***: easymac is now known as Guest14487
Guest14487 is now known as easymac
easymac is now known as Guest59604
Guest59604 is now known as easymac
easymac is now known as Guest10302
Guest10302 is now known as easymac
easymac is now known as Guest78562
Guest78562 has quit IRC (Quit: leaving)
novae has joined #arpnetworks
novae has quit IRC (Ping timeout: 245 seconds)
novae has joined #arpnetworks
KILLALLHUMANS01 has quit IRC (Ping timeout: 245 seconds)
KILLALLHUMANS01 has joined #arpnetworks
KILLALLHUMANS01 has quit IRC (Changing host)
KILLALLHUMANS01 has joined #arpnetworks
mercutio: bryce?
you have a strange alias
m0unds: hahaha
***: novae has quit IRC (Remote host closed the connection)
novae has joined #arpnetworks
brycec: mercutio: ?
Oh, the KILLALLHUMANS01 nick
I have some great nicks...
staticsafe: heh
brycec: A few of my other favourites: IM_AWESOME the_cheat Always_Batman lpr0
***: brycec is now known as lpr
-: lpr on fire
***: lpr is now known as lpr0
-: lpr0 on fire
lpr0: there we go
***: lpr0 is now known as brycec
RandalSchwartz: my nick is boring :)
milki: lolol
up_the_irons: so Ubuntu is going to systemd just like Debian, fml
m0unds: haha
it's not that bad
up_the_irons: binary logs? can't even tail shit without a tool. no thanks
bloat bloat bloat
it's like GRUB
i just wanna fucking boot my machine, and you (grub) make it so difficult because you tried to tackle every other fucking problem on earth, making it horrible just to boot my system
if i want to boot a FreeBSD system, it's "fdisk -BI ad0" and CALL IT A DAY. it works as intended. *nix philosophy, do one simple thing and do it right
m0unds: it appears as though systemd still provides a socket to give you the ability to bind your syslogger to a socket and write logs to discrete files on disk vs the journal
i mean, it'll still write to the journal, but it'll also allow you to write to log files
up_the_irons: see, reading that make me vomit a little in my mouth
*made
m0unds: haha
plett: up_the_irons: As a Linux user looking in on FreeBSD from the outside, it looks equally crazy. It has three distinct firewalls with incompatible syntaxes, and kernel modules and userland tools for all of them in the base image.
m0unds: pf or gtfo
up_the_irons: i understand what you're saying, but it so f'in overkill. it should not be necessary to jump through those hoops just to log in text.
m0unds: retrieving a specific log from the journal isn't terribly painful though - journalctl -u nginx = nginx logs
up_the_irons: plett: i thought everyone used pf...
m0unds: yeah, i don't know anyone who uses bsd who doesn't use pf
plett: up_the_irons: ipfw and ipf are also there and supported
m0unds: ipfw back in the day maybe
up_the_irons: yeah but who uses ipfw and ipf anymore?
m0unds: pf is so well documented and designed, there's no reason not to use it
but if you want to, it's there
up_the_irons: don't get me wrong, freebsd isn't immune to this problem; it's just less
plett: And yes, pf is lovely
I've been told that the journald binary logging stuff isn't tightly tied to systemd, and that you can just run a good old syslogd instead
up_the_irons: i c
m0unds: is there any practical reason that iptables doesn't have ipv6 support built in vs using ip6tables?
i always use ufw or afp or whatever to manage iptables rules because i hate the syntax
s/afp/apf
BryceBot: <m0unds> i always use ufw or apf or whatever to manage iptables rules because i hate the syntax
staticsafe: I suppose now is a bad time to link this - http://www.openbsdfoundation.org/gsoc2014.html#systemd
brycec: ha
One nice thing about the journal, up_the_irons et al, is that it makes it easy to pull specific timeframes.
staticsafe: indeed
up_the_irons: ah that is indeed useful
m0unds: i like the boot logging functionality - you can query current boot, previous boot, boot prev to that, etc
staticsafe: linux has a new netfilter API called nftables, apparently the syntax is quite nicer
m0unds: ah
staticsafe: http://netfilter.org/projects/nftables/
plett: staticsafe: I read through some of the example syntax a while ago, it's still nowhere near as nice as pf
staticsafe: yeah
https://wiki.archlinux.org/index.php/Nftables certainly much nicer than iptables though
brycec: <3 pf syntax, soooooo readable :D
m0unds: that's junos-ish
up_the_irons: i never use iptables directly, always through ferm. <3 ferm
tree-based rules, basically
staticsafe: http://ferm.foo-projects.org/ interesting
up_the_irons: i've used it for years
m0unds: oh, that's neat
up_the_irons: looks like nftables has a tree-like syntax too
staticsafe: yeah
-: brycec lazies out and uses ufw for his iptables systems
m0unds: brycec: that's what i use most of the time
-: staticsafe doesn't have any firewall rules on his VMs
m0unds: HERESY
staticsafe: other than the occasional DROP rule for some abuser
brycec: I didn't used to either, just kept services listening on the right ports. But then there were some services I couldn't configure quite like that
staticsafe: like mysql? :P
RouterOS firewall sytax is a bit weird but consistent with the rest of the system
m0unds: yea, it's not bad to manage
staticsafe: add action=log chain=forward comment="Filter port 25 outbound" dst-address=::/0 dst-port=25 log-prefix=SMTPOUTBOUND protocol=tcp src-address=::/0
m0unds: they finally stopped doing stupid shit like changing syntax between releases and things
brycec: staticsafe: nah mysql is easy to bind to an interface, or not bind at all (socket only)
staticsafe: ah
brycec: (can't remember what it was though... oh well)
staticsafe: Cisco IOS ACLs ugh
m0unds: yuck
yay, lightning
dne: up_the_irons: re: grub - try syslinux (or extlinux) instead
up_the_irons: i c
-: dne uses it even w/ freebsd
dne: e.g. to multiboot between root-on-ZFS and mfsbsd: https://gist.github.com/dne/1054313
BryceBot: Gist: "Multi-boot FreeBSD w/ ZFS root on a GPT partitioned disk using Syslinux"
m0unds: dne: that's cool
mercutio: i like ferm too
RandalSchwartz: tomorrow... the big upgrade day
freebsd from 8.3 (EOL) to 8.4 (supported for another year)
perl from 5.10(!) to 5.16
pkg to pkgng
thank goodness for snapshots :)
m0unds: good luck
mnathani: up_the_irons: did you go with the i5 or i7 T520
up_the_irons: i5
i7's were hard to find actually
mnathani: whats the screen resolution?
1080p or lower?
staticsafe: 1600x900
15" T520 here
mnathani: well, atleast its widescreen
m0unds: i miss the prevalence of 16:10 displays
***: dj_goku has quit IRC (Remote host closed the connection)
ziyourenxiang has joined #arpnetworks
dj_goku has joined #arpnetworks
dj_goku has quit IRC (Changing host)
dj_goku has joined #arpnetworks
ziyourenxiang has quit IRC (Quit: ziyourenxiang)
john3213 has joined #arpnetworks
john3213 has left