#arpnetworks 2012-06-12,Tue

↑back Search ←Prev date Next date→ Show only urls(Click on time to select a line by its url)

WhoWhatWhen
***Ehtyar has quit IRC (Quit: I was raided by the FBI and all I got to keep was this lousy quit message!) [00:38]
.... (idle for 17mn)
LT has joined #arpnetworks [00:55]
amdprophet has joined #arpnetworks [01:03]
.................. (idle for 1h26mn)
LT has quit IRC (Remote host closed the connection) [02:29]
....................... (idle for 1h50mn)
ix33 has quit IRC (Ping timeout: 272 seconds)
ix33 has joined #arpnetworks
[04:19]
................... (idle for 1h31mn)
nestea has quit IRC (Quit: ())
nestea has joined #arpnetworks
heavysixer has joined #arpnetworks
ChanServ sets mode: +o heavysixer
nestea has quit IRC (Client Quit)
nestea has joined #arpnetworks
nestea has quit IRC (Client Quit)
nestea has joined #arpnetworks
nestea has quit IRC (Client Quit)
[05:50]
...... (idle for 27mn)
qbit_ has joined #arpnetworks [06:21]
qbit_bah - keep forgetting to add you guys to my autojoin list :D [06:21]
..... (idle for 20mn)
win2
heh
[06:41]
***meingtsla has quit IRC (Quit: Leaving)
meingtsla has joined #arpnetworks
ziyourenxiang has joined #arpnetworks
[06:47]
........ (idle for 39mn)
dferris_ is now known as dferris
toddf has quit IRC (Read error: Operation timed out)
toddf has joined #arpnetworks
ChanServ sets mode: +o toddf
heavysixer has quit IRC (Read error: Connection reset by peer)
[07:31]
...... (idle for 26mn)
Guest90612 has quit IRC (Changing host)
Guest90612 has joined #arpnetworks
Guest90612 is now known as phlux
[08:03]
ziyourenxiang has quit IRC (Quit: ziyourenxiang)
phlux has quit IRC (Quit: Reconnecting)
phlux has joined #arpnetworks
[08:15]
...... (idle for 26mn)
raptelan has quit IRC (Remote host closed the connection) [08:42]
...... (idle for 28mn)
himuraken has quit IRC (Ping timeout: 252 seconds) [09:10]
toorop has quit IRC (Ping timeout: 244 seconds) [09:18]
himuraken has joined #arpnetworks [09:24]
toorop has joined #arpnetworks [09:31]
gift__ has quit IRC (Remote host closed the connection)
gift__ has joined #arpnetworks
[09:42]
........ (idle for 36mn)
_awyeah__ has quit IRC (Remote host closed the connection) [10:19]
zeshoem has quit IRC (Ping timeout: 246 seconds)
heavysixer has joined #arpnetworks
ChanServ sets mode: +o heavysixer
[10:28]
.......... (idle for 46mn)
mikeputnamhow come OpenBSD systat misbehaves in my arp vps? [11:15]
***HighJinx has quit IRC (Ping timeout: 244 seconds) [11:16]
pjsanyone have trouble with freebsd-update? I've been getting this contastantly the last few weeks: http://dpaste.com/758314/ [11:18]
jpalmermisbehaves how? I'm not familiar with running it on openbsd, but I've seen other issues.. that may not be specific to openbosd [11:18]
mikeputnamit never populates the fields with stats [11:19]
jpalmerpjs: IIRC, they added IPv6 AAAA records a few weeks ago. is your IPv6 either disabled, or configured correctly? [11:20]
pjsjpalmer, I never configured it.. [11:20]
mikeputnami tried running it with a interval of 1 sec and the clock display ticks but no data. then this: > The alternate system clock has died! [11:20]
jpalmerpjs: I'd specifically disable IPv6 then, and see if it works.
mikeputnam: ahh, not familiar with that particular issue. probably not going to be much help :/
[11:21]
mikeputnamtop works normally
not a big deal really, more curiosity
[11:21]
***HighJinx has joined #arpnetworks [11:24]
pjsjpalmer, silly question.. I see the rc.conf entries to disable ipv6, but is it possible without requiring a reboot? [11:25]
up_the_ironspjs: remove the default route for v6, and it won't be used (and if you never set it up, then most likely there is not v6 default anyway) [11:27]
pjsup_the_irons netstat -rn does show some v6 routes.. [11:29]
jpalmerpjs: can you ping update5.freebsd.org? over ipv4?
I have a feeling it's timing out before your networking stack is trying to fall back to ipv4
[11:29]
pjsYup [11:29]
jpalmerwhat happens if you ping6 the same host? [11:30]
pjsPING6(56=40+8+8 bytes) 2607:f2f8:a548::2 --> 2001:4978:1:420::cc09:3750
ping6: sendmsg: Operation not permitted
[11:30]
up_the_ironspjs: the v6 default will be ::0
pjs: is your firewall blocking some v6?
[11:30]
jpalmerpjs: I'd run a tcpdump, and see if it's bein attempted over v4 or v6
that message looks like the traffic is being administratively blocked.
[11:31]
pjsup_the_irons default 2607:f2f8:a548::1 UGS em0 (my default)
ahh, could be.. I didn't specifically permit v6
[11:31]
up_the_ironspjs: looks right [11:32]
***dj_goku_ has joined #arpnetworks
dj_goku_ has quit IRC (Changing host)
dj_goku_ has joined #arpnetworks
[11:32]
pjsman my v6 fu is non-existant [11:33]
***dj_goku has quit IRC (Read error: Connection reset by peer) [11:33]
pjsup_the_irons / jpalmer - my default out going rule is "pass out on $ext_if proto { tcp, udp, icmp } from any to any modulate state" (pf) do I need to specify v6 in there? [11:34]
up_the_ironsmy pf fu is non-existent ;) [11:34]
jpalmerpjs: I'm not sure how to completely disable v6 on fbsd.. I haven't done much in fbsd-land with it. I'm more of a centos guy the last 2-3 years due to work. [11:35]
pjsheh ok cool.. I'll read the man page [11:35]
twobithackeryou're probably blocking icmp6, which is required for things like neighbor discovery to work [11:35]
up_the_ironsI think twobithacker is probably right, i just had a support ticket about this a week ago, and the customer's pf was blocking the ND packets [11:36]
pjstwobithacker ahh, ok.. I am allowing icmp "pass in inet proto icmp all icmp-type echoreq keep state" but not mentioning icmp6 [11:36]
twobithackeryeah, IPv6 requires more than that to function, you need to allow at least neighbrsol and neighbradv, and maybe routersol/routeradv, and toobig is highly recommended (since v6 can't be fragmented on the path)
I find it easier to just allow all icmp6
[11:39]
jpalmerI'd add a temp rule to allow all ipv6 in/out, and see if that addresses your update issue. let smake sure we're on the right path, before builind g a fulle pf rule set.
wow, I kin tipe.
[11:39]
pjsok, yea.. let me test that
lol
[11:40]
jpalmercurrently in a meeting. ignore my poor typing and sporadic repsonses. :P [11:40]
twobithackerhttp://pastebin.ca/2160604 <- my fairly minimal pf.conf, if anyone's interested [11:41]
pjstwobithacker thanks.. helps me with the icmp6 change [11:42]
jdoejpalmer: depends on how thoroughly you want to remove it :P [11:43]
jpalmerjdoe: I more meant 'disbable' so that the OS doesn't try to prefer it over v4. Ideally, you'd have dual stack working correctly. but barring that, prever v4 over a broken v6 config [11:45]
jdoeah [11:47]
pjsjpalmer, well I can now ping6 update5.freebsd.org but freebsd-update fetch still fails (same as before, only much quicker now heh) [11:47]
***HighJinx has quit IRC (Ping timeout: 252 seconds)
HighJinx has joined #arpnetworks
[11:50]
phluxAnyone in here know anything about verifying SSL certs? [11:57]
twobithackermaybe, what are you trying to do? [11:59]
***dj_goku_ has quit IRC (Ping timeout: 245 seconds) [12:02]
dj_goku has joined #arpnetworks [12:07]
Yamazaki-kun has quit IRC (Ping timeout: 272 seconds)
HighJinx has quit IRC (Ping timeout: 244 seconds)
[12:18]
jpalmerpjs: were you able to get a tcpdump? is it trying v4 or v6?
pjs: find the ipv4 address for one of the update servers, stick it in /etc/hosts, and see if it works?
[12:22]
***Yamazaki-kun has joined #arpnetworks
HighJinx has joined #arpnetworks
[12:24]
..... (idle for 24mn)
pjsjpalmer, good idea.. I'll toy with it some more tomorrow. I got a handful of tickets to take care of.. thanks for all the help though!
jpalmer, twobithacker, up_the_irons - really appreciate it! :)
[12:49]
***HighJinx has quit IRC (Ping timeout: 244 seconds)
HighJinx has joined #arpnetworks
[12:50]
............ (idle for 57mn)
HighJinx has quit IRC (Ping timeout: 244 seconds)
HighJinx has joined #arpnetworks
[13:50]
HighJinx has quit IRC (Ping timeout: 246 seconds) [14:06]
HighJinx has joined #arpnetworks [14:14]
HighJinx has quit IRC (Ping timeout: 256 seconds)
HighJinx has joined #arpnetworks
[14:21]
zeshoem has joined #arpnetworks [14:36]
........ (idle for 35mn)
CESSMASTER has joined #arpnetworks [15:11]
............... (idle for 1h13mn)
Ehtyar has joined #arpnetworks
ryk has quit IRC (Ping timeout: 265 seconds)
ryk has joined #arpnetworks
[16:24]
HighJinx has quit IRC (Ping timeout: 240 seconds)
HighJinx has joined #arpnetworks
[16:37]
...... (idle for 27mn)
HighJinx has quit IRC (Ping timeout: 244 seconds)
HighJinx has joined #arpnetworks
[17:06]
...... (idle for 27mn)
HighJinx has quit IRC (Ping timeout: 244 seconds)
HighJinx has joined #arpnetworks
[17:36]
...... (idle for 29mn)
swaj has joined #arpnetworks
swaj has quit IRC (Changing host)
swaj has joined #arpnetworks
swaj has left
[18:06]
..... (idle for 20mn)
HighJinx has quit IRC (Ping timeout: 265 seconds)
HighJinx has joined #arpnetworks
[18:27]
......... (idle for 40mn)
HighJinx has quit IRC (Ping timeout: 240 seconds)
HighJinx has joined #arpnetworks
[19:08]
................ (idle for 1h19mn)
kennyz has quit IRC (Read error: Operation timed out)
milki has quit IRC (Read error: Operation timed out)
milki has joined #arpnetworks
kennyz has joined #arpnetworks
[20:29]
...... (idle for 28mn)
pjs has quit IRC (Quit: EPIC5-1.1.2[1638] - amnesiac : brb)
pjs has joined #arpnetworks
[20:57]
........ (idle for 36mn)
HighJinx has quit IRC (Ping timeout: 245 seconds)
HighJinx has joined #arpnetworks
[21:37]
.... (idle for 16mn)
dj_goku_ has joined #arpnetworks
dj_goku_ has quit IRC (Changing host)
dj_goku_ has joined #arpnetworks
dj_goku has quit IRC (Ping timeout: 246 seconds)
dj_goku_ has quit IRC (Ping timeout: 248 seconds)
dj_goku has joined #arpnetworks
dj_goku has quit IRC (Changing host)
dj_goku has joined #arpnetworks
[21:56]
..... (idle for 21mn)
HighJinx has quit IRC (Ping timeout: 244 seconds) [22:22]
HighJinx has joined #arpnetworks [22:33]

↑back Search ←Prev date Next date→ Show only urls(Click on time to select a line by its url)