[07:40] *** Erick- has joined #arpnetworks [07:56] *** Erick- has left "." [08:04] *** novae has quit IRC (Ping timeout: 252 seconds) [08:07] *** novae has joined #arpnetworks [08:07] *** novae has quit IRC (Changing host) [08:07] *** novae has joined #arpnetworks [08:34] *** novae has quit IRC (Ping timeout: 264 seconds) [08:38] *** novae has joined #arpnetworks [08:44] *** novae has quit IRC (Ping timeout: 252 seconds) [08:47] *** Erick- has joined #arpnetworks [08:48] *** novae has joined #arpnetworks [09:10] admin on? [09:45] does it have to be an admin? [09:47] maybe not [09:49] many of us are longtime arp customers. [09:52] to enable my ipv6 ip's [09:53] I think you already have the allocation and routing by default. [09:53] at least I did when I started. [09:53] I can only ping one of those ip's [09:53] the ::2 [09:53] but ::3 is nothere to be found [09:53] much less ::f000 [09:54] do you have a /64 or a /48? [09:54] and what platform [09:54] prefixlen 64 [09:55] freebsd [09:55] 91 or 9.2 [09:55] 9.1 * [09:55] ... http://support.arpnetworks.com/kb/main/how-to-configure-ipv6-on-freebsd [09:56] did that [09:57] then why are you talking about ::3? did you add an additional interface? [09:58] does netstat -rn show a default route for ipv6? [09:58] good idea [09:58] will try that [09:58] brb [09:59] * RandalSchwartz still wonders why Erick- mentioned :3 and ::f000, which aren't on that wiki page [10:11] * brycec wonders too [10:12] * Erick- gives up for now [10:12] *** Erick- has left "." [10:13] even curiouser [10:13] Oookay [10:13] It's something that Just Works [10:13] Perhaps he had some restrictive firewall rules? [10:13] it just works, when you work it. :) [10:13] * brycec works it [10:13] ... https://www.youtube.com/watch?v=FFnG3jVWDaM [10:13] YouTube Music: "Aaliyah ~ Work It (Baby)" by RicoCoracao2011 (3m 26s), 3,770 views, 17 likes and 0 dislikes. Uploaded 2012-01-08T17:49:58.000Z. [10:15] My "working it" doesn't look anything like that, guess I'm a failure. [10:38] well, he is gone now anyway, but i guess adding an additional ip address to his primary interface was what he wanted to do [10:41] Maybe he assumed that the entire /64 was routed to him, therefore his host should see/respond to ::3 and ::f000 [10:50] yeah - was wondering that [10:50] like even though I have a ipv4 /28.. my host wouldn't respond to anything until I aliased it. [10:50] You have an entire /28? :P [10:50] oh wait you said v4 nvm me [10:51] True - perhaps he A) Doesn't get it, and/or B) Was expecting to see the traffic anyways, on tcpdump or the like [11:09] I do have about 6 /48's of ipv6 though [11:09] we had this conversation before, as I recall. [11:10] about enumerating the stars in the sky or something [11:12] hahaha [11:13] according to wolfram alpha, I'd need 78 bits. Darn... not enough yet. [11:13] ... http://www.wolframalpha.com/input/?i=2+to+the+78+power+divided+by+number+of+stars+in+the+sky [11:14] my mere 60 bits * 6 isn't enough [11:14] wait... isn't that a /50 ? [11:15] 78 bits out of 128... would be /50 prefix [11:16] yeah - so I can ennumerate all the stars in the observable univers 4 * 6 = 24 times! [11:26] lol yeah RandalSchwartz I recall that convo. But a whole ipv6/28... [11:39] My work is an ISP, so we have a /32 of IPv6. But we also have the next 7 /32s after ours reserved for us at the RIR. So we can get a contiguous /29 of IPv6 should we have a need for it. [11:43] *** dne has quit IRC (Ping timeout: 252 seconds) [11:45] *** dne has joined #arpnetworks [13:44] ugh. how do I reboot a dedicated box? [13:44] what the heck is IPMI? [13:45] $client is dead in water until I get help [13:45] IPMI is out-of-band access [13:48] Looks like I never got my openvpn credentials. [13:48] Well, this sucks. [13:48] I mean, I sent the request... [13:48] :o [13:49] so crap... I have a primary box down (hard metal), and I can't bring it back up [13:49] it makes the rest of $clients machine useless [13:55] That's weird, because I know up_the_irons makes it a point to test OpenVPN access before even setting up a dedi box [13:55] At least, up_the_irons has stated that he does in the past [14:04] I seem to remember having to install the OS myself on my dedicated box [14:04] using IPMI [14:04] hm [14:06] well - crisis resolved... but it revealed a hole in the process. :) [14:07] good that we found that now, instead of those rare hours when up_the_irons is asleep :) [14:08] pager duty says "all incidents resolved" Yeay [14:26] acf_ makes a good point... [14:27] I installed the OS myself using the virtual console [14:27] I've never touched an IMPI before [14:27] oh... I see what you're saying [14:27] well, we had a contractor bring up the initial box [14:27] (not me) [14:27] http://support.arpnetworks.com/kb/dedicated-servers/how-do-i-access-my-arp-metal-dedicated-server-console :P [14:27] Yes - I see that. [14:28] Guess that explains why you don't have OpenVPN credentials [14:28] but it just says "IPMI", but I have no idea what I will see once I go there [14:28] right... wasn't until the first time I tried to find it on the ssh console thing that I noticed. [14:28] IPMI is a protocol too, it's not "one thing" that "you'll see" [14:28] so what do you see here? :) [14:28] RandalSchwartz: start by installing openvpn and ipmitools on your workstation [14:29] I have tunnelblick [14:29] oh you're on a mac [14:29] I have no idea how to ipmi from a mac.... [14:29] I wonder if macports has ipmitools [14:29] * brycec hits up Google [14:29] No match for ipmitools found [14:29] RandalSchwartz: looks like Mac already has ipmitool installed ? [14:29] https://developer.apple.com/library/mac/documentation/Darwin/Reference/Manpages/man1/ipmitool.1.html [14:29] Suggests that it's already there [14:30] % man ipmitool [14:30] No manual entry for ipmitool [14:30] My macbookpro 10.9 has it [14:30] % which ipmitool [14:30] /usr/bin/ipmitool [14:31] (and the man page) [14:31] running 10.8, not 10.9 [14:31] I have no idea when it was introduced... I suspect earlier than 10.9 though [14:31] risky to upgrade unless I've got a day to fix everything [14:31] haven't had that day [14:31] well... not on 10.8, so somewhere between 10.9.0 and yours :) [14:32] Or it was part of xcode [14:32] I have xcode installed [14:32] otherwise, I wouldn't be using macports :) [14:32] or building emacs daily [14:32] heh [14:32] without this tool, will I not be able to do anything? [14:32] (10.9.3 is current btw) [14:33] Short answer: yes [14:33] I suspect I'll "migrate" to my next box, which will already have mavericks [14:33] I suspect there may be other tools out there that speak IPMI [14:33] that way if something is broken, I can still use the old box for thatuntil fixed. [14:33] Oh - it's in macports [14:33] There might even been some built-in web server on the ARP Metal box's IPMI controller [14:33] I just typed it wrong [14:34] RandalSchwartz: i re-sent your cert just now [14:35] RandalSchwartz: FYI ipmitool is installed as part of Apple's "Server Admin Tools" [14:35] (that's why I have it) [14:35] thank you up_the_irons [14:36] and ipmitool built successfully [14:36] and yes, not running server [14:36] (You don't have to be running "server" just administering one, and even then it's still a free download) [14:36] (but no reason to install all that just for one tool) [14:37] staring at manpage now [14:37] maybe there's some tutorials [14:37] up_the_irons: reading the KB article, looks like there's no need to use ipmitool? [14:37] "Visit the link labeled IPMI URL" [14:37] suggests there's a web "viewer" [14:38] RandalSchwartz: brycec : yeah i dunno why you guys are using ipmitool. if you can run ipmitool, then you ALREADY have access to the server. You want IPMI for things like out-of-band console, power control, etc... [14:38] * RandalSchwartz is relocating, but will scroll back at new location [14:38] so just visit the "IPMI URL" which is listed in the Portal for your particular ARP Metal(tm) machine. you have to be on the VPN for that link to work. [14:39] lol sorry up_the_irons I was trying to help where I could. I've only dealt with ipmitool a little, to reboot boxes and monitor sensors. [14:39] A web interface on the BMC is just magic and voodo [14:39] *voodoo [14:39] (And don't even get me started on AMT or ASF, fucking Intel...) [14:39] brycec: no worries :) [14:39] up_the_irons: ipmitool works over the network too [14:40] hmm.. i suppose that's true [14:40] ARP Metal \tm/ >_< \tm/ [14:40] hhahahahhaahah [14:41] i should srsly use that [14:41] there might even be a unicode version [14:41] lol [15:36] unicode sucks, but it sucks less than everything before it. [15:36] except, of course, just normal ascii. :) [15:36] I mean... if ascii is good enough for Jesus, it's good enough for me. I never saw any latin-1 or kanji in the bible! [15:43] i did [15:43] yeah I bet ascii works great for hebrew, aramaic and greek [15:45] "Im Anfang erschuf Gott Himmel und Erde; die Erde aber war wüst und wirr, Finsternis lag über der Urflut und Gottes Geist schwebte über dem Wasser." <-- see, latin-1/unicode in the very first sentence ;) [15:55] A passphrase is required to access the network [15:55] what would that be? [15:55] Oh ugh. It's probably the one I didn't write down or put into 1Password [15:56] Might have to start this all over [15:56] ahh... guessed it in three [15:58] heh.. the IPMI cert expired April 11, 2014 [15:58] oops [15:59] Java... Ugh. [16:00] except... it appears not to be updating [16:00] so maybe this was all for naught. :( [16:01] yeah... every time I want to do something interesting, it asks to update java [16:01] and then does nothing [16:03] ahh... need new java [16:03] no auto install :( [16:03] Oracle still messing things up [16:03] THIS USED TO WORK.. :) [16:04] ugh, really would love if qwest would fix this link flapping bullshit [16:04] we have links at work from twt and qwest - twt is down because of a hardware failure and qwest is flapping every 3 minutes for 45-60 seconds [16:12] well.. with java installed, now permits me to have reboot. still don't know how to see virtual console. [16:12] but I may be able to work that out later. [18:45] randal: i've had issues with the new java and old applications [18:46] you may actually find using an older version of java works better [18:46] it was whatever the major version jump was? 6 to 7 or something [18:48] osx apparently doesn't allow 6 anymore [18:48] security issues [18:49] use virtualbox [18:49] well thats' what i did [18:49] easier than trying to maintain multiple versions of java [18:49] i also used xp, ... living on the edge.. [18:50] the trailing edge! [18:51] there was an aviation wing design company that was very good at certain parts... and advertisted themselves as "the leading edge in trailing edge design" [19:10] haha, nice [19:50] using Docker with Chef / Kitchen. This is actually pretty cool... [19:57] http://i.imgur.com/PKOpseS.jpg [19:58] well crap [19:58] looks like HE's DNS service is down [19:58] uh oh, their authoritative svc? [19:58] staticsafe: wow, no kidding [19:58] testing atm, and yes their auth NSes [19:59] ouch [19:59] so much for anycast and free primary and secondary dns service [19:59] I got responses from ns3 and ns4, but really long response time;; Query time: 1523 msec [20:00] outages happen, anycast isn't magic [20:01] yea, no answer at all for me from any of them [20:01] http://pastie.org/pastes/9348773/text?key=pgbgn6cqpdt9kmyrpznoa from my testing [20:03] *** thestereobus has joined #arpnetworks [20:03] dig dns.he.net @ns1.he.net << that works though [20:28] mnathani - you updated to allow their new slave to slave from you? [20:28] oops... m0unds I mean [20:28] they changed the machines they slave from [20:28] RandalSchwartz: I was wondering [20:28] if you have strict "no AXFR except for slaves", it'll break now [20:29] I got email, but I don't care, because I allow AXFR from anyone [20:29] RandalSchwartz: i don't use their svc, just know someone who does [20:30] so i tested dig theirdomain.tld @ whateverns.he.net [20:56] I'm able to dig my domains currently... but it's been awhile since you mentioned the issue, so perhaps resolved [20:59] yeah [21:36] can you dig it? [21:37] yes he can [21:38] *** thestereobus has quit IRC (Quit: thestereobus) [22:01] *** SpeedBus has quit IRC (Quit: SpeedBus@CrownCloud.net) [22:58] staticsafe: Doesnt look like you have an A record defined for that domain. http://pastebin.com/bTRF07hY [23:53] *** Guest68160 has joined #arpnetworks