@Alex Have you learned nothing?

Obviously.

uh... stop maybe?

Uh

Yeah, you're done.

Thanks.

Crap.

@Alex Come back when you're sober and capable of constructing coherent sentences again.

sup

sup @mossy

Playing with Docker.

How's that? I heard a bit about it at LOPSA East

Docker? It does what it does all right, I guess. At the moment I'm trying to figure out how to monitor it.

@MichaelHampton I'm switching to Business to get static IPs. I'm pissed that I can't use my own modem. The business modems they supply are complete garbage.

@ChrisS Yeah, not too much you can do if they won't budge on that. But you can ask them to put it in bridged mode and then use your own hardware behind it.

And if you're getting a /29 then you'll pretty much want to do that anyway

@BigHomie When I was in college I did business plans for a regional WISP and an Urban GEPON. The WISP could be started on a 6 digit investment. The GEPON would take "significant" bucks - and there's no gubermint money to be had these days; AT&T and the other cronies gobbled it up on promises and fairy-tales.

@MichaelHampton Bridged is what I run at a couple of our office locations. Still, the modem at our office has issues where the Ethernet connection flapps. Comcrap just blames our switch.

Also, they charge $10/mo for that piece of trash. The SB6120s that I use everywhere I can only cost ~$75 and I've never had a single problem with one

@MichaelHampton Only a day? You're too nice.

@EEAA CLEC was trying to sell me on the T1 saying they had a great SLA... For all I hate Comcast they've had 0 actual downtime in the last 3-4 years (at my house, work, parents house); and only sporadic line issues at my parents-in-law's house (finally got the right person on the phone though and it got fixed quick).

Comcast could really reform their image in my mind with two relatively simple things: 1. Train your Level 1 support to recognize when the customer isn't a complete idiot and transfer those people up to L2 immediately. 2. Quit with the bullsh*t policies. No "residential" and "business" plans with separate "features" and restrictions. Make one a-la-carte menu of services and let customers pick. Set prices appropriately so you can keep up the Zillions in yearly profits.

Who wants to cuddle!

@ChrisS truth.

Well if ya'll interested in WISPing it, I've got a contact you might be interested in. Long time in wireless deployments, meshes, cellular, etc. and etc. Did military contracts and made some pretty cool things.

@Wesley BTW, Congratz on the job.

@Magellan TY, TY. It's fun.

Every day I'm a cross between:

And:

@Wesley Outstanding. Days of Wine & Song, For Sure.

@Wesley BTW, did you ever get all those parts assembled into a bicycle?

@Magellan ...no.

@Magellan How's your gig? Any changes?

@Wesley It's been interesting, in the Chinese sense. But the many open growth positions are slowly getting filled.

@Magellan Learning anything new, getting sharper?

@Wesley not as much as i'd like. too much app support while we're short-handed. but it's looking up. and management is changing for the better too.

they're actually adding enough mid levels so that the executives don't have 19 direct reports.

@Magellan Cool, could be worse I guess? I actually don't mind support positions, insofar as I'm learning valuable skills and also have leeway to make one-to-many solutions when there's time.

@Wesley I hate app support. Did that for 10+ years. no interesting in doing it anymore.

but I'm learning OOP implementations for Puppet in the couple hours that I'm not triaging broken apps.

class-based Puppet with hiera and mcollective rocks.

@Wesley contact? I know a fair bit about wireless

Aruba wireless equipment is the bomb.

I loved working on that stuff at job[-2]

Ugh. I want to pack a flayed spammer in salt

I'm getting HUNDREDS of bouncebacks on my dad's email

I don't have time to deal with this today ><

G'day

@JourneymanGeek You got SPF records set up? Assuming you own the email domain.

Let's see what's in the news today...

o.O

@Bob dafuq...

@JourneymanGeek SPF, DKIM and dmarc are your friends.

I have spf set up.

And one of my dad's mails got rejected. Got military crap today, so will take a deeper look when I get home

@JourneymanGeek Military crap?

Guys, I just got a W2k12 VPS to play around with, do you guys install AV software and which?

Depends, really, but if you're just playing around with I wouldn't bother.

Most desktop AV's won't run on Windows Server OS's

I'll just install a HIDS then

@LucasKauffman support.microsoft.com/kb/2780435/en-us FEP 2010 is free and updated with the same definitions as SCEP 2012

@MathiasR.Jessen yeah, spending 2 hours travelling for mandatory fitness classes

@JourneymanGeek Yeah, that sounds pretty crappy :P Are you on a reserve contract?

@MathiasR.Jessen ah nice

@LucasKauffman It's not top of the line, but it's not bad either

damn

what the hell

metro for a server o.O?

@LucasKauffman Yeah, it's bad ... 2012R2 is a little better, but some PM in the Server & Tools division must have had a pretty severe brain aneurysm at some point prior to the release

@MathiasR.Jessen Er. They expect everyone to. 10 years in the reserves or until you hit 40

Singapore sucks like that

@JourneymanGeek Im coming over to Singapore again this year in july

until the middle of august

@BigHomie serverfault.com/a/602664/105072 FYI

@DennisKaarsemaker the hell is dmarc

@Bob Combined SPF/DKIM policy enforcement

o.O

@Bob dmarc.org/overview.html

@Bob it's the thing that actually tells mailserver what to do when SPF and DKIM fail

instead of guessing

e.g., if I were to send mail from my work address using my own mailserver, that would not pass SPF and our dmarc records say "if SPF fails, reject"

@DennisKaarsemaker Oh. I think I came across that when reading about DKIM a bit ago. Never knew it was a separate thing.

large mail providers all support dmarc. It is now no longer possible to use our domains to spam e.g. gmail or yahoo customers

I'm only using SPF at the moment, since I don't actually send mail. Probably should go look at setting up dmarc too.

p=reject means: reject what does not pass

and rua/ruf care mail addresses that you can forward the spam to (ruf for 'forensic' e.g. all spam) rua for aggregated stats

not everyone supports ruf, most support rua

if you don't send email, just do an IN TXT "v=DMARC1;p=reject"

@MathiasR.Jessen no they're trying to avoid turning me into a wintel admin :)

@DennisKaarsemaker Sounds like a reasonable idea ;) Any exciting things in the works?

@MathiasR.Jessen there's currently no dedicated security guy for windows. It'll be a busy position.

@DennisKaarsemaker Sounds all the more attracting to me actually, not a chance to get bored

@DennisKaarsemaker Ended up sending this along devopsv2.com/sf/mrj_cv2014.pdf fairly pleased with it

@MathiasR.Jessen I'll make sure the hiring manager reads it on Monday

@DennisKaarsemaker Cool, thanks

I bought him beers last Friday, so he owes me :)

@LucasKauffman neat

Huh. Thanks for the summary/advice/examples, @DennisKaarsemaker.

oh dear - pro sysadmin :( serverfault.com/questions/602703/…

@ewwhite bicycles.stackexchange.com/q/21890/6757 Oh, the things you have to worry about...

Paging @ewwhite

@MDMarra yes?

Nothin. I just miss you

@MichaelHampton I should answer this.

cluster... heh.

heh, I just saw that

A similar setup would make a sweet Hyper-V cluster with newer servers

but why cluster DCs?

to make file services HA

since theyve got shares on them

it doesnt make AD any more HA than it already is

@MDMarra they have SHARES on that?

it would certainly be on the 72GB disks in the MSA500 unit.

yeah there are shares

if you open the cluster manager snapin, you can see which shares are owned by the cluster

I need to stop reading Vice magazine: I ate my own cum after I took a sexual supplement that made my jizz taste like Jamba Juice

@MDMarra convoluted design?

@MDMarra What's weird about their GPOs?

@ewwhite the cluster is convoluted, yes

@MDMarra but their GPOs? What's goofy?

they just have some things definined that dont need to be

like, the setting that they chose is the default setting if the policy was never defined in the first place

like that

nothing thats like OH MY GOD THIS IS TOTALLY FUCKED UP

just kinda a head scratcher

@MDMarra Certain auditors will force you to set what is already the default in GPO, so that member servers can't go against that setting locally

Btw I hate auditors

I doubt Ed's clients deal with technology auditors

They'd have way bigger fish to fry than these settings

:D

heh

Sup @RyanRies, bummed we didn't get to meet up at TechEd

I know, I had to miss the closing party - I got forced to go back home a day early because my SO was having a medical emergency :(

oh sorry to hear that

Hopefully everything is ok?

No worries, it turned out fine... hopefully there will be another event that draws together swaths of nerds from all over the globe

God I'm running dism /Online /Cleanup-Image /StartComponentCleanup on an image before I sysprep it, and it's taking forever

@MDMarra but just artifacts of an IT guy doing things without direction?

@ewwhite Yeah, could be. Can't really tell for sure but it's nothing outrageous or unsupported...just very weird

especially the cluster. I had to look up whether or not that is supported

@RyanRies I'm not gonna lie - closing party was awesome

We had full run of the stadium, all of the food and drink vendors were open and serving throughout the stadium and it was all free

@MDMarra it's a stupid idea. Two servers with ONE 36GB disk each, and a shared SCSI SAN.

SCSI

hahah

One of those disks died, and the client took a week to decide if it was safe to obtain another 36GB drive

I told them that it was bullshit to even have such a setup.

hahaha

yup

stupid

but they're not Windows people.

and this was just a black box to them

DHCP is handled on the Linux server, for instance (wut?!?)

Um, stay in the botnet and keep sending spam?

@MichaelHampton presumably you've seen that happen before?

@MatthewIfe People who decide not to wipe their malware-infested systems and find themselves compromised again? Sure, see it all the time.

No, I mean what information was in that question which indicates its malware?

@MatthewIfe "iptablex"

Hm, thats a known malware trick?

@MatthewIfe I recognized it...since people have posted about it before. And Google.

I see. Was just interested in how you knew it was malware from that question.

@MatthewIfe You should be suspicious of anything where an apparently common software name is misspelled.

I choose stupidity first.

Not that i'm not paranoid enough to check both.

So the reasoning goes: See "iptablex". Hm, dodgy. Google it. See thousands of malware-related results. Case closed.

I did the same and chucked a close dupe on it

Is that a good dupe target for people who don't know or aren't sure they are compromised?

It works for me

That's interesting, I close duped it as a dupe of the link you left and it hasn't put a Possible duplicate message in a comment

The cluelessness in this one appears strong serverfault.com/questions/602655/…

@Iain Probably because that question is already linked in a comment.

@MichaelHampton yeah that's what I was guessing

Oh great, SE is upgrading SQL Server right now.

Please note, this position has no relation to the CloudStack project.

Power failures at home are no more fun than power failures at work

I should get a UPS and a modem with 3g backup connection

do you have servers at home?

just a nas

but it's the connectivity that matters

there was an incident at børking.com and I was unable to help

laptop and 4G card

Or buy an Elfiq - elfiq.com

laptop has built-in 4G modem, but I have no spare sim for it

as data-only plans are ridonculously expensive here

why the hell do you need to install IIS when deploying L2TP?

because of reasons

Security?

I think this is a good job listing.

@MichaelHampton @freheit I'll give it a try.

yawn

this java course I am being forced to take is not awesome

it's awful

and mind-numbingly boring

Gawd. I really don't want to write tests for my puppet module, do I?

@MichaelHampton Helps with future development and basically required for publishing on puppetforge. Otherwise, massive overkill.

@freiheit It installs software that requires a license key...and manages the license keys. I'm not even sure HOW to deal with that in a test.

The module will fail if there's no key for the host.

@MichaelHampton So it only works right if the key is valid? Yeah, good luck writing clean tests for that. :)

Screw it then.

@ewwhite Looks like a good answer to a silly question. Don't know why he'd expect electronic shifting to be more secure against tampering than basic mechanical shifting. Personally, I wouldn't lock up a bike with Di2 (well, maybe the IGH Di2)...