TheGrebs.com:IRC Logs:#linode:2006:01:04

---	Log	opened Wed Jan 04 00:00:23 2006
---	Day	changed Wed Jan 04 2006
00:00	\|-\|	SupaZubon [~crack@frotz.zork.net] has quit [Remote host closed the connection]
00:02	\|-\|	SupaZubon [~crack@frotz.zork.net] has joined #linode
00:03	\|-\|	SupaZubon [~crack@frotz.zork.net] has quit [Remote host closed the connection]
00:03	<warewolf>	sweet, a few new people on RML
00:04	<warewolf>	46 total
00:04	<warewolf>	(linodes)
00:04	<warewolf>	anyone have any thoughts/suggestions for RateMyLinode?
00:05	<[\|^__^\|]>	Checking all file systems...
00:05	<[\|^__^\|]>	fsck 1.37 (21-Mar-2005)
00:05	<[\|^__^\|]>	hmmm
00:06	<[\|^__^\|]>	that didn't look like a fsck -f
00:06	<[\|^__^\|]>	lame
00:06	<[\|^__^\|]>	it finished awfully quickly...
00:07	[~]	[\|^__^\|][\|^__^\|] runs a manual one
00:07	<[\|^__^\|]>	laaame
00:07	<warewolf>	I usually (on really badly corrupted filesysems) run fsck -cfy -C0
00:08	<warewolf>	-c says check for bad blocks, -f is force (as you know) and -y is auto-reply yes. -C0 makes it display a progress bar, which most distros use in initscripts.
00:08	<[\|^__^\|]>	yeah
00:08	<@mikegrb>	http://thedailywtf.com/forums/55270/ShowPost.aspx <-- youwish
00:08	[~]	mikegrb runs away
00:08	<[\|^__^\|]>	that's pretty much what I do
00:08	<[\|^__^\|]>	but this is something I thought my init scripts would handle
00:09	<warewolf>	you touched /forcefsck?
00:09	<[\|^__^\|]>	yeah
00:10	<warewolf>	didn't you run fsck -f on it before and have it correct all the problems?
00:10	<warewolf>	it's still going bonkers?
00:10	<[\|^__^\|]>	no it's not
00:10	<[\|^__^\|]>	but we were rebooted today
00:11	<[\|^__^\|]>	and I want to do an fsck -f after crash reboots like that
00:11	<[\|^__^\|]>	because apparently they weren't happening before
00:11	<warewolf>	e3fs?
00:11	<[\|^__^\|]>	yep
00:11	<warewolf>	it should repair the journal on boot and restore the FS to a consistant state automaticlaly
00:11	<[\|^__^\|]>	Yep
00:11	<[\|^__^\|]>	It really should.
00:11	<[\|^__^\|]>	The fact that it didn't is crazymaking.
00:12	<[\|^__^\|]>	hence my obsessive-compulsive fsck -f
00:12	<warewolf>	did you see anything about the journal being corrupt?
00:12	<[\|^__^\|]>	nope
00:12	<[\|^__^\|]>	never
00:12	<[\|^__^\|]>	but I had been hard-crashed and migrated and rebooted several ways from sunday in my time with linode
00:12	<[\|^__^\|]>	I was on a pretty bad-luck host for a while
00:32	\|-\|	SupaZubon [~crack@frotz.zork.net] has joined #linode
00:58	\|-\|	dddd44 [dhb55@60.49.76.216] has joined #linode
00:59	\|-\|	[i\|moon] [~moon@pool-71-245-177-144.pitbpa.fios.verizon.net] has joined #linode
01:00	\|-\|	cow [~Ap0ll0@loves.girls.who.have.bigtits.and.bigbutts.ca] has joined #linode
01:00	\|-\|	sec39 [~moon@pool-71-245-177-144.pitbpa.fios.verizon.net] has quit [Read error: Connection reset by peer]
01:02	\|-\|	spr [~spr@c-24-10-236-93.hsd1.ut.comcast.net] has quit [Quit: Spoon!]
01:07	\|-\|	funkycow [~Ap0ll0@loves.girls.who.have.bigtits.and.bigbutts.ca] has quit [Ping timeout: 480 seconds]
01:34	\|-\|	harshy [~harshy@cpe-65-24-72-253.columbus.res.rr.com] has joined #linode
01:47	\|-\|	harshy [~harshy@cpe-65-24-72-253.columbus.res.rr.com] has quit [Remote host closed the connection]
02:03	<taupehat>	http://www.youtube.com/watch.php?v=zLElfJ9YCh0
02:16	\|-\|	OvrLrd-Q [erwin@ip70-178-95-111.ma.dl.cox.net] has joined #linode
03:22	\|-\|	cout [~cout@pcp03785369pcs.mplsnt01.sc.comcast.net] has quit [Ping timeout: 480 seconds]
04:30	\|-\|	cout [~cout@pcp03785369pcs.mplsnt01.sc.comcast.net] has joined #linode
05:06	\|-\|	jekil [~alessandr@europa48.univ.trieste.it] has joined #linode
05:24	\|-\|	dopey [matth@uruk-hai.bioinformatics.unsw.EDU.AU] has quit [Quit: Changing server]
05:38	\|-\|	internat [~internat@c210-49-250-210.ipswc1.qld.optusnet.com.au] has quit [Quit: This computer has gone to sleep]
06:11	\|-\|	FireSlash [Liger@0-1pool126-143.nas19.kansas-city2.mo.us.da.qwest.net] has joined #linode
06:19	\|-\|	FireSlash [Liger@0-1pool126-143.nas19.kansas-city2.mo.us.da.qwest.net] has quit [Ping timeout: 480 seconds]
06:47	\|-\|	linville [~linville@azure.tuxdriver.com] has joined #linode
07:04	\|-\|	jekil [~alessandr@europa48.univ.trieste.it] has quit [Ping timeout: 480 seconds]
07:09	\|-\|	Alphi [~Alphi@niversen.dsl.visi.com] has quit [Quit: Alphi]
07:19	\|-\|	Dreamer3 [~dreamer3@0-1pool145-84.nas72.chicago3.il.us.da.qwest.net] has quit [Ping timeout: 480 seconds]
07:21	\|-\|	Dreamer3 [~dreamer3@0-1pool175-16.nas82.chicago3.il.us.da.qwest.net] has joined #linode
07:21	\|-\|	[i\|moon][i\|moon] changed nick to sec39
07:28	\|-\|	internat [~internat@c210-49-250-210.ipswc1.qld.optusnet.com.au] has joined #linode
08:41	\|-\|	Redgore [~Redgore@195.38.75.187] has joined #linode
09:28	\|-\|	Dreamer3 [~dreamer3@0-1pool175-16.nas82.chicago3.il.us.da.qwest.net] has quit [Ping timeout: 480 seconds]
09:30	\|-\|	Dreamer3 [~dreamer3@0-1pool145-181.nas72.chicago3.il.us.da.qwest.net] has joined #linode
09:49	<dddd44>	hello i need help .. is there a way to see what website user trying to access in my office?? my internet using router.. anyone??
09:50	<@mikegrb>	dddd44: I think you've got the wrong channel, as you've been told at least 10 times
09:53	<@caker>	hmm .. factoids--
09:54	<@caker>	!learn Lish as allows you to perform certain actions without having to log into the LPM. Lish's primary function is to allow you access to your server's console, even if networking is disabled. http://www.linode.com/wiki/index.php/Lish_Documentation
09:54	<linbot>	caker: The operation succeeded.
09:54	<@caker>	!lish?
09:54	<linbot>	caker: Error: "lish?" is not a valid command.
09:54	<@caker>	!list factoids
09:54	<linbot>	caker: change, forget, info, learn, lock, random, search, unlock, and whatis
09:55	<@caker>	...
09:55	<@caker>	!whatis lish?
09:55	<linbot>	caker: Error: No factoid matches that key.
09:55	<@caker>	!whatis lish
09:55	<linbot>	caker: "lish" could be allows you to perform certain actions without having to log into the LPM. Lish's primary function is to allow you access to your server's console, even if networking is disabled. http://www.linode.com/wiki/index.php/Lish_Documentation
09:55	<@caker>	linbot: hi
09:55	<linbot>	caker: Error: "hi" is not a valid command.
09:56	\|-\|	dddd44 [dhb55@60.49.76.216] has quit [Killed (weasel ( Ah, why even tell you. Asking something on 7 channels simultaneously is just not going t))]
09:59	\|-\|	dddd44 [dhb55@60.49.76.216] has joined #linode
10:00	\|-\|	jekil [~alessandr@host209-168.pool8250.interbusiness.it] has joined #linode
10:00	<@mikegrb>	weasel++
10:01	<@mikegrb>	+
10:01	<weasel>	:)
10:01	<@mikegrb>	[10:01][10:01] \|-\| 4 - #linode: ban !@tor-irc.dnsbl.oftc.net
10:01	<@mikegrb>	^ was specifically for them
10:01	<weasel>	dddd44 isn't using Tor.
10:02	<@mikegrb>	he used to
10:02	<@caker>	!date
10:02	<linbot>	caker: 11:02 AM, January 04, 2006
10:02	<weasel>	maybe he realized that that way he could only ask in 6 and not 8 channels..
10:02	<@caker>	woohoo .. my birthday.
10:02	<weasel>	happy bday!
10:02	<@caker>	:)))
10:02	[~]	caker decides what to do
10:02	<@caker>	I know .. pay my rent.
10:03	<weasel>	fun
10:05	<@mikegrb>	caker: eat cake
10:05	<@mikegrb>	but not yourself
10:05	<@caker>	mikegrb: I plan on it
10:06	<@mikegrb>	re us constitution applying to everyone and not just citizens:
10:06	<@mikegrb>	"Actually, no, it does not. For example, if you're a forigner and
10:06	<@mikegrb>	you're arrested, you don't have a _right_ to representation."
10:07	<@mikegrb>	doesn't the constitution apply to everyone within the borders? otherwise what is the point of the 14th amendment which says who can become a citizen
10:07	<@mikegrb>	if the concstitution didn't apply to non citizens, the 14th amendment wouldn't apply to anyone and nobody could become a naturalized citizen
10:07	<weasel>	I am so not visiting the US any time soon
10:08	<Redgore>	mikegrb: human rights take over then
10:08	<@mikegrb>	weasel: that guy is almost certainly talking out of his ass, still a good choice
10:08	<Redgore>	if that were the case
10:08	<weasel>	Redgore: as if the US cared about those
10:09	<@mikegrb>	weasel: officially we don't
10:09	<Redgore>	I may be in the states Febuary
10:09	<@mikegrb>	"The U.N. and the Genevea Convention are quaint antiquated things that need not be bothered with."
10:13	\|-\|	jekil [~alessandr@host209-168.pool8250.interbusiness.it] has quit [Read error: Connection reset by peer]
10:13	<@mikegrb>	kvandivo: you are a wise old man, what say you on this? just blog your response, I'll link it in a reply ;)
10:40	<OvrLrd-Q>	psssst, whens that 2.6 kernel upgrade coming with FUSE :P ;)
10:42	<@caker>	possibly today
10:43	<OvrLrd-Q>	really?
10:43	<OvrLrd-Q>	hot grits
10:43	<taupehat>	is it a short fuse? (wakka wakka)
10:44	<OvrLrd-Q>	dont ask me why i did it, but I just made a fake xdcc bot in perl :(
10:44	<OvrLrd-Q>	it even serves up /dev/urandom for the different packs :P
10:51	<dddd44>	hello i need help .. is there a way to see what website user trying to access in my office?? my internet using router.. anyone??
10:51	<taupehat>	look over his shoulder?
10:52	<OvrLrd-Q>	ethereal?
10:54	\|-\|	dddd44 [dhb55@60.49.76.216] has quit [autokilled: network abuse. you will never learn it, will you? Mail support@oftc.net if you feel this to be in error.]
10:54	<@mikegrb>	lolz
10:54	<taupehat>	lol
10:54	<OvrLrd-Q>	heh
10:54	<taupehat>	nevermind, then
11:07	<ppdorapa>	hello people..
11:08	<ppdorapa>	caker are you there ?
11:09	<@caker>	yes
11:09	<ppdorapa>	:)
11:09	<ppdorapa>	did you read my ticket ?
11:10	<@caker>	I did, but don't really understand it, TBH
11:10	<@caker>	1. how much will cost me to have my own linode server ?
11:10	<@caker>	^-- http://www.linode.com/products/linodes.cfm ?
11:10	<@caker>	2. how much will cost me to have my own linux housing ?
11:10	<@caker>	^-- I don't think I can answer that one
11:17	<@caker>	!weather 37216
11:17	<linbot>	caker: The current temperature in Nashville, Tennessee (37216) Conditions & is 60�F (10:53 AM CST on January 04, 2006). Conditions: Scattered Clouds. Humidity: 48%. Dew Point: 41�F. Pressure: 29.89 in 1012 hPa. Visibility: 10.0 miles 16.1 kilometers.
11:17	[~]	caker goes for a ride to pay rent
11:17	<taupehat>	grr
11:17	<@caker>	anybody need anything?
11:17	<taupehat>	!weather 97520
11:17	<linbot>	taupehat: The current temperature in Ashland, Oregon (97520) Conditions & is 35�F (8:53 AM PST on January 04, 2006). Conditions: Overcast. Humidity: 93%. Dew Point: 33�F. Pressure: 30.36 in 1028 hPa. Visibility: 0.8 miles 1.2 kilometers.
11:17	<taupehat>	yeah
11:17	<taupehat>	some heat!
11:18	<OvrLrd-Q>	!weather 727625
11:18	<OvrLrd-Q>	err
11:18	<linbot>	OvrLrd-Q: Error: Could not retrieve weather for "727625".
11:18	<OvrLrd-Q>	!weather 72762
11:18	<linbot>	OvrLrd-Q: The current temperature in Springdale, Arkansas (72762) Conditions & is 50�F (10:48 AM CST on January 04, 2006). Conditions: Mostly Cloudy. Humidity: 58%. Dew Point: 35�F. Windchill: 44�F. Pressure: 30.10 in 1019 hPa. Visibility: 10.0 miles 16.1 kilometers.
11:19	<taupehat>	!weather 99705
11:19	<linbot>	taupehat: The current temperature in North Pole, Alaska (99705) Conditions & is -19�F (7:55 AM AKST on January 04, 2006). Conditions: Partly Cloudy. Humidity: 100%. Dew Point: -19�F. Pressure: 29.99 in 1016 hPa. Visibility: 13.0 miles 20.9 kilometers.
11:19	<taupehat>	brr
11:19	<taupehat>	guess I shouldn't complain
11:19	<OvrLrd-Q>	!weather 67502
11:19	<linbot>	OvrLrd-Q: The current temperature in Hutchinson, Kansas (67502) Conditions & is 48�F (10:52 AM CST on January 04, 2006). Conditions: Clear. Humidity: 52%. Dew Point: 32�F. Windchill: 44�F. Pressure: 30.22 in 1023 hPa. Visibility: 10.0 miles 16.1 kilometers.
11:19	<OvrLrd-Q>	hurm warm there today
11:20	<taupehat>	!weather ou812
11:20	<linbot>	taupehat: The current temperature in Ouricuri, Brazil is 81�F. Conditions: Mostly Cloudy. Humidity: 73%. Wind: SW at 15 mph (24 km/h).
11:20	<taupehat>	LOLz
11:20	<OvrLrd-Q>	was colder there in KS there in alaska, one time I looked
11:20	<OvrLrd-Q>	*then
11:20	<taupehat>	than*
11:21	<OvrLrd-Q>	whatever
11:22	<taupehat>	I'm still chuckling that OU812 resolved to something
11:23	<OvrLrd-Q>	!weather br549
11:23	<linbot>	OvrLrd-Q: The current temperature in Brookings, OR is 45�F. Conditions: Cloudy. Humidity: 71%. Wind: E at 3 mph (5 km/h).
11:23	<OvrLrd-Q>	heh
11:23	<taupehat>	yes, you cannot escape oregon
11:23	<taupehat>	brookings is nice
11:24	<taupehat>	it's on the coast, but is in a particularly warm spot (although there's no such thing as "warm" here in January)
11:25	<ppdorapa>	!weather 33133
11:25	<linbot>	ppdorapa: The current temperature in Miami, Florida (33133) Conditions & is 71�F (11:53 AM EST on January 04, 2006). Conditions: Clear. Humidity: 50%. Dew Point: 51�F. Pressure: 30.03 in 1017 hPa. Visibility: 10.0 miles 16.1 kilometers.
11:25	<ppdorapa>	!weather 33133
11:25	<ppdorapa>	!weather 33133
11:25	<linbot>	ppdorapa: The current temperature in Miami, Florida (33133) Conditions & is 71�F (11:53 AM EST on January 04, 2006). Conditions: Clear. Humidity: 50%. Dew Point: 51�F. Pressure: 30.03 in 1017 hPa. Visibility: 10.0 miles 16.1 kilometers.
11:25	<taupehat>	bah
11:25	<linbot>	ppdorapa: The current temperature in Miami, Florida (33133) Conditions & is 71�F (11:53 AM EST on January 04, 2006). Conditions: Clear. Humidity: 50%. Dew Point: 51�F. Pressure: 30.03 in 1017 hPa. Visibility: 10.0 miles 16.1 kilometers.
11:25	<taupehat>	I'd rather be cold in winter than live in Miami.
11:26	<taupehat>	only town I've ever heard of where it's too dangerous for armoured cars to operate.
11:26	<taupehat>	(they fly choppers instead)
11:27	<[\|^__^\|]>	http://www.virtualcities.com/ons/0rec/03cake.htm <-- mikegrb
11:27	<OvrLrd-Q>	grr
11:27	<OvrLrd-Q>	can't get stupid winamp crossfading to work
11:27	<taupehat>	OvrLrd-Q: amaroK works a bit better in my experience
11:28	<OvrLrd-Q>	uh kinda not using linux
11:29	<taupehat>	oh
11:29	<taupehat>	then you're SOL =P
11:42	\|-\|	iggy_ [~iggy@12.45.184.235] has joined #linode
11:42	\|-\|	iggy [~iggy@12.45.184.235] has quit [Read error: Connection reset by peer]
12:09	\|-\|	jekil [~alessandr@host209-168.pool8250.interbusiness.it] has joined #linode
12:13	\|-\|	jekil [~alessandr@host209-168.pool8250.interbusiness.it] has quit [Read error: Connection reset by peer]
12:17	<sipherx>	is there something wrong with host 51?
12:25	<sipherx>	anyone here?
12:26	<anderiv>	yes
12:26	<anderiv>	I'm not on host51, though, so I can't help you..
12:26	<sipherx>	i think host51 is locked up
12:26	<sipherx>	oh ok
12:26	<anderiv>	sipherx: it's responding to pings.
12:26	<sipherx>	maybe not...
12:27	<sipherx>	i think my node just needed a reboot
12:50	\|-\|	neale [~neale@woozle.org] has joined #linode
12:50	<neale>	so linode is running a transparent HTTP proxy, eh?
12:50	<SupaZubon>	oh?
12:50	<SupaZubon>	hi neale!
12:50	<neale>	apparently
12:50	<SupaZubon>	I haven't noticed it
12:51	<neale>	I'm trying to download this .wmf
12:51	<neale>	and it hangs
12:51	<neale>	but every other file on that site is fine
12:51	<SupaZubon>	I can't imagine a proxy that could handle all the HTTP traffic
12:51	<OvrLrd-Q>	you mean outbound HTTP proxy?
12:51	<neale>	and I can get it from my speakeasy box
12:51	<neale>	yeah outbound
12:51	<OvrLrd-Q>	i'd doubt that
12:51	<SupaZubon>	that strikes me as a rash jump to conclusions
12:51	<neale>	well
12:51	<neale>	it got some attention at least :)
12:52	<SupaZubon>	like deciding that you should go get chili without coordinating with your lunch guest
12:52	[~]	[\|^__^\|][\|^__^\|] sets neale on fire
12:52	<neale>	maybe snort hooked up to something that blocks TCP transactions
12:52	<neale>	anyway
12:52	<neale>	I'm just wondering if anyone can confirm or deny this
12:52	<SupaZubon>	I think it's probably not linode
12:52	<neale>	could be
12:52	<SupaZubon>	but the particular node
12:53	<neale>	no, I tried it on two linodes
12:53	<neale>	lemme try zork
12:53	<SupaZubon>	may have some "firewall"
12:53	<SupaZubon>	or rather
12:53	<SupaZubon>	wait
12:53	<SupaZubon>	I thought you said this was outbound
12:53	<neale>	yeah outbound
12:53	<SupaZubon>	you mean to host the wmf on zork?
12:53	<neale>	hanging on frotz too
12:53	<neale>	no
12:53	<SupaZubon>	and grab it from speakeasy?
12:53	<neale>	I just want to download it from somewhere
12:53	<neale>	I can't download it from my speakeasy box either
12:53	<SupaZubon>	okay dude
12:54	<SupaZubon>	give me hostnames and the success matrix
12:54	<SupaZubon>	I'm lost
12:54	<neale>	okay sure
12:54	<neale>	but before I do
12:54	<SupaZubon>	where is this pr0n hosted, where Can you download it, and where Can't you
12:54	<neale>	everyone please be aware this is a live virus
12:54	<neale>	so if you're using MSIE or something please don't click these links
12:54	<SupaZubon>	heh
12:54	<SupaZubon>	neuter the http
12:54	<neale>	www.srp99.biz/tape/101.wmf
12:55	<neale>	freezes
12:55	<npmr>	Connecting to www.srp99.biz[200.170.214.2]:80... connected.
12:55	<npmr>	HTTP request sent, awaiting response...
12:55	<neale>	www.srp99.biz/tape/ppt1.exe is fine
12:55	<neale>	so
12:55	<neale>	I downloaded 101.wmf
12:56	<[\|^__^\|]>	hmmm
12:56	<neale>	you can get it at kermit.woozle.org/~neale/tmp/101.wmf
12:56	<neale>	or kermit.woozle.org/~neale/tmp/foo
12:56	<npmr>	brazillion ip
12:56	<neale>	but not from a linode, apparently
12:56	<[\|^__^\|]>	odd
12:56	<[\|^__^\|]>	okay
12:56	<[\|^__^\|]>	here's a test
12:56	[~]	[\|^__^\|][\|^__^\|] steps out for a moment
12:57	<npmr>	i can verify that i cannot download either file from my linode
12:57	<[\|^__^\|]>	zork.net/~nick/101.wmf
12:57	<[\|^__^\|]>	zork.net/~nick/102.wmf
12:57	<[\|^__^\|]>	that's GPL.txt renamed
12:58	<[\|^__^\|]>	mime time shows up as text/plain
12:58	<[\|^__^\|]>	mime type
12:58	<npmr>	i can download both from a speakeasy line
12:58	<[\|^__^\|]>	yeah, but that's linode->linode
12:58	<[\|^__^\|]>	what I just tested
12:58	<neale>	ah
12:58	<[\|^__^\|]>	lemme try on flynn
12:58	<@caker>	what URL?
12:58	<npmr>	caker, live virus warning
12:58	<[\|^__^\|]>	flynn.zork.net/~nick/101.wmf
12:58	<@caker>	nod
12:58	<[\|^__^\|]>	and 102
12:59	<neale>	file's on my linode: woozle.org/~neale/tmp/101.wmf
12:59	<neale>	can't seem to pull it either
12:59	<[\|^__^\|]>	I can grab GPL.txt renamed to 101.wmf
12:59	<@caker>	[\|^__^\|][\|^__^\|]: that worked
12:59	<neale>	buf from linode to linode is okay
12:59	<[\|^__^\|]>	but not your copy
13:00	<@caker>	neale: woozle.org/~neale/tmp/101.wmf worked too
13:00	<[\|^__^\|]>	http://flynn.zork.net/~nick/101.wmf <-- this works
13:00	<neale>	[\|^__^\|][\|^__^\|]: your 101.wmf is GPL.txt, right?
13:00	<[\|^__^\|]>	neale: yes.
13:00	<npmr>	i can download both the srp99.biz and woozle sources from an sbc line
13:00	<[\|^__^\|]>	your binary 101.wmf shows up as text/plain
13:01	<[\|^__^\|]>	Length: 16,036 (16K) [text/plain]
13:01	<neale>	I'm thinking something's doing a signature match
13:01	<[\|^__^\|]>	it could be at TP's routers
13:01	<[\|^__^\|]>	have we tested texas vs fremont?
13:01	<npmr>	hang on
13:01	<@caker>	for kermit.woozle.org/~neale/tmp/101.wmf
13:01	<neale>	mine are all in tx
13:01	<@caker>	?
13:01	<[\|^__^\|]>	I think mine are too
13:01	<guinea-pig>	i can't get woozle's from my linode at HE
13:01	<neale>	caker: kermit has the real one
13:01	<npmr>	jordanb's is in fremont, gimme a sec
13:01	<[\|^__^\|]>	caker: I think that one's not the problem
13:01	<neale>	caker: woozle.org has the real one too
13:02	<guinea-pig>	but i can get the others at my linode in HE
13:02	<neale>	no, I can't pull from kermit onto a linode
13:02	<[\|^__^\|]>	kermit.woozle.org/~neale/tmp/101.wmf <-- this one hangs for me
13:02	<neale>	the ones on zork are bogus
13:02	<neale>	(GPL.txt)
13:02	<[\|^__^\|]>	woozle.org/~neale/tmp/101.wmf <-- this one works
13:02	<guinea-pig>	oh wait, kermit works for me
13:02	<OvrLrd-Q>	i can get the kermit.woozle one
13:02	<npmr>	can download both srp99.biz and woozle sources from fremont
13:02	<neale>	so maybe it's texas
13:03	<[\|^__^\|]>	looks like it's TP
13:03	<npmr>	looks like it
13:03	<neale>	fab
13:03	<neale>	so should I open a ticket?
13:03	<[\|^__^\|]>	neale: Effortless Narcotic Professionals
13:03	<npmr>	shall i check charter cable, too?
13:04	<neale>	may as well
13:04	[~]	npmr shrugs
13:04	<neale>	but if they're blocking it at least they have a good reason
13:04	<guinea-pig>	heh
13:04	<neale>	TP blocking HTTP access seems wonky to me
13:04	<@caker>	I doubt that's happening
13:04	<[\|^__^\|]>	caker: oh?
13:04	<npmr>	work from charter cable
13:05	<@caker>	I can get to kermit.woozle.org/ just fine
13:05	<[\|^__^\|]>	caker: from fremont or texas?
13:05	<@caker>	tihs is URL specific, which I kinda doubt they're running some massive transparent proxy thing
13:05	<npmr>	it certainly looks like they are
13:05	<neale>	it's not URL specific though
13:05	<[\|^__^\|]>	it's not
13:05	<npmr>	it's file specific
13:05	<neale>	I can change the filename and it still hangs
13:05	<[\|^__^\|]>	yeah
13:05	<npmr>	perhaps hash specific
13:06	<@caker>	[\|^__^\|][\|^__^\|]: I can get to the homepage of kermit.woozle.org from either, fails to download that specific file from dallas
13:06	<neale>	I'm about to test that
13:06	<[\|^__^\|]>	neale: what if your .htaccess changes the mime type on kermit
13:06	<npmr>	perhaps extension specific
13:06	<neale>	[\|^__^\|][\|^__^\|]: you think they're blocking text/plain?
13:06	<taupehat>	ahh
13:06	<taupehat>	I love having fail2ban
13:06	<[\|^__^\|]>	I'm thinking that it's a signature-check on the actual data sent, they just drop the wotzit
13:06	<neale>	that'd be my guess
13:06	<taupehat>	just got an email:
13:06	<[\|^__^\|]>	neale: no, but I was thinking they may include mime type in the signature
13:06	<taupehat>	The IP '66.100.5.230' has just been banned by Fail2Ban after
13:06	<taupehat>	5 attempts. Hahaha!!!
13:06	<neale>	snort rule tied in to a router
13:07	<OvrLrd-Q>	yea, there is a snort rule for the WMf exploit
13:07	<npmr>	innuresting
13:07	<@caker>	crazyness
13:07	<[\|^__^\|]>	taupehat: what's fail2ban?
13:08	<[\|^__^\|]>	taupehat: does it fail to ban people?
13:08	<taupehat>	SupaZubon: it bans you if you fail2login =]
13:08	<guinea-pig>	taupehat: fail2nameproperly
13:08	<[\|^__^\|]>	haha
13:09	<taupehat>	something like that
13:09	<neale>	yeah, definitely a signature
13:09	<neale>	I xored all the bytes with 1 and I can now download the file
13:09	<@caker>	amazing
13:09	<taupehat>	The IP '66.100.5.230' has just been banned by Fail2Ban after
13:09	<taupehat>	58 attempts. Hahaha!!!The IP '66.100.5.230' has just been banned by Fail2Ban after
13:09	<[\|^__^\|]>	wow
13:09	<[\|^__^\|]>	fial2ban looks good
13:09	<taupehat>	58 attempts. Hahaha!!!
13:09	<taupehat>	it's nice
13:09	[~]	[\|^__^\|][\|^__^\|] backports it
13:09	<guinea-pig>	it took 58 attempts?
13:09	<taupehat>	no
13:09	<taupehat>	I've got it set to 5
13:09	<taupehat>	but the moron is trying a brute-force
13:09	<taupehat>	server's in the US, too =]
13:10	<guinea-pig>	so he's still trying after the bannin
13:10	<guinea-pig>	g
13:10	<taupehat>	yeah it's a script most likely
13:10	<neale>	caker: should I open a ticket? Is TP even going to care?
13:10	<taupehat>	savaje.net
13:10	<npmr>	fail2ban?
13:10	<taupehat>	npmr: yeah
13:10	<[\|^__^\|]>	this will be a good replacement to my cheap hand-hacked rules that I got from mikegrb
13:10	<taupehat>	hang on, I'm going to contact the sender
13:10	<@caker>	neale: They'd probably say no-way to a removal request
13:10	<[\|^__^\|]>	caker: that's my guess
13:11	<neale>	this severely limits the usefulness of the linode we bought to do virus investigations.
13:11	<guinea-pig>	greatly
13:11	<@caker>	plus I'd look shady
13:11	<guinea-pig>	and you aren't shady, are you
13:11	[~]	guinea-pig winks
13:11	<npmr>	neale, you could try migrating it to the fremont datacenter
13:11	<@caker>	neale: run on another port?
13:11	<@caker>	neale: or migrate to HE
13:11	<taupehat>	heh
13:11	<neale>	I'd be okay with migrating
13:11	<guinea-pig>	heh
13:12	[~]	taupehat ain't saying nothing
13:12	<@caker>	neale: send us a migration request ticket, plesae
13:12	<guinea-pig>	yay for HE!
13:12	<neale>	can't change the port, since we need to get stuff frome the wild
13:12	[~]	guinea-pig beats TP down
13:12	<neale>	okay will do
13:12	<npmr>	neale, can you email me that file as an attachment?
13:12	<neale>	BTW, what's "HE" stand for?
13:12	<guinea-pig>	hurricane electric
13:12	<npmr>	hurricane electric
13:12	<guinea-pig>	it's what powers the datacenter... windfarms in the ocean
13:13	<[\|^__^\|]>	taupehat: thanks for the tip on fail2ban
13:13	<guinea-pig>	we're still running off Katrina
13:13	<neale>	npmr: kermit.woozle.org/~neale/tmp/101.wmf.gz
13:13	<npmr>	email, man
13:13	<[\|^__^\|]>	heh
13:13	<@caker>	I'm kinda impressed that TP has a setup like that...
13:13	<npmr>	i want to see if the planet is dropping smtp too
13:13	<neale>	oh
13:13	<neale>	ok
13:13	<guinea-pig>	caker: impressed or not. it's a violation or freedoms!
13:14	<neale>	um
13:14	<npmr>	inkblot@movealong.org
13:14	<neale>	well I'll mail it as soon as I get a mime mail thingy on kermit
13:14	<npmr>	heh
13:15	<npmr>	i'd do it myself but... well, i can't think of any non-TP servers i could send from
13:15	<neale>	:)
13:15	<[\|^__^\|]>	the fail2ban.conf(5) man page is great
13:16	<neale>	there ya go npmr
13:16	<neale>	oh yeah
13:16	<taupehat>	the config is pretty easy to hax
13:16	<neale>	looks like it's getting dropped
13:16	<npmr>	sweet
13:16	<neale>	wait
13:16	<neale>	no
13:16	<taupehat>	neale: is TP trying to drop anything that looks like a .wmf?
13:16	<neale>	kermit isn't exactly configured to send mail
13:16	<neale>	taupehat: not sure
13:16	<taupehat>	what
13:16	<neale>	I only have this one .wmf
13:16	<npmr>	ah
13:18	<guinea-pig>	err, you want it sent from a non-TP host?
13:18	<neale>	meh
13:18	<neale>	how do you tell mutt to change the From:
13:18	<[\|^__^\|]>	my_hdr From:...
13:18	<[\|^__^\|]>	or set edit_headers or edit_hdrs or whatever
13:18	<taupehat>	hmm, this is interesting
13:18	<[\|^__^\|]>	see /etc/Muttrc.d/zork.rc on frotz
13:18	<neale>	nevermind
13:18	[~]	taupehat is in touch with senior IT from the place he's being brute-forced from
13:19	<[\|^__^\|]>	taupehat: I know, but the man page is cute
13:22	<neale>	finally
13:22	<guinea-pig>	npmr: i just sent a copy from Freemont
13:22	<neale>	greylisting
13:23	[~]	taupehat should read it
13:24	<npmr>	isn't nomad.psax.org also at tp?
13:25	<npmr>	ah ha, fremont
13:26	[~]	[\|^__^\|][\|^__^\|] turns on fail2ban mail stuff
13:26	<taupehat>	well, that was cool
13:26	<taupehat>	it's always really nice when you contact a company about abuse and they're actually responsive
13:26	<taupehat>	savaje.net++
13:27	<[\|^__^\|]>	nice
13:27	<taupehat>	yeah
13:27	<[\|^__^\|]>	I'll have to try that
13:27	<npmr>	guinea-pig, got your mail
13:27	<taupehat>	the guy I talked to kind of reminded me of how I'd handle such a situation - he was looking forward to ripping someone a new arsehole
13:27	<npmr>	so smtp's not being checked
13:27	<guinea-pig>	inbound
13:27	<npmr>	right
13:27	<npmr>	bounce it back?
13:27	<guinea-pig>	sure
13:28	<[\|^__^\|]>	npmr: it probably goes by the actual data signature, which MIME would confuse
13:28	<[\|^__^\|]>	npmr: also, make sure you're not both TLS!
13:28	<guinea-pig>	heh
13:28	<npmr>	no tls, no uucp
13:28	<npmr>	dunno about mime
13:28	<npmr>	hmmmm
13:29	<npmr>	Encoding: base64
13:29	<guinea-pig>	attachment is 100% accurate
13:29	<npmr>	drag
13:29	<taupehat>	uucp, heh
13:30	[~]	taupehat calls an @! party!
13:30	<[\|^__^\|]>	bang-party!
13:30	<guinea-pig>	i should set up greylisting
13:30	<taupehat>	at-bang
13:30	<[\|^__^\|]>	yeah, base64 will do it
13:30	<[\|^__^\|]>	that's useful stuff
13:30	<taupehat>	I've got greylisting set up but it doesn't seem to be working
13:30	<[\|^__^\|]>	guinea-pig: postgrey baby
13:30	<taupehat>	=[
13:30	<[\|^__^\|]>	works great
13:30	<taupehat>	yeah I need to tweak it
13:30	<taupehat>	which milter you using?
13:30	<npmr>	ha ha sendmail
13:30	<[\|^__^\|]>	I just set up postgrey and spampd on flynn
13:30	\|-\|	AngelStar [~bethy@bethynkathy.plus.com] has quit [Quit: (home)]
13:31	<[\|^__^\|]>	milter?
13:31	<taupehat>	postgrey, eh?
13:31	<npmr>	[\|^__^\|][\|^__^\|], it's a sendmail thing
13:31	<[\|^__^\|]>	npmr: that's what i figured
13:31	<guinea-pig>	right, i'm still an exim weenie
13:31	<[\|^__^\|]>	guinea-pig: yeah, that can't last.
13:31	<[\|^__^\|]>	guinea-pig: trust me. postfix is now the win
13:32	<[\|^__^\|]>	unless you're like on a tiny system that just needs to run exim out of inetd/cron
13:32	<guinea-pig>	set up works fine. i only have 3 users
13:32	<[\|^__^\|]>	but I have spampd set up with global spamassassin bayes db
13:32	<[\|^__^\|]>	and postgrey
13:32	<[\|^__^\|]>	and a bunch of RFC-ignorant reject rules
13:33	<[\|^__^\|]>	so half my spam gets dropped just for having a bogus HELO
13:33	[~]	taupehat wishes he were on his 120 so he could use spamassassin again
13:33	<[\|^__^\|]>	the other half is quarantined via postgrey
13:33	<[\|^__^\|]>	and then only a teensy amount goes through spampd
13:34	<[\|^__^\|]>	mostly legitimate mails
13:34	<[\|^__^\|]>	and a tiny handful of remaindered spams
13:34	<npmr>	http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330827 <-- [\|^__^\|]
13:34	<[\|^__^\|]>	and spampd is nice and lightweight about the spamassassin stuff
13:34	<npmr>	oh nevermind
13:34	<npmr>	that one's fixed
13:34	<taupehat>	[\|^__^\|][\|^__^\|]: how big a footprint does postgrey use?
13:35	<guinea-pig>	HELO i.love.you.won't.you.tell.me.your.name
13:35	<[\|^__^\|]>	PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
13:35	<[\|^__^\|]>	1147 postgrey 16 0 10732 7504 2424 S 0.0 2.4 0:12.23 postgrey
13:35	<taupehat>	not much
13:36	<[\|^__^\|]>	nope
13:36	<taupehat>	I liked SA but it ran me into swap-thrashing land
13:36	<[\|^__^\|]>	yeah
13:36	<[\|^__^\|]>	you have to use spampd
13:36	<[\|^__^\|]>	as a proxy in your SMTP chain
13:36	<taupehat>	eh?
13:36	<[\|^__^\|]>	yeah, well, sendmail is just one big server
13:36	<[\|^__^\|]>	so it probably has trouble pipelining daemons like that
13:37	<guinea-pig>	spampd better than spamd?
13:37	<npmr>	whoa, braille google logo
13:37	<taupehat>	heh, cook
13:37	<[\|^__^\|]>	but on MTAs that chop up into lots of isolated-privilege daemons, you basically set up chains of daemons, each one able to reject the mail and tear down the chain
13:37	<anderiv>	npmr: yah - caught me by surprise this morning as well.
13:38	<guinea-pig>	npmr: yep
13:38	<taupehat>	louis's b-day =]
13:38	<npmr>	and caker's
13:38	<taupehat>	no way
13:38	<[\|^__^\|]>	guinea-pig: yeah, spampd makes more intelligent use of spamassassin's modules. much lighter on the RAM
13:38	<npmr>	realz
13:38	<taupehat>	he is blind after all =P
13:38	<[\|^__^\|]>	it's my third wedding anniversarry
13:38	<taupehat>	heh
13:38	<taupehat>	it's my one-month divorce anniversary =]
13:38	<[\|^__^\|]>	ouch
13:38	<taupehat>	nah
13:39	<[\|^__^\|]>	PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
13:39	<[\|^__^\|]>	24661 spampd 16 0 29776 26m 2396 S 0.0 8.7 0:06.20 spampd
13:39	<[\|^__^\|]>	24729 spampd 15 0 28776 25m 2396 S 0.0 8.3 0:05.72 spampd
13:39	<[\|^__^\|]>	1281 spampd 16 0 25860 22m 1996 S 0.0 7.3 3:03.75 spampd
13:39	<taupehat>	it was a 2.5-year divorce process
13:39	<[\|^__^\|]>	^-- I keep only 2 spampd children
13:39	<taupehat>	I was more than ready
13:39	<[\|^__^\|]>	and that's them AFTER they've inflated to full size
13:39	<guinea-pig>	heh
13:40	<guinea-pig>	i keep thinking i should set it up so things get piped off to my home box for processing, and piped back to my linode for storage :P
13:40	<[\|^__^\|]>	laptop-mode also helps a lot
13:40	<[\|^__^\|]>	well, RFC bouncing plus greylisting will cut down more spam
13:40	<[\|^__^\|]>	I reject tens of thousands of spams without even spooling
13:40	<[\|^__^\|]>	per day
13:40	<[\|^__^\|]>	and only a dozen get through
13:41	<taupehat>	greylisting will probably eat most of mine
13:41	<npmr>	likewise
13:41	<[\|^__^\|]>	mostly via relayed mail from outside aliases and uucp links
13:41	<taupehat>	I only get about 20 per day anyhow
13:41	\|-\|	Sh8d0w [~Shadow@user-119ap3p.biz.mindspring.com] has joined #linode
13:41	<[\|^__^\|]>	okay, time for lunch
13:41	<OvrLrd-Q>	i hate spamd
13:42	<[\|^__^\|]>	OvrLrd-Q: spampd is your salvation
13:42	<[\|^__^\|]>	much better than spamd
13:42	<OvrLrd-Q>	oh i guess there is a p in there
13:42	<[\|^__^\|]>	yes.
13:42	<[\|^__^\|]>	proxy
13:42	<[\|^__^\|]>	damn fools
13:42	<OvrLrd-Q>	none the less
13:42	<[\|^__^\|]>	okay
13:42	<OvrLrd-Q>	iptables is my salvation
13:42	<[\|^__^\|]>	I'm gone
13:42	\|-\|	alnr [~alan@cpe-69-200-85-107.nyc.res.rr.com] has left #linode []
13:42	<npmr>	you're using iptables to block spam?
13:43	<OvrLrd-Q>	kinda but not really :)
13:43	<npmr>	isn't that tedious?
13:43	<taupehat>	npmr: I do
13:43	<taupehat>	to some extent
13:44	[~]	taupehat blocks most of APNIC via iptables
13:44	<OvrLrd-Q>	when I get mad at an address range i take out a /20 or so
13:45	<taupehat>	heh
13:45	<OvrLrd-Q>	I think I did a /14 at one time
13:45	<taupehat>	http://www.taupehat.com/index.php?blog=6&title=netblock_blacklist&more=1&c=1&tb=1&pb=1
13:45	<taupehat>	I've got a couple of /8 and a /7
13:47	<taupehat>	hmm
13:48	<taupehat>	something's not working right on my greymilter
13:48	<taupehat>	like the inet policy rule isn't being seen by postfix
14:00	<taupehat>	[\|^__^\|][\|^__^\|]: mind having a look at http://pastebin.ca/35742 and helping me understand why it isn't working right?
14:01	<OvrLrd-Q>	you let the black magic out
14:01	<taupehat>	postgrey is working
14:01	<taupehat>	or not working
14:01	<taupehat>	running
14:07	<[\|^__^\|]>	taupehat: looking
14:07	[~]	caker returns from bike ride
14:08	<npmr>	taupehat, you added the 127.0.0.1:60000 line to master.cf, right?
14:08	<[\|^__^\|]>	check_policy_service inet:127.0.0.1:60000,
14:08	<[\|^__^\|]>	that's the main.cf part
14:08	<[\|^__^\|]>	npmr: nono
14:08	<[\|^__^\|]>	npmr: it's when you have a proxy in the chain that you need master.cf
14:09	<npmr>	hmm
14:09	<[\|^__^\|]>	spampd uses master.cf filter magic
14:09	<@mikegrb>	which would matter if they were talking about spampd
14:09	<npmr>	that must have been my last spam filtering misadventure
14:09	<[\|^__^\|]>	postgrey is a simple check in main.cf, because it's OOB of the SMTP pipeline
14:09	<[\|^__^\|]>	hangon
14:10	\|-\|	jekil [~alessandr@host209-168.pool8250.interbusiness.it] has joined #linode
14:10	<npmr>	taupehat, your crazy ass firewall isn't blocking port 60000 on loopback connections, is it?
14:10	<[\|^__^\|]>	taupehat: you can telnet to port 60000 an
14:10	<[\|^__^\|]>	on localhost?
14:10	\|-\|	OvrLrd-Q [erwin@ip70-178-95-111.ma.dl.cox.net] has quit [Quit: ]
14:10	<[\|^__^\|]>	hurg
14:11	<taupehat>	yes
14:11	<npmr>	ymmv
14:11	<[\|^__^\|]>	and if you do a bogus SMTP session
14:11	<[\|^__^\|]>	MAIL FROM
14:11	<[\|^__^\|]>	RCPT TO
14:11	<[\|^__^\|]>	you'll get back status goobers on whether or not you're in the greylist?
14:11	<taupehat>	it says OK
14:12	<[\|^__^\|]>	heh
14:12	<[\|^__^\|]>	yeah
14:12	<[\|^__^\|]>	you're already in the DB
14:12	<[\|^__^\|]>	try bogus from and to
14:12	<[\|^__^\|]>	it could be that postgrey is just configured wrong here
14:13	<[\|^__^\|]>	maybe pastebin your mail.err and mail.log or maybe all postfix entries from syslog
14:13	<taupehat>	all it shows is stuff getting through
14:13	<taupehat>	postgrey says "ignoring garbage" when I telnet to it
14:13	<[\|^__^\|]>	also
14:14	<[\|^__^\|]>	by the way
14:14	<[\|^__^\|]>	some of your tests are in a different section from what I'd use
14:14	<[\|^__^\|]>	reject_non_fqdn_hostname is in smtpd_helo_restrictions for me
14:14	<[\|^__^\|]>	and I have smtpd_delay_reject = no
14:14	<[\|^__^\|]>	globally
14:14	<[\|^__^\|]>	that speeds up RFC-ignorant rejects immensely
14:15	<npmr>	ha ha neale
14:15	<npmr>	Make this your wallpaper. It'll rule.
14:15	<npmr>	[-- Attachment #2: 101.wmf --][-- Attachment #2: 101.wmf --]
14:16	<[\|^__^\|]>	hahaha
14:16	<[\|^__^\|]>	taupehat: lemme pastebin my main.cf stuff for you
14:17	<taupehat>	if the goddamn phone would ever stop ringing =[
14:17	[~]	taupehat is home with a sick kid, and work is going 'OMG HELP!'
14:17	<[\|^__^\|]>	http://pastebin.ca/35745 <-- it ate the whitespace :<
14:18	<[\|^__^\|]>	oh
14:18	<[\|^__^\|]>	hangon
14:18	<[\|^__^\|]>	that's crap
14:18	<[\|^__^\|]>	I'll try again
14:19	<[\|^__^\|]>	http://pastebin.ca/35746 <-- better
14:19	<[\|^__^\|]>	I don't have the RBLs
14:19	<[\|^__^\|]>	I let spampd use them as one factor of many
14:19	<taupehat>	ahh
14:19	<[\|^__^\|]>	but you're welcome to treat them as 100% accurate if you really want
14:20	<[\|^__^\|]>	[nick@frotz(/etc/postfix)][nick@frotz(/etc/postfix)] cat helo_access
14:20	<[\|^__^\|]>	zork.net OK
14:20	<[\|^__^\|]>	zork.zork.net OK
14:20	<[\|^__^\|]>	flynn.zork.net OK
14:20