| ↑back Search ←Prev date Next date→ Show only urls | (Click on time to select a line by its url) |
| Who | What | When |
|---|---|---|
| *** | awyeah_ has joined #arpnetworks
RandalSchwartz has quit IRC (Ping timeout: 248 seconds) awyeah has quit IRC (Read error: Connection reset by peer) | [01:16] |
| raptelan | Anybody have suggestions for how to get around a corporate firewall that will not let me SSH on 80 or 443? I tried running hts/htc on the same ports and that won't work either :( | [01:29] |
| ....... (idle for 30mn) | ||
| DaCa | raptelan: http://www.jedi.be/blog/2008/11/07/a-few-cases-of-tunnel-piercings-for-firewalls-for-ssh-access/ | [01:59] |
| .... (idle for 18mn) | ||
| raptelan | DaCa: I've tried htc/hts already though...and even that is not working.
I know that i'm trying correctly, because using htc when not on their network works. | [02:17] |
| *** | LT has joined #arpnetworks | [02:23] |
| DaCa | raptelan: I don't have any more suggestions | [02:31] |
| raptelan | raptelan will try it all again when he's there again, thanks | [02:32] |
| *** | Zuul has joined #arpnetworks
Zuul_ has quit IRC (Ping timeout: 240 seconds) | [02:36] |
| .......... (idle for 49mn) | ||
| ivan-kanis has joined #arpnetworks | [03:27] | |
| .............. (idle for 1h5mn) | ||
| ivan-kanis has quit IRC (Remote host closed the connection) | [04:32] | |
| ............... (idle for 1h10mn) | ||
| jpalmer | raptelan: food for thought: if the corporate firewall is configured to block SSH, then SSH is probably against the company policy. Which begs the question: Is it really worth risking your job? | [05:42] |
| mike-burns | It raises the question. "Begging the question" means to have a circular argument.
... and that's your pedanticism for the day. | [05:43] |
| jpalmer | in my experience, after having this conversation a thousand times, the whole "the company doesn't allow it but I'll do it anyway" conversation IS a circular argument. | [05:47] |
| mike-burns | Heh. | [05:47] |
| jpalmer | the user never seems to get the fact that it's not their network, and they aren't *entitled* to do whatever they want. and since they never really "get it" they keep up with circular logic to justify it.
of course, that same false sense of entitlement is prolific in our society, and is the root cause of a LOT of fights and arguments. | [05:47] |
| .... (idle for 15mn) | ||
| *** | RandalSchwartz has joined #arpnetworks
RandalSchwartz has quit IRC (Changing host) RandalSchwartz has joined #arpnetworks | [06:03] |
| .............. (idle for 1h5mn) | ||
| raptelan | jpalmer: I didn't sign any such policy, and if they want to fire me for it (I seriously doubt that would happen even if they knew what I was doing), there's plenty of other jobs in my field. :)
jpalmer: my network port was automatically shut down when I ran virtual machines as well, but they added an exception because it's to protect against something nasty going on - developers are allowed to do crap like that ;) | [07:08] |
| *** | ivan-kanis has joined #arpnetworks | [07:13] |
| raptelan | oh, and it's easier to ask for forgiveness than permission ;) | [07:15] |
| RandalSchwartz | unless it involves felony charges. :)
RandalSchwartz has history with taking that phrase a bit far | [07:22] |
| mike-burns | Hah. | [07:24] |
| mattx86 | anyone else seeing maybe 1-2% packet loss both into ARP and outbound to their ARP gateway (IPv4)? | [07:35] |
| *** | rgouveia has quit IRC (Ping timeout: 264 seconds) | [07:43] |
| mattx86 | argh. must be my connection again | [07:45] |
| jpalmer | you are not allowed to complain until you reach the 75% packet loss mark.
jpalmer ducks | [07:46] |
| mattx86 | lol | [07:47] |
| RandalSchwartz | I lose 75% of my packets, but just not all in a row. :) | [07:48] |
| mattx86 | I actually showed about 20% after web pages took forever to load
:P | [07:48] |
| *** | rgouveia has joined #arpnetworks
rgouveia has quit IRC (Changing host) rgouveia has joined #arpnetworks | [07:50] |
| amdprophet has joined #arpnetworks | [07:58] | |
| DDevine | raptelan: You could install a web based SSH client on a server. There are a few open source ones. | [08:00] |
| *** | shmget has quit IRC (Read error: Operation timed out)
rgouveia has quit IRC (Ping timeout: 276 seconds) | [08:13] |
| ivan-kanis | how do you find out about packet loss ? | [08:18] |
| RandalSchwartz | ping! | [08:19] |
| raptelan | DDevine: I thought the problem with that was that they were basically java apps that still needed the ability to ssh from the client computer to the server...
DDevine: I haven't looked into the possibility much, though. | [08:19] |
| *** | rgouveia has joined #arpnetworks
rgouveia has quit IRC (Client Quit) | [08:22] |
| mattx86 | there might be some AJAX ones available | [08:27] |
| *** | shmget has joined #arpnetworks
rgouveia has joined #arpnetworks rgouveia has quit IRC (Changing host) rgouveia has joined #arpnetworks | [08:28] |
| jpalmer | raptelan: you could also ask IT to make an exception in the policy, since you're a developer nd all | [08:28] |
| raptelan | jpalmer: but then I might get told "no" - then I'd no longer be comfortable working around it ;) | [08:29] |
| jpalmer | I wouldn't be comfortable in the first place. | [08:29] |
| raptelan | raptelan shrugs - I don't have a problem doing things without explicit permission as long as I know that I am not doing anything nefarious, which I don't. | [08:30] |
| rgouveia | anyone else experiencing connectivity issues? like my connection here seems to go down and I cannot access my vps from .pt | [08:30] |
| raptelan | rgouveia: I'm IRC'ing from my VPS...haven't seen any issues. | [08:32] |
| RandalSchwartz | me too
then again, .pt is a long ways from LA could be any number of things where does the traceroute start to go whacky? | [08:32] |
| rgouveia | Hi RandalSchwartz, seems 67.199.135.102 | [08:33] |
| RandalSchwartz | ahh. packetexchange
that's outside anything Garry can help with | [08:33] |
| rgouveia | I don't have any output after that although I am now connected
last time I had a connectivity issue it was packetexchange IIRC raptelan: you're in the US too? | [08:33] |
| RandalSchwartz | yeah - I come in via net2ez.com
2.018 ms ping time from my desk and that's 9 hops | [08:35] |
| rgouveia | RandalSchwartz: I wish :-) | [08:36] |
| raptelan | rgouveia: yes, I'm in New York right now. | [08:37] |
| rgouveia | raptelan: ok, so I'm the only one far away then | [08:37] |
| .... (idle for 17mn) | ||
| raptelan | rgouveia: yeah, I'm close - only about 2500 miles ;)
rgouveia: but yes, you're farther. | [08:54] |
| rgouveia | and more water too :-) | [08:55] |
| *** | luceroz has joined #arpnetworks | [09:09] |
| ...... (idle for 25mn) | ||
| luceroz has quit IRC (Remote host closed the connection)
HighJinx has quit IRC (Quit: Leaving) | [09:34] | |
| LT has quit IRC (Quit: Leaving)
ivan-kanis has quit IRC (Remote host closed the connection) | [09:51] | |
| jpalmer | raptelan: get traceroutes, and send an email to support@ Garry can file a ticket with packetexchange, and have them look into it. | [09:59] |
| raptelan | jpalmer: my traceroutes are fine, I think you meant that for rgouveia? | [10:01] |
| jpalmer | indeed, sorry | [10:04] |
| rgouveia | jpalmer: hi, thanks I'll do that :-) | [10:04] |
| *** | cubelogic has joined #arpnetworks | [10:18] |
| ix33 | which is worse: not having a reverse DNS entry for an address, or having an rDNS entry that does not itself resolve? | [10:32] |
| bob^^ | when you say 'having an rDNS entry that does not itself resolve' do you mean that the forward and reverse wouldn't match? | [10:33] |
| ix33 | dig NAME returns NXDOMAIN for that address type | [10:34] |
| RandalSchwartz | ssh gets picky about some of that | [10:35] |
| bob^^ | yeah, ssh is normally the most annoying with rnds
*rdns | [10:36] |
| ix33 | good point | [10:36] |
| jpalmer | lots of things get picky about that. inredibly so if it's a mailserver. | [10:36] |
| bob^^ | yeah
in conclusion: have valid rdns ;) | [10:36] |
| ix33 | google can deal with mail ;)
although i am very disappointed that google can't deliver mail to v6 MX | [10:36] |
| bob^^ | yeah, i've recently been getting angry about that | [10:37] |
| ix33 | hope they have it ready in time for ipv6 day! | [10:37] |
| bob^^ | i suspect things will start to change after ipv6 day
i work for an isp; we've only just v6'd our core network however it was *much* easier than we expected | [10:37] |
| ix33 | xlhost delayed me on v6 address allocation for 2 months | [10:38] |
| bob^^ | now i have v6 everywhere :D | [10:38] |
| ix33 | they finally did do it though
bob^^: me too! | [10:38] |
| bob^^ | :D
have you tried disabling your v4 stack? | [10:38] |
| jpalmer | bob^^: did you guys get your own v6 allocation, or are you getting it from your provider? | [10:39] |
| bob^^ | jpalmer: own alloc from RIPE | [10:39] |
| ix33 | i ran one of my arpnetworks instances without v4 for a good while | [10:39] |
| bob^^ | it's amazing how few web sites are v6 ready :( | [10:39] |
| ix33 | yeah | [10:39] |
| jpalmer | a vps with no v4 i going to be essentially useless :P | [10:40] |
| ix33 | i have an apple airport dishing a hurricane electric tunnel to my home LAN as well. pretty idiot-proof | [10:40] |
| bob^^ | i'm just desperate to go all v6 now
nice :) | [10:40] |
| ix33 | jpalmer: how's that? | [10:40] |
| bob^^ | i noticed those options on my airport too, very smart
i have a netscreen at home though so it's tunneling to HE too :) | [10:40] |
| ix33 | bob^^: i was floored by how well it works | [10:40] |
| jpalmer | I did it as a test a while back, to see if FreeBSD and CentOS could get full updates, patches, ports and other administrative necessities.. and suprisingly, both worked well. | [10:40] |
| bob^^ | ubuntu updates over v6 fine too
it seems the more technical parts of the web are very much v6 ready just the big sites that are trailing their heels | [10:41] |
| ix33 | openbsd mirror at isc.org is v6 AND close to arpnetworks ;) | [10:41] |
| bob^^ | even the BBC over here don't have *any* v6 presence yet, which is pretty annoying :( | [10:41] |
| ix33 | did you hear about microsoft buying nortel's v4 allocations? | [10:41] |
| bob^^ | yeah, i don't like that | [10:42] |
| ix33 | that is nuts | [10:42] |
| bob^^ | i didn't think it was allowed tbh
i know over here with RIPE that's pretty much totally against the rules | [10:42] |
| ix33 | right | [10:42] |
| bob^^ | getting IPs here is a nightmare anyway | [10:42] |
| ix33 | i wonder if they pre-cleared it with them or something | [10:42] |
| bob^^ | we recently got a /16
it was *not* easy to get (a v4 /16) | [10:42] |
| ix33 | wow. | [10:43] |
| RandalSchwartz | as an ISP, did RIPE give you a /32 or a /48 | [10:43] |
| bob^^ | a /32 | [10:43] |
| RandalSchwartz | cool | [10:43] |
| bob^^ | yeah :) | [10:43] |
| ix33 | i was under the impression that that was nearly impossible outside the US nowadays | [10:44] |
| bob^^ | i still can't quite believe how big it is | [10:44] |
| RandalSchwartz | you can ennumerate all the visible stars in the sky then :) | [10:44] |
| bob^^ | yeah, amazing unmber of addresses :) | [10:44] |
| RandalSchwartz | I have 5 or 6 /48's already | [10:44] |
| bob^^ | it still feels quite wasteful though
pushing a /64 down to our office network for example | [10:44] |
| RandalSchwartz | consider, a /32 is like *one* address from v4 | [10:44] |
| ix33 | well back in the 90's when every community college was getting a v4 /16 i'm sure nob0ody thought about running out... | [10:45] |
| RandalSchwartz | you use a /64 for each segment | [10:45] |
| bob^^ | yup
the autoconfig stuff is pretty smart i must say i'm really liking some of the stuff about v6 | [10:45] |
| ix33 | agreed. | [10:45] |
| bob^^ | yet to investigate the encryption stuff but that sounds handy
as i suspect we could start to do away with VPNs bob^^ needs to do a lot of reading up | [10:45] |
| *** | HighJinx has joined #arpnetworks | [10:46] |
| ix33 | me too | [10:46] |
| bob^^ | at least i get 10/10 on v6 and v4 tests from test-ipv6.com now anyway ;) | [10:46] |
| RandalSchwartz | the stuff at ipv6.he.net is quite helpful
yeah | [10:46] |
| bob^^ | yeah, HE are fantastic
we actually use them as a primary transit provider here too great network (and exceptionally cheap for transit) mind you we're getting bulk rates for buying 10gbit/s from them ;) | [10:47] |
| RandalSchwartz | I got my T-shirt! Did you? | [10:48] |
| jpalmer | I got mine! actually, last month. | [10:48] |
| bob^^ | i need to finish off the tests on there :)
it wanted me to v6 enable my mailserver which is not particularly easy given i use google apps for my email :/ going to create a test zone inside my domain and throw up exim over the weekend on v6 :) | [10:48] |
| ix33 | bob^^: i was running a v6 MTA for about 10 minutes just for that test ;) | [10:49] |
| bob^^ | hehe, that's exactly what i intend to do :) | [10:50] |
| ..... (idle for 24mn) | ||
| RandalSchwartz | me too
actually - it was the webserver that I just tunnelled using socat :) I made it so port 80 on v6 resent to port 80 on v4 | [11:14] |
| jpalmer | bob^^: you can setup exim, and just set a temporary AAAA record for the test. set your DNS TTL's to like 60 seconds. do the test and remove the AAAA. the chances of you getting any mail other than the test delivered over it, almost non-existant.
the ipv4 mail will look up the A records for your MX. the test mail will lookup the AAAA records, which would be pointed to your exim install. no need for a subdomain ot whatever. | [11:17] |
| jdoe | cheaters ;) | [11:19] |
| jpalmer | it's not cheating. you are legitimately accepting the mail over IPv6, which is the purpose of the test, to prove your knowledge. it doesn't say you have to KEEP accepting it.
cheating (to me, anyway) would be doing something like.. claiming you were the he.net domain, or arpnetworks.com domain, where all of this is already setup. and then just breezing through the tests without doing anything to demonstrate actual knowledge. | [11:20] |
| RandalSchwartz | oooh - I never thought of that :)
except that you have to add something to a web page, I think | [11:29] |
| jpalmer | yeah, I think so. I was just using that as an example of what I'd consider cheating ;) | [11:30] |
| *** | greenskeleton has quit IRC (Quit: WeeChat 0.3.4)
greenskeleton has joined #arpnetworks | [11:35] |
| mattx86 has quit IRC (Quit: bbl) | [11:43] | |
| ............. (idle for 1h0mn) | ||
| wallshot has joined #arpnetworks | [12:43] | |
| ................ (idle for 1h15mn) | ||
| zxvf has joined #arpnetworks | [13:58] | |
| zxvf | hi
is something broken? | [13:58] |
| *** | zxvf has quit IRC (Client Quit) | [14:00] |
| up_the_irons | LOL | [14:01] |
| wallshot | he waited the allocated 75 seconds for a response and decided it must just be on his end i guess | [14:01] |
| up_the_irons | haha | [14:05] |
| ...... (idle for 28mn) | ||
| *** | KyrosKoh has quit IRC (Ping timeout: 250 seconds)
KyrosKoh has joined #arpnetworks | [14:33] |
| .... (idle for 16mn) | ||
| jdoe | pew pew. | [14:53] |
| ....... (idle for 33mn) | ||
| up_the_irons | bob^^: what's your v6 allocation? just curious from which prefix RIPE allocates
MS bought nortel's v4 allocations? wtf | [15:26] |
| ......... (idle for 43mn) | ||
| *** | wallshot has quit IRC (Remote host closed the connection) | [16:11] |
| ......... (idle for 42mn) | ||
| phreak has joined #arpnetworks
|dream has quit IRC (Read error: Operation timed out) | [16:53] | |
| phreak has quit IRC (Quit: quit)
|dream has joined #arpnetworks | [17:05] | |
| .................... (idle for 1h38mn) | ||
| cubelogic has quit IRC (Ping timeout: 276 seconds) | [18:43] | |
| HighJinx has quit IRC (Ping timeout: 252 seconds) | [18:52] | |
| Zuul has quit IRC (Ping timeout: 252 seconds)
Zuul has joined #arpnetworks | [18:57] | |
| ........ (idle for 38mn) | ||
| heavysixer has quit IRC (Quit: heavysixer) | [19:37] | |
| ......... (idle for 41mn) | ||
| HighJinx has joined #arpnetworks | [20:18] | |
| .... (idle for 19mn) | ||
| heavysixer has joined #arpnetworks
ChanServ sets mode: +o heavysixer | [20:37] | |
| heavysixer has quit IRC (Quit: BAMPF!) | [20:45] | |
| ↑back Search ←Prev date Next date→ Show only urls | (Click on time to select a line by its url) |