The Comms Room

Nathan C

22:00

ircd<->ircd traffic can be ssl encrypted as well

voretaq7

so someone on the server could expose communications between two parties.

TheCleaner

@MDMarra - excellent news on the new dirsync...we will probably deploy it...looks good and every little bit of "I don't remember that password!" will help.

voretaq7

@NathanC but that doesn't protect you from an attack originating on the server(s)

TheCleaner

I'll keep you updated on Intune

Dennis Kaarsemaker

@NathanC that's still not end-to-end. End-to-end means that the ircd operator can't give your messages to the NSA

M-x spook.

Nathan C

22:00

@voretaq7 If someone has access to the IRCd you have much more to worry about

TheCleaner

We are messing with Meraki's free MDM stuff as well right now

voretaq7

in fact an ircd tapped into the network (relatively) silently could be used as a nice NSA listening post

Matt Bear

we pay $5500 a month for O365... damn

voretaq7

@NathanC not if all I'm sending through it is unintelligible cyphertext :-)

Dennis Kaarsemaker

@voretaq7 you don't need OTR then...

Nathan C

22:01

and a server can't just "hop" onto a network uninvited :P

voretaq7

@DennisKaarsemaker that's what generates the unintelligible cyphertext (you don't think I'mma PGP encrypt EVERY DAMN MESSAGE do you?)

Nathan C

I've used IRC for years so I'm familiar with most of the inner workings heh

Dennis Kaarsemaker

@voretaq7 no, I mean you're already unintelligible :P

voretaq7

@NathanC all it needs is one operator to allow it on

IRC is still a community of mutual trust

Nathan C

@voretaq7 And configuration file changes. And, it notifies all operators of its link

voretaq7

22:02

also doesn't technically have to be a server - any client can act as a (more selective) tap.

MDMarra

@TheCleaner yeah, it's a straight upgrade. no downside

voretaq7

@NathanC but it's linked. And once it's in the harm is done

MDMarra

the only thing that bothers me is that they call it "same sign on" so you cant use a different acronym for it

voretaq7

that's like having a telephone that if your call was tapped it rings when you hang up and tells you.

Nathan C

Granted, there does exist modules that allow "listening" to private messages and the like, but if you're that paranoid then you'd use your own network

voretaq7

22:03

that's all well and good that you know now, but your bank heist plan is kinda exposed now.

Nathan C

because it takes maybe 10 minutes to set up a working ircd :P

voretaq7

@NathanC IRC is a very selective mux - you can get a lot of sensitive data just by having a few users idling in a few channels :P

Nathan C

Well, that's user error if they're exposing "sensitive" data in a channel and not private messages

voretaq7

@NathanC it takes maybe 20 minutes to lobotomize ircd to log all the things :P

@NathanC you can log *PRIVMSG too - just need one of the endpoints to be on your side :P

Nathan C

IRC does take a degree of trust, but it's used very frequently still for all sorts of things :P

voretaq7

22:05

@NathanC shady things :P

it's amazing what people will talk about on an unencrypted network operated by someone they don't know!

Nathan C

Then they're the idiot :D

Dennis Kaarsemaker

@NathanC look at our frontpage. The world is full of idiots

voretaq7

never underestimate the power of human stupidity.

Dennis Kaarsemaker

If only we could harness that power.

I don't need a prius, my car is powered by /r/sysadmin

2

voretaq7

@DennisKaarsemaker well... it would never reboot but it might crash horribly one day, and none of the locks work.

ewwhite

22:08

@mdmarra call my cell

MDMarra

sir yes sir

Dennis Kaarsemaker

@voretaq7 no, that's the Windows car.

voretaq7

@DennisKaarsemaker no that one reboots all the time. Usually when you're driving it.

(I WAS TYPING IN THE GODDAMN VMWARE CONSOLE! Stupid Windows!)

Dennis Kaarsemaker

@voretaq7 Ubuntu now does that too. The popup dialog after a kernel upgrade has no close button

fortunately there's xkill

voretaq7

@DennisKaarsemaker that's just an annoyance

Windows actually rebooted, without any warning.

Dennis Kaarsemaker

22:11

rofl

voretaq7

It decided installing its latest update was more important than whatever I could possibly be typing.

Dennis Kaarsemaker

sorry about your production exchange server but I really have to ~~reboot~~ take a beauty sleep now

Iain

@DennisKaarsemaker just now ?

voretaq7

(fortunately the FreeBSD VM on the other end had no such delusions - it sat patiently and waited for me to reconnect the VMWare console so I could finish what I was typing.

@DennisKaarsemaker to be fair I don't think the server versions do this. This was Win8

Nathan C

@DennisKaarsemaker Fair enough.

Dennis Kaarsemaker

22:12

@voretaq7 it just frowned and called you slow:P

voretaq7

@DennisKaarsemaker rm -r ... are you going to finish? should I just assume /* like all the other times?

Nathan C

@voretaq7 You mean rm -rf / --no-preserve-root?

Dennis Kaarsemaker

@voretaq7 I once made the mistake of doing dd if=/dev/zero of=/dev/sda

not that I didn't want to wipe the system

Nathan C

@DennisKaarsemaker kaBoom!

Dennis Kaarsemaker

but I hadn't swapoff'ed yet, so memory corruption

and dd was unhappy and finished prematurely (TWSS)

Nathan C

22:15

Linux unhappiness: cat /dev/zero > /dev/mem

voretaq7

@NathanC Fish!

Nathan C

heh

voretaq7

@NathanC no, I meant what I said. FreeBSD doesn't have this concept of "--no-preserve-root", it just says "Bitch, you can't remove /"

Joel E Salas

@voretaq7 That makes too much sense, I hate it

voretaq7

@JoelESalas Shut up and kiss the penguin.

Matt Bear

22:20

@voretaq7 yeah... the fucking sharepoint server did that to me the other day... server 2k12, rebooted without any way to stop it or delay the reboot

voretaq7

@MattBear . . . FAIL --- This is where the raw materials come from!

Dennis Kaarsemaker

"No user identifiable information is collected. Whenever we need any, we just ask the NSA."

A microsoft guy with a frightening sense of humour :)

voretaq7

@WesleyDavid!

►

Dennis Kaarsemaker

mail.python.org/pipermail/python-announce-list/2013-June/…

voretaq7

It's you!

Dennis Kaarsemaker

22:27

@voretaq7 -- youtube.com/watch?v=eoAcxJ0e26I is more like @WesleyDavid

stupid onebox. That's text, not a url

84104

@DennisKaarsemaker "Hello, you've reached the NSA. We know everything about you, including your reason for calling. Please hang up after the tone. TONE"

voretaq7

@DennisKaarsemaker lies. That was @WesleyDavid collecting from clients! :P

Dennis Kaarsemaker

@voretaq7 and mine is @WesleyDavid on the job :P

voretaq7

@DennisKaarsemaker prrrrrrobably.

Dennis Kaarsemaker

purrrrrrrrrobably

freiheit

22:29

@DennisKaarsemaker Got any of @WesleyDavid on a bicycle?

Dennis Kaarsemaker

yeah, somewhere in the logs

voretaq7

@DennisKaarsemaker hey, stop slacking and go edit your meta answer :P

Dennis Kaarsemaker

2

84104

2

voretaq7

STAR ALL THE BIKE KITTEHS!

Dennis Kaarsemaker

22:31

@voretaq7 there's nothing to edit. IT'S PERFECT

voretaq7

I'm not sure "novice" questions are off-topic (I'd like to think we would certainly help a junior admin with a well-crafted question) so much as "not professional" is off topic. I took a stab at this in a separate answer, but I like your phrasing as well. You might want to work in a link to meta.serverfault.com/questions/4111 defining "professional capacity" — voretaq7 1 hour ago

Use the links ~~Luke~~ Dennis

:-)

Dennis Kaarsemaker

@voretaq7 sure, 3p0

voretaq7

@DennisKaarsemaker Hey! I'm not going to be played by Joan Rivers in the spoof movie mister!

Dennis Kaarsemaker

@voretaq7 neh, your virgin alarm is broken anyway.

freiheit

►

voretaq7

22:34

@DennisKaarsemaker that's untrue - I'm very good at alarming virgins.

JohnMerlino

I added an edit to my question. Basically while minicom lets me run keyboard shortcuts like control+a and z for help menu, and it does display help menu, it DOES NOT allow me to run any at commands in order to communicate with modem. I don't know if that's a sign that minicom is corrupted or the modem is not responding.

Nathan C

I see SF as being useful for "novice" sysadmins. I mean, you don't become professional unless you learn.

But there's a limit...people have to make an educated attempt to solve their issue.

Dennis Kaarsemaker

@NathanC ooh, add that as comment to my meta answer please, I like it. Or just edit the answer

and to annoy @voretaq7, I will not edit that answer anymore today as I really should get some sleep

alarm goes off in 5 hours...

Nathan C

I'll add it as a comment

Ryan Ries

Shit... it was one of my teammates.

There are little sqllite executables all over the place and all sorts of shit. :(

Dennis Kaarsemaker

22:39

@RyanRies well, now you know who's buying the next rounds of beer.

voretaq7

@DennisKaarsemaker sleep? wossat?

Nathan C

@RyanRies That's a paddlin'

Dennis Kaarsemaker

@voretaq7 recharging the snark

Matt Bear

@RyanRies sock party?

voretaq7

Snark (Lewis Carroll)

The snark is a fictional animal species created by Lewis Carroll in his nonsense poem The Hunting of the Snark. His descriptions of the creature were, in his own words, unimaginable, and he wanted that to remain so. The origin of the poem According to Carroll, the initial inspiration to write the poem – which he called an agony in eight fits – was the final verse For the snark was a boojum, you see. Carroll was asked repeatedly to explain the snark. In all cases, his answer was he did not know and could not explain. Descriptions of the snark The poem describes several var...

Nathan C

22:43

0

A: New close reasons - Proposals (July 2013)

I like: Needs Additional Research Server Fault is a site for professional system and network administrators. To best assist with your issue, you should attempt to do some of your own research and make an educated attempt at resolving it. If you're not comfortable doing something on your own,...

I'm horrible at wording things but I took a stab at it

voretaq7

@NathanC I like. I think "not researched" is distinct from "not a professional" too

Matt Bear

@voretaq7 I tried to read the poem... its too long, I lost motivation :p

Dennis Kaarsemaker

I never tried to ~~read~~ finish any Lewis Caroll

probably don't have enough imagination/hallucinogenics to "get" it

voretaq7

@DennisKaarsemaker Drink this.

:P

Dennis Kaarsemaker

Drink what?

Matt Bear

22:49

@voretaq7 offer him a nice mushroom

Dennis Kaarsemaker

@MattBear I'm NOT touching @voretaq7's "mushroom"

Scott Pack

@NathanC I really like the idea of it, though the wording feels a bit harsher than I would prefer. You care if I try to edit it a bit?

Matt Bear

@DennisKaarsemaker not even the purple headed thunder mushroom?

Nathan C

@ScottPack Go for it. I tend to be rather blunt... :P

I see it a lot on here.

voretaq7

One side will make you grow taller, and the other side will make you grow shorter....
But don't eat the stems - those make the fucking walls melt!

Scott Pack

22:50

@NathanC Oh, so you work in technology.

voretaq7

It took me about 4 edits to get my "Not a Professional" answer out of "Just go fucking hire a sysadmin you idiot!" territory

Matt Bear

Magenta mushroom

The Molten Mushroom

Mr. Mushroom Head

Mushroom on a stick

Mushroom-tipped love dart

Mushroom-tipped man sword

Scott Pack

Feel free to get bored at any time.

Matt Bear

Purple mushroom

Dennis Kaarsemaker

2

Matt Bear

22:52

Swelling mushroom

ok.. im done

Dennis Kaarsemaker

@MattBear please clean up the mess.

Matt Bear

@DennisKaarsemaker get me a towel

freiheit

@MattBear So, you're in a mushroom farm?

Nathan C

@ScottPack Exactly.

voretaq7

prevelages? THAT'S the problem. root has post-velages

Dennis Kaarsemaker

22:54

Scott Pack

@DennisKaarsemaker Look at his gravatar. Looks like a bit of a douchejockey.

voretaq7

@MattBear I'm sorry, "Straight people say the gayest things" doesn't accept contestants again until Monday. @WesleyDavid gets to enjoy at least a week as reigning champion before he can be challenged again.

@ScottPack ...I'm buying a horse and naming it douche now.

Scott Pack

@voretaq7 So when he gets old you can say he's a bit long in the douche?

voretaq7

@ScottPack ...no, so "Douche Jockey" can be a real thing

but that too.

Scott Pack

@voretaq7 So after some gentle brushing you can love your curried douche?

voretaq7

22:56

I'm also going home, as I skipped lunch and I'm hungry :P

Dennis Kaarsemaker

@voretaq7 eat a douchewaffle

Scott Pack

@voretaq7 So you can forgo the saddle and bareback douche?

Matt Bear

@DennisKaarsemaker what the link to that one?

Scott Pack

@DennisKaarsemaker Only if the horse is Belgian.

Nathan C

There, I added a "please"

is it less "I'M GONNA GOUGE YOUR EYES OUT FOR LOOKING AT THAT SERVER"-like?

Dennis Kaarsemaker

22:58

@ScottPack that's starting to sound like a gay porn flick. Bareback douche.

Matt Bear

@voretaq7 I know, I'm just getting some practice in, I'm gonna need every bit

Scott Pack

@DennisKaarsemaker I thought the highlight of all those was curried douche.

Michael Hampton

@DennisKaarsemaker He really doesn't have the faintest idea what he's doing.

Dennis Kaarsemaker

@MichaelHampton why do you think it's closed as "trainwreck" :)

Michael Hampton

0

Q: Need a very specific VPN

I am looking to get a vpn with such an ip: x.x.c.d when c is divisable by 8 and d=0 I am willing to pay alot for such a vpn can someone please tell me where can I get one?

WTF?

Matt Bear

23:01

►

MDMarra

@MichaelHampton couldnt you do that with a /23?

Michael Hampton

@MDMarra Not with the third octet divisible by 8.

MDMarra

Or a /24 with equipment that allows for no network address

Nathan C

@MichaelHampton Prime example of a trainwreck question

MDMarra

@MichaelHampton i could have done it for him two jobs ago

Or, just have the VPN hand out RFC1918 addresses

Michael Hampton

23:05

Oh god, read his comment.

Matt Bear

@MichaelHampton what would the point of that be?

Michael Hampton

@MattBear I dunno. Maybe he's into numerology?

Matt Bear

@MichaelHampton theres gotta be more of a reason... though what I dont know

MDMarra

@MichaelHampton Wait, do it with a /32!

Michael Hampton

Please don't encourage stupidity.

Matt Bear

23:07

I'm actually thinking something to do with a botnet?

Dennis Kaarsemaker

he wants the last octet to be 0

which sounds fishy

Nathan C

Sounds...spammy.

MDMarra

cool points

so wait

does every closed question say "on hold" now? or just some

Dennis Kaarsemaker

all of them

for a few days

Nathan C

All until the 5 days

MDMarra

23:08

@DennisKaarsemaker what a bunch of hippie bullshit

Michael Hampton

yesterday, by Michael Hampton

New Close Reasons Are Live

Nathan C

then SF will axe it a question

Dennis Kaarsemaker

which sucks, because some questions really should be shot.

Iain

@MDMarra they can still be deleted

MDMarra

@MichaelHampton Yeah I knew that, but I didn't know it changed the bracket description

Michael Hampton

23:09

@MDMarra But... but... [on hold] is right there in the title!

MDMarra

I just saw my first closed question since the change

I've been busy as fuck

Iain

just delete the crap

MDMarra

no time for the front page!

Nathan C

Under 400 rep until I can actually VTC stuff

Michael Hampton

@NathanC You can knock that out in a couple of days.

MDMarra

23:10

@NathanC VTOH*

:D

Nathan C

Oh...yeah.

@MichaelHampton Working on it, but the stupid is leaking on the front page.

I got some rep on the gaming one by answering a minecraft question, but that doesn't count. :p

MDMarra

it does in chat!

Dennis Kaarsemaker

yeah, in chat I'm over 10k

but only 5.7 on SF

MDMarra

Is @RyanRies here?!

Nathan C

How can you tell the rep in chat anyway?

Michael Hampton

23:12

Dennis Kaarsemaker

not bad though, for 7 months on-and-off

MDMarra

@NathanC click your avatar, then click it again in the box that pops up

Dennis Kaarsemaker

@MichaelHampton yes, you're a repwhore alright :P

Nathan C

Ah, 3.4k in chat

MDMarra

@MichaelHampton you're probably going to beat me to legendary, unfortunately

Dennis Kaarsemaker

23:13

@MDMarra not if you beat him first!

MDMarra

$newjob is a time sink!

Michael Hampton

earned at least 200 reputation on 73 days

Nathan C

That's funny, i'm more active at work then not

Dennis Kaarsemaker

@MDMarra stop taking calls from @ewwhite :)

MDMarra

haha

but he pays me money

Dennis Kaarsemaker

23:14

you're already filthy rich

MDMarra

@MichaelHampton earned at least 200 reputation on 77 days

@DennisKaarsemaker I wish

I mean, I'm not hurting

But I'm no @ewwhite

Dennis Kaarsemaker

maybe you should fix more windmills then :)

MDMarra

hhaha

Nathan C

If I'm ever going to afford an apartment I need a second method of income...freelancer's not looking promising either (I doubted it would anyway).

MDMarra

Where do you live again?

Ryan Ries

23:18

@MDMarra Yeah?

MDMarra

@RyanRies RD session brokers provide redundancy for rd session hosts

WesleyDavid

@voretaq7 I DEAL WITH THE WEIRDEST CLIENTS YOU NO CAN HAZ MY INVOICES!!

MDMarra

How do you provide redundancy to the brokers?

NLB?

Magic?

Nathan C

@MDMarra Maine...

MDMarra

@NathanC Right, I thought so. Move

Nathan C

23:20

Need money to move. :(

MDMarra

Your $5 lobsters aren't worth not being able to afford your own apartment while working in IT

:)

Nathan C

heh

I should schedule my Network+ exam...

Dennis Kaarsemaker

@NathanC rent a u-haul, move.

it's not that expensive.

Nathan C

In fact, since I have the 5th off (working the 4th instead) I could do it that way ...

@DennisKaarsemaker It's expensive to find an apartment ...

Because I can't afford one as it is :P

WesleyDavid

@NathanC Move into my cat tree. We can share a littler box!

Nathan C

23:23

Before I forget I should change this reboot schedule ...

MDMarra

SCHEDULE?

(not for a server I hope!)

Nathan C

It's a one-time reboot since I'll be asleep when it's supposed to reboot :P

Gah, DNS...WHY U NO WORK!?

2

84104

@NathanC You forgot to feed the space unicorns.

Nathan C

DNS doesn't appear to be working over the VPN so I can't resolve any of the company internal stuff :(

Mark Henderson

@NathanC Do you have a search suffix set on the connection?

Ryan Ries

23:25

@MDMarra Hang on, I'm busy being a narc

@MDMarra I've got a lot of spyware/adware/shitware to clean up off of my FUCKING EXCHANGE SERVER TONIGHT

Nathan C

@MarkHenderson I don't think I can set one with this...it's the sonicwall vpn client

Mark Henderson

@NathanC God I hate that; I have a similar problem with every client who has a netgear VPN

Nathan C

of course, the vSphere console is derping on mouse capture

Mark Henderson

So our VPN setup instructions include manually setting a DNS Search Suffix on the connections

Nathan C

Oh, not derping ...just unusably slow

Ryan Ries

23:28

@MDMarra Actually it's really funny you mention that - I am working on that exact same thing today.

MDMarra

@RyanRies Carry on, don't let me get in the way of a romantic evening.

Ryan Ries

This is how you provide HA to your connection borkers: technet.microsoft.com/en-us/library/ff686148(v=WS.10).aspx

(sic)

Nathan C

@MarkHenderson Not even nslookup is working when I target our dns server

just times out

Mark Henderson

So, client got their first SSD-based server

I hate them now :(

MDMarra

@RyanRies thanks pal

Hey @MichaelHampton

Mark Henderson

23:30

@NathanC Does it work if you force TCP? (dont know if nslookup can do that, but dig can)

MDMarra

Mor Asraf <[email protected]>
7:22 PM (7 minutes ago)
Reply
to me
yea it is a private ip, I will appriciate it greatly if you can help me find a VPN supplier or a datacenter that can provide me with such a vpn, there is a alot of money involved here so I am even willing to pay you if you can help me.

Michael Hampton

@MDMarra I gave at the office

Ryan Ries

@MDMarra I'm interested in hearing about your progress. I happen to be working on a global RDS deployment right now

Mark Henderson

@MDMarra You emailed that guy?!

MDMarra

@RyanRies This is for a ghetto Ed White produce company. Prob won't come to bear for a while

@MarkHenderson no he emailed me

Mark Henderson

23:31

@MDMarra w.t.f.

MDMarra

"reply" is because I copied and pasted from gmail and highlighted the reply element and im lazy

Mark Henderson

Did he tell you why he wanted it?

Nathan C

@MarkHenderson One sec..

Ryan Ries

@MDMarra The auditors are on my ass so hard, I finally said fuck it and now the only way in or out of any of my datacenters is through an RD Gateway (TLS RSA256) with a globally trusted cert, which that gateway will only proxy traffic traffic to a set of session hosts that will greet you with an RSA SecurID prompt where you need a keyfob.

Mark Henderson

@RyanRies Fuck that so bad. We have a system that's like that. Log onto AnyConnect SSL VPN with a username, password and RSA token. Then log into Xen Desktop with another username. This presents you with a single RDP app (that needs java to run) which you need a 3rd password for. Once you have that RDP desktop open you can access nested RDP sessions to the hosts you need from in there, with you guessed it, a 4th password

MDMarra

23:34

@MarkHenderson nope

@RyanRies hahaha damn son

Mark Henderson

And those nested RDP sessions are all Citrix ICA connections, so you ICA into RDP, then launch more ICAs from in there

Ryan Ries

Yeah... it's annoying, but we have medical and federal clients who are afraid of their own shadow... shit needs to be on lockdown

Mark Henderson

It's insane and we hate using it and you can't copy/paste because of all the layers of shitty java clients

Matt Bear

@MDMarra im betting somthing illegal

freiheit

@MarkHenderson I feel like if I was an attacker, I'd try to go after your Java stack...

Ryan Ries

23:37

Medial? Well, maybe we do have medial clients, but I meant to say medical :P

Mark Henderson

@freiheit Best point of attack most likely, java launches once you're past the RSA token and Xen logon

Half the work is done for you

MDMarra

@RyanRies did you see my comments about a candidate that I phone screened earlier?

Mark Henderson

(fwiw it's not my setup, we have an installation deep inside this companies network and thats how we get in and out of it)

Ryan Ries

@MDMarra That he couldn't explain the five fsmos?

MDMarra

4 hours ago, by MDMarra

Can you briefly explain the 5 Operations Master roles in AD?

Uhhh

Ok, let's take a step back. Can you explain the difference between a security group and a distribution group?

Security groups are for access and authorization. Distribution groups are for organization.

Ryan Ries

23:38

Yeah, I saw that :)

freiheit

@MarkHenderson Just give it a few weeks, and there will be another java update, and a window of opportunity to exploit whatever it fixes... (or maybe some java 0 day)

istherejava0day.com

Scott Pack

@mdmarra How long until you backed up to plugging in a mouse?

MDMarra

Ok, so is Node and File Share Majority legit for prod clusters or is that ghetto?

Mark Henderson

C:\Users\mark.henderson>java -version
java version "1.5.0_04"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_04-b05)
Java HotSpot(TM) Client VM (build 1.5.0_04-b05, mixed mode, sharing)

Take your pick of 0-days

freiheit

@MarkHenderson I take it all back. Forget zero days, there's some multi-years in there, I think...

Nathan C

23:40

@MarkHenderson ALL the 0-days!

freiheit

java-0day.com

MDMarra

@ScottPack I got to a point where I said "Why don't you tell me what you'd like to talk about"

But I said it in a nice way

I felt bad for him

Mark Henderson

@freiheit We can't go forwards because we have a systinet app that runs on an shitty old version of java and is pretty shitty in general

Nathan C

Also, can't use tcp for the dns queries :(

Mark Henderson

@NathanC Do you have control over the VPN endpoint?

Nathan C

23:41

Error 101 (net::ERR_CONNECTION_RESET): The connection was reset.

nope

Firewall's saying "U NO ACCESS"

Ryan Ries

@MDMarra I do quite a few technical interviews, and in my opinion, well maybe my standards are too high, but I find it extremely difficult to find talented people.

Nathan C

Although...oddly enough I can access it if I use my phone over the vpn...

MDMarra

@RyanRies This phone screen wasnt for a windows engineer, it was for a managed services guy. so, I mean, I dont know "how little" is too little for knowledge

WesleyDavid

@RyanRies I find it extremely hard to be a talented people.

MDMarra

But this guy made it easy

freiheit

23:43

@WesleyDavid KITTY!

Nathan C

Meh, I just rebooted the server instead. Because well, no one was on it anyway.

freiheit

@WesleyDavid Look at this LHT just sitting there on top of a a bike trailer...

Nathan C

Now to figure why DNS is failing so hard

WesleyDavid

@freiheit And you're delivering it to Phoenix?

freiheit

@WesleyDavid For enough money, sure...

Ryan Ries

23:45

Windows internals question here.... but..... is it possible for something to end up on the "Add/Remove Programs" list while never invoking Windows Installer or MsiInstaller?

Nathan C

C:\Users\Nate>nslookup vmc-1-1 192.168.9.41
Server: vmc-1-1.*domain.name
Address: 192.168.9.41

*** vmc-1-1.*domain.name can't find vmc-1-1: Server failed

welp...

(vmc-1-1 is one of our VMs)

Ryan Ries

Because I'm finding some shady shit on this Add/Remove programs list that the logs cannot account for.

Nathan C

At least it's doing something different now. Before it was just timeouts

Scott Pack

@mdmarra It feels bad when that happens. I worry about discouraging someone who want bad, just a poor fit.

MDMarra

ya

he seemed eager and somehow had a ton of Lync experience

but couldnt even explain what groups in AD are

Nathan C

23:47

During my interview my boss was there and he didn't really say anything. He was like "I'm trying to think of something smart to ask" ...lol.

MDMarra

oh well

@NathanC Dude, you need to get somewhere with some opportunity

haha

Nathan C

Yeah...

I've always been a "think outside the box" when it comes to locating solutions for stuff. Like this project I've been working on to "virtualize" our aging factory machines. Oh what fun parallel ports are. And I'm learning tons doing it.

Erm...what...DNS is resolving now.

And it's broken again. scratches head

Ryan Ries

I wish I could work for a place where I just a clear mission, goal, objective... shit is so chaotic around here all I can do is surf. Just having one or two forests to take care would be a dream come true. Having an environment with fully routed DCs would be a dream come true. Having an environment where I didn't have to jump through three different jump boxes with three different accounts to get to where I actually need to get, would be a dream come true.

Nathan C

Getting a blank check and "tell us what you need" would be a dream come true

:P

Ryan Ries

Yes, getting any sort of check would be a dream come true. Instead, it's "we need this yesterday, with $0 budget."

Nathan C

23:57

So DNS is working, just replying "server failure" to any local DNS requests. I'm resolving external addresses off it fine.

Ryan Ries

SRVFAIL

Nathan C

It was working until I reconnected to the VPN ...then it stopped working again.

It started working by itself lol

144 359.135551000 192.168.9.41 192.168.9.150 DNS 67 Standard query response 0x0002 Server failure

Transcript for