[00:35] *** cubelogic has quit IRC (Remote host closed the connection) [01:04] *** phrac has quit IRC (Read error: Operation timed out) [01:13] *** phrac has joined #arpnetworks [01:16] *** ivan-kanis has joined #arpnetworks [01:28] *** phrac has quit IRC (Ping timeout: 250 seconds) [01:30] *** phrac has joined #arpnetworks [02:06] *** LT has joined #arpnetworks [02:33] *** coobra has quit IRC (Remote host closed the connection) [02:46] *** coobra has joined #arpnetworks [02:46] *** coobra has quit IRC (Changing host) [02:46] *** coobra has joined #arpnetworks [02:53] *** coobra has quit IRC (Quit: leaving) [04:01] up_the_irons: hm.. now that I have two ARP VPSes in one /29, doesn't that mean that the cacti graphs will report the combined usage (my VLAN)? does that also mean that my bandwidth from the two VPSes are combined into one total, shared amongst the two? [05:04] *** coobra has joined #arpnetworks [05:04] *** coobra has quit IRC (Changing host) [05:04] *** coobra has joined #arpnetworks [05:04] *** coobra has quit IRC (Client Quit) [05:05] *** coobra has joined #arpnetworks [05:05] *** coobra has quit IRC (Client Quit) [05:09] *** coobra has joined #arpnetworks [05:09] *** coobra has quit IRC (Changing host) [05:09] *** coobra has joined #arpnetworks [05:18] *** ix33 has quit IRC (Ping timeout: 260 seconds) [05:18] *** ix33 has joined #arpnetworks [06:39] *** coobra has quit IRC (Quit: Lost terminal) [06:49] *** bharatak has joined #arpnetworks [07:00] *** BeBoo_ has joined #arpnetworks [07:21] *** ix33 has quit IRC (Ping timeout: 248 seconds) [07:39] *** ix33 has joined #arpnetworks [08:03] *** au has quit IRC (Ping timeout: 240 seconds) [08:06] *** au has joined #arpnetworks [08:06] *** au has quit IRC (Changing host) [08:06] *** au has joined #arpnetworks [08:17] *** heavysixer has quit IRC (Quit: heavysixer) [08:26] *** heavysixer has joined #arpnetworks [08:26] *** ChanServ sets mode: +o heavysixer [08:35] *** coobra has joined #arpnetworks [09:11] *** robotarmy has joined #arpnetworks [09:34] *** HighJinx has quit IRC (Quit: Leaving) [09:40] *** homosaur has joined #arpnetworks [10:03] *** robotarmy has quit IRC (Remote host closed the connection) [10:10] *** robotarmy has joined #arpnetworks [10:20] *** cubelogic has joined #arpnetworks [10:22] *** LT has quit IRC (Quit: Leaving) [10:37] *** HighJinx has joined #arpnetworks [10:44] *** homosaur has quit IRC (Quit: pocketful of goat cheese, ready to party) [10:59] *** ivan-kanis has quit IRC (Remote host closed the connection) [11:49] *** bob__ has joined #arpnetworks [11:49] *** bob^^ has quit IRC (Ping timeout: 252 seconds) [11:53] *** jdoe has quit IRC (Ping timeout: 252 seconds) [11:54] *** jdoe has joined #arpnetworks [12:06] *** ivan-kanis has joined #arpnetworks [12:28] *** Yamazaki-kun has quit IRC (Remote host closed the connection) [12:29] *** Yamazaki-kun has joined #arpnetworks [12:36] *** ivan-kanis has quit IRC (Remote host closed the connection) [13:33] mattx86: yes, combined usage. [13:34] up_the_irons: ah, ok [13:36] up_the_irons: hola [13:36] jpalmer: yo! how was the honeymoon? [13:36] up_the_irons: I got your email. (and saw the channel logs) and all I can say is: awesome news. [13:36] was great. colorado was incredible. [13:36] jpalmer: wb :) [13:37] (at work, can't talk long) just wanted to say I got the email, and can't wait for the completed project ;) [13:37] mattx86: danke [13:37] being without email or phones for a week was.. interesting :P [13:38] (we had them, we just made a pact to not USE them) [13:38] jpalmer: btw, today (most likely), i'm switching powerdns to be the master and ns1/ns2 slaves for the reverse zones. so after I give you the cue, don't edit any of the zone files anymore (they will be slaved) [13:39] no problem. and wow, the project is that close? [13:39] jpalmer: yes, srsly huh? i POWERED THROUGH some major coding in the last 7 days [13:39] jpalmer: i'll release the dns editor link in a limited beta today or tomorrow [13:40] pure insanity. I've completed all the DNS tickets, so.. I'll not update zonefiles anymore without checking here first. [13:40] (here or /msg is fine) [13:40] roger [13:40] yeah [13:41] jpalmer: glad to hear colorado was awesome; did you ski, snowboard, ... ? [13:42] ski yes, (after a 1 day class) ended up on the "level 3" slopes. snowboarding looked fun, but I didn't try it. [13:42] jpalmer: nice [13:43] went snowmobiling, dogsledding, hot springs, tubing, sleigh ride, skiing, and such [13:43] brb [13:43] wow, lots of stuff! [13:49] *** BeBoo_ has quit IRC (Quit: BeBoo_) [13:56] fun [13:56] i skiid and snowmobilied a few months ago [13:56] in colordo, winter park [14:00] nice. i was in steamboat springs [14:11] sounds like you had a blast :) [14:11] we stayed busy. heh [14:22] cool [14:22] "level 3"? [14:24] up_the_irons: powerdns as a master with ... what sounds like non-pdns for the slaves, huh. Lemme guess, DB backend making automated updates easier? ;) [14:27] hm.. quick question guys, is it possible to 'dig' a host with a classless IPv4 PTR, or only the classless IPv4 zone itself? i.e., dig 143/25.0.168.192 PTR @auth-ns-ip or dig 143.0.168.192 PTR @auth-ns-ip v.s. dig 128/25.0.168.192 @auth-ns-ip [14:28] jdoe: I think I'll do that myself next. using nsd here, editing zonefiles by hand :) [14:29] I had a similar setup to what he's proposing a while ago... pdns master [somewhere], feeding two authoritative slaves (db replication rather than AXFR) [14:29] worked pretty well, though the web interfaces available at the time were pretty bad. [14:30] oh right, two separate caching nameservers as well. [14:30] yeah, that's the only thing I'm dreading - the web interface [14:30] I need to get back into working on my php framework and use that to develop a web interface from scratch [14:31] yeah I was... far too lazy for that. [14:31] so what ended up happening is I'd update records from the db. [14:31] ... which isn't really desirable. [14:31] yuck ;) [14:32] on that note, I'm trying to dig deep and find some motivation lately [14:33] I'm not sure how well it's working out.. I'd rather not think about it (too much atleast) heh [14:36] ive never heard of level 3 difficulty before [14:36] must be a new system [14:38] im used to greens, blues, blacks, sometimes if their are cliffs or lots of rocks they call some double blacks [14:38] and if there are moguls on blue, they call em blue blacks [14:39] I wish there was some sort of standardization, but I'm not sure how there could be. [14:39] the steepest, nastiest double-black-diamond is going to be trivial if you have deep powder, and horrific if it's bare. [14:40] I dunno, maybe he's talking about something else... [14:43] a lot of lesson groups, they break you down into numbered groups... 1 being "what the fuck is a ski?" and ... 7 or something being "people who know what they're doing" ... level 3, at least around here, translates as "comfortable on green circles and some easier blue squares" [14:47] jdoe: yeah, the DB backend is pretty much a necessity to work with my rails-powered Portal. [14:48] oh yeah. If I'd either BEEN a more-keen developer or paid one, it would have been phenomenal. [14:48] haha. As it was, it was merely "okay" [14:50] *** schmir has joined #arpnetworks [14:50] up_the_irons: hm.. are you going to be implementing rdns delegation via the control panel? also, are you using RFC 2317 for rdns delegation? [14:52] mattx86: you can do *non*-rfc 2317 delegation via the control panel, using either CNAME or NS records. the control panel will allow you to create PTR, CNAME and NS records for single IPs, but since rfc-2317 delegation adds glue records for not just a single IP, there is not currently a way to edit that in the control panel [14:55] the only sticking point is the validation of the record. if i find the time to code that up, then i can also support rfc-2317 style delegation as well [14:55] but i'm wondering how the demand for delegation will go down once you can edit your own PTRs via our control panel. all but the very techy will probably just not bother with delegation anymore [14:56] true [14:56] I was reading this: http://homepage.ntlworld.com./jonathan.deboynepollard/FGA/avoid-rfc-2317-delegation.html [14:56] ugh [14:57] the biggest problem with rfc 2317 delegation is people who fail to understand rfc 2317 delegation... [14:57] and I read correctly, I can't use dig on such a zone [14:57] if I* read correctl [14:57] well, you read correctly but I'm pretty sure the writeup is wrong. [14:58] ie dig -x 174.136.97.242 [14:58] works for me :P [14:58] hm.. let me try [15:01] that's the same as specifying e.g. dig 242.97.136.174.in-addr.arpa. PTR correct? [15:02] yeah, according to djb, you can just delegate individual IPs with just NS records. Sure, this works, but the complaint is (if the server you're delegating to is using BIND), you have to create a zone file for reach IP. Of course, he says the solution to this is simply use better dns software ;) [15:04] hm.. I'm starting to think it'd be a heck of a lot easier to do a setup similar to yours [15:04] that's just about the conclusion I'd come to at one point - one zone for each IP -- ugh [15:05] mattx86: the argument is, while biased yes, is that if you just use tinydns, you no longer need a separate zone for each IP [15:05] it would *just work* [15:06] up_the_irons: what public-facing dns server are you going to use, if you don't mind my asking? powerdns all the way? [15:06] mattx86: i recently had a customer do delegation with just a CNAME [15:07] 162 IN CNAME 162.109.136.174.ptr.somedomain.com. [15:07] *** schmir has quit IRC (Remote host closed the connection) [15:08] now that customer controls ptr.somedomain.com, a single zone, so they can set up all their PTR's pretty much naturally, and I don't need anything but CNAME's on my end (no glue needed) [15:08] i found that method to be pretty darn trivial, and it made me think, "why doesn't everyone do this?" ;) [15:08] *** fink has joined #arpnetworks [15:08] mattx86: BIND [15:08] up_the_irons: "use better software" is a reasonable response. I often wonder if the reason BIND is still around is inertia :P [15:09] yes, of course it is ;) [15:09] well... it's a reasonable response in this specific case, I guess. [15:09] I want to be super careful I don't blanket agree with DJB [15:09] haha [15:09] mattx86: I want to switch from BIND to nsd, one of these days [15:09] haha [15:10] up_the_irons: do it [15:10] up_the_irons: worth it [15:10] djb quite frankly.. scares me. [15:10] up_the_irons: that's what I'm tinkering with now tho, nsd [15:10] I have a love/hate relationship with his.. views. [15:10] i used to use djb for years [15:11] I dunno. I made compromises. I was convinced qmail was the greatest thing ever. Then I found postfix. [15:11] you're marginally worse off in terms of security, but it's far more flexible and easy to find packages for... [15:12] ix33: mattx86 : cool [15:12] i ran into that with djbdns and ipv6 [15:12] jdoe: exactly. I used qmail for YEARS (ran a 100+ node mailcluster) then one day, I tried postfix. [15:12] you have to go grab a patch authored by who knows who to get that to work [15:12] just wasn't worth it any more [15:12] within 3 months of postfix, I'd migrated the entire cluster, AND reduced the cluster size by 20% [15:13] haha. [15:13] ix33: sounds about like me [15:13] I never had a performance issue, it was purely "this is quicker for me to use" [15:13] jpalmer: jdoe : same here. ran qmail for like 10 years, then when i needed to re-do my mail system, i read the entire postfix manual cover to cover, and gained a LOT of respect for it. so i switched [15:13] jdoe: wow, 100 nodes? jesus, that's a lot of mail!! [15:13] not me. [15:14] whups, i mean jpalmer [15:14] up_the_irons: I'm headed to a dinner party. let me know via /msg if you want me to test anything with the new NS's. Oh, did that powerDNS writeup help much? [15:14] * jdoe ran a 3 node mail cluster, and that's still a ton of mail. [15:14] and qmail is cool and designed well, but djb himself doesn't participate in developing extensions to it, so you're at the mercy of whoever is writing those [15:14] jpalmer: yes it did, thank you! [15:14] rejects 20 times as much spam as it accepts valid messages :( [15:14] up_the_irons: I worked for one of those large "outgoing only, all solicited" mailing list companies. due to NDA, I can't say who. [15:15] jpalmer: ah i c [15:15] ix33: I heard djb relaxed the licensing of qmail a while back, and allowed a real fork.. not sure what it's status is these days. I stopped following qmail years ago. [15:16] by that time my stuff was already google apps ;) [15:16] up_the_irons: did you have to extend the DB much, for your needs? [15:16] ix33: LOL you sound like me reincarnate. qmail for years. then postfix for years. now, I use google apps for all my personal stuff. I just don't have the time to constantly be learning all the new spam tricks. [15:17] me except s/postfix/exim/ [15:17] jpalmer: nope, not at all. I made Rails models to work directly with the powerdns tables (only needs "domains" and "records" tables) [15:17] I never took the time to learn exim. [15:17] (it comes with debian, ok :( ) [15:18] up_the_irons: one day, I'll probably have to hack into your repo server, and steal your codez! [15:18] spam tricks are solved by mailroute.info :) [15:18] up_the_irons: hm.. so the cname method. that would allow me to specify both v4/v6 PTRs, at the expense of specifying the entire address instead of just the host bit in my PTR zone file? [15:18] ok, I have to get to the dinner party. later all. [15:18] jpalmer: it would be nice to open source it, but it is kinda glued to my Portal code too; hard to separate and still be useful [15:19] mattx86: pretty much [15:19] up_the_irons: your service is awesome, btw [15:19] ix33: thanks!!! [15:20] up_the_irons: ok, cool. I might do that then [15:20] ix33 +1 :) [15:21] *** rgouveia has joined #arpnetworks [15:22] up_the_irons: i hope you are making fistfuls of money [15:22] hi all [15:22] ix33: LOL [15:23] not fistfuls, but it is enough to keep growing [15:23] up_the_irons: did you resize a / filesys with it mounted as readonly under /mnt with bsd.rd? [15:24] well that may actually be better since you're growing, and you're also not quitting the business to go live on a sailboat or something [15:24] rgouveia: i never did it while mounted [15:25] up_the_irons: I was reading the channel log when you're talking with toddf. do you remember? [15:25] rgouveia: are you trying to do it now? I have notes on how to do it, i should just put it on the wiki [15:25] rgouveia: i do not remember, sorry [15:26] up_the_irons: well I just don't have growfs on bsd.rd and I don't want to try it with / mounted as ro ;-) [15:26] up_the_irons: I have the fdisk + disklabel done [15:26] rgouveia: LOL, this is what I have at the top of my notes: [15:26] Grab growfs program from root partition [15:26] :: [15:26] mount /dev/wd0a /mnt [15:27] cp /mnt/sbin/growfs . [15:27] umount /mnt [15:27] slick [15:27] up_the_irons: ahh, it's static linked then, let's try it [15:28] yep [15:28] seems gud ... just a "Warning: 367072 sector(s) cannot be allocated." [15:30] I just packaged nsd for alpine linux earlier, and I guess I'll be packaging powerdns as well ;) [15:30] rgouveia: i get the same warning [15:30] up_the_irons: ok [15:31] * rgouveia crosses fingers [15:33] http://wiki.arpnetworks.com/wiki/ResizeOpenBSDRootFilesystem [15:36] ok, I'm up again with bigger disk this time :-) [15:36] cool [15:36] up_the_irons: wd0 gave me some timeouts when growfs'ing [15:36] wd0a: device timeout reading fsbn... [15:37] odd [15:37] I have the full output if you want [15:51] *** rgouveia has quit IRC (Quit: leaving) [15:52] *** rgouveia has joined #arpnetworks [16:00] *** robotarm_ has joined #arpnetworks [16:00] *** robotarmy has quit IRC (Ping timeout: 252 seconds) [16:10] *** schmir has joined #arpnetworks [17:27] *** schmir has quit IRC (Remote host closed the connection) [17:43] back [17:52] *** bharatak has quit IRC (Quit: leaving) [17:54] *** bharatak has joined #arpnetworks [17:59] *** robotarm_ has quit IRC (Remote host closed the connection) [18:10] *** fink has quit IRC (Quit: fink) [18:31] *** robotarmy has joined #arpnetworks [18:37] *** bharatak has quit IRC (Remote host closed the connection) [18:42] *** robotarmy has quit IRC (Remote host closed the connection) [18:42] *** robotarmy has joined #arpnetworks [18:44] *** bharatak has joined #arpnetworks [18:53] *** HighJinx has quit IRC (Ping timeout: 240 seconds) [19:01] *** bharatak has quit IRC (Remote host closed the connection) [19:07] *** bharatak has joined #arpnetworks [19:20] *** cubelogic has quit IRC (Ping timeout: 248 seconds) [19:23] wow. groff is gone from openbsd [19:23] o.o [19:23] i don't know why i'm so amazed at openbsd just completely re-writing stuff they don't like [19:24] also, there is no C++ left in src with the removal of groff [19:24] I happen to beleive that C++ was basically a rape of the C language [19:24] so that makes me happy [19:24] no argument here [19:25] i usually agree with OpenBSD devs [19:25] besides the time Theo said the extra core of a dual core processor would be dedicated to cryptography [19:25] haha [19:25] lol [19:28] i think he was trying a little too hard at the time to stick it to the man about cryptography exports [19:28] *** bharatak has quit IRC (Remote host closed the connection) [19:36] oh boy, rsync-ing the new snapshot [19:39] ix33: it's not a laughing matter. if you had a vpn system, a cpu dedicated to crypto not running inside biglock would be a huge win. it will happen, the road from here to there is littered with 'must be done first..' stuff [19:40] ix33: there are some details you fail to grasp. groff is gnu. mandoc is bsd. groff can take 10s+ to render some man pages, mandoc takes < .01s on everything. building is faster, rendering is faster, license is better, code is cleaner, and actively maintained. what's not to like? [19:41] ix33: openbsd will always take input from users who wish to code with a more free license than gpl, with quality code, smaller (which means more auditible) programs, and less upstream headaches. [19:42] ix33: I will suggest this so it doesn't take you a few years to catch on, but gcc4 in base is the last gcc that will ever be imported. gpl3 is not going into base period, so pcc or something else is the path forward beyond gcc4. what the direction will be is anyones guess but it won't be gpl3 gcc that's for sure. [19:43] ix33: goals.html if digested properly helps understand the openbsd process when making such decisions that you obviously didn't quite grasp in the past. [19:44] ix33: don't take this the wrong way, i'm just helping to make things clear and more understandable for you (and the masses) *grin* [19:47] 21:46 <+adfdfgsdf> people like that still exist.. [19:47] woops [19:47] wrong window [19:50] * G must download openbsd [19:50] toddf: oh i get the motivations [19:51] toddf: i have all the respect in the world that openbsd stands and acts upon their principles [19:51] toddf: all i said was that it's amazing that they do it [19:59] toddf: and speaking as a software developer, not least because of the practical concerns [20:02] toddf: I thought they were looking at clang as the gcc replacement [20:03] ix33: consider me trigger happy to explain things at times. fair 'nuff. [20:14] toddf: understandable [20:15] toddf: i'm coming back to openbsd after a long time away [20:16] i just upgraded to -current, the stupid way! [20:16] http://blather.michaelwlucas.com/?p=543 [20:16] caveat: i was at the previous -current [20:23] ix33: truth be known my first install of openbsd was mostly via cmdprompt since I was familiar with slackware before and at the time sd2/sd3 were not created on the install media and MAKEDEV was not on the install media either [20:23] this was .. over 12 years ago .. [20:24] ix33: so i relate, but you're also avoiding testing the excellent and simple to use upgrade procedure. bsd.rd + u for upgrade are your friend [20:24] *** jlgaddis has quit IRC (Changing host) [20:24] *** jlgaddis has joined #arpnetworks [20:25] toddf: agreed. bsd.rd is awesome [20:25] toddf: i am just tinkering with one of my excellent if not entirely disposeable arpnetworks VPS instances [20:31] *** HighJinx has joined #arpnetworks [20:35] stupid mpbios [20:35] ;-) [20:37] i don't think i've ever remembered in time [20:38] toddf: ok i have a question for you [20:38] why is inetd configured the way it is by default in openbsd? [20:39] what do you mean 'the way it is'. [20:39] what would you change by default and why? [20:40] with small services turned on [20:41] i forget what they are, i always turn them off [20:41] daytime may be one [20:41] ident [20:41] those tend to be useful in general [20:42] though if you feel strongly enough send a diff to tech@ to change it and see reasoning for keeping them or see someone say 'ok it is time to disable x but not y' etc [20:42] well i honestly don't have a reason to suggest they be disabled [20:43] other than principle of they're not needed for me [20:43] i've never heard of a use-case for daytime & echo so i don't know what the technical reasons may be for keeping them on by default [20:44] thats an argument if you didn't realize it. [20:45] i tend to err on the side of i'm just not that well -informed ;) [20:46] personally with ntpd in base, daytime does indeed seem pointless by default. [20:47] and echo? does it serve a compelling function that ping can't? [20:47] i'll have to search marc's list and see how many times they've had this discussion ;) [20:47] good idea [20:48] reasoning and research make more compelling arguments [20:49] i never touched a 'nix before 1998, so in the back of my head i still imagine that there may be a magical reason for those [20:49] afterall, openbsd.org MUST have a good reason, right? [20:49] ;) [20:49] looking and questioning is always good, tis one good thing with source [20:50] hmm you know i wonder what the changelog for inetd.conf looks like... that's easy enough [20:53] with the whole random discussion lots of things got looked at and changed that would have otherwise sat idling waiting for someone to look at [20:53] lol the last commit to /etc/inetd.conf was 2005 [20:54] and that was to remove ftp-proxy [20:56] from 1996: "also, always enable identd -- many things expect it now" [20:56] Echo is/was used to hunt down terminal issues as well as provide a ping that makes it through to userland. [20:56] think that's changed in 15 years? other than IRC servers? [20:56] note that that log probably enabled rpc services also [20:56] ICMP is kernel-only, so it can be meaningfully different (e.g., system is hung, pings, but userland isn't running). [20:57] pilgrimd: thank you [20:57] but no, i don't think it has a use these days. [20:57] *** Zuul_ has joined #arpnetworks [20:57] "no rpc by default" Aug 2002 [20:58] fascinating [20:58] hard to believe i once ran an openbsd with rpc on by default... [20:59] *** Zuul has quit IRC (Ping timeout: 250 seconds) [21:15] well apparently they've heard the syslog thing a time or two: http://marc.info/?l=openbsd-tech&m=111021393629608&w=2 [21:25] being able to send out does not equal enabling receipt [21:25] yeah i read somewhere that's the reasoning [21:26] it may have even popped up again on @tech since i've been paying attention [21:27] or maybe that was somebody trolling misc [21:44] *** robotarmy has quit IRC (Remote host closed the connection) [21:56] *** lostlogic has joined #arpnetworks [22:00] *** lostlogic has left [22:15] *** cubelogic has joined #arpnetworks [22:43] *** jlgaddis has quit IRC (Changing host) [22:43] *** jlgaddis has joined #arpnetworks [22:45] *** Zuul_ is now known as Zuul [23:02] *** au` has joined #arpnetworks [23:05] *** au has quit IRC (Ping timeout: 246 seconds) [23:42] channel poll: which icon should I use beside the menu item "Reverse DNS", taken from this list: http://www.famfamfam.com/lab/icons/silk/previews/index_abc.png [23:42] i can't decide [23:44] *** au` has quit IRC (Ping timeout: 246 seconds)