| ↑back Search ←Prev date Next date→ Show only urls | (Click on time to select a line by its url) |
| Who | What | When |
|---|---|---|
| *** | grody has quit IRC (Ping timeout: 255 seconds) | [00:31] |
| ........... (idle for 52mn) | ||
| toeshred has quit IRC (Ping timeout: 255 seconds) | [01:23] | |
| grody has joined #arpnetworks | [01:33] | |
| pyvpx | there are plenty of ways to speak with the IPv4 world if you are IPv6 only internally. and if more folks were IPv6 internally, they'd naturally lean towars 'speaking' natively to the rest of the IPv6 world...and then IPv4 might be relegated to the token ring of history.
only problem is IPv6 still kind of sucks. | [01:35] |
| .... (idle for 17mn) | ||
| mercutio | the whole ipv4 vs ipv6 thing is interesting
there's a high interest in being "ipv6 ready" but low interest in actually using ipv6 | [01:52] |
| ...... (idle for 29mn) | ||
| *** | toeshred has joined #arpnetworks | [02:21] |
| ..... (idle for 20mn) | ||
| plett | grody: DECT doesn't use the 2.4G ISM band
Not in the UK, at least | [02:41] |
| .......................................................... (idle for 4h46mn) | ||
| mkb | mercutio, if you've got a firewall dropping idle connections, do you know of any way to figure out where it is? | [07:28] |
| .......................... (idle for 2h7mn) | ||
| lily | so, apparently my host was ddosed over the weekend. gotta love spring break. the host is up but the network route is blackholed. whats the process for getting this back on the network?
most places just do like 24 hour block, but this has been down for days now | [09:35] |
| milki | lily: send an email to support | [09:41] |
| .......... (idle for 46mn) | ||
| NiTeMaRe | n locate /connect OFTC
er try that again? | [10:27] |
| ....... (idle for 33mn) | ||
| mercutio | mkb: it's usually the modem/router
lily: any idea why it was ddosed? | [11:01] |
| lily | efnet haters | [11:03] |
| mercutio | erk efnet sucks
i got ddos'ed on efnet once | [11:03] |
| lily | been there too long to leave | [11:03] |
| mercutio | because someone wanted my nick | [11:03] |
| lily | yeah
I have a channel thats been established for a decade I am a popular target sometimes | [11:03] |
| BryceBot | That's what she said!! | [11:04] |
| lily | ;) | [11:04] |
| mercutio | efnet sucked a decade ago to
too | [11:04] |
| lily | oh sure | [11:04] |
| mercutio | it's nothing new
but last i knew they still hadn't implemented services or any kind of room management | [11:05] |
| lily | correct
its the wild west | [11:05] |
| mercutio | or any way to hide what ip you're using
so people get ddos'ed | [11:05] |
| lily | people get ddsed on every network. | [11:05] |
| mercutio | i haven't been ddos'ed since using efnet?
since not using efnet | [11:06] |
| lily | ddos is the internet equivalent of tagging
its stupid | [11:06] |
| mercutio | happens more in poorer areas? | [11:06] |
| lily | heeh
I dunno, lots o popular websites get hit too | [11:06] |
| brycec | lol mercutio | [11:11] |
| lily | the IP I chat from is ddos protected (on another provider), and they dont usually decide to spray everything in my domain down
but its spring break I guess packet party | [11:12] |
| ........ (idle for 38mn) | ||
| mkb | mercutio, it's outbound from ARP | [11:50] |
| mercutio | mkb: damn i cant' follow now | [11:53] |
| mkb | mercutio: the connection dropping | [11:53] |
| mercutio | oh you're losing connections from arp to somewhere else?
inside tmux or such | [11:53] |
| mkb | yeah
I mean like once a week | [11:54] |
| mercutio | is it routing via arp, or initiated from arp? | [11:55] |
| mkb | from here | [11:55] |
| mercutio | oh only once a week
that could jsut be network glithces lots of adsl modems here used to drop connections after a minute or two idle which could easily be more than once a day if you didn't enable "keep alive" irc has server pings so is never truly idle | [11:55] |
| mkb | even IRC drops occassionally. network glitches it looks like | [11:57] |
| brycec | Doesn't tmux's default config have a clock, so it's redrawing at least once a minute. | [11:57] |
| mercutio | my freenode drops about once 1 to 8 weeks
once every but sometimes if it drops once it'll drop again shortly after brycec: yeh brycec: but i think he's talkinga bout losing irc connection? mercutio does tmux deatch sometimes well ^Bd | [11:58] |
| mkb | brycec, if I ssh from inside tmux that connection could be idle (not that ssh doesn't enable keepalive) | [11:59] |
| mercutio | like when i'm sick of getting distracted :) | [11:59] |
| mkb | heh | [11:59] |
| brycec | Very true. I didn't know if you were running tmux on the remote side
(s/running/using/) | [11:59] |
| mercutio | ssh doesn't enable keepalive by default
i don't have keepalive enabled anywhere myself. | [12:02] |
| mkb | mercutio, man ssh_config, /TCPKeepAlive
'The default is "yes"' | [12:03] |
| mercutio | it does key renegotiation occasionally, but that's not often enough to stop nat systems that drop connections a lot
mkb: oh? | [12:03] |
| brycec | But that's not the same as the server ping. That's just a basic TCP keepalive packet | [12:03] |
| mkb | right
ServeAliveInterval is server ping and that is disabled | [12:03] |
| mercutio | i think you need tcp keealive enabled in kernel for that?
oh it does have that enabled by default too. interestnig. | [12:04] |
| mkb | BSD wll do it when SO_KEEPALIVE is set on the socket or the global sysctl is set; I would hope Linux does too | [12:05] |
| mercutio | i'm out of date it seems :) | [12:05] |
| mkb | I just looked at BSD's code this morning :) | [12:05] |
| mercutio | where are you sshing to from arp?
is it to your home or something that has nat and a cheap router? | [12:06] |
| mkb | I'm not. I used to use bgp-spamd and the bgp connection would come undone all the time (it keeps a counter and bgpctl show displays it so I noticed...
now there's freenode what prompted the question was a connection to arp actually I leave my work computer on and connected and it's invariably disconnected in the night | [12:06] |
| mercutio | basically most cheap adsl/vdsl/cable/etc routers have really short timeouts to conserve memory | [12:07] |
| mkb | at work we've got our own AS and real routers :) | [12:07] |
| mercutio | memory got raised a while ago, but i think the short timeouts persisted to a degree. | [12:07] |
| mkb | but the firewall may be interfering | [12:08] |
| mercutio | my desktop is still crashing :(
i was trying to test ssh connections dying | [12:08] |
| mkb | anyway I left it on with TCPKeepAlive no and ServerAliveInterval on so we'll see what that does | [12:09] |
| mercutio | i'm going to do it from my server :/
ok two ssh's to arp to persist inside a tmux :) i still can't figure out why my desktop is crashing also the ethernet is wedging occasionally, for some strange reason too which seems strange considering it's i217v oh seems like it could be a tso bug from what google says it seems both intel and broadcom seem to acquire a lot of bugs. and are both the generally "preferred" server ethernet adapters. | [12:09] |
| *** | HotTopic has joined #arpnetworks
HotTopic has left | [12:31] |
| ............ (idle for 58mn) | ||
| pjs has quit IRC (Read error: Connection reset by peer)
pjs has joined #arpnetworks pjs is now known as Guest1495 t1495Gues has joined #arpnetworks Guest1495 has quit IRC (Ping timeout: 255 seconds) | [13:31] | |
| t1495Gues is now known as pjs | [13:48] | |
| ......... (idle for 42mn) | ||
| mkb | mercutio, get to work implementing the new RFC into your TCP stuff :)
scenic routing | [14:30] |
| mercutio | haha
i have not seen, got a link? i've just noticed that on fast hosts, using my own curl instead of curl improves performance significantly i mean i knew it used less cpu and could go faster on really fast networks. i just didn't expect normal fast hosts for it to make a difference of like 10 to 20% or something kind of makes me want to make my curl less ugly :) | [14:31] |
| mkb | https://tools.ietf.org/html/rfc7511 | [14:44] |
| brycec | Don't forget https://tools.ietf.org/html/rfc7514 | [14:44] |
| mercutio | damn it needs ipv6
RECN haha | [14:45] |
| .... (idle for 16mn) | ||
| RandalSchwartz | something odd on kvr07?
my server just went wonky I'll try a reboot | [15:01] |
| mercutio | how does amazon get away with having such terrible search? | [15:15] |
| RandalSchwartz | yeah - my server still running like molasses | [15:17] |
| mercutio | sems strange
bad network or disk or cpu or what? | [15:18] |
| RandalSchwartz | not sure | [15:18] |
| mercutio | tracing to kvr07 looks fine | [15:18] |
| brycec | (heh, I used to have a vps on kvr07, but no longer) | [15:18] |
| RandalSchwartz | yeah... it seems better now.
maybe had a noisy neighbor for a bit first thing that broke was ssh hmm. just got a nagios "total processes" alert maybe I'm getting mail-bombed? (it's our mail machine) | [15:18] |
| mercutio | is it in swap? | [15:22] |
| RandalSchwartz | looking now
no... | [15:22] |
| mercutio | i've noticed an increase in smtp auth attacks recently in general
ssh has had them for ages regularly but smtp used to be much more occassional | [15:22] |
| RandalSchwartz | loadav only 2.35 | [15:23] |
| mercutio | i like to stay under 0.6 myself :) | [15:23] |
| BryceBot | That's what she said!! | [15:23] |
| mercutio | of course that's an arbitary number.
and bsd has higher load averages than linux etc. | [15:23] |
| RandalSchwartz | total procs only 93
I wonder what my alert is looking for | [15:24] |
| mercutio | 2.35 on bsd isn't so bad
doesn't it tell you? it may have culled smtp processes? | [15:24] |
| RandalSchwartz | I'm just viewing through pagerduty | [15:24] |
| mercutio | are you using postfix? | [15:24] |
| RandalSchwartz | yes
because M4 sucks. :) | [15:24] |
| mercutio | do you have maxproc set for smtp in master.cf ? | [15:25] |
| RandalSchwartz | hmm. good question | [15:25] |
| mercutio | it defaults to off
but i recommend setting it | [15:25] |
| RandalSchwartz | yeah, that would make sense | [15:25] |
| mercutio | my personal mail server has it set to 8
buut if lots of users i'd set it a bit higher well it depends i'm going straight through to amavis too so that amavis procesess it before it hits quueue smtpd_client_connection_count_limit=2 i'm also setting that so that any one client can't do more than 2 connections | [15:26] |
| RandalSchwartz | looks like it defaults to 100
so yeah - I can probably crank that back | [15:27] |
| mercutio | yeah
if you do the client connection limit it'll make you get less alerts if one user throws many connections at it if you get 25,000 connections you're screwed whatever you do :) | [15:27] |
| RandalSchwartz | heh | [15:28] |
| mercutio | welll ddos type from random ip's | [15:28] |
| RandalSchwartz | ok - changed value and "service postfix restart" | [15:29] |
| mercutio | you only need reload
it can take up to a minute for reload to work | [15:29] |
| RandalSchwartz | I'm never sure, especially on master.cf | [15:29] |
| mercutio | but reload is all you need on most postfix changes | [15:29] |
| RandalSchwartz | simple enough to just restart | [15:29] |
| mercutio | ok. | [15:29] |
| RandalSchwartz | server seems sensible now.
haven't rebooted it in quite a few months though maybe it was just being bitchy anyway... pagerduty is happy again. | [15:29] |
| mercutio | heh.
postfix has heaps of new things i haven't paid attention to the last big change i made is goign straight to amavis instead of going through the mail queue first. | [15:32] |
| RandalSchwartz | I'm using mailroute.info instead | [15:37] |
| mercutio | haven't heard of it
i've been using amavis forever there may be better options now, but don't want to use something external really | [15:38] |
| RandalSchwartz | it's a paid service
they have access to information I can't possibly have | [15:38] |
| mercutio | i don't get much spam
i do get quite a few promotions especially from amazon | [15:39] |
| RandalSchwartz | merlyn@stonehenge.com has been very public for two decades | [15:39] |
| mercutio | and the normal linkedin crap etc.
most of my spam comes from google, yahoo etc. ie free email | [15:39] |
| ........ (idle for 38mn) | ||
| up_the_irons | lily: lol "packet party" | [16:18] |
| lily | :) | [16:18] |
| up_the_irons | mercutio: and lol for suspecting DDoS happens more in poorer areas ;) | [16:19] |
| mercutio | up_the_irons: well it was more tagging that happened in poorer areas
err happens ddos's on efnet are probably just young kids when i was yonger making free phone calls was popular etc. but now things seem more destructive towards individuals | [16:28] |
| up_the_irons | yeah | [16:30] |
| ...... (idle for 29mn) | ||
| mercutio | why does windows run out of memory with 32gb of ram on a desktop?
bloody braindead. | [16:59] |
| ...................... (idle for 1h47mn) | ||
| *** | dj_goku_ has joined #arpnetworks
dj_goku has quit IRC (Ping timeout: 265 seconds) | [18:47] |
| ............ (idle for 57mn) | ||
| cloudkitsch has joined #arpnetworks | [19:46] | |
| ............ (idle for 58mn) | ||
| cloudkitsch has quit IRC (Remote host closed the connection) | [20:44] | |
| ...... (idle for 29mn) | ||
| mercutio | i need a proper target to test on verizon's network, anyone got any ideas?
something that doesn't block ping oh, verizon.net :) | [21:13] |
| ↑back Search ←Prev date Next date→ Show only urls | (Click on time to select a line by its url) |