RFC 1918 addresses on public Internet routers. What could possibly go wrong?

@MichaelHampton The world hating you and not talking to you for starters

Not much. You just use the same IP as yourprovider who is leaking them.

@MDMarra yes

@Jacob Well...the world already hates these guys, it seems...

I went looking for the answer where I'd written about RFC 1918 addresses on public routers before..... I'd written it on mSO.

using an RFC1918 won't magically break pMTUd

if a router along the return path applies reverse path-filtering, it will of course

but that ONLY applies if the router with the RFC1918 address is the one with disparate MTUs

@Olipro Maybe so, but if somebody put an RFC 1918 address on a public router, they are probably a total idiot who screwed up every other aspect of its configuration too.

depends on which side it's facing

@Olipro It's still really likely to screw everything up...

quantify "really likely"

IP addresses are just numbers, the computer doesn't care

Anybody with half a clue is going to drop RFC1918 traffic coming from the public network. I had to traceroute from several different points before I could find a route that got through and didn't drop it.

^^that

@ewwhite Davalan users tonight?

so like I said, reverse path filtering

and again, it's irrelevant if the router with the private address doesn't have disparate MTUs because it will never have to send an ICMP fragmentation needed

@MDMarra When you get a chance to skim that link, I'd really appreciate.

Oh noes I've been Scroogled!!!!!!1 :P

@Jacob link me again

@Tanner I'd rather get scroogled than Banged by Bing(tm)

@MDMarra serverduck.com no rush still a WIP

@Olipro They're doing something funky on that bit of the network. tracepath reports Resume: pmtu 1500 hops 14 back 48!

that means there's an asymmetric route

@Jacob I'm just glad Google saved my dumb ass from sending that email with no attachments. Scroogle away! See if I care.

I know what it means.

which is entirely plausible, you'd need to examine the BGP tables on both sides

@MDMarra Hmm.

wonders where the actual network engineers are around here

@Jacob ServerDuck is a part of [The Gamer Hoster Corporation] (make this a link), but don't let our fun name to mislead you! We are very serious about providing the best hosting experience by offering the highest quality hardware and networking that we can. We only use SuperMicro and Dell server hardware along with the best networks across the US to provide you with the best hosting experience that we possibly can.

We currently offer services out of four data centers across the United States along with 24/7 support for your every need.

@Olipro Err, there is no need for shit like that, @MichaelHampton is very good at what he does.

You should look for duplicate words that are in the same compound sentence, like "experience" in the current version

@Jacob Haha, thanks but in this case I'll defer to the experts... I'm just trying to figure out what the hell's going on.

Avoid that kind of thing, it's usually a sign that you can compact the sentence

@MDMarra Send me your PayPal Address, I'll buy you Starbucks/lunch for your help :)

@Jacob that's nice of you to come to his defence like that, but I'm sure he's a big enough boy to stand up for himself, and I meant it only in good humour

@Jacob I appreciate it, but don't worry about it

Just remember me when your company is huge and you're rich

:)

@MDMarra 10-4

not that I'm accusing you of sycophancy of anything of course

But I'd have to have Windows servers for you to work on :(

:P

@Jacob I'm rapidly tracking toward management anyway

@MDMarra and you'll be out-of-date soon!

That's why I need to stay fresh with your produce companies!

"Fresh" "produce" get it?!?

har har

no.

@MDMarra chirp chirp

I don't get it

ಠ_ಠ

ME GUSTA

Es gefallt mit mir

@Olipro Whenever we see anybody who claims to have a CCNA, they usually don't know which end of their ass is which, let alone a network.

well, a CCNA is setting the bar pretty low

I've had DC support techs with a CCNA who couldn't remember how to trunk a switchport

"You want me to put what in my trunk?"

@MichaelHampton "I don't have a trunk" "I own a Truck."

"and this is where we pack the fudge"

nothing wrong with a little brotherly love after-hours right?

I think my favorite was... "What's a VLAN?"

heh

you think that's bad

@MichaelHampton I like when it's pronounced similarly to flan

we interviewed a guy recently who was allegedly a CCIE

except for the fact he couldn't explain what ARP was

F-LAN? Yeah, sometimes the LAN is pretty F-ed.

actually, the starting question I had was "what is the difference between ARP and Neighbour Discovery"

@MichaelHampton like vuhlan

ARP is IPv4 only, ND is IPv6 only?

lol, you already know more than that guy

I've got a /48 at home, I'd better know something :)

guesses it's a HE tunnel

SixXS.

@MichaelHampton You also know what to do when your AD starts advertising bogus routes

@MDMarra Yes, turn it off.

:)

did SixXS get generous? I swear they were only dishing out /56s

@Olipro They give you a /64 to start, and then you can ask for a /48 whenever you're ready.

@Olipro Knowing my ISP, Bigpond, they would give you a /128 if that were a valid subnet

so... not when you require a certain number of rep points

@MarkHenderson it's valid, you'd just have to route it over link-local

This is IPv6, you're supposed to hand out allocations like candy!

actually, that's generally how it works with cable suppliers if you're implementing DHCPv6

with DHCPv6-PD you can get a /64 or larger, end hosts just get a /128 routed to their link-local

If Comcrap doesn't give me at least a /56 I'm going to be yelling very loudly at some poor "network engineer"...

@ewwhite the list you just sent me looks different!

Comcast already do DHCPv6-PD

@MDMarra Yeah, I know... weird.

They haven't rolled it out here yet.

@Olipro Not here... not yet anyway.

ah, you're probably on their Cisco gear

@ewwhite They apparently didn't want to send out department? And why are the initials there?

everywhere that they've rolled out Arris stuff you can get IPv6

No, I live in a small city in New Hampshire.

No clue.

Don't think the headend is Arris here.

@ewwhite Fun

THis is produce.

So they all need an AD user and exchange mailbox. Anything else?

wait what the fuck is this

they got rid of the "first name" "last name" columns and just replaced it with "name"

ಠ_ಠ

your client is a moron

"tokenize on the whitespace" they said, "it'll be fine", they said

And approximately 1/3 of the users are in all caps for some reason

It's ok now. I just got a beer

hey now, it's CRUISE CONTROL FOR COOL

@MDMarra ALL CAPS MEANS I'M IMPORTANT, YOU INSENSITIVE AS!!!!!111

IMPORTANT MAILS HAVE A HIGHER PRIORITY FOR THE TRASHCAN!!!11!

@HopelessN00b still in LA?

@ewwhite They employ a disproportionate amount of Joses

20%+ of the staff is jose

@MDMarra they get emails addrs? I want teh Pic :)

a LOT of J's

caps lock is because Produce Pro is case-sensitive

another produce client called...

So one person didn't fill this out?

"we moved our DNS to network solutions... but it didn't go well, so we moved back to our hosting provider"

"and now we can't get any email!!!"

At the next client tell them to fill in the information exactly as presented. I hate manually editing data in spreadsheets ;)

@ewwhite awesome

"Where's your mail server?" "Oh, outlook.com"

and this client uses a local managed service provider

who managed to f-up a DNS move...

@Jacob no, sitting on the tarmack in Houston, I think. Some big Texas city... waiting to get home to my bed and TVs and my boxen.

ha

they set TTL to 15 minutes on the DNS server they were leaving... but it was like 24 hours on the network solutions side.

and then they undid it...

so their domain is in internet purgatory...

lots of fun there

@ewwhite I think I figured out the appeal of consulting... making money off of idiots instead of working for them... or while working for them, I guess.

@HopelessN00b the dynamic changes...

I just yelled at the client for not knowing their network solutions or DNS credentials... and letting a clearly incompetent MSP manage their setup.

@ewwhite what's the name of the exchange server there?

The MSP moved them to a double 3-host ESX cluster... but the client still paid me $6k to fix all that was broken.

@MDMarra banananananana

@ewwhite No offense, no matter how good you are, you'd be done as soon as you started to yell at me.

I need the Exchange AD PowerShell extensions, so I'm going to run this script there instead of installing them on the DC

@Jacob The dynamic changes when people need help.

@Jacob Dude, sometimes clients need to be yelled at

and you're NOT their employee.

"Halp... we have 2,000 emails that can't get out because we chose Wednesday afternoon to change DNS providers..."

"Halp... we can't get to our website."

Take for example yesterday, I had a our largest client come to me and ask me to do 2 weeks worth of work in 2 days, without any warning, disregarding the fact that I'm fully booked until about December 2019, but they pulled their muscle about being such a big company. There are times to be humble and there are times to be proud and there are times to tell someone, in no uncertain words, that they've done something dumb

Especially when they let someone else fuck up a network that you're tasked with keeping online

And if you'd fire @ewwhite just because he stood up for his professional standards, well your loss

@MarkHenderson I guess the dynamic changes, but I have some awesome stories on that topic.

@Jacob About firing people because they told you something you didn't want to hear?

Yeah, the customer at work who was down for 18 hours because they requested a bare-metal restore to fix their Linux web server.

I imagine that @ewwhite is like The Wolf (Harvey Keitel) from Pulp Fiction

I deal with a lot of crap consulting-wise.

@MarkHenderson No,(Not comparing this to @ewwhite who I greatly respect) but about people demanding the wrong stuff.

Getting calls from Guillermo in the middle of the night...

So. CentOS. It has a gui

Needless to say this I was not expecting

@MarkHenderson yep.

it's pretty put-together.

I'll say

It even has a really nice ascii progress bar

Not like the normal shit that never ends

@MarkHenderson My father does HVAC stuff(like 1M plus stuff) and he gets calls from people who complain that the server room isn't 55 degrees. Like at a regional Chase branch recently, so after explaining that 65 degrees is fine to the brilliant consultant he charges them 500$ for an hour on a Saturday.

CentOS is a clone of RHEL

so yeah...

only difference is that the branding is stripped

it's otherwise binary-compatible

(the thermostat is on the hot isle) So the cold side is really like 55 if the thermo reads 60

@Jacob Haha I remember I royally pissed off a hire car maintenance guy once, because I broke the hydraulic lifter on the back of the truck. The hire cost me $450 for the weekend, but it cost him $900 to get a man out to replace a single fuse

Oh and he locks the T-Stat to above 63 degrees.

@MarkHenderson huh? how'd you break it?

@Jacob Squished the cable for the remote between the lifter and the truck

Shorted it out

@MarkHenderson ok? this sounds fun?

Ironically my 2 year old son had been driving the lifter all day and had been doing a great job, but he had run off to play in the traffic or something so I decided to do it myself

@MarkHenderson Wat?

@Jacob Not really. Remote for the lifter is on a long cord. Cord got jammed between the tray on the truck and the lifter as the lifter went from the ground to the truck.

I hate when you have so many tabs that Firefox won't even show them all.

@Jacob I used to do that. Now I close tabs pretty aggressively, and use reopen and recent history a lot.

Tab Mix Plus can help with that issue

@MDMarra the davalan users

I have just 16 tabs across two windows right now.

what to use for login names?

jose1, jose2, jose3, .... jose312, jose313, jose314, ...

@ewwhite what about them

@MDMarra for produce pro, they use first initial-last name

mmarra, amiller, jcruz...

oh, the same

yeah

@ewwhite those should all be created. Just verifying that the mail attributes were assigned correctly now

Shit, you can't star a deleted message!

Haha

It was evidence :P

ha

@ewwhite Why can't my domain admin account do anything in exchange?

@ewwhite How do you do what you do without drinking heavily? Or do you? Tell me honestly.

Do I need to be in another group as well

(I should know this)

Send your IT department to us. We will make them suffer.

Er, I mean answer all their questions. Right?

@MDMarra um

The EMC says I don't have any roles

But I just used the exchange powershell cmdlets to make a bunch of users and mailboxes

oh lord

also, what's that 172 address as the secondary DNS server there?

@MDMarra You just need @ewwhite to break out the super server intimidation power :)

wtf

Is that just now?

¡no hay usuarios!

I just added myself to org management

do this with the ADMINISTRATOR user.

That might be the ticket

too many exchange attributes.

I don't want to have to debug active sync issues in two weeks.

yeah now I can mod stuff in exchange

lets try this again

`you're breaking my Exchange!

It's @Chopper3! How you feeling today?

@ewwhite not yet

How is this remotely acceptable, VMware

shortly

@JoelESalas don't expect to be productive on VMware and a mac.

@ewwhite I know, I have to use Parallels to do anything good

@MDMarra you're probably messing me up

non-Exchange admin!!

BURNINATED BY @EWWHITE !!!

@ewwhite what do you mean

are you doing stuff on it?

Exchange attributes get all weird... if domain users aren't setup properly, something it breaks stuff like activesync or calendaring or whatever...

:)

Ok, users are made. They have mailboxes. Their alias is the same as their user name.

I'll email you the default password that must be changed on next logon

FAIL!

@MDMarra THAT'S AN AUTOMATIC BEATDOWN!

Fail where?

@Jacob Trust me, that's super secure

@MDMarra Wat?

@ewwhite What's the problem

@Jacob JK, but compared to how they normally operate...it's fort knox

Produce companies don't like that display format.

givenName surName

Is the comma thing a default?

@ewwhite Ok, well give me parameters man

I don't read minds

@jscott Nah

$DisplayName = "$Lname, $FName"

First Name Last Name...

Ah, scripted

Easy fix then

@ewwhite Can be fixed in 1 min

because the people who enter these names...

will be doing so manually...

and you have to think like a non-technical user

And if we're just all picking on the resident Senior Windows Engineer, what's up with ALL CAPS in mail?

(granted, surname, firstname scales better)

@jscott it's how it was filled in on the .csv that was returned to me

lowercase email addresses, please

I'm going to have to add address policy rules anyway...

but still.

All caps is used because they want a balanced plan between normal and capital letters. Can't have you run out of one kind while you still have a large supply of the other. That would be wasteful.

sigh ok so lowercase usernames and email addresses and first last instead of last,first

anything else?

I'm sure he's taking notes to actually document the requirements post-implementation.

:)

Small businesses, man

@Hennes When I SHOUT your name in an EMAIL it means it IMPORTANT.

In that case, @HENNES please. :)

DAMN TAB Completion.

We need to configure [Tab] to DWIM

@ewwhite ok. I'll delete those mailboxes/users and start again

@MDMarra Damn, you're good. I would have typoed 2-3 times in that brief a period.

@ewwhite ok better?

@jscott I typoed in writing the script

$LName - $_.LName

I couldn't figure out why everyone was being made as ", $FName"

Only took like 2 minutes to figure out, but I was like, ummm

mmmhmmm

I take it you saw the email with the default pw?

Please don't ask me to change it to "We want starfruit!1"

I think you sent the email to [email protected]

@MDMarra Oh yeah, I often do a $_ when I really meant to $_.someProperty and I can't even see the typo when reading the script. I know I was not meant to be a programmer.

I did - instead of = :(

One key to the right, close.

And I was writing the script in a windowed/scaled RDP session across a somewhat laggy vpn connection

I need to turn down my RDP settings

@ewwhite I replied to your email

now I need to get OWA working... and IIS doing the right things so that users can change pass from the website.

Ok, my work here is done

Until you're ready to tackle printing

I'll ask them about printers.

I should probably go to LA next week

ok

so it's the end of the month...$$ :)

psssh

@ewwhite You can just take off of the day job like that?

Hey, I just had to buy a new ipad since I turned in my work ipad

Tough life, right?

Actually, I have tomorrow and Monday off.

@Jacob I'm persuasive.

@MDMarra I'm sure your pay raise will compensate

@ewwhite Useless without friday off.

I'm remote... and a couple of meetings.

so doesn't matter where I am.

@Jacob my raise is going to get me a down payment for a house

Work with Ed is paying for toys

@MDMarra house...

Work with work is paying for living in the philly burbs

@ewwhite did you get yours yet?

try putting $200k down.

no, we lost it...

:(

they took another offer.

I'm not looking to spend more than 300k on my first place

@ewwhite I'd much rather buy a super car for that, but that's just me

because the other party was willing to waive an inspection contingency.

(which is nuts)

@ewwhite They'll get F'ed don't worry.

I'm no Ed White. bling bling

Woo website almost complete, 3 more pages

@MDMarra my first place was $205

in 2003

@mdmarra firewall programming

firewall programming?

Firewall programming?

yes, developing a ruleset for this cisco asa

I like to call it "programming"

Yeah, I suppose you can get away with that. :)

permit ip any any There, it's programmed.

VPN's, rules, multiple servers, DVR's, VoIP systems, e-commerce and all of that goodness.

"the owner wants to be able to see the banana room video camera from home"

Why not let him see it from his iPhone?

I wish...

HE wishes...

these companies will spend $400k on security and cameras...

but balk at buying a tape drive

so I've started offering backup services.

because people don't like changing tapes.

Really Mt.Gox, I know I'm under 18, but I'm applying on behalf of a Corporation. -_-