« first day (988 days earlier)      last day (3993 days later) » 
00:00 - 17:0017:00 - 00:00

12:22 AM
@JoelESalas yeah...
so?
 
@Adrian Oh yeah, Wegs is the grocery store. You wouldn't believe the remodel of the East Ave store -- it opened last weekend.
Google Maps currently has a pic of the beginning of the project. The new store swallowed the old one, and expanded east to Winton Rd.
 
12:52 AM
@jscott I really miss my Weggies. The stores all look like 7-11s in comparison. :(
 
Yes, become the system administrator and run your server yourself. We're generally unable to help in situations where you are not the server administrator. — Michael Hampton 10 secs ago
2
 
 
2 hours later…
2:29 AM
hmm, that doesn't work
2
Q: Should I reject email on SPF and/or DKIM failures?

esc1729I’m administering a mail server (cPanel/WHM) running Exim. It handles normally a few hundreds incoming emails per day for our customers. I’m not sure if I should reject SPF and/or DKIM failures for incoming email. This obviously depends on the percentage of misconfigured mail servers out there. ...

Totally covered by the canonical question. However, I'm debating adding a little blurb in there about when it's useful to report spam to the abuse@originating.domain address.
 
2:49 AM
@FalconMomot It already went CW from too many edits, so have a ball.
Though I might remove it if I think you're completely wrong and stupid. :)
 
@MichaelHampton really the only time to do it is if you notice that they are hosting with a reasonably trustworthy hosting provider, and have leaked that information in the headers
like, I think reporting to the abuse addresses of consumer ISPs (especially foreign ones) is a waste of time
 
@FalconMomot I can be reasonably sure that the IP that connected to my mail server is where the mail came from, and I might send it to abuse@ there.
Though I think I'd rather see a good canonical Q&A about how to read mail headers instead, and then point to it.
 
Yeah, that is what I was thinking also
I'd love to see automated reporting and processing of reports become the norm someday
 
Good point. Write it and rep-whore^H^H^Hpost it here for our edification.
 
2:54 AM
Doesn't SpamCop or somebody already do something like that?
 
well
@MichaelHampton my problem with that kind of thing is that you basically spam the abuse address by proxy
 
I'm writing my first web services everyone, hold me.
 
which I think might be part of the reason consumer ISPs are completely unresponsive to abuse complaints
 
@FalconMomot Which is also why they're blackholed.
 
(the other reason being that they have basically no incentive to respond to them unless they are threatened with depeering)
yeah, it's really easy to filter that spam, so it's a waste of time to report it
 
2:56 AM
There's nothing to report anyway; postfix already rejected it.
 
I should probably get that going on my network
 
Email?
 
currently I have spamd flagging them all
 
I reject all kinds of crap before I ever let SpamAssassin look at it.
 
I have a massive excess of CPU and ram on my mailserver, so it really isn't a problem (unless spamd fails for some reason)
 
2:58 AM
I'd point you at my list, but I think you've already read it. :)
 
I recall something like that.
you know, it's really a pity that so few countries have corporeal punishment. I'd love to see people caught sending spam get stockaded and people allowed to give them the bastinado.
 
You've earned the "ssh" badge. See your profile.
 
 
1 hour later…
4:11 AM
@FalconMomot I'm pretty sure that very few countries offer anything but corporeal punishments. The conservative churches on the other hand, handle eternal punishment rather well...
 
bah, anything less than a public flogging is simply dissatisfactory.
er, unsatisfactory.
 
@FalconMomot sorry, was a bad pun. corporeal vs. corporal.
 
Aah! Can you tell I can't type today?
 
Developers.
So... today's developer horror story. Drupal web site wants to integrate a forum. In order to theme it the same as the web site, they ... call curl to load the main web page at runtime, TWICE, and then insert the content of the forum page into the returned data.
 
@FalconMomot And the definitions are actually quite nuanced. I'd come to the false conclusion that you might be french based on the username. For which I sincerely apologize.
@MichaelHampton WTF?
Isn't it just easier to use the damn Forum module in Drupal?
 
4:16 AM
@Adrian Yeah, someone visits the forum, behind the scenes it loads the main Drupal site twice. Hitting everything hard.
It was an old legacy SMF 1.x forum.
(Still is.)
 
@MichaelHampton dear god. those things were pigs in the first place.
 
Oh, there's more to this story.
So I hacked their code to load the web page, not from curl, but from Drupal's own cache. Only, now the Drupal cache is no longer caching the home page...
Fortunately I will get to yell at all the responsible parties in person next month.
 
@MichaelHampton Hmm. What's the failure mode.
 
@Adrian Two hits to Drupal for every hit to the forum, resulting in performance issues...
 
@MichaelHampton Got that part. The not caching the home page part.
 
4:19 AM
I dunno. I don't touch the Drupal stuff. I just finished emailing the developers and I'm waiting to hear what they have to say.
Which will probably be sometime Tuesday.
 
@MichaelHampton Ah. Oddly, both of the "DBAs" that I worked with at $job[-2] moved on to very prestigious jobs with Drupal constulting companies. Too bad they eventually replaced those two with a clueless induhvidual.
 
Fortunately these developers aren't too bad. Though that hack for theming the forum was... ugly.
 
@MichaelHampton Yeah. In-house PHP Devs?
Well shit. CentOS 6.4 DVD iso has errors.
 
It's a small firm that one of my clients has to develop the site.
 
@MichaelHampton Ah. Yeah, I guess PHP Devs run the gamut just like all the other Devs.
I figure I've got a leg up due to know quite well just exactly how much I don't know.
 
4:26 AM
@Adrian Like I said, generally they're not bad. They have yet to cause an outage or destroy any data, for instance.
And you know how I hate developers. If I say one's generally not bad... he's probably quite good.
So I'm probably going to "fix" this with some varnish or something.
 
@MichaelHampton makes sense. Especially since the theming isn't changing constantly.
 
@Adrian It hasn't changed in.. three years?
 
If it hasn't changed, why haven't they hacked a matching theme together for that forum?
 
@Adrian Even if it was, it's preferable for people to get an old theme instead of nothing
 
@Adrian The theme designer, and the guy responsible for that ugly hack in the first place, is no longer on the project.
 
4:36 AM
@MichaelHampton Yeah. Ugly code: The gift that keeps on giving. Ulcers, that is.
 
@Adrian Well, supposedly it was temporary, until a permanent matching theme was developed to correspond with the upgrade to SMF 2.x... which has yet to happen.
 
@MichaelHampton Ah, yes. The old 'better ROI if we wait' routine. That's how $job[-3] ended up keeping around a single-threaded Perl-based data loader for 10 years instead of taking the 6 weeks it would need to write a C-based loader that ran 37x faster.
 
Yeah, I think it came down to money, or lack thereof.
Oh, and SMF 1... even if you aren't logged in, it sends Cache-Control: private. Guess what this makes varnish do. Or should I say not do.
 
Heh.
 
I can work around that in VCL, but ... what a pain.
Wait a minute. Where the hell is @ewwhite?
 
4:43 AM
@MichaelHampton Sleeping?
Well that's stupid. VSFTPd cannot listen on IPv4 and IPv6 sockets at the same time. Two different daemon must be run with two different config files.
 
@MichaelHampton: why're you even running 1? upgrading, IIRC was pretty painless
 
@JourneymanGeek Don't ask me. I'm not the developer.
 
It always amazes me how people are frequently afraid to even try cloning a copy of a box and doing the upgrade in a Dev host to see what might break.
 
@Adrian Really? What's to be afraid of there?!
 
@MichaelHampton: fear itself!
 
4:52 AM
@MichaelHampton Beats me? Not wanting to know bad news?
I sure got the horns when I informed our common supervisor about 4 years when I tested out the disaster recovery and found that there were about 12 missing steps that existing only in the lead DBA's head.
That clueless induhvidual got promoted to be the boss. And still haven't replaced any of the Ops people that have left.
 
@Adrian Have they had their disaster yet?
 
@MichaelHampton Hmm... what's up?
 
@ewwhite Haha, I was just telling spooky stories by the virtual campfire and noticed that you weren't here anymore.
@ewwhite Oh, in that case, you didn't miss anything important.
 
@MichaelHampton Not yet. They're still running a 6 year old Fedora Core 8 server with an 8 year old DAS SCSI160 array for their main file server. So it's going to happen in the next 18 months, I'm sure.
 
But I'm back and working on VMware stuff again now.
 
4:56 AM
You can't run 1st Generation SATA drives for 10 years non-stop without losing an array.
 
@Adrian Should I get married at some point, or can I just cruise along as a bachelor
 
That array is "functionally obsolete"! All it needs now is an oversized truck to hit it.
 
@JoelESalas FFS, don't get married.
 
@Adrian roger that, over and out
 
@JoelESalas you get a bike?
Don't @wesleydavid us.
 
4:58 AM
@ewwhite I realized I had no way to get it home
 
@MichaelHampton No shit, eh? Of course, the public-facing Fedora Core 7 web server with a connection back into their main database with cleartext usernames and passwords didn't faze them either.
and HIPAA data.
 
ooooh, hipaa
 
BUSTED!
 
@MichaelHampton I'm going to take a stand about some of the bad practices at work
going to the CEO
 
@ewwhite All the way to the top then?
 
4:59 AM
Yes. There's an open-door policy.
 
Nice.
 
Good luck dude
 
@ewwhite That's pretty aggressive
 
But I had a realization during our storage meeting yesterday
 
Quite a few places that was actually an open trap-door policy.
 
5:00 AM
+1
 
I'm not afraid of being fired.
It's happen so many times ;)
 
I suppose it would beat having your resume stained by gross incompetence.
 
@ewwhite Join us
 
@FalconMomot I've been fired ~5 times.
but once it's happened, you lose that fear... I have a good consulting business.
 
5:01 AM
@ewwhite I've been fired ~0 times.
it would be nice to start a consultancy someday.
 
@MichaelHampton so the main issue I'm going to attack with is the HP versus Supermicro thing...
As I see it, we could probably GIVE the hardware away and still be in great shape...
what's your argument about capEX versus OpEX?
 
Give away the old Supermicro hardware, or the new HP, or what?
 
@MichaelHampton Let's say client signs on... needs 1 server...
$4000 for the server.
that's our capex...
but our policy is that we cover capex within 3-4 months...
 
High churn, then?
 
so client would end up paying $1000/mo. for their 24-month term
so, people typically sign 2 or 3 year contracts
so, I went CRAZY tapping resources to make HP cost the same or less than SUpermicro....
but given that, it doesn't/shouldn't matter, right?
 
5:05 AM
Same price, better hardware, you can't really lose.
 
so I've got them to buy about 90 HP servers for some high profile clients..
but Supermicro still slips through
 
Especially when the better hardware enables greater operational efficiencies throughout the enterprise.
 
and I think that, having introduced them to MY hp source, there's no excuse to buy another supermicro
 
Shit, I just used buzzwords.
 
Do you think better gear allows more operational efficiency?
This is something I've never had to fight because people just KNEW to use warranty-backed gear
 
5:07 AM
Absolutely. Think of all the stuff that won't require somebody to go visit the machine anymore, for instance.
ILO means Integrated Lights Out, and that means nobody's supposed to be anywhere near the servers. That's hard to do when you have Supermicro crap that half of them don't even have IPMI cards.
 
well, that depends on some instruction on how to use...
We have IPMI on a good number of systems...
but it's spotty and IPMI has limitations
 
OK, so you need to throw in some HP training.
 
right...
 
@MichaelHampton: manager types lap up that kinda thing ;p
 
but really, cost is so not an issue here... I mean, we make a lot off of the gear.
but to know that some critical things are hinging on some fragile supermicro gear...
 
5:10 AM
@ewwhite Would you also advocate using real network devices instead of linux?
 
@JoelESalas we use a lot of Cisco ASA...
and Pix :(
but then yes, there are a lot of Linux firewalls...
I don't understand that.
 
How about the ability to resolve issues more quickly, without having to leave your desk and fiddle with defective KVM switches?
 
But I think Linux firewalls are a cop-out... I'm sure there's a place for them.
 
@MichaelHampton And KVM switches do fucking STRANGE things when they start to go too.
One at $job[-2] starting bleeding keystrokes through to random servers that weren't connected to the keyboard.
 
@ewwhite Endpoint firewalling, of course.
 
5:13 AM
@MichaelHampton So I'm trying to list all of the deficiencies...
@MichaelHampton host-firewalling, yes.. but we use HA pairs of cheap servers as Linux firewalls.
 
Not being able to monitor the hardware status, leading to surprise hardware failures that have the client yelling at you on the phone?
 
@MichaelHampton good point... I've had temp issues, fan issues...
we use Adaptec and LSI controllers... so they have RAID software and tie into our SNMP.
but it's nowhere near as slick as hpasm or omsa
here's one...
a client requested more RAM for oracle.
128GB to 192GB RAM per node
 
Sounds like Oracle, all right.
 
and we put the RAM through burn-in...
"The Brazzers RAM is being burned-in today... we'll get it installed in the cluster tomorrow night"
and I don't feel like I need to do that with HP
unbox and install
 
Has it been necessary to "burn in" RAM at any time in the last 20 years?
 
5:19 AM
@MichaelHampton I've had RAM go bad on HP...
 
@ewwhite During burn-in?
 
From: root <root@lol.net>
Date: Mon, 1 Dec 2008 22:22:19 -0500
To: <systems@ewwhite.net>
Subject: HP Insight Management Agents Trap Alarm

Trap-ID=6056

ECC Memory Correctable Errors detected.
@MichaelHampton naw, not during burn-in
maybe a year or two after installation
once I ignored the ECC alerts and the DIMM was disabled after 3 months
 
@ewwhite One is cosmic rays. Two is bad RAM...
 
also we deal with raid battery failures constantly
which I think is a function of poor server chassis cooling
 
@ewwhite I wouldn't think those batteries would just up and fail. But if they're overheating...
 
5:22 AM
and controllers with 1 year battery lifespans
 
And yea, Supermicro... Do they even have airflow in those servers? Baffles and such?
 
@MichaelHampton they seem to have poor airflow in the ones I see.
but we're assembling them.
so who knows?!?
 
The server sure doesn't know.
 
its IPMI does!
but we don't monitor it ;)
THere's potential here.
some great business on the horizon...
hard working staff.
but they work stupid
 
Why doesn't it bother the people upstairs?
 
5:27 AM
@JoelESalas I think everyone is from here... never seen anything else
I think your situation was a stupid hesitation
but I'll tell a story...
we need temporary storage of ~18TB to store the data sitting on our EMC VNX units.
basically to wipe the VNXes and start over
because they're so jacked up that there's no way to fix them
so given that we sustained several EMC VNX hiccups that almost destroyed client data... what would YOU use for 18TB of NFS VMware storage... it needs to last 3-4 weeks while we rebuild the EMC units.
 
I'd hand-assemble a Supermicro server to...
 
well, yep...
that's what came out during the meeting
TWO 2U supermicro boxen with 24 bays, 900GB SAS disks, LSI Cachecade and running Linux NFS
I stopped the meeting and said that THAT WAS BULLSHIT
I think that it's silly to build something
why take on that risk?
because my counterpart is too much of a tinkerer to recognize that there's a time and place to be MacGuyver...
 
Oy. I'm used to having to do janky things, but even I'd be trying to figure something better out.
 
I called PogoStorage and asked them to spec a Nexenta unit
and a QuantaStor unit
at work... "But we've never used Nexenta here... how will we fix it?"
 
With your brains?
 
5:33 AM
Or the fucking support contract.
 
I mean, I'm not even trying to build a nexenta box.. just buy one with a support contract, hand-picked and tested parts... sold as an appliance
yes, it's $50k...
but it's for a client who pays us $300k/month.
Eat the cost... we effed-up their EMC san
any other suggestions?
:)
but that's the thing... my counterpart at work won't agree to anything unless he can get his hands on it
so my knowledge/skill/experience is basically ignored.
 
Fine, let him play with it all he wants... AFTER it's no longer needed for this project. :)
 
@MichaelHampton well, is my recommendation of ZFS silly?
 
@ewwhite And he's probably defensive because he's backed into a corner. Seriously, how many positions are there left out there where you're still dinking with hardware? His days are numbered and he knows it.
 
@ewwhite Seems fine to me.
 
5:38 AM
How do you combat the, "you're the only one who knows it" argument?
 
@ewwhite "It's not that tough to learn"
 
@ewwhite explain that hobbyists do it that way, and the places you've worked where it was done properly. And if they whine, point out that they should be interested in cross-training, not bitching about it.
 
I want to just say, "everything we've done so far has ended in shambles... your way isn't working"
 
Then you need to start learning, and fast.
 
but my boss and this guy don't want to agree to anything until they get a chance to beat it up
 
5:41 AM
This is not a field for people who do not want to keep up with changes.
 
I mean, they try... I was in NY last week and my counterpart spent 3 days chasing down an LSI RAID controller + Crucial SSD + Linux problem
and I'm like, why bother... piecing that stuff together is janky in the first place
he was building custom initrd's for RHEL and such to get the combo working
@Adrian is right in that the era of massaging snowflake systems is over
 
@ewwhite That's the kind of crap they still do at $job[-2], if they can even hire that much expertise.
 
Hell, I can do that shit...but I avoid it whenever possible.
 
@MichaelHampton we all can... but that's for learning on your own time.
 
@ewwhite yeah, my employers would look at the timeclock and see $3600 in paid time that got wasted on that escapade.
 
5:48 AM
Oh, I don't have that much time to waste...
 
3 days is most of the retail cost of a news xSeries box. Probably cheaper with HP.
 
or if you have some other constraint... I mean, I had to manually patch super-fancy NIC card drivers in for trading systems... but getting that working was really important. THis guy was trying to get a janky solution working that would possibly fail miserably.
so this is the same guy who set up the EMC VNX...
and the hadoop node that failed
and who specs the supermicro gear.
and handles OS imaging...
and R&D...
 
@ewwhite And Puppet?
 
I think you've found the source of the problems at this company.
 
and testing storage units
@JoelESalas no, we have a good puppet guy
 
5:51 AM
That's pretty important
 
@MichaelHampton I think it's bad leadership... since a sane person wouldn't let a guy like that operate without documentation/oversight
sign multi-million dollar contract with healthcare client... give the build of the SAN to this guy?
psssh
@JoelESalas they messed up with you
 
YOU'RE
FIRED
 
he's a good engineer in many ways
but hasn't ever seen any other organization
I pride myself on having been in a lot of environments... but I also like canned solutions.
Deep-down, I'm lazy.
so I'm headed out there next monday...
I'm having some new HP servers shipped out to my office ahead of me...
so I can make the case visually to the CEO...
"look at this... look at that... This is why the HP is better. DO you want your $300k/mo client running on THIS or THAT?"
but for me to have to tap my own resources to get evaluation equipment into the office... it's sad.
SO the next project is testing a new Violin Memory SAN device.
 
6:07 AM
>_>
Gee thanks, now I feel old ;p
 
Infoseek for the win!
 
Gopher!
 
@JourneymanGeek You are.
 
granted, my first internet connection was teleview, which was apparently lynx over a telnet wrapper of some sort
"A later development from Teleview provided an interfaced connection to the Internet, subscribers were given access to the Internet via a text-only terminal; email was accessed by Pine, and webpages were viewed by Lynx. Subsequently, Teleview was rendered obsolete, and SingNet started offering to the Internet via SLIP/PPP over modem."
 
Yup, ancient.
 
6:18 AM
lol
 
Your fur is all white.
 
>_>
is not!
 
6:34 AM
 
G'day
Holiday weekend all round eh - only one flag thrown so far today
 
* raises up the green, white, and gold, and blows up some cars *
oh, you meant moderation flags :P
 
blah, 3 1/4... whippersnappers! ;p
 
@JourneymanGeek 3 1/2 sirley ?
 
6:42 AM
...
yeah
confused them with 5 1/4, which I have used back in the day
not used 8 inch or tapes ;p
 
@JourneymanGeek I have a box of verbatim hard sectored 8" disks somewhere
 
(current desktop dosen't even have an optical drive)
Been meaning to add a br drive, but not really needed it, and I've had other stuff I wanted first
 
7:06 AM
Morning
 
7:48 AM
'ello
I have a philosophical question for you that's been bugging me for a while
Who put the bomp in the bomp bah bomp bah bomp?
 
8:15 AM
morning all
@Dennis it was this guy
 
@dawud I remember that one :)
from back when tmf existed and aired music
 
@DennisKaarsemaker does booking.com have any known issues with safari on an ipad 1 (latest iOS available ) ?
 
@Iain not that I know of, though with our development speed there's always a chance of bugs. What's the problem?
(And all our macfans are of the apple-owns-my-creditcard type, so they won't have ipad 1's anymore)
With the weather being what it is, hell yeah I want to go to someplace warmer like ibiza...
 
@DennisKaarsemaker I suspect it's my wife rather than booking but apparently it keeps kicking her out (been going on for a while too)
I just thought I'd check
 
hmm, you mean she keeps getting logged out? App or website?
We had some session problems the other day on m.booking.com but not with the app
 
8:24 AM
@DennisKaarsemaker I'm not really sure - she says safari - I'll grab it later and have a play
 
@Iain if it's safari, make a note of the reference id at the bottom of the page. Then, when she gets kicked out check if it changed. If it does, your session was utterly lost. If it does not, some timer kicked her out.
Also, there's 2 authentication levels: one where you see yourself logged in at the top and get personal recommendations, and one where you can make bookings. We do throw people to the lower auth level on inactivity.
 
roger
 
which means reentering your password when you get to the actual booking
 
8:37 AM
I created a VM with Server 2008 R2
installed DC promo on it
but not sure what details should I put in for static ip address
can someone assist me please ?
currently my settings are,

IP 192.168.1.15
Default GateWay 192.168.1.254

DNS 127.0.0.1
now I am getting 404, 407 and 408
0
Q: DNS settings got messed up

Muhammad RajaI created a VM with Server 2008 R2 and made it a domain controller using DC Promo but not sure what details should I put in for static IP address. Can someone assist me please ? currently my Virtual Machine settings are, IP 192.168.1.15 //i also tried 192.168.1.124 Default GateWay 192.16...

 
9:29 AM
Is anybody out there?.........*tumbleweed*
 
thanks for clarifying. just wanted to be certain
 
 
2 hours later…
11:48 AM
Hi again, if anyone can help me with DNS setup please, I updated my question now/
 
@MuhammadRaja: you might want to read the room topic before you ask again
 
@JourneymanGeek does it says that one shouldn't talk about DNS here too ?
 
This is NOT a place for 'Live Support', ask on the main site. // If you type in your password it will show as stars!
 
******* ah, indeed
 
hunter2
2
 
11:58 AM
darn!
 
@DennisKaarsemaker Never said it is.. and I already asked on main site, chill out people
 
@MuhammadRaja that's the room topic...
and asking on the main site still doesn't make this a place for live support. Not even dead support on dead days like this..
 
Lol I realized
 
@MuhammadRaja I'm adding a comment to your Q, let's try sort it out
 
12:19 PM
arggh
argv, that is.
 
 
1 hour later…
1:24 PM
ESXi server went down. Power cable slipped out.
(redundant power supply not plugged in)
 
@ewwhite sadtrombone.mp3
 
this saddens me
I couldn't get ILO info because the effing ILO went down, too!
 
well yeah, no power no ilo
hmm, POE ilo would be neat
 
I'm running the ILO playback to see what happened before the reboot
@DennisKaarsemaker it would be.
I used to use Compaq RILO cards...
and they had separate PSUs
 
Dan
2:15 PM
Getting absolutely done over by an old car today. Urgh
 
2:26 PM
who should i award my bounty to?
I don't love any of the answers. They all sound like network admins telling the systems people to do more work :)
 
@mdmarra what was the question?
 
13
Q: Why don't more organizations use inside-to-inside NAT or similar solutions to allow NAT hairpins?

MDMarraInside-to-inside NAT aka NAT loopback solves hairpin NAT issues when accessing a web server on the external interface of an ASA or similar device from computers on the internal interface. This prevents DNS admins from having to maintain a duplicate internal DNS zone that has the corresponding RFC...

 
@MDMarra You asked for the other side's perspective. You didn't ask them to restrict answers to those you would like. :)
 
@MichaelHampton now give me teh codez plz
 
I don't fear NAT, I hate it. — Michael Hampton 24 hours ago
 
I don't administer our firewalls - all I know is that in order to access a website (using its public URL) thats hosted in our environment from a machine within our environment, we use a NAT loopback policy on our firewall.
@Michael I was just thinking of that quote from yesterday.
 
3:07 PM
Not mentioned anywhere else, but there may be a perception that NAT loopback is a "consumer/SOHO" feature, rather than something an enterprise would use.
Interestingly, BCP 127 and BCP 142 say that routers capable of NAT MUST support hairpinning.
 
@MichaelHampton Yeah. I asked it poorly.
 
@MDMarra That said, if it were my bounty I'd probably give it to syneticon-dj
 
You can allow NAT u-turns without inside-to-inside NAT on a lot of devices too
I should have asked about that. People focused on the drawbacks on NAT, which was my own fault
But that wasn't the actual intent :(
 
4:01 PM
It's still a bad way to manage the network. Why place the onus on routers or firewalls when DNS does the job and can be controlled in a granular manner?
 
Supposedly the DNS can't handle it.
 
4:20 PM
Hmmm
Or in an environment like
My work... No NAT.
 
@ewwhite Must be nice.
 
4:51 PM
@ewwhite I know this is massively off-topic but it's a quiet Sunday - I'm building a new gaming rig in the next few weeks and I'm considering W8 for some reason I can't explain over 7 - I guess it's mostly in anticipation of 8.1 - which appears to be much better than 8.0 - any thoughts/considerations?
 
00:00 - 17:0017:00 - 00:00

« first day (988 days earlier)      last day (3993 days later) »