« first day (390 days earlier)      last day (4590 days later) » 

12:18 AM
@jscott Succinct! I like it.
1
A: Recover data from RAID0

jscottPossible? Yes. Likely? No.

 
Jaw: meet floor
0
Q: default gateway the same as my domain cotrollers ip?

MDLWhat should I make my default gateway for my Domain Controller? Should it be the same as its IP address or something else?

 
LOL
 
12:34 AM
 
Can't. "Moonshark."
He was the most visionary and revolutionary ass to have influenced the world in decades. He will be missed. :-(
 
posted on October 06, 2011 by Matt Simmons

Today, Steve Jobs passed away. This can really be thought of as the end of an era. I’m not going to give you a biography of a man that you probably know better than I do (Wikipedia has a perfectly serviceable one, anyway), but I do not doubt that without him, many of our daily [...]

 
All this overt emotion is making me uncomfortable
 
... :-(
It's just...well...love or hate Apple, Jobs had a huge hand in changing technology.
4
 
Yeah, I get that. But... I'm a sysadmin and broken inside emotionally. And with everyone moping around the internet about it....
 
12:45 AM
Yeah. The cancer comic. That was one of the most mixed, emotionally, XKCD's I'd read.
 
Yeah, I've had a cousin go through it before, and my Aunt is battling breast cancer now.
 
Steve Jobs was a man who could be horrible one moment, then ingenious the next. He helped revolutionize the "digital living room" meme. He brought Apple back from the brink. He had a company that failed for being too far ahead of its time. His passing is a loss for technology much as Jim Henson's was a loss for humanity.
We have coworkers with cancer now. I was just at a funeral last week for someone who died of cancer as well.
 
3
that's pretty neat
 
I just had a friend finish treatment for prostate cancer. A friend of the family just had a funeral from cancer. A principal in our district has breast cancer. Cancer. Bastard.
sigh I'm going offline. Sad day all around.
 
Yep.
 
1:06 AM
SERIOUSLY???
128169 1F4A9 💩 Pile Of Poo
We have a Unicode character for 'Pile Of Poo' and not Stargate gate addresses??? Fail.
3
 
...Steve. Shit, man. I'm gonna go re-watch some of those Steve vs. Bill animations. Tomorrow, everyone. Goodnight.
 
 
6 hours later…
7:11 AM
G'day
 
7:23 AM
morn
 
Morning
lol Stack Overflow has a Jobs quote in the system message. Cute
 
it's a bit breezy
 
It's a bit wet here, which is not fun when you have to open a gate and the key is a bit dodgy :(
 
We went to our local Wetherspoons last night as it's the start of their autumn beer festival. Nice beer, but walking home I got soaked through
 
looks like nice day in cardiff :)
 
 
4 hours later…
11:07 AM
lesson learned: don't set video cards to auto MB in esxi
it makes booting sloooooooooooooooooooooow
 
11:46 AM
jeez.......
@chopper3: where are you!! that kb is important for you aswell :(
 
12:01 PM
Hey! We got jobs! Mostly programming and related, but there is a Windows Sysadmin posting -- ohio.edu/oit/cio/careeropportunities.cfm
 
no mention of the versions being used
perhaps its a trick to fool someone into working with windows 2000 on the server side and vista on the client side?
 
Nel
12:21 PM
using a "!" in the title of a question turns into a "?" !?
 
wait what?
 
Nel
:P
 
12:41 PM
Morning folks
 
Morning all
@Nel Not surprising... It'd be nicer if they just banned the user from asking a question for 5 minutes if they try to write "OMG! Teh SVR is Pwn3d!"
 
Nel
That would be really nice though
 
1:01 PM
@ChrisS In case you're dying to know what solved my NPS issue, it was ditching the wildcard certificate for a standard SSL cert that does client and server auth.
Microsoft really needs to publish that shit.
I still can't get anyone at MS support to admit that it's a problem, though. I took a shot in the dark on my own and it works fine so far.
 
I have a feeling you might have got flagged at MS from your little outburst =D
Aye, @pauska it is a sad day.
 
not really, its normal. people die of cancer every day.
but hopefully this will raise more attention against the fund raising cancer research needs
 
I think the good that came out of Steve Job's dying is that Woz is getting a lot of air time. That guy cracks me up.
 
hopefully some of his monies will go into that
 
1:04 PM
Plus I kinda feel bad for Woz, he always gets buried.
 
Never said any other day isn't
 
@MarkM Still interested if you ran the certs through something like OpenSSL to see if there were any other differences; I think I've seen situations where a wildcard does work.
 
I try to stay away from wildcard certs as much as possible
too much legacy shit out there that doesnt support it
(UCC certs for the win)
 
I haven't yet. We're still testing to make sure that this really solved the problem. Since we have such a diverse group of devices it might take a while. Eventually, I play on getting around to that, though.
 
my gf's father was diagnosed in jan '09, died in july '10, watched it from day 1 til the last, not a fun sight at all, the best thing to do is to just say 'fuck cancer' and try as much as you can to help fund the research.
 
1:08 PM
@pauska We have a bunch of servers deployed with this same WC and it works fine for https, but it seems to break microsoft's crypto stack when it's used for tls with their authentication stuff like peap
 
@shads0 - yeah, fuck cancer. Lost both parents, a cousin and a close friend's mother to it so far :-(
 
lol, this guy is mad
 
damn...
 
7
A: default gateway the same as my domain cotrollers ip?

MarkMIt should be the same IP address as your gateway for the subnet that your domain controller is on. If you don't know what this means, you should run far away from your computer and hire someone that knows what they are doing. Gateways are an elementary networking principle.

 
I also have a fondness for your use of the mixed metaphor.
 
1:18 PM
@jscott @ShaneMadden tweeted one of my "chicken + egg" metaphors yesterday.
I'm on a roll with them
 
I suppose putting on a trollface avatar and asking "Y U MAD BRO?" will be too much like trolling for comfort?
mmm egg roll
 
I think yesterdays was "It's like that guy is shoving a chicken back inside of the egg and then shoving that egg back inside of another chicken."
 
EGGLOLL?
4
 
or something to that effect.
aw man, you guys closed it?
:(
poor guy
I think all metaphors that I use from here on will involve chickens and eggs
 
I prefer rockets and surgery
 
1:22 PM
IT'S NOT ROCKET SURGERY!
 
I don't like the NARQ reason for closing that Q, but it's done now...
 
@Shads0 Ahh, too slow, grasshopper. My edit skills exceed your snarking skills.
 
damn, foiled again
 
uh
-2
Q: Types of servers and faults

MaraPlease for me enumerate a list of the types of servers that are out there, what they do, and what their faults are.

 
Ha! pk is taking a beating on that...
 
1:24 PM
I quite liked the answer. :)
 
Hahaha, I want to upvote both of those
 
... did they ever put in a "you're doing it wrong" tag?
0
Q: Which server solution for an office that doesn't really "need" a server?

slhckIn the office I work for, the situation is as follows: There are ~20 PCs running Windows 7 (mostly) and Windows XP. No domain. There are four network-capable Ricoh printers, currently shared over a Windows 2000 Server machine. It will be retired. There is Lotus Domino running on a virtualized W...

 
@BartSilverstrim That would have the most questions tagged, if so.
 
@pauska I've heard that cancer is actually highly funded in research.
It would be very profitable to find the cure, so there is a lot of research funding for it.
Compared to other diseases and maladies.
Someone was discussing that Bill Gates' foundation should fund it more and that was the reply, that Gates doesn't fund it so much because it has a lot already invested.
 
back on that subject, surprise xkcd update
@BartSilverstrim There's definitely headway being made with life expectancie and things to be done to improve them, it's all a matter of when it's cause and what type.
 
1:42 PM
SO has a Steve quote in the banner.
Why doesn't Serverfault?
:-/
 
more importantly, why doesnt apple SE?
and wow, the first question to greet me on the site
0
Q: How do I know if I have a Mac or Windows?

Clay NicholsI know these seems like a silly question, but we do have a fair number of customers who don't know if they have a Mac or Windows. How would they easily know which they have? (I don't have a Mac to verify this). I'm thinking that a Windows PC has a START button in the lower left corner (unless i...

 
WTH?! Get those quotes up. I even added some into our web server's random quotes to select from.
@shads0: I like the first comment suggesting it's broad and should move to SU. It's code for "This is a moron or he's dealing with morons. Send him to SU."
 
They need mods to migrate to SU, not a flag option like here, haha
 
You wouldn't believe how difficult it is for us to get users to distinguish Windows XP from Windows 7 -- so I don't see the question as so terrible... I feel that pain.
 
@jscott That I'll agree to, however, even my technologically incapable relatives can distinguish between a PC & a mac
 
1:54 PM
I know it's not easy when dealing with derps remotely, especially if it's derps that are something like ISP clients at home. They expect you to do shit from NCIS and wave your magic wand and just fix it for them (free, of course) when it doesn't work that way at ALL, and you wonder just how the hell they could possibly pay so little attention to the computer they are staring at.
 
Like this?
 
@jscott Agreed - it's a good question worded slightly differently: "What is the easiest way to guide a remote user through a process of determining what OS they have?"
 
it's homework time!
-1
Q: repairing an OEM version of Windows XP Pro with a retail version?

TimIf you repair an OEM version of Windows XP Pro SP3 with a legal/100% legit shrinkwrapped retail copy of Windows XP Pro, which, if any, of the following statements are true? The resulting O/S will be a retail version with a new retail product id. You will need to reactivate before you can boot t...

 
20k :)
2
 
Woot!
 
2:07 PM
'grats!
 
thanks
 
grats!
 
@Shads0 Is that SFW?
 
oh yeah, just a clip from ghost whisperer that is..ughh so infuriating to me
 
@Shads0 Just had to defrag the hard drive!
 
2:19 PM
....
 
We've got a tech here that uses defrag as his first step in most troubleshooting.
All the Lenovo notebooks we deploy have SSD too.
 
oh god
 
Defragging an SSD drive? Um...bad move.
I defrag primarily for checking for disk issues or to prep an image for compression. Not for things like...oh, fixing corruption or program problems.
Defrag is also handy for making users think the computer is doing something all NCIS'ey.
 
@BartSilverstrim I prefer defraggler for that. It shows colored blocks moving around. Much more impressive to them
 
only XP defrag, Vista & 7 nerfed the cool graphical representation, now it's just a boring box..
 
2:30 PM
Was XP the one that had the white/green/blue/red colored boxes that flashed across the screen? Thought that was 98 for some reason.
 
@ChrisS I think XP was the last Windows to have it
 
@voretaq7 No, not even that. XP has the bar
 
@MikeyB really? I guess 98/ME was it then. NT4 had the boxes right?
Those boxes were inherited from whatever DOS program they licensed - I remember them as far back as MS-DOS 6.x
 
@voretaq7 fscked if I remember.
 
jkdefrag (now mydefrag?) has optimization ability and screensaver mode so it can defrag with pretty graphics as your screensaver.
 
2:38 PM
posted on October 06, 2011 by SysAdmin1138

A while back, this mug was gifted to me. Appropriate, really: It has survived long use, both at work and at home. Unfortunately, it is dying:The handle is about to break off. I'm not sure what triggered that since I have other mugs that are three times as old as this one and are still going strong, but there it is. The beginning crack of a crack cascade that'll end up with a handle-free mug. I

 
those pretty graphics were CPU intensive. Sad how we wasted cycles back when everyone had one core and MAYBE 2 processors, but now that everyone has 4-8 cores and heavy hitters have 8 or more processors we can't have the pretty anymore.
 
@Sysadmin1138Expounds The broken handle happened to a lot of those mugs, mine's cracked in the exact same spot (super glue works nicely)
 
Oh yeah, Flash Player 11.
Now in 64-bit Windows flavors.
Can't wait to be rewarded with a request to deploy this along side the latest Adobe Reader.
 
I can't wait for the massive security holes they're going to find
 
@Shads0 Yeah, that seems to be the problem with every version of Flash/Reader we deploy.
 
2:46 PM
Adobe Flash: getting your system pwned since the mid-90s.
2
 
html5: beating adobe flash in 20 years when html14 comes out
 
With HTML5 starting to take hold, my loathing for Flash & Silverlight is at an all time high.
 
didnt MS just kill silverlight?
 
user image
3
 
Sorta...
 
2:47 PM
Classy.
2
 
I hate those people so much...
 
Don't worry, WBBC. When your people die, we'll bring the party bus to your grave.
 
@Shads0 When I die I hope to have offended them enough to picket MY funeral.
 
They're attention whores. They're not offended.
They're also inbred. And the one kid of Margie's as I recall was a bastard. Literally.
 
I think that's the most profound positive statement I've seen Re: Steve's death: He offended the Westboro Baptist Church.
 
2:50 PM
think they'll protest us because we talk about boobs so much?
 
I'm confused about what sin he taught? He was very against pornography on his devices.
I seem to remember an article somewhere where he said that the iPad was a porn-free platform at launch and he was happy about that
 
@MarkM They think everything is a sin. And dont need a reason for their hating
 
Not that it's necessarily a religious thing, but its something that those freaks should be happy about
 
the fact that they picket around with signs that say "thank god for dead american soldiers" makes me want to torture them in ways never before thought of or possible by man
 
By "sin" they mean "not acting exactly the same as me"
 
2:53 PM
As a semi religious person myself, I find them offensive. And its very hard to offend me.
As I was telling @voretaq7, if I die and they picket my funeral, I want to arrange for a giant group of monkeys to fling poo at them.
 
@ShaneMadden That's a surprisingly common definition for most religious people.
 
@voretaq7 They're a bunch of outspoken religious nutters - does anyone actually take them seriously? What they have to say, I mean. Myself, I think they're horrible people. (I couldn't think of a bad enough adjective)
 
I rarely tweet at people unless it's companies that i'm unhappy with, but I decided @margiejphelps needed to be reminded that she is scum.
 
@MikeyB I think they're funny!
 
2:57 PM
Any attention, positive or negative, they lap it up.
 
@voretaq7 In a sad, pathetic kind of way, yeah. Some of my favorite stores are people taking the piss out of them.
 
It's what they live for. Telling them they're worthless pieces of shit just makes them more resolved that they're doing the right thing.
 
Also I want to see The Right Reverend Freddy Phuckface in drag. I'm sure it's happened. I'm sure there are photos.
 
Kevin Smith with Red State got them good. Even got a little chat with the family members that aren't with the church.
 
"Can you give me an update on this ticket?" Me: yes, your shit is broken. I'm getting to it.
2
 
2:59 PM
@Holocryptic You owe $350. Most of that is your other unpaid parking tickets. You can have your spreadsheets out of impound when you pay the fine.
 
@voretaq7 Heh, I got a citation warning the other day for my car. Fucking county registration bs
 
@Holocryptic COUNTY registration?
Dude. Where you live sucks.
 
wtf is county registration?
 
@voretaq7 Yeah. What sucks is I bounce around between counties when I move. Makes registration a pain in the ass
 
You're not on some kind of special offender registry are you?
 
3:02 PM
NYS said "There shall be ONE hugely inefficient bureaucracy for the management of all things motorized and vehicular. ONE shall be the number of the DMVs and the number of the DMVs shall be one!"
@BartSilverstrim he IS a sysadmin. we're all special and offensive.
 
You register with the county in Colorado too. County for plates, state for licenses. Not terribly efficient for office count.
 
So I didn't do it this last time. And got caught by one of the night-time-have-nothing-better-to-do-cops-so-Imma-roll-around-ticketing-cars-parked-on-the-road-at-1030pm.
So now I have to register is (somewhere) and make sure all the back taxes are paid or whatever
pain in the ass all around
 
And I thought that Pennsylvania registration/inspection laws were BS.
Though, I did come from Massachusetts where it's basically a free-for-all.
 
The county that I'm "registered" with now, actually did away with registration, which is why I kept it. But the county I'm currently living in still has it.
And the worst part (for me) is that I'm planning on moving in Jan/Feb
It's all so much bs
 
Dude. They don't even have license exams in that state.
Here's a 3x5 index card with your photo on it. Cut it so it fits in your wallet.
@MarkM I think your "safety inspections" consist of making sure all the holes in the hoopty have duct tape over 'em.
 
3:07 PM
Haha, they do have license exams. I drove around 1 city block when I was 16. No parallel parking, only diagonal parking, and the cop said "well, you were going a little fast but you had control. congrats on your license."
 
THEY DRIVE ON THE GODDAMN SHOULDER.
There are signs ENCOURAGING you to do so!
 
In the defense of the state of MA as it relates to driving, people in PA drive like little tiny pussies when it snows. Driving in MA really makes you hate drivers everywhere else.
Haha, they do certainly encourage you to drive on the shoulder, but that's pretty much only in Boston
And that's because Boston was built in 120000BC before the wheel was invented, so the roads aren't designed for anything wider than two cavemen and an antelope.
 
@MarkM no, driving in MA has made me loathe driving in MA. Y'all need to learn to drive in New York, where n(cars) > n(people). You learn important life skills like DRIVE PAST THE GODDAMN ACCIDENT YOU CANT HELP THEM THEY'RE DEAD!
Our state police are pussies. They won't shoot the rubberneckers.
 
My cousin just divoced a meat head MA statie. I'm afraid to travel on the mass pike now.
He's only 3 feet tall, but he has a gun.
 
@MarkM there are non meathead MA troopers?
 
3:12 PM
Fair enough
 
I mean here in NY we have a few cute ones, and the one chick in the Camaro interceptor (she SCARES me...), but they're mostly wash-outs from pro football...
 
Do the NYS Troopers do anything besides camp out on the expressways/thruway and give out Good Driver Awards?
 
Ugh, and I'm driving up to NYC on Sat, too....
 
@MarkM Mr. SSH-MITM-Paranoia now wants consulting services to re-architect his app. I. want. to. hurt. him.
 
Goddamn you @voretaq7 When I give an incomplete but clearly rep-whoring answer, do not provide a real, complete, and detailed answer to the same question.
3
 
3:22 PM
I like MI, good drivers for the most part; it does make you hate drivers from other states like Ohio, where 60mph is "fast enough".
 
@MarkM I need to rep-whore too!
@MarkM You're just upset because my rep-whoring shows more leg :P
3
 
It's not rep-whoring if it's a complete, non snarky and fully explained answer.
 
Sam
It must suck to tax a car in the US, over here we can get tax online and we buy plates when we buy a car and that's it!
 
It's an actual answer at that point, and everyone knows that people from chat don't give real answers.
 
@ChrisS There are parts through WV and Ohio an PA where I want to scream when I go to MI
 
3:24 PM
@MarkM oh please, your answer barely registered .001 TomToms on the snarkometer
3
@MarkM ...unless we tell you how to do it on AIX
 
Brb, I'm gonna go suggest that the user run their service from my smart phone
 
hmm. perhaps I should advise him to ditch SSH and use TN5250
 
@Sam Meh; it's only ~$70/y for a typical car. And it's a good excuse for them to make sure you have insurance (most states require; several have no-fault insurance)
 
Security through "Hmm, the protocol analyzer has no fucking idea what that is"
2
 
@Sam Depends where you live - where I'm at, I can pay online.. so just one extra trip to the bureaucracy-o-thon.
 
3:26 PM
@ChrisS Ours is like $90/yr every 2 years, and your insurance company has to notify NYS if there is a lapse in coverage.
 
@voretaq7 TN5250.... the horrors... ::shudder::
 
but hey - we don't require a vision test anymore.
If anyone needs me I'mma be drivin' around without my glasses on.
 
We require a vision test. We need to require a response time test.
 
(Also, when everyone asks me why I think the FAA really REALLY needs to keep the third-class medical, and why drivers-license-medical for sport pilot scares the everloving fuck out of me - it's because in 14 states there is NO VISION TEST.)
(that "14" number may be wrong, I got it from Newsday, which is not known for its thorough fact-checking)
 
My driver's ed program had a response time test. It was just a box with two pedals (one for gas and brake each). You started with your foot on gas and when a light came on switch to brake with ~200ms (which should be absolutely no problem for a 16 year old)
 
3:29 PM
@voretaq7 Did you see super-secure-vps-guy's latest comment on my rep whore?
at this point I'm willing to sacrifice availability for confidentiality and integrity. If I were to host locally, I could require a specific CD ROM to be inserted in order to allow the admin to operate. This would greatly improve security. But is there anyone willing to sell me a proxy with DDoS and 24/7 network monitoring? How is that called?
 
He wants to buy a DDoS? Shit, I can find people who do that for free
 
what question is this?
 
0
Q: Integrity, Confidentiality and VPS

MascarponeI need to host a sensitive financial software somewhere. Given that I don't have the resource to locally host the software locally, I'm oriented toward a VPS or Dedicated server. How can I be sure that the hosting company doesn't steal my SSH password with a Man In the Middle or 0day attack? Is...

 
0
Q: Integrity, Confidentiality and VPS

MascarponeI need to host a sensitive financial software somewhere. Given that I don't have the resource to locally host the software locally, I'm oriented toward a VPS or Dedicated server. How can I be sure that the hosting company doesn't steal my SSH password with a Man In the Middle or 0day attack? Is...

beat to the punch :(
 
wow
also, homework guy is mad
-1
Q: repairing an OEM version of Windows XP Pro with a retail version?

TimIf you repair an OEM version of Windows XP Pro SP3 with a legal/100% legit shrinkwrapped retail copy of Windows XP Pro, which, if any, of the following statements are true? The resulting O/S will be a retail version with a new retail product id. You will need to reactivate before you can boot t...

 
3:45 PM
@Shads0 I left a comment pointing at the FAQ. My good deed for the day.
 
aye, beat me to it
 
"Re: backups succeed with exceptions
This would seem there are more locked files, or users are keeping the files
open during backup and the VSS is failing to open them.

We have added more handling for this as Microsoft made some suggestions on how to handle this.

We will keep you posted on a release."
 
@Shads0 faq-pointing protip: if you use [faq] in a comment, it auto links to the faq.
 
How can you fuck this up? VSS has been around since 2002 ffs
 
ooo shiny
 
3:47 PM
@Shads0 same for [meta] and some others
 
danke
 
O.o looks like it works in chat now too
 
ill be sure to add that to my repertoire of snark
[tits]
damn, that doesnt work
 
That you'd have to do a tag for :)
 
3:49 PM
teach me your ways, o glorified ones
 
tag:word inside of square brackets
 
@MarkM oy...
 
I wanted to suggest running everything off of a live CD, that way it can be as secure as the keychain that the user keeps it on
Then I thought better of it. Your TomTom comment is weighing heavily on me.
 
Well, a smartphone handcuffed to your arm would be some good physical access control.
 
yep
 
4:02 PM
0
Q: Is it possible to work out exactly when a domain will be transferred?

RD.I know there are expiry times for the dns records. But what are they called? Where re they stored? Are they different for each country?

does that question make any level of sense to anyone else?
 
No, he's all over the place
 
@MarkM USB stick on a keychain FTW
 
Are they different for each country?
 
@ShaneMadden That part seems to be asking about the TLD server's refresh cycle
or perhaps the TTL on the NS records it gives out
someone gently coerce him into writing [N] questions addressing the [N] issues? If I do it I'll make him cry
 
Bah, @MarkM beat me by 25 seconds.
 
4:05 PM
BOOM
Like how I sneaked "and why is your accept rate only 25%" in there?
 
thats OK I can upvote BOTH comments :-)
@MarkM "Because nobody ever answers my [incoherent] questions!"
 
@MarkM I certainly did.
@voretaq7 s/incoherent/cpanel/
 
@voretaq7 people have answered his incoherent answers, though.
 
Yeah - only counts against accept rate if there's an answer
 
aw man, rep capped :(
Well, I'm done helping to herd the retards for another 9 hours or so.
 
4:08 PM
@MarkM Same. Stating the obvious on RAID-0 has replaced stating the obvious on trans-Atlantic file transfers for my rep cap action.
 
I saw those answers.
I laughed.
 
We're using CloudFlare for DNS which allows us to use a cname the domain root.
Just because it's allowed, doesn't mean it won't break things...
0
Q: Mail bouncing when using a CNAME for domain root and load balancing

Jonathan7413We recently moved to EC2 and started using amazon's elb for load balancing. We're using CloudFlare for DNS which allows us to use a cname the domain root. However, we occasionally have people tell us that our emails are bouncing with some variation of the following error: first.last@ourdomain....

 
4:23 PM
user image
5
 
@Holocryptic You've been spending too much time with RFC 2317. I told you it was a bad influence!!
 
Well, you know.
 
Back in a few. Connecting to the VPN from which no internet bound packet escapes!!
 
@ShaneMadden While it might break things, I'm not sure if it should or not...
 
@ChrisS That error he's got is an attempt to send to the A record of wherever his CNAME is pointing to, it looks like. I believe MX lookups are supposed to obey CNAMEs, but I might be wrong..
Anyway, BRB.
 
4:33 PM
@ShaneMadden Yep, RFC1034 §3.6.2 says that you should have only a CNAME by any give name, so example.com IN CNAME asdf.aws.xyz would be valid as long as it's the only record for that domain. A MX RR lookup should return that CNAME and the resolving server should retry the MX lookup at the new alias.
It would not surprise me terribly if some resolvers do not obey the RFC.
 
@ChrisS MX records and CNAMES do not play well together.
 
@voretaq7 But they should...
 
@ChrisS but they DON'T :-)
 
Sounds like it's working, but his CNAME points to that AWS load balancer, which certainly wouldn't have his MX records.
So any SMTP server that's successfully resolving his MX records on his CNAME'd root is doing it wrong.
 
@ShaneMadden Don't blame the SMTP server - it just asks Mr. The DNS Server for the MX record.
 
4:43 PM
@voretaq7 But I like blaming SMTP. It's such a good scapegoat!
 
@voretaq7 Figure it out. His setup is violating the RFC, the "failing" servers are actually RFC compliant.
 
@ChrisS yes they are.
 
Or we can blame cloudflare for letting him put a CNAME and MX records on the same name.
 
and I don't like blaming SMTP. I want to go back in time and kill Allman before he can release sendmail.
 
Insufficient idiot-proofing!!
 
4:47 PM
@ShaneMadden I'm surprised their NS will load the zone.
BIND would throw a hissy
 
Nevermind that; reading skills fail.
 
Ok, now I'm curious. Setting up a BIND server to break.
 
@ChrisS we see nothing!
@ShaneMadden If you have a CNAME and something else it'll refuse the zone ("CNAME and other data error")
 
@voretaq7 Ahh. Thanks for saving me the effort then :)
 
You can just run named-checkzone on a non-conformant zone file
uses the same code BIND uses to decide if a zone is RFC-Compliant enough to serve :)
 
4:50 PM
BIND chokes on the invalid setup
06-Oct-2011 12:50:11.670 general: error: dns_master_load: master/example.com:34: test.example.com: CNAME and other data
 
User: "I forgot my password, can you tell me what it is"
Me: "No, but I can reset it for you"
User: "thats dumb, what kind of it guy are you that you don't know my password?!"
10
 
Boo, Jeff didn't blacklist or synonym
 
@ShaneMadden it takes until the next rebuild to do it
 
Ah ok, I'll manually re-tag serverfault.com/questions/319096/… then
 
Tell him if you could lookup passwords there would be no guarantee of non-repudiation.
Further, if he doesn't know what that means, he has insufficient understanding of your job to express a substantiated opinion.
 
@Iain Gotcha
 

« first day (390 days earlier)      last day (4590 days later) »