#arpnetworks 2013-06-22,Sat

↑back Search ←Prev date Next date→ Show only urls(Click on time to select a line by its url)

WhoWhatWhen
gizmoguyhah, anyone use zerigo cloud DNS? [01:42]
........ (idle for 38mn)
mercutionot i
run your own dns
i dunno why dns is something people like to push off to others
[02:20]
gizmoguyoh yeah I mostly host my own DNS
just one of my clients uses zerigo for all his stuff
all down
their "6" nameservers have been DDoSed off the internet the past 48 hours
[02:27]
..... (idle for 21mn)
mercutiowow
my personal domain has 5 name servers
but generally speaking 3 is plenty for most people
and it's just cos it was esay to do for me :)
did you read about linkedin's dns being hacked somehow
and a few other sites
it's hard to tell how
[02:49]
gizmoguyhah yeah
I heard in linkedin's case it was their DNS hoster who injected an incorrect nameserver or something stupid
personal websites = dns.he.net
work stuff = 2 physical servers with a 3rd remote VPS
[02:53]
....... (idle for 32mn)
mercutioahh i never saw anything conclusive
i was half following on nanog
linkedin worked normally quicklpy though
craigslist didn't
but i'm not in US
[03:26]
.................................. (idle for 2h49mn)
hazardous<mercutio> and a few other sites
have you seen the absurdly long thread
http://mailman.nanog.org/pipermail/nanog/2013-June/thread.html, ctrl+f coordinated
[06:15]
...... (idle for 25mn)
mercutioyeah
i'm subscribed
i only briefly looked as i said
[06:40]
hazardousi tried to only briefly look, but was getting a popup every few minutes about new mail like yesterday
so i decided to just read it
[06:41]
mercutioheh
i don't get popups
i'm not really following the /25 thing either
hah
someone said about padding acks to 1500 bytes
[06:41]
hazardouswat
just, "wat"
[06:42]
mercutioi suppose it's one way to keep ratios up
although you need the other end to send big ack
on net neutrility
cogent always has peering disagreements or issues
[06:42]
hazardousthey're usually the source of the issues so presumably they would have a lot [06:44]
mercutioi thoguht isp's were the source of the sisues
verizon, comcast etc
[06:45]
....... (idle for 33mn)
m0undsgizmoguy: zerigo sucks
gizmoguy: i used them for a year; when they got bought out by 8x8, their services all started to suck
no support, no product improvements, they got ddos'd off the internet last year and pledged to improve stuff..sounds like they haven't
[07:18]
hazardousfor me, personal stuff is on he.net unless they need wildcards, important stuff is on dnsmadeeasy or whateverelse [07:20]
m0undsand that coordinated hacking thread was silly [07:20]
hazardoustrying out rage4 atm [07:20]
m0undsi'm on route53 for dns
i have a few consulting clients who use easydns as a registrar and dns host and like them a lot
[07:20]
........ (idle for 37mn)
***toddf has quit IRC (Remote host closed the connection)
toddf has joined #arpnetworks
ChanServ sets mode: +o toddf
[07:59]
dj_goku has joined #arpnetworks
dj_goku has quit IRC (Changing host)
dj_goku has joined #arpnetworks
[08:08]
.... (idle for 19mn)
first2know has quit IRC (Quit: Leaving)
scottschecter has joined #arpnetworks
[08:27]
...... (idle for 29mn)
sorresseanDo you guys prefer a specific MTA over another for bsd? I currently use postfix on *nix, I'm open to looking at anything else though. I just don't want to touch exim, assuming it's even in the ports to begin with. [09:00]
phluxpostfix fan here [09:01]
sorresseanhaha I figured. postfix works good, just wasn't sure if there was another favorite for BSD
I might just be configuring it to relay to the linux box anyway, so I guess it doesn't matter to much.
[09:02]
brycecsorressean: there's a lot of excitement behind OpenSMTPD in the BSD project, but I've no personal experience with it. [09:16]
sorresseanbrycec: yeah, I seen that. Looks like it's just barely ready to get into the wild though, not sure how well that'd do for me. [09:16]
brycec(If I recall correctly, I think opensmtpd became the default MTA in 5.3, or maybe it's just slated to be default)
sorressean: It's getting a good workout, even while being pretty young. I know it's used at Microsoft to handle some part of their bulk mailing stuff.
[09:17]
staticsafeOpenSMTPD is getting rapid dev atm [09:18]
sorresseanhaha that's kind of cool. [09:18]
staticsafe#opensmtpd btw :) [09:18]
sorresseanexchange is clearly the beast for the job. [09:18]
m0undsMS uses postfix in their FOPE spam handling platform
is the opensmtpd implementation being used for transaction email or something?
[09:23]
brycecm0unds: I couldn't say, I'm not involved and it's not something easily searched in my irc logs [09:29]
m0undsah, gotcha [09:34]
........ (idle for 38mn)
***first2know has joined #arpnetworks
heavysixer has joined #arpnetworks
ChanServ sets mode: +o heavysixer
heavysixer has quit IRC (Client Quit)
[10:12]
............. (idle for 1h0mn)
first2know has quit IRC (Remote host closed the connection)
first2know has joined #arpnetworks
[11:18]
toddf has quit IRC (Remote host closed the connection)
toddf has joined #arpnetworks
ChanServ sets mode: +o toddf
[11:29]
m0undsif anyone's interested, oreilly media coupon code DSUG2 = 50% off ebooks [11:29]
***heavysixer has joined #arpnetworks
ChanServ sets mode: +o heavysixer
first2know has quit IRC (Ping timeout: 256 seconds)
[11:30]
hazardousi don't run any mta :<
or handle mail myself
that seems weird
[11:44]
m0undsi don't like running my own mail
it's a hassle to move it around, so i host mine via office365
[11:45]
phluxWhat do you guys use to find out what is taking up the most amount of space on your FreeBSD servers? [11:52]
m0undshttp://www.freebsd.org/cgi/man.cgi?query=du&sektion=1 [11:56]
phluxEh
I ended up just using 'find /usr/home -type f -size +20000k -exec ls -lh {} ; | awk '{ print $9 ": " $5 }'
Displays everything in /usr/home > 20MB
[12:00]
m0undsit sure does [12:02]
***first2know has joined #arpnetworks [12:03]
first2know has quit IRC (Ping timeout: 256 seconds)
first2know has joined #arpnetworks
[12:09]
hazardousm0unds i dont run my own mail at all because effort and deliverability
i use sailthru, ses and sendgrid for outbound
inbound is gandi or gapps or w/e depending on what it's for
[12:19]
m0undshazardous: i just figure other people have the good hardware and redundant systems to handle it. gandi is awesome though, in general [12:25]
staticsafestaticsafe hosts his own mail for certain stuff and has it hosted for certain other stuff [12:25]
phluxI'm actually finally moving my stuff back to my own server this weekend
Thanks for reminding me
[12:26]
m0undsi've got an MTA for outbound-only, but that's it [12:26]
hazardousm0unds for inbound mail at least
the one thing i do not want to deal with
is multiple redundant backups to not lose mail, and spam filters
i'd much rather have someone else just sort that out for me
[12:32]
m0undsyeah
i've had an acct w/spamexperts for a couple years as a filtering/continuity sort of hting
thing*
[12:32]
hazardousif i have important mail that needs to remain private, well, that's what client-side pgp is for [12:33]
...... (idle for 27mn)
***heavysixer has quit IRC (Quit: heavysixer) [13:00]
brycecphlux: ncdu - ncurses du, browses the tree, sorts by space used, name, etc
oh and lets you delete from inside the app even (recursively)
[13:13]
............. (idle for 1h4mn)
gizmoguym0unds: yeah.. that was my impression of zerigo
I'm moving him to route53 at the moment
[14:17]
m0undsgizmoguy: it's a bummer, because their services before acquisition were pretty alright [14:17]
gizmoguyI assume on route53 they can zone transfer from a primary DNS server I host? [14:18]
staticsafegizmoguy: I use DNSMadeEasy for shit I need up, tis awesome [14:18]
brycecI never liked that route53 (and some others) charge by the query :/ [14:19]
gizmoguy"It supports slaving from a DNS master using IXFR (zone transfer) requests"
answered my own question
[14:19]
brycecDoes that mean it can be converted to a master, gizmoguy ?
Or is it permanently slaved?
[14:19]
gizmoguybrycec: I want to run route53 as a permanent slave [14:19]
m0undseh, as long as the "per query" pricing is set at a reasonable threshold, it doesn't bother me in the slightest [14:19]
brycecoh misunderstood [14:19]
m0undsnot like stupid dyn and their 600k query base limit [14:20]
gizmoguym0unds: seems to be like a cent per million queries or something [14:20]
m0unds$.50 per million
i think
[14:20]
staticsafedoes Route53 have v6 on any of their NSes? [14:20]
brycecI wish I had a way to get an idea what my usage would be without moving to self-hosted or route53 [14:20]
m0undsbrycec: for my personal svcs w/email and stuff i average less than 100k/mo [14:21]
gizmoguy"Amazon Route 53 supports both forward (AAAA) and reverse (PTR) IPv6 records. However, the Route 53 service itself is not available over IPv6 at this time."
:(
[14:21]
brycecThanks that gives me some idea [14:21]
staticsafe~200,000+ queries on one of my domains
gizmoguy: meh lame
[14:21]
m0undssince most of my svcs are accessed by eyeball networks, i don't really care about ipv6 right now [14:23]
staticsafelulz [14:23]
gizmoguyNo m0unds, everyone on the edge of the internet has ipv6 enabled [14:23]
m0undsWE DO?
m0unds checks
nope.
[14:23]
gizmoguyevery single person [14:23]
m0undshahaha
i had to ask comcast for ipv6 at home on my business acct
it's going to take them 3 weeks to alloc
[14:23]
gizmoguyipv6 was deployed perfectly 5 years ago in my happy place in my head [14:24]
staticsafeheh gizmoguy [14:24]
brycecbrycec is 100% IPv6 compat/capable [14:24]
gizmoguygizmoguy whoises everyone in the chan to see who is cool enough to have IRCv6 [14:25]
brycecIn fact, my ipv4 connection died one day and I didn't notice it. That was fun. [14:25]
m0undsm0unds puts on his best whois-pants [14:25]
gizmoguyoh what's with stupid freenode hiding everyone's IPs [14:25]
brycecI assure you gizmoguy I'm connected to Freenode over ipv6 [14:25]
gizmoguygood work brycec
I am too :)
[14:25]
m0undsgizmoguy: it's not hiding mine
m0unds panics
[14:26]
gizmoguygizmoguy ddos's [14:26]
m0undsnuuuuu [14:26]
brycecgizmoguy's isn't hidden either :DDD
retaliate!
[14:26]
m0undsi can't, i'd knock all of nz offline [14:27]
gizmoguym0unds: take this: [14:27]
m0unds:D [14:27]
gizmoguy~> ping6 -s 6400 2600:3c00::f03c:91ff:fe69:aef1
PING 2600:3c00::f03c:91ff:fe69:aef1(2600:3c00::f03c:91ff:fe69:aef1) 6400 data bytes
6408 bytes from 2600:3c00::f03c:91ff:fe69:aef1: icmp_seq=1 ttl=53 time=193 ms
[14:27]
m0undsow [14:27]
gizmoguybrycec: 09:25:12 [freenode] -!- brycec [~cobryce@unaffiliated/cobryce] [14:27]
staticsafeheh [14:27]
gizmoguym0unds: "i can't, i'd knock all of nz offline
soo true
[14:27]
bryceclol [14:28]
staticsafestaticsafe hits gizmoguy with 100mbit
there goes nz
[14:28]
m0undshahahah [14:28]
staticsafe:P [14:28]
gizmoguywe are connected to dialup to the US [14:28]
m0undsit's an entire city block of modem banks [14:28]
gizmoguyit's ok. we only have 5 people on the internet down here [14:29]
m0undsunder carefully constructed leanto structures [14:29]
staticsafelol [14:29]
gizmoguyand it's timeshare too
so I have to get off soon
fred wants to use it
[14:29]
staticsafestaticsafe says hi to the other nz guy in here [14:29]
phluxMoved my mail over to my own server again today [14:29]
m0undsyou get your "internet bill" on a monthly basis, and you're billed by the bps [14:29]
phluxFeelsgoodman.jpg [14:29]
staticsafeohi mercutio! [14:29]
gizmoguyhe won't deny it [14:30]
staticsafei think mercutio works for an ISP in nz [14:30]
gizmoguyhis domain looks familiar
nznogger @ mercutio?
[14:30]
staticsafehis ISP peers with ARP Networks too lol [14:31]
m0undsi read that as nzlogger [14:31]
gizmoguywe all work double jobs in NZ
I'm sysadmin during the day, cut down trees in the weekend
[14:32]
m0undsdo you wear high heels, suspenders and a bra? [14:32]
staticsafehttp://bgp.he.net/AS9559 i think is the one [14:32]
bryceclol m0unds [14:34]
m0undsi'm glad someone caught that, maybe [14:35]
gizmoguym0unds: not usually :P [14:44]
m0unds(monty python ref) [14:44]
staticsafeso gizmoguy zerigo is still down? [14:44]
gizmoguym0unds: I'm a lumberjack and it's ok ?
staticsafe: I think it might be back again
post mortem: http://www.zerigo.com/blog/2012/07/zerigodnsoutage
[14:45]
staticsafeer that post is from 2012 gizmoguy [14:47]
m0undslol [14:48]
gizmoguywell I guess they didn't learn much then [14:48]
m0undsthat's the one i mentioned from last year when they said they'd "try harder" or something
hahahah
[14:48]
gizmoguythat's the newest post on their blog :S [14:49]
m0undszerigostatus.com
i think
[14:49]
gizmoguyhttp://zerigostatus.com/
a.ns.zerigo.net - Up
b.ns.zerigo.net - Down
c.ns.zerigo.net - Down
d.ns.zerigo.net - Up
e.ns.zerigo.net - Down
[14:49]
m0undsstill fighting
hahaha
[14:49]
gizmoguyf.ns.zerigo.net - Down
2/6 ain't bad?
[14:49]
phluxWhat are the recommended administrative e-mail addresses? I know there's abuse@ and postmaster@, but are there any others? [14:50]
staticsafedns@ and webmaster@ [14:50]
m0undsum, those are the two big ones - you could always add hostmaster if you manage your dns
webmaster is a great spam target
[14:50]
staticsafe^ [14:51]
m0undsfor whatever reason, 80% of my admin address spam across all domains i run hits webmaster [14:51]
phluxaren't there some that are required?
like, if the e-mail bounces, you could be written off as spam by the provider?
[14:52]
staticsafeeh, not really
i recommend keeping abuse@ and postmaster@
[14:52]
m0undswith some of the sillier RBLs, they'll cry about abuse@ [14:52]
staticsafebesides that *shrug* [14:52]
phluxroger that..thanks [14:52]
staticsafestaticsafe slaps opendns [14:54]
m0unds..? [14:54]
staticsafehttp://okazaki.tomoyo.ca/mtB.png my friend made a typo and it keeps doing that [14:55]
...... (idle for 27mn)
***knigma-m_ has joined #arpnetworks
knigma-m has quit IRC (Read error: Connection reset by peer)
[15:22]
hazardousi was really confused there for a second wondering who you are because one of my friends hosts his image off tomoyo.eu [15:32]
staticsafeyes wintereise uses tomoyo.eu [15:39]
***knigma-m has joined #arpnetworks
knigma-m_ has quit IRC (Read error: Connection reset by peer)
[15:53]
.... (idle for 15mn)
gizmoguylol postgres- supported_versions: WARNING: Unknown Debian release: 7.1 [16:08]
hazardoushow do you know her, staticsafe [16:09]
m0undshaha [16:09]
hazardousalso is it an anime or something. [16:09]
***knigma-m has quit IRC (Read error: Connection reset by peer)
knigma-m_ has joined #arpnetworks
[16:09]
staticsafeits a character from an anime [16:15]
***knigma-m_ has quit IRC (Read error: Connection reset by peer)
knigma-m has joined #arpnetworks
[16:15]
hazardousoh
do you like anime?
[16:19]
staticsafeyes [16:22]
m0undswhat's an anime? [16:23]
gizmoguym0unds: "What anime sounds like to your parents" - http://www.youtube.com/watch?v=a0g8bwYzMyU [16:27]
staticsafelol [16:27]
m0undsahahahahah
that's fantastic
http://www.youtube.com/watch?v=37dBT09KryA this was listed as "related"
[16:27]
gizmoguythat dude creepy [16:32]
....... (idle for 32mn)
***heavysixer has joined #arpnetworks
ChanServ sets mode: +o heavysixer
[17:04]
heavysixer has quit IRC (Quit: heavysixer) [17:11]
..... (idle for 21mn)
m0undshe sure is
the base ids rules on srx devices will protect against..winnuke
i don't know why that's so amusing
[17:32]
hazardouswhat's winnuke? [17:46]
m0undshttp://en.wikipedia.org/wiki/Winnuke [17:47]
hazardousoh [17:49]
m0undsyeah, ancient
haha
[17:49]
hazardouslol i don't know those OSes
my first comp was win xp
[17:49]
phluxwhat..?
how old are you?
[17:49]
m0undsthe first computer i ever used was an IBM express
my dad's company sent it to our house for him to generate quotes on
[17:51]
hazardousum
a teenager
;s
[17:51]
phluxyeah I figured you had to be [17:51]
hazardouspeople in another channel were like what the fuck when they found out my first internet connection was broadband [17:52]
phluxThe first computer I remember us having was some huge white laptop [17:52]
hazardouslol [17:52]
phluxI think it only had DOS on it
oh man
[17:52]
m0undsmy dad also ended up with an NEC laptop that booted from 3.5" floppy and had an external 4800baud modem [17:52]
phluxI first got into Linux during my family's 56k days
I'll never forget playing with ppp for the first time
I almost gave up on Linux
this was back when Corel offered a Linux suite
[17:52]
hazardousi remember using ubuntu version 9.04? as a little kid
:3
[17:53]
phluxI remember when there was no Ubuntu and the world was better for it! [17:53]
m0undsheh [17:53]
hazardousterms i don't know: baud [17:54]
m0undshttp://en.wikipedia.org/wiki/Baud [17:54]
phluxterms you should google: baud [17:55]
m0unds4800 baud = 4800 bits per second
orrrrr 4.8kbit/sec
[17:55]
hazardousisn't ~5kb/s basically 56k [17:56]
m0undsslightly less than .6KB/sec [17:56]
hazardouswat [17:57]
m0unds4.8kbit/sec = .6KB/sec
you'd be hard pressed to get much more than 5KB/sec over 56k
my first linux use was redhat 4
my friend's brother was an intern at intel, and they had him learning how to use it. i borrowed the discs and installed it on my old 486
[17:57]
***heavysixer has joined #arpnetworks
ChanServ sets mode: +o heavysixer
[18:04]
.... (idle for 15mn)
heavysixer has quit IRC (Quit: heavysixer)
HighJinx has quit IRC ()
[18:19]
..... (idle for 24mn)
gizmoguy9600 baud 4 lyf [18:45]
m0undsO NO U DINT
or do you mean, like, literally
[18:45]
gizmoguyI don't really bother changing my kit off 9600 baud [18:45]
m0undsbecause you're in nz [18:45]
gizmoguymakes it harder to guess what speed I set it up to
I really <3 the gear that does baud-negotiation
I've got an HP switch that does it
you serial in to it at any sped
hit enter a few times and it works out what speed you're talking to it at
^ the future right there
[18:45]
m0undsi don't know if i can handle how bad these scaled images look on this ereader
i might have to resort to reading in the browser or something
http://sdrv.ms/1aDNEmy
[18:47]
............... (idle for 1h10mn)
***dj_goku has quit IRC (Ping timeout: 276 seconds) [19:59]
.............. (idle for 1h8mn)
dj_goku has joined #arpnetworks [21:07]
.... (idle for 19mn)
mercutioup_the_irons: how much capacity does arp have to any2ix? could it be congesting? [21:26]
hazardoushey up_the_irons, whenever you're back - what kind of spec can i get for around 200ish? preferably with ssds [21:27]
mercutioicmp deprioritisation and return routes etc makes it harder to tell [21:28]
hmm facebook looks ok
well 1 msec jitter
maybe other end or maybe the san jose / los angeles thing
[21:35]
...... (idle for 29mn)
N3RG4Lhi guys
any idea which encoding is this ? "Çñ®PNl?4Ó!?¬ØQìw"
[22:05]
............ (idle for 59mn)
mercutionope
maybe unicode?
[23:04]

↑back Search ←Prev date Next date→ Show only urls(Click on time to select a line by its url)