@KennyRasschaert This is why we can't have nice things

@BartDeVos I like your photos, btw

@BartDeVos And yes it is, far more usable than I expected

@Dan Photos? :)

@BartDeVos On your website

@Dan Ah, yes, thanks :)

I should update that, I think they are at least 2-3 years old :)

@BartDeVos Hehe, I've always enjoyed photography but never been particularly good myself. Not that I've ever devoted the time to it - have a few snaps I like, but mostly my DSLR is an oversized point and shoot!

@Dan Join the club :)

I'm half looking forward to the wedding just to see how the photos turn out - persuaded the Mrs to spend nearly 20% of the budget on photos...but hey, you get what you pay for!

(I've only just calculated that percentage, and I'm a bit shocked myself now actually)

A good photographer is indeed pricy :)

@BartDeVos Yep - it's actually a really good deal IMHO. There's two of them (husband and wife), they're seriously good, will be there from the getting ready stages right up to kicking out time and we get a DVD of photos, with the rights to reproduce/distribute

I've only photographed three weddings, but I see why a photog can charge so much.

Right, always request the uncorrected and color-corrected originals...

@Dan Great deal

@ewwhite I think it's one of those things - anyone who has done photography will know how hard it is to get right. I couldn't do with the pressure personally

I hate it when you see wedding pictures with myhipsterwebsite.com in the corner

@BartDeVos Yep, or a big dirty watermark

I couldn't shoot my own wedding, so I got one of the photographers I compete with for cycling photos to shoot mine :)

Fucking hate it

@ewwhite Hehe, funny you should say that. I follow ours on Facebook now and he mentioned being the most nervous he'd been for a long time because he was having to photograph a wedding photographers wedding!

@BartDeVos Yep, tragic! Doubt they have the high-res versions, either

@Dan They don't...

Yeah, it's pressure...

I was the model in a photoshoot for a magazine recently... the mag flew a photographer in from LA for the shoot....

Wow!

and yeah, he rolled up with 5 people, 6 strobes, a makeup girl.......

but I looked at his cameras... and I'm like, "mine are nicer..."

just sayin'

Lovely pics by the way @ewwhite: 500px.com/ewwhite/flow

:)

Ooh, shit, right gotta run to the opticians!

Thank you...

Will photo stalk you later!

500px.com/photo/1038329 :)

Canon EOS-1D Mark III

not a match for my Nikon D60 :D

Oh, I also use a Canon 1D Mark IV.

two bodies.

Wahoo! 19 stars on Evie-Mae's announcement

yep

One day I shall tell her of this fact and she will say "WTF Dad?"

What kind of number is 19?

Let's make it a nice round 20

21 I tell you :)

@ITHedgeHog Still waiting for a picture on sysvol.org :)

Hmm, yes.. I shall put one up - I had put the pciture up in here

Missed it :(

:4330805

I am not terribly skilled at using this chat.

Lovely :)

Someone's having problems with IPTables... started reading the question and got to something about the "Openssh Port", like it's different than other ssh ports, and stopped reading. Some people make me sad. =[

@ChrisS Didn't you know? OpenSSH runs over UDP 23 now.

trolololol

Must have missed the memo

@ScottPack They made some improvements to the protocol as well, to allow for improved packet analysis with tools such as Wireshark.

Aw...he deleted it.

serverfault.com/questions/383809/…

@ScottPack Unless you're starting it with --proto icmp, which runs openssh server over icmp

the data is transmitted using pings as morse code

@MDMarra You newbs. I run SSH over DNS.

i run SSSSH

Secure Smoke Signal Shell

@KennyRasschaert How the baud on that?

no ports required, only a chimney and a pair of binoculars

@ChrisS Depends on the wind, really

Bet it gets quite windy on taco day.

Upgrading to 12.04 on VM number two...lessee if this goes smoothly...

@BartSilverstrim That's Perspiring Penguin, right?

@MDMarra I thought it was Shitting Seagull. Or Pointless Purpoise.

Fistfucking Ferret

Rimjob Rabbit

Proctologist Pigeon

Workplace filter kicking in in 3...2...1...

FiveDollarHandJob Fox

@MDMarra Don't suppose you use any embedded stuff for PCounter, do you? Like PCounter for HP or PJet?

nope

Does that allow billing for direct printing?

Okay, worth a try.

@MDMarra Precise Pangolin.

@tombull89 what problem are you trying to solve?

It's a little applet that gets uploaded to the printer so users have to login before using copying/scanning/email

We've got a number of MFPs have have currently been used as glorified anonymous copiers. We've put the embedded client on a couple of printers but we've had some issues.

Hah. Company I'm looking at moving to runs Ubuntu servers on AWS

lazy twat

@tombull89 Ah, I see. Yeah we don't meter that

@tombull89 Cameras trained at the printers...?

I try to get a USB<->Serial based on the Prolific PL-2303 chip. Needs a driver for Vista/7, but there are drivers for basically every other OS built-in already (OSX, Linux, BSD, Solaris, 2000/XP). If you can't get one of those to work... geek card revoked.

@Chopper3 I've put the boot in

@ChrisS Isn't pretty much everything based on the PL-2303? :) Seriously though, I have like 4 different dongles and a GPS unit, all based on that chip.

@MikeyB I'd dare say at least half of them are, but I've across some that aren't. I usually tell people to toss those that aren't.

You can also google for that chip + "adapter" and find dozens that have it, and they're dirt cheap

@ChrisS That reminds me, I should plug one of 'em into the MacBook and find a nice serial program…

I still use a keyspan USB adapter on the mac.

used to use Zterm...

but now I just use screen

I used minicom.

screen /dev/tty.USA19Hfd14P1.1 9600

Actually... I have a PL-2303 chip based USB to serial adapter, and when I converted from W7 to W7x64... it started bluescreening the SHIT out of my computer

so I'm in the market for a NON PL-2303 based adapter

@MikeyB Pretty much, yeah. I remember it was a bitch to get it to actually get working on OSX. Windows was trivial.

Well, if it bluescreened the shit out of the computer, what OS did you install after Windows was removed?

:P

I've used my adapter on 2 different Win7 64-bit machines and have never had a problem with them.

interesting..., i'm using IOGear's driver packaging for it

but prolific themselves have a driver much newer

Well it didn't last long, on paternity leave - connected to work, updating websites.

@ITHedgeHog voluntarily or asked to do it by supervisor(s)?

'Asked' IE, please do this or else issues will occur.

Actually scheming to buy a bluetooth to DB9 adapter

@ITHedgeHog You said paternity leave usually means lower pay...are you compensated when you're nicely "asked" to do this while on leave? i.e., now you're a telecommuter?

just worried i'd leave it behind :|

I will certainly have to be compensated, the boss is pretty good with stuff like that.

Also got a few features to write for wednesday next week, so definitely need to sort something out.

Our microwave puts out horrid 2.4GHz interference. Anytime someone's reheating the lunch my bluetooth headset doesn't work and the WiFi goes to complete shat.

@ChrisS Time to move to 802.11n! (Not that it'll help with BT)

@ChrisS Strange that it has that problem with its shielding.

We've got 802.11abg APs, enabling A is on my list of things to do.

There's a question on skeptics.se about microwaves and shielding cell phones...

It's definitely the microwave... I've heard enough stories from other poeple that I'm not surprised.

Cell phones are benign... At least the modern digital ones are. The older analog ones might have been dangerous if you kept it glued to your head for decades on end.

just became aware of the 802.11ac... how confusing is that?

@BartSilverstrim I remember reading an article on someone with a Wi-Spy or similar and a microwave oven showing some nifty detail on the interference it generates.

@SpacemanSpiff Atheros has been talking about WiGig for a few months now.

I wonder are they picking the letters at the end arbitrarily?

Or do 802.11h through 802.11m used for something else entirely?

Some letters are skipped, like "i" and "o", but the rest already exist.

actually, the wikipedia article is enlightening on this

I'm headed to Aruba bootcamp week after next, that should be fun

I think 802.11ac will be skipped mostly and the chip manufacturers will jump right to WiGig. Maybe it'll be marketed as an enhanced 802.11n (which it mostly is)

wow, 80 to 160mhz width? interesting

WiFi needs to get the MIMO modes straightened out.... Some of the other 802.x specs have excellent definitions for the various MIMO configurations.

its interesting to me though with the density, the controller based systems sometimes only have 100Mb back to the controller, or it might be 5 switches away

I'm going to have to look into the smarter decentralized systems

That's another thing WiFi could barrow from the more advanced 802.x specs; decentralized ASN gateway tech.

It's a reality that campus WiFi has expectations (if not requirements) of carrier grade quality.

I saw a cool thing the other day, integration between Palo Alto UserID and an Aruba Amigopod

ah ha ha ha ha

Go google 'zerg rush"

Meh; it's more annoying that various vendors feel the need to invent their own AAA when RADIUS is pretty widely accepted (outside the WiFi community).

morning

afternoon

Some days I want to strangle our sysadmins.

:(

we don't deserve that!

This one does

@ewwhite We might deserve that; but some sysadmins definitely deserve worse.

@Basil what did he/she do?

We were doing a SAP refresh to test a patch, and his VG has an error on it. Of course, even though storage can't even see what's in the disk, in his mind it's a storage problem. I correct him, and despite this, an email goes out from his manager to all the other managers advising them that they need to do a frame reboot on all our staging instances because of a "storage problem".

with lots of CC's and posturing?

of course, he's a manager

probably parks his audi in the handicapped spot since he read the steve jobs ebook.

fucking douchnozzles

shameful

You can kill them in the rush!

...

That's awesome.

hahaha

yay friday

Testing my Elfiq multi-WAN load balancer.

it's kinda cool...

@ewwhite What's the point of those things? Don't routers already do that?

This is for my wife's company... They're in an industrial park next to a McDonalds meat processing plant.

No cable, no DSL, no fiber...

All we could do was 2 x T1.

But we were finally able to get Fixed Wireless/WiMax

so it's a 10-meg wireless link...

but the exiting T1's were there... so the link balancer helps us aggregate and handle the failover between lines.

yes, routers are an option... (AS#, buy some routers, coordinate with ISP, BGP)

@ewwhite That is so awesome.

but more complex...

I've wanted to find a good article on that

per vendor

load balancing two connections, because don't you need each client's request to be a bit sticky?

user A this way, user B that way, etc?

so it's pretty granular setup on this unit... I have a choice of like 10 outbound balancing algorithms...

That's the outbound persistence screen

can you prioritize certain traffic to go over the T1?

or rather, always over T1 unless it's down

stuff like rdp/ssh

yep.

I'm trying to wrap my head around how it balances incoming connections from 2 different ISP's without BGP...

@Chopper3 I do not open URL's from you anymore

a wise move

For inbound... I haven't delved too deeply... but it is a little different than what the other link balancers do...

So this is an Elfiq 550B balancer... low-end $1800

and it sits in an odd location

@ewwhite Mainly for balancing outbound connections for a business then.

I was wondering for things like inbound to a web server for a business.

T1 router and Wireless -> Elfiq -> firewall -> network

one connection is designated as primary...

in this case, T1, since I have inbound services...

you can not load balance incoming connections

(unless you do BGP with AS)

for inbound, if the T1 goes down, according to probe destination:port pairs you define...

yeah, but what happens if the T1's ip address is 1.2.3.4, and something points against it?

the elfiq will use the secondary link and NAT the traffic to appear to the firewall as the original link

but, I'm guessing you're talking about inbound traffic that's already established in the session table

that, coupled with a little DNS game.

yeah but you can not change the BGP table routing at will :)

@pauska It doesn't use BGP :-)

@BartSilverstrim no correct, the internet uses BGP for it's routing table :)

@pauska smartass. Mean with the elfiq unit....

but yeah, DNS will do the trick in most cases.. low TTL and some health checker to swap over entries when a line goes down

@BartSilverstrim and I'm talking about the incoming traffic, which the elfiq unit has no control over

So it's meant to keep firewall rules intact... I have a Cisco ASA behind this

and the incoming is handled with a short TTL DNS service...

yup

and let me guess, two MX records with different prios

So they call it iDNS...

elfiq.com/idns

but is the elfiq thingy doing NAT between the ASA and the elfiq? or is it some kind of bridge?

stuff like nat-over-nat is not especially joyful when you're going to implement SIP or VPN one day..

@pauska I was looking up how it handles incoming.

it is NATing... so if a link is down, it masquerades one link's IP range for the other... basically to preserve the firewall rules

VPN compatible

@BartSilverstrim incoming traffic, as in regular TCP/IP with a destination IP address can not be re-routed across another link unless you use BGP. You have to use different mechanisms for this, like a DNS server with low TTL as we've been talking about for the last minute..

@ewwhite smart little box.. gotta remember this one if I ever need such a setup.. could be a cool thing for ferries etc who get another link when they're docked

oh so the unit it self provides the DNS reply

that is pretty cool

elfiq.com/bgp

But while the UI is decent... it's all pretty solid from the command line.

@BartSilverstrim dude just stop it, you're not understanding this

I wonder if that DNS proxy is what KEMP implements for their HA loadbalancers.. been thinking about getting a pair since we're moving over to two stretched datacenters

@pauska Then enlighten me.

I'll get inbound working sometime next week.

@BartSilverstrim I did, read up. You can not change the destination IP on a packet that's already arrived. The client needs to get the correct destionation, which is done via DNS

I have a few ipsec tunnels and would like to see how it all handles... the T1's are quite unstable

@ewwhite I hope they don't get hindered by some of the large ISP's.. they usually say "fuck you" to any low TTL

anyways, paycheck today.. going out for some beers with the coworkers

good weekend guys

lata

unstable T1's?

i'd be shoving my foot up a provider's ass

It's a really crappy location

again, next to McDonald's meat-processing plant in chicago.

ooooh where?

and a perfume plant...

I'm in the area remember :)

@ewwhite Seeing as pauska seems to be cross-communicating with me, can you point out what I'm missing that he seems to think I'm too dense to understand?

and an ethnic haircare products manufacturer...

soul glo?

it smells like bacon-lipstick-cancer...

:D

@BartSilverstrim Not much... the unit balances outbound through any number of methods... per port/protocol/IP and multiple algorithms...

inbound is done via DNS

It looks like iDNS is used to handle incoming DNS. To map it to a given ISP.

it's intercepting DNS queries...

and then NATing the resulting traffic to appear to the firewall (next in line) as the original link's IP range

Scenario; you're running a web server application. You want to have redundant dissimilar links. You use this balancer.

that's clever

Pauska sounded like it can't balance incoming connections for sessions because of DNS tied to a particular IP/route through ISP.

Yeah... these units scale. So I have a small one here. But the next unit I sell will have a 3G USB card in it...

and will be part of an MPLS setup

I bet some firewalls pitch a fit at that thing

No, not at all.

it's transparent to the firewall

I didn't even take the network down to install it

no changes were needed to the Cisco firewall

well sure as long as it's done the address translation ahead of time

was thinking more along the lines of ALG's and firewalls that are smarter than ports and IP addresses seeing more information

A few days ago, after some of the ESXi 3 source leaked, one of the ZDNet writers tweeted that VMWare is in big trouble if it contains Linux code.

I heard about that.

I didn't know it was ESXi3

To which I replied: Have there been any real accusations to this effect? If not, that's a pretty irresponsible tweet to put out there.

to which HE replied: over the years there has been, and I have statements from protected sources familiar with the code.

So, then why the fuck don't you write a goddamn article on it if your "protected sources" are trustworthy

if not, you're just spewing bullshit

i hate that shit

p.s. does anyone actually read ZDNet?

I don't, no.

@ewwhite Yeah, I think the official line was that it was a single file of 3.5 code

not the whole codebase

@MDMarra Twitter seems to be the new outlet for yellow journalism

I thought VMWare was pretty clearly based on Linux...

@ewwhite: basically don't you just point your DNS records to point to the load balancer's multiple IP's, and the load balancer will reply?

@Basil - that was my understanding too

@Basil at that time, it was a Linux install that bootstrapped VMWare's kernel

RedHat-like...

it later moved to Busybox

@ewwhite Oh, so it's not the vmware kernel at issue but the bootloader

@BartSilverstrim I think so... I just tried sshing to an IP on the secondary link's range, and it worked... so inbound is available as long as we can manage DNS

@Basil not sure.. maybe there's some linux code in the VMWare kernel?

@ewwhite The kernel is obviously and openly based on Linux

afaik

@ewwhite Okay, then I'm just missing what pauska was saying I'm an idiot about.

not sure there.

I thought it involved round-robining the DNS replies that are redirected to the balancer.

@Basil The service console (which is just a nifty vm) is linux based and is GPL compliant

The hypervisor, however, is completely proprietary

The ZDNet dude was talking about the actual hypervisor code

@MDMarra It's completely possible that, being a writer, he doesn't know the difference between a hypervisor and a VM -- let alone understand bootstrapping. Any thing speculative would probably "make sense" to him.

@jscott he actually made that distinction himself in a reply to someone else about the same thing

he clarified that he was talking specifically about the hypervisor

Oh, wow, gotcha.

I've seen people try and say that some stuff that runs in the service console is on the edge of a GPL violation, but I've never heard anyone say that the hypervisor is stolen code

I think he's just trying to get page views

@MDMarra Clearly...

That's just irresponsible from a senior contributor to a large (albeit crappy) tech site.

@MDMarra Not sure he deserves a link here.... :)

haha

for ridicule via twitter?

It's not like I link to zdnet :p

Fair enough

Twit is the functional word in Twitter

@ewwhite So that's doing geo-IP load balancing via customized DNS responses?

The Elfiq?

@ewwhite Ya

Something like that.

I haven't configured it yet.

Just happy to get browsing traffic onto another link

(I put a Barracuda Web Filter in, but the company decided to allow users to watch youtube at work)

@ewwhite Oh wait, so you use it for outgoing traffic? scrolls back farther

Outbound and inbound (eventually)

@ewwhite - I prefer to QoS that shit :)

@ewwhite: from what I can get from the white paper, it involves getting your DNS to point to the load balancer which then replies with which link IP the external client should use, so it's round robin to balance. That should mean persistent links can't easily fail over and if a link fails there could be a pause for some clients trying to reach your site. Sound about right?

Probably, but no worse than other methods...

@ewwhite So it's solving two separate problems in a nifty way? Hmm

I think so. It seems more robust than the Fortigate firewall solution pushed by ISPs...

(I'd lose control of NATing and firewall rules)

@ewwhite My mom has a Fortigate at her K-8

and shadier appliances like the Peplink and Barracuda

LOLsauce... the Ubuntu 12.04 installer (Perspiring Penguin) shows you tweets talking about Ubuntu during the installation.

9 times out of 10 when there's an issue they tell her its her DCs/DNs/blahblahblah and it's the fortigate

@MikeyB - like real time?

@SpacemanSpiff Yeah

Mmm... Zenoss 4.0 alpha is looking yummy

@MDMarra We run Fortigates here for a large number of our customers. To my knowledge, we've not had any notable problems.

I know a lot of people who are very happy with them

The Dell kool-aid has our sales guys pushing SonicWall more and more

@wfaulk FOr me, it's losing the management

@ewwhite Understood.

Alright, here's a doozy... Anyone recommend a telnet and/or ssh server for FreeDOS?

you ask that as if there are dozens to choose from

Realistically, though, FreeDOS isn't multitasking. You could make a connection, but then you couldn't run anything else

Has anyone here heard of a \LOCAL group on a Server 2003 box?

@wfaulk Interesting.... We have a FreeDOS PXE-booting image which runs a client management agent (Altiris), which I am able to remotely execute commands with. I am curious how the agent is connected whilst the commands are executed then...

I found it in a permissions list on one box, but can't actually see it in Local Users & Groups.

@wfaulk the lack of multitasking and multiuser ability doesn't mean it can't have some sort of remote console ability

@Iszi Just "Local" with nothing else?

FWIW, when I actually used "Real" DOS, I didn't have networking, so I hadn't even thought about any of this until just a few moments ago.

WOOT!

I just won a Palo Alto PA-200 :D

@ChrisS No... \LOCAL

Back-slash included.

So perhaps my original question is invalid... I should be asking: "Does anyone know of a ssh/telnet/other-network-interactive-cli which can run inside Altiris Agent/BootWorks for FreeDOS."

@Iszi Looks suspicious. A 0 instead of an O?

@wfaulk Could be that the people managing it for her are dimwits

@jscott Now that I think about it, DOS did have TSRs. Never thought about how they worked, though

@wfaulk Ah! yes, TSR, thanks for the reminder.. That should help with Googlage...

@MDMarra I can tell you that a large number of the people we have managing them here are dimwits and it still doesn't break. There are certainly different levels of dimwittedness, though

@Iszi The backslash without anything infront of it just indicates that the name is relative to the local machine, nothing strange. The group name however, isn't a standard one.

@MikeyB No, it's a letter "O".

@ChrisS Like I said, I couldn't find it in lusrmgr.msc.