? [23:41]
up_the_ironsG: it is, but i'm looking to double in size this year, and one way to do it is to accept paypal. dealing with the risks will become another task, hopefully outweighed by the increase in business [23:43]
***HighJinx has joined #arpnetworks [23:43]
adkaruilYeah, some people out there don't have credit card. ^_^ [23:44]
***amdprophet has joined #arpnetworks
nerdd has joined #arpnetworks
amdprophet has quit IRC (Remote host closed the connection)
amdprophet has joined #arpnetworks
[23:50]

↑back Search ←Prev date Next date→ Show only urls(Click on time to select a line by its url)