[00:00] heh [00:00] funny but scary [00:01] the thought of php still being around 25 years from now is horrifying [00:07] *** erratic has joined #arpnetworks [00:28] At least PHP has been y2038-safe for awhile now [00:37] *** BryceBot has quit IRC (Ping timeout: 260 seconds) [00:38] *** brycec has quit IRC (Ping timeout: 272 seconds) [00:40] *** brycec has joined #arpnetworks [00:41] *** BryceBot has joined #arpnetworks [01:20] *** LT has joined #arpnetworks [02:31] *** fink has joined #arpnetworks [04:02] *** fink has quit IRC (Quit: fink) [04:05] *** fink has joined #arpnetworks [04:06] *** fink has quit IRC (Client Quit) [07:42] *** tooth_ is now known as tooth [09:42] *** LT has quit IRC (Quit: Leaving) [10:00] hahaha [10:18] LOL [10:33] *** RandalSchwartz has joined #arpnetworks [10:33] *** RandalSchwartz has quit IRC (Changing host) [10:33] *** RandalSchwartz has joined #arpnetworks [10:33] Hmm. Trying to remember how to see the console of a bare metal box [10:34] is that the IPMI URL? [10:35] I remember seeing some sort of virtual java thingy before... but not sure how to get to it [10:37] RandalSchwartz: you need to connect to the management VPN (with your ARP OpenVPN credentials) [10:38] then you can use IPMI or the HTTP management interface [10:39] I think the URL (with RFC1918 address) is in the ARP portal [10:59] ahh... yes, the VPN [10:59] now I remember [11:02] Hmm. still not connecting.... complained about not having the latest java [11:39] yeah. then you have to white list the self signed jnlp [11:40] then it works. occasionally. (I'm on OS X, however) [11:45] *** carvite has quit IRC (Ping timeout: 244 seconds) [11:46] *** carvite has joined #arpnetworks [12:03] randal: i used virtualbox i think [12:03] and old java [12:07] Yeah, I'm on OSX too [12:07] i had problems from linux and windows too iirc [12:07] i hate java. [12:08] i think it works with java6 but not java7? [12:09] i sohuld probably try it again [12:33] *** Erick- has joined #arpnetworks [12:33] Is there trouble? [12:33] kvr23 having issues? [12:33] anyone know? [12:33] Erick-, ahh looks like it [12:33] my vps is down too [12:33] yup [12:34] are you on kvr23? [12:39] there's something on twitter [12:39] saying that it's being investigated. [12:39] (i'm not on kvr) [12:39] err kvr23 [12:42] thanks! [13:18] how do you whitelist the self signed jnlp? [13:19] Oooh... it worked eventually. I can see the preview image [13:19] is there a way to connect to that console? [13:21] like with the VPS using VNC? [13:22] oh preview always worked [13:22] the vnc type thing is what i ahd issues with [13:22] good luck :) [13:22] ahh... something like Remote Control -> Console Redirection -> Launch Console [13:22] for which I'm also getting that error message. [13:22] maybe i shoudl try it too [13:22] I downloaded the latest java... maybe that'll work [13:23] i think older is better [13:23] i couldn't choose which [13:23] which is why i used virtualbox iirc [13:23] private key password verification failed [13:23] now i have to remember my private key [13:24] oh got it [13:25] After updating java, I no longer get the same error message. [13:27] no error message, but it still doesn't seem like it's launching my console [13:27] *** jbergstroem has quit IRC (Ping timeout: 256 seconds) [13:29] I'm going to email support@ it looks like [13:29] i'm still trying to get vpn up it seems [13:29] TLS key negotiation failed to occur within 60 seconds (check your network connectivity) [13:32] UDPv4 link local: [undef] [13:32] UDPv4 link remote: [AF_INET]208.79.89.251:1194 [13:32] hmm i wonder if that's the reason [13:36] *** jbergstroem has joined #arpnetworks [13:38] the link local thing is just because it was set to nobind [13:38] i'm still stuck on the vpn hah [13:46] *** jbergstroem has quit IRC (Ping timeout: 265 seconds) [13:50] *** jbergstroem has joined #arpnetworks [13:50] *** gizmoguy_ is now known as gizmoguy [15:04] *** mordacw has joined #arpnetworks [15:43] whats the difference between TUN and TAP when talking about OpenVPN ? [15:45] tun and tap are both userland interfaces to the TCP/IP stack in the kernel [15:45] layer 3 and layer 2 tunnels respectively [15:45] ^ that [15:45] tap = layer 2, with ethernet frames and all [15:45] tun = layer 3, simple point-to-point ip, routing [15:46] tap is good for bridging disperate networks that require the same broadcast domain [15:46] (also some platforms have quirks, notably windows) [15:47] And both sides must be configured identically [15:47] often use of tap is discouraged due to the overhead of the Ethernet frame [15:48] And the overhead of useless/needless broadcast traffic ^ [15:49] *** jbergstroem has quit IRC (Excess Flood) [15:49] *** jbergstroem has joined #arpnetworks [15:55] would my use case determine which one to use, for instance: I need an IP on my local subnet (via VPN) and access to machines whose default gateway is different from my pfSense box [15:55] a diagram would probably help here [15:56] > I need an IP on my local subnet (via VPN) [15:56] if by "local subnet" you mean, an IP in the same broadcast domain [15:56] you need to use TAP [15:57] if I get an ip outside the broadcast domain, machines would need to know how to get back to it using a route of some sort? [15:57] yea [15:57] you'd need a route on your default gateway (or upstream) that sends traffic across your vpn [15:57] But typically, pfSense handles all that for you ;) [15:57] That's what she said!! [15:58] 9 out of 10 times, you want tun [15:58] pfSense is not my internet gateway however [15:58] methinks a diagram may be in order www.asciiflow.com [15:59] its running in a VM behind a Mikrotik NAT [15:59] i never did figure out why my openvpn stopped working [15:59] i tried from windows too, and it broke there too. [15:59] I blame up_the_irons >.> [15:59] <.< [15:59] i imagine it's because i'm running recent openvpn? [15:59] 2.3.5 [15:59] i can't think of any other reason. it used to work. [16:01] tcpdump to the rescue? [16:01] i did [16:01] mercutio: Do you have any other active openvpn traffic? Openvpn defaults to binding to :1194 for its source port, and if that conflicted... [16:01] s/tcp/udp [16:01] udpdump to the rescue? [16:01] lol [16:01] i keep sending packets at arp, and getting nothing in response. [16:01] Then that sounds like an ARP problem [16:01] brycec: nothing else, and it gets through the first part. [16:03] yeah hopefully up_the_irons turns up sometime and i can ask him what he sees. [16:03] i did try tcp but it seems to be disabled, port just hangs. [16:04] fwiw, I get no response either [16:04] your openvpn isn't working you mean? [16:04] so I'm inclined to think it's a bigger issue [16:05] I mean I can't get a response from ARP's openvpn [16:05] with udp? [16:05] (I don't have creds, but I can't get *any* response) [16:05] yes [16:05] And I know openvpn works from this system [16:05] well RandalSchwartz was having issues with ipmi [16:06] and my memory was hazy, so i wanted to check out the ipmi again [16:06] * brycec hilights up_the_irons a couple of up_the_irons times [16:06] yeah [16:06] but his vpn was working, because he had ipmi issues not vpn issues. [16:06] And do you both connect to 208.79.89.251 ? [16:06] actually that's the other thing you should be able to do RandalSchwartz [16:06] you should be able to do ipmi serial console. [16:07] vpn1.cust.arpnetworks.com [16:07] yeah that ip bryce [16:07] I don't know what ipmi serial console is [16:07] I only know about using VNC to see the console [16:07] you use ipmitool and get a serial console basically [16:07] i dunno if it's setup or not [16:08] right... this is all mystery words to me [16:08] I've never used a serial console on freebsd [16:08] ipmitool -I lanplus -H -U -P -o intelplus sol activate [16:08] it's eotmhing like that normally [16:08] Also, requires there to be something on the serial port :P [16:08] yeah [16:08] mercutio: I knew what IP you used, since you announced that earlier. . Question is about what IP RandalSchwartz connects to :p [16:09] so... if it worked, it would show some sort of login? [16:09] oh brycec :) [16:09] yeah [16:09] RandalSchwartz: if you have a tty running on that serial port, yes [16:09] SOL Session operational. Use ~? for help [16:09] it'll say that first [16:09] but since you didn't know about it in the first place... we'll assume you haven't configured that :p [16:09] yeah [16:10] it's godawful [16:10] i hate ipmi [16:10] but it tends to work once it's setup, [16:10] and i'm pretty sure up_the_irons set it up [16:10] because i seem to remember being happily surprised :) [16:10] up_the_irons setup the IPMI stuff probably, but since you're responsible for your own install, he wouldn't have configured a tty [16:10] the user/pass there is the same as the web behind the VPN [16:11] or is it my root user/pass? [16:11] should be the same as the web, I'd assume [16:11] it's the same as the ipmi login on web interface [16:11] i'm pretty sure [16:11] I suppose I could follow this: https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/serialconsole-setup.html [16:11] (since you're still connecting to the IPMI/BMC - it's not your root user/pass until you get a prompt from your box) [16:11] So long as FreeBSD recognizes the serial device [16:12] 10.1 added some more IPMI serial device support too [16:12] Ugh... this looks like if I do something wrong, I'll break it [16:12] it should work in bios regardless [16:12] and then it won't boot [16:12] oh brycec ? [16:12] and I won't be able to see it not boot [16:12] mercutio: https://www.freebsd.org/releases/10.1R/relnotes.html [16:12] The uart(4) driver has been updated to include support for the Intel® Lynx Point KT AMT serial port. [r266436] [16:12] and neil would be very mad [16:12] i've got this problem with serial console slowing down normal console i/o [16:12] this box is still 8.4 though [16:12] on more than one system [16:13] it's bloody annoying [16:13] so 10.x doesn't matter. :) [16:13] i wish people would make it async [16:13] on hp i just use textcons [16:13] which is also lame [16:13] serial, by definition, is synchronous... [16:13] yeah but the normal video output goes at serial speed too [16:13] so like if you have serial enabled you can see the screen drawing grub etc [16:14] right [16:14] that's on linux [16:14] Hmm. I wonder how up_the_irons set up that box.... because he'd probably have to do what I'm doing... look at some console somewehre. [16:14] i can't remember what bsd is like [16:14] tl;dr serial drawing is slow. [16:14] brycec: it's not that serial is slow, it's that if you have serial enabled normal video is slow too [16:14] It's slower than plain text because there are a bunch of invisible drawing characters taking up space [16:15] Ah I understand what you meant [16:16] * brycec wonders what rabbit hole mnathani has fallen into [16:16] that's what i meant about it should be async :) [16:17] but yeah the normal bios should work, and i imagine thef reebsd boot loeader works [16:17] that ascii tool is confusing [16:17] and you can probably do some command to do serial [16:17] * brycec finds that ascii tool intuitive and quick [16:17] you can also reboot with ipmi and access sensors and stuff [16:17] s/i a/i, a/ [16:17] you can also reboot with ipmi, and access sensors and stuff [16:17] brycec: I started making a diagram but ended up way more complicated than I need [16:17] (rebooting is not a requisite for accessing sensors, hence the comma addtion) [16:18] brycec: grr :/ [16:18] Maybe that's just the nature of your problem, mnathani :P [16:18] I have 2 interfaces on the pfSense box [16:18] LAN and WAN [16:18] WAN will accept the VPN connection [16:18] but I need the WAN to also host the local LAN [16:19] would I bridge LAN and WAN to achieve this? [16:19] "but I need the WAN to also host the local LAN" wtf?? [16:19] Also, you just said you have two interfaces... "but I need the WAN to also host the local LAN" suggests you have one. I'm very confused. [16:19] vpn router on a stick [16:20] i'm a bit confused by what mnathani is saying [16:20] nothing really connected to the LAN side [16:20] you can use a wan interface with lan as well in general [16:20] but i imagine pfsense might get in the way [16:21] pfSense doesn't require a LAN interface, it can work with just a single interface [16:21] (it's in the setup wizard) [16:21] you stick extra arp traffic on the wan interface, and arp limits might hurt you [16:21] YER A WIZARD brycec [16:21] WAN = 10.10.100.100/16 LAN 172.16.100.1/24 [16:21] does the wan use dhcp? [16:21] but the hosts I need to access are 10.10.25.25/16 [16:21] static WAN [16:22] so yeah, you just have a gateway on the wan and you just have nat from lan segment to wan segment [16:22] So long as the pfSense box has a route to 10.10/16 (it does), then a VPN client can access/route to that. [16:22] or you might not need nat depending on the other end [16:22] the wan end could have as route to 172.16.100.0/24 [16:22] will my remote VPN client get a TAP ip [16:23] from the 10.10.0.0/16 subnet? [16:23] mnathani: it would get an IP from a private ip pool [16:23] and its connection to 10.10/16 would be NAT'd (by default) [16:23] why do you have openvpn on a /16 ? [16:23] just route through it, don't bridge. [16:23] the pfsense is not the default gatway for other Windows hosts [16:24] oh [16:24] Doesn't matter [16:24] adding static routes in windows sucks :/ [16:24] VPN subnet -> pfSense -> WAN IP -> whatever host [16:24] And those windows hosts would see a connection from the pfSense box's wan IP [16:25] if it's going to a modem/router, you can add a static route on the modem to the pfsense box. [16:25] so no extra routes needed [16:25] ok, cool [16:25] Internet router is Mikrotik [16:25] brycec: but the other way around won't work? [16:25] other way round being... [16:25] ? [16:26] tl;dr pfSense is a nat'ing firewall/router. And the VPN traffic is no different than if it were LAN. It has its own subnet, gets nat'd through the pfsense, etc [16:27] That's how VPN gets configured by default in pfSense [16:27] (if you need to bridge networks for whatever reason, need routed access to vpn clients etc you're in for a long night :p) [16:28] asciiflow'd http://sprunge.us/ibDD [16:35] so yeah. good day for freebsd \o/ [16:35] (ref http://freebsdfoundation.blogspot.com.au/2014/11/freebsd-foundation-announces-generous.html) [16:35] wow [16:36] haven't herad of whatsapp [16:36] oh it's like the iphone thing? [16:36] with direct video calling over internet etc to your normal mobile contacts i think [16:36] err like facetime [16:40] IIRC Facebook bought them for billions of dollars [16:41] So I guess that explains the influx of cash to the guy :p [16:41] Could not locate the CA reference for the server certificate. [16:41] Failed to export config files! [16:41] pfSense troubleshooting spiel: Do you have a CA setup? Did you assign the CA to the OpenVPN server definition? [16:42] "...Facebook announced its acquisition of WhatsApp Inc. on February 19, 2014, for US$19 billion" [16:42] wtf [16:42] @exch 19000000000 USD JPY [16:42] 19000000000 USD -> 2215593800000 JPY (as of Mon, 17 Nov 2014 16:00:43 -0800) [16:42] he should donate more than a million then :) [16:43] do any of you use whatsapp? [16:43] it may be one of those regional things. [16:43] I do not [16:43] like hardly anyone here used AIM [16:43] I feel age/generation plays a bigger role today than regions [16:43] * brycec used AIM [16:44] but people did use ICQ [16:44] * brycec used ICQ [16:44] >.> [16:44] heh. [16:44] i used to use micq [16:44] and it kept breaking [16:45] do you use jabber bryce? [16:45] I have XMPP accounts on several servers, yes [16:45] figured :) [16:45] including jabber.org, somewhere [16:46] WhatsApp came about long after I was out of school, and all my messaging was either Facebook (friends/family) or office xmpp [16:46] i have icq, aim, msn, gtalk, skype, jabber now [16:46] but i basically just use jabber and skype [16:47] i like it how you can just easily run your own server and it can connect to other servers. [16:47] I use xmpp and irc [16:47] ^ primarily [16:47] heh i don't include irc in that for some reason [16:47] oh and silc to a lesser extent [16:48] it'd be nice to see more people shift off skype [16:48] but the echo cancelling and video works pretty well [16:51] *** mordacw has quit IRC (Ping timeout: 258 seconds) [17:02] I got pfsense to send me the cert and config file [17:02] but now I cant connect [17:02] mikrotik is forwarding the udp port to the pfsense [17:03] External Public IP (UDP 11511) <-> Pfsense 1195 UDP [17:04] http://pastebin.com/A2J72FKV [17:12] I see a lot of highlights for me... [17:14] !mnathani [17:15] @mnathani [17:15] mnathani: Have you checked whether Windows Firewall is enabled and dropping packets? [17:15] 1,952 results found. Here's #388 Feb 11, 2014 10:47:31 brycec: do you have a guide you could link to that describes how you setup the ipv6 tunnel using ARP? [17:15] turned out it was the pfSense firewall [17:15] up_the_irons: people having trouble connecting to the Metal VPN [17:15] sorry been behind today guys... kvr23 also took a dump (but power cycle seems to have fixed it) [17:16] it's nice if brycebot echoed the twitter stuff in here [17:16] i have no idea how complicated that is though [17:17] it could be that someone's cert has expired [17:17] how long do they last? [17:17] the client end does not show a useful error when that happens [17:17] 1 year [17:17] mercutio: Twitter made that against the TOS [17:17] oh [17:17] these files are timestamped 2nd november [17:17] brycec: oh? [17:18] this year or last? [17:18] that sucks [17:18] last [17:18] so yeah, i think it's just out of date probably [17:18] and yheah nothing useful was shown, it looked like your end was ignoring [17:18] brycec: really? so you can't echo stuff from someone's twitter feed? [17:18] Not After : Nov 2 01:53:58 2014 GMT [17:19] up_the_irons: it's "complicated" but boils down to it being illegal to ingest and regurgitate to broadcast twitter. (because they want twitter to stay on twitter.com, that sort of thing) [17:19] so i need a new csr, up_the_irons ? [17:19] Services like ifttt.com had to pare down their Twitter integration substantially [17:20] brycec: i hardly ever use twitter... that is annoying :) [17:20] brycec: ah ok, makes sense i guess... [17:20] mercutio: yup [17:20] mercutio: just send me a CSR using same method as last time [17:20] support@ [17:20] yip [17:20] i'll sign and send back [17:21] I mean, i could still do it... not like I'm going to get caught, but it's a bunch of code I don't feel like writing/updating. [17:22] yeah [17:23] brycec: understand. [17:24] i know to check twitter before irc if there's an immediate issue. [17:24] i assume up_the_irons doesn't want to get distracted [17:24] I get tweets sms'd to me [17:24] brycec: sounds painful :) [17:24] (from the accounts that matter, like bsdvps) [17:24] oh you can do that? [17:25] Yes [17:25] my supermarket keeps emailing me in the middle of the night. [17:25] @google twitter sms notification [17:25] 2,020,000 total results returned for 'twitter sms notification', here's 3 [17:25] Twitter Help Center | Receiving SMS notifications for Tweets and ... (https://support.twitter.com/articles/20169920-receiving-sms-notifications-for-tweets-and-interactions) If you've already added your mobile phone to your account, you can now enable notifications for whenever someone you follow Tweets or @mentions you ... [17:25] How to Receive SMS/Text Alerts from Twitter - YouTube (http://www.youtube.com/watch?v=v69hPJZc1qQ) May 22, 2012 ... This short video will describe how to set up your twitter account so that you can receive sms/text msg alerts from certain twitter updates. ... Configuring the Notification Center on the iPhone by MegaFlyingToast 3,766 views · 27: ... [17:25] Twitter Help Center | Enabling mobile notifications (https://support.twitter.com/articles/20169887-enabling-mobile-notifications) If you'd like to receive Twitter notifications to your device, you can attach a phone number to your account for updates via SMS. [17:25] i dunno how you're meant to deal with this media thing. [17:25] like i like to have emails on my phone, i just don't like people to email me at 1 am. i suppose i need more email addresses. [17:26] with some way to disable sound for unimportant messages at night [17:28] yeah i switched to multiple accounts. alerts & notifications go to the e-mail account i have set up on my phone, all my regular mail goes to my normal e-mail account (that isn't on my phone) [17:28] I use gmail filters to forward to a separate acccount, emails from actual people that notify me on my phone [17:29] My phone is just on silent, plain and simple [17:29] I would go nuts if I got an alert for all email on my main account [17:30] *nod* before this i did server-side filtering... emails from certain people went into my inbox, anything that fell through to the end of the filters went into a different folder [17:30] I still have both accounts on the phone, the main one simply does not notify [17:30] i could still pull them up on my phone if i wanted to but i didn't get notified about them [17:30] jlgaddis: i want htings like advertising going to my phone/tablet, just without sound at night. [17:30] holy crap, i never knew about tweets / sms [17:30] i don't have html mail for my normal email. [17:30] that could be useful... [17:31] heh, when i first started using twitter, it was only web and sms [17:31] You will now receive mobile notifications for @arpnetworks's tweets [17:32] ^ And now when shit hits the fan, you'll get an out-of-band notification [17:32] even if it's not your server [17:32] Sure. But it's a very quiet feed anyways [17:33] i think i know how to solve it on tablet actually, just multiple user accounts. [17:39] Why not just put it on silent? Not to mention disabling notifications for accounts you don't need to be notified of? [17:40] cos i have alerts that get emailed to me too [17:40] i'm making a new account now :) [17:41] it doesn't seem like email has a way to set quiet hours [17:41] instead of phone in general [17:43] but yeah i can turn off alerts for my main mail [17:43] I set IPv4 Local Network/s = 10.10.0.0/16, however a route does not show up in my OpenVPN client [17:50] Granted alerts don't play much of a role in my work, but all of my urgent alerting is done through Pushover, which is exempt from the phone silence because it uses the "alarm" "channel" [17:53] (In fact, my phone is on silent 100% of the time. Any notifications I care about get pushed to my watch.) [17:53] (hooray smartwatches) [17:58] smartwatch heh [17:58] do you sleep with it on? [18:35] *** mordac has joined #arpnetworks [19:47] *** dj_goku has quit IRC (Ping timeout: 255 seconds) [19:49] *** dj_goku has joined #arpnetworks [19:53] *** Erick- has quit IRC (Quit: Textual IRC Client: www.textualapp.com) [21:06] No, I do not. [21:06] That's what she said!! [21:19] can anyone confirm if Liquidweb Storm VPS offerings utilize VMware? I was under the impression it used Xen [21:52] *** sga0_ has quit IRC (Ping timeout: 250 seconds) [22:18] afaik, they use xen [22:20] i'll confirm for you, give me a minute [22:21] k [22:21] staticsafe: i managed to hit #59 on connery today for daily score, haha [22:32] mnathani: actually..kvm [22:33] i have acct credit w/them, so i spooled up a 1GB instance and got this output w/virt-what: [22:33] even their cloud offerings? [22:33] [root@textbox ~]# virt-what [22:33] kvm [22:33] this is a storm server [22:33] thanks for taking the trouble [22:33] no problem at all [22:33] I had 2 live chat sessions with them [22:33] i could have sworn it was xen [22:33] one said custom VMware [22:34] Nathani 06:28:24 pm [22:34] [22:34] I am curious as to what visualization technology you use for the VPS offerings [22:34] [22:35] [22:35]