| 00:01.10 | *** join/#utah dfinn (~Adium@66.97.133.7) |
| 00:38.06 | *** join/#utah jnbek (~jnbek@pdpc/supporter/active/jnbek) |
| 00:43.31 | *** join/#utah Migs (Migs@205.122.50.64) |
| 00:59.28 | *** join/#utah mindjuju (~mindjuju@173-10-26-193-BusName-utah.ut.hfc.comcastbusiness.net) |
| 01:10.23 | *** join/#utah wps (~wps@199.101.224.169) |
| 01:20.38 | *** join/#utah RyanE (Piadas@rberick.dsl.xmission.com) |
| 01:43.29 | *** join/#utah saturdayplace (~trevor@71-37-80-131.slkc.qwest.net) |
| 01:43.46 | saturdayplace | So, I keep locking myself out of my box trying to get egress filtering going in my iptables. |
| 01:44.02 | ezakimak | so stop doing that |
| 01:44.14 | saturdayplace | Oh, that's where I keep going wrong... |
| 01:44.19 | ezakimak | :) |
| 01:44.44 | saturdayplace | At the moment, all I want is to run an HTTP server and be able to connect over SSH |
| 01:44.58 | saturdayplace | Inbound rules seem to be working. |
| 01:45.13 | ezakimak | so why bother with outbound rules? |
| 01:45.27 | saturdayplace | defense-in-depth |
| 01:46.04 | saturdayplace | in case somehow someone's able to somehow get their script onto my box, I want to limit it's ability to connect out |
| 01:46.08 | ezakimak | test your rules on a local machine first :) |
| 01:46.22 | ezakimak | if they get their script on your box, don't you have other problems? |
| 01:46.58 | ezakimak | rule #1 never run any services on your router. (except for ssh) |
| 01:47.26 | ezakimak | wise to use a diff. port for that as well |
| 01:47.47 | ezakimak | unless, those services are isolated in a chroot or vm |
| 01:48.39 | ezakimak | the former is still not so safe as the latter |
| 01:50.16 | ezakimak | if your inbound rules work, the only outbound rule you may need is to simply only accepts -m state --state ESTABLISHED,RELATED |
| 01:50.22 | ezakimak | in your outbound |
| 01:50.31 | saturdayplace | tried that |
| 01:50.37 | saturdayplace | It's in there. |
| 01:50.54 | saturdayplace | But when I change the policy: -P OUTPUT DROP, then my connection dies. |
| 01:51.10 | ezakimak | what's the match count on that rule? |
| 01:51.47 | ezakimak | you could also just filter on sport |
| 01:51.56 | saturdayplace | Hm, maybe I didn't try that... |
| 01:52.05 | ezakimak | hey, gotta go. bb in ~2hrs. good luck! |
| 01:52.26 | saturdayplace | thanks |
| 01:53.37 | saturdayplace | Hey, that worked. |
| 01:53.47 | saturdayplace | I must have been doing something else, and thought I was doing that. |
| 02:21.43 | *** part/#utah saturdayplace (~trevor@71-37-80-131.slkc.qwest.net) |
| 02:36.41 | *** join/#utah programmerq (~jefferya@saffron.programmerq.net) |
| 02:52.30 | *** join/#utah macnewbold (~macnewbol@c-67-172-228-255.hsd1.ut.comcast.net) |
| 03:10.22 | *** join/#utah mindjuju (~mindjuju@173-10-26-193-BusName-utah.ut.hfc.comcastbusiness.net) |
| 03:32.05 | *** join/#utah jnbek (~jnbek@2607:f358:1:fed5:22:0:7147:e4f9) |
| 03:32.20 | *** join/#utah jnbek (~jnbek@pdpc/supporter/active/jnbek) |
| 04:13.22 | *** join/#utah kendsnyder (~kendsnyde@207-224-204-45.slkc.qwest.net) |
| 04:14.25 | *** join/#utah cdhop_ (~cdhop@c-67-177-14-148.hsd1.ut.comcast.net) |
| 04:18.42 | *** join/#utah tiwula (~lane@63-248-12-52.static.sdyl0420.digis.net) |
| 04:38.44 | *** join/#utah resplin (~resplin@esplins.org) |
| 04:42.02 | *** join/#utah smcquay (~smcquay@69.169.186.70.provo.static.broadweavenetworks.net) |
| 05:03.17 | *** join/#utah cdhop_ (~cdhop@c-67-177-14-148.hsd1.ut.comcast.net) |
| 05:10.39 | *** join/#utah smcquay (~smcquay@69.169.186.70) |
| 05:46.17 | *** join/#utah smcquay (~smcquay@69.169.186.70.provo.static.broadweavenetworks.net) |
| 05:47.05 | *** join/#utah wps (~wps@199.101.224.169) |
| 05:57.25 | *** join/#utah cdhop (~cdhop@c-67-177-14-148.hsd1.ut.comcast.net) |
| 06:01.32 | *** join/#utah macnewbold (~macnewbol@c-67-172-228-255.hsd1.ut.comcast.net) |
| 06:18.54 | *** join/#utah bgerber (~gerberb@168.103.176.50) |
| 06:41.16 | *** join/#utah macnewbold (~macnewbol@c-67-172-228-255.hsd1.ut.comcast.net) |
| 06:51.32 | *** join/#utah cdhop (~cdhop@c-67-177-14-148.hsd1.ut.comcast.net) |
| 07:11.36 | *** join/#utah jessek (acda8430@gateway/web/freenode/ip.172.218.132.48) |
| 07:20.39 | *** join/#utah macnewbold (~macnewbol@c-67-172-228-255.hsd1.ut.comcast.net) |
| 07:57.26 | *** join/#utah macnewbold (~macnewbol@c-67-172-228-255.hsd1.ut.comcast.net) |
| 08:27.19 | *** join/#utah mindjuju (~mindjuju@173-10-26-193-BusName-utah.ut.hfc.comcastbusiness.net) |
| 08:36.59 | *** join/#utah mindjuju (~mindjuju@173-10-26-193-BusName-utah.ut.hfc.comcastbusiness.net) |
| 08:39.39 | *** join/#utah cdhop_ (~cdhop@c-67-177-14-148.hsd1.ut.comcast.net) |
| 08:40.05 | *** join/#utah macnewbold (~macnewbol@c-67-172-228-255.hsd1.ut.comcast.net) |
| 09:20.44 | *** join/#utah macnewbold (~macnewbol@c-67-172-228-255.hsd1.ut.comcast.net) |
| 09:34.03 | *** join/#utah cdhop_ (~cdhop@c-67-177-14-148.hsd1.ut.comcast.net) |
| 09:43.40 | *** join/#utah fugue88 (~dsowen@173-165-137-65-utah.hfc.comcastbusiness.net) |
| 09:59.43 | *** join/#utah macnewbold (~macnewbol@c-67-172-228-255.hsd1.ut.comcast.net) |
| 10:28.08 | *** join/#utah cdhop_ (~cdhop@c-67-177-14-148.hsd1.ut.comcast.net) |
| 10:42.52 | *** join/#utah macnewbold (~macnewbol@c-67-172-228-255.hsd1.ut.comcast.net) |
| 11:22.15 | *** join/#utah cdhop_ (~cdhop@c-67-177-14-148.hsd1.ut.comcast.net) |
| 11:23.46 | *** join/#utah macnewbold (~macnewbol@c-67-172-228-255.hsd1.ut.comcast.net) |
| 11:51.35 | *** join/#utah mrpull (~jpollmann@71-35-244-172.slkc.qwest.net) |
| 12:04.40 | *** join/#utah macnewbold (~macnewbol@c-67-172-228-255.hsd1.ut.comcast.net) |
| 12:16.22 | *** join/#utah cdhop (~cdhop@c-67-177-14-148.hsd1.ut.comcast.net) |
| 12:45.23 | *** join/#utah macnewbold (~macnewbol@c-67-172-228-255.hsd1.ut.comcast.net) |
| 13:10.29 | *** join/#utah cdhop_ (~cdhop@c-67-177-14-148.hsd1.ut.comcast.net) |
| 13:25.44 | *** join/#utah macnewbold (~macnewbol@c-67-172-228-255.hsd1.ut.comcast.net) |
| 13:56.27 | *** join/#utah pdayton (~pjdayton@67.21.63.152) |
| 13:58.12 | *** join/#utah pdayton (~Adium@67.21.63.135) |
| 14:04.34 | *** join/#utah cdhop (~cdhop@c-67-177-14-148.hsd1.ut.comcast.net) |
| 14:05.51 | *** join/#utah macnewbold (~macnewbol@c-67-172-228-255.hsd1.ut.comcast.net) |
| 14:06.43 | *** join/#utah emcnabb (~emcnabb@cpe-065-190-142-224.nc.res.rr.com) |
| 14:06.44 | *** mode/#utah [+v emcnabb] by ChanServ |
| 14:07.37 | *** join/#utah emcnabb (~emcnabb@cpe-065-190-142-224.nc.res.rr.com) |
| 14:07.38 | *** mode/#utah [+v emcnabb] by ChanServ |
| 14:20.15 | *** join/#utah tristanbob_w (~tristanbo@oalug/member/tristanbob) |
| 14:22.17 | *** join/#utah emcnabb (~emcnabb@cpe-065-190-142-224.nc.res.rr.com) |
| 14:22.17 | *** mode/#utah [+v emcnabb] by ChanServ |
| 14:35.26 | *** join/#utah pdayton (~Adium@67.21.63.135) |
| 14:41.14 | *** join/#utah cdhop_ (~cdhop@c-67-177-14-148.hsd1.ut.comcast.net) |
| 14:42.53 | *** join/#utah emcnabb (~emcnabb@cpe-065-190-142-224.nc.res.rr.com) |
| 14:42.54 | *** mode/#utah [+v emcnabb] by ChanServ |
| 14:52.07 | *** join/#utah pdayton (~pjdayton@67.21.63.152) |
| 15:20.26 | *** join/#utah Migs (Migs@205.122.50.64) |
| 15:30.57 | *** join/#utah jalbretsen (~jalbretse@sonic.itransact.com) |
| 15:35.38 | *** join/#utah macnewbold (~macnewbol@69.169.182.227.provo.static.broadweavenetworks.net) |
| 15:37.50 | *** join/#utah opapo (~quassel@204.113.97.235) |
| 15:38.22 | *** join/#utah mrpull (~jpollmann@216.51.56.98) |
| 15:46.54 | *** join/#utah bmidgley (~bmidgley@75-101-111-130.dedicated.static.sonic.net) |
| 15:48.16 | *** join/#utah bmidgley (~bmidgley@70.102.172.254) |
| 15:59.32 | *** join/#utah wps (~wps@69.169.182.226.provo.static.broadweavenetworks.net) |
| 16:04.04 | *** join/#utah fungus (~olsonl@bromine.sosstaffing.com) |
| 16:05.52 | *** join/#utah mahelious (~mahelious@ip65-46-59-10.z59-46-65.customer.algx.net) |
| 16:25.24 | *** join/#utah dfinn (~Adium@66.97.133.7) |
| 16:38.50 | romanovic | youtah, TimRiker: mecworks respond yet? |
| 16:47.11 | *** join/#utah TimRiker (TimRiker@bzflag/projectlead/TimRiker) |
| 16:47.11 | *** mode/#utah [+o TimRiker] by ChanServ |
| 16:57.33 | *** join/#utah tiwula (~lane@195.sub-166-161-154.myvzw.com) |
| 17:04.14 | *** join/#utah mindjuju (~mindjuju@173-10-26-193-BusName-utah.ut.hfc.comcastbusiness.net) |
| 17:09.07 | youtah | romanovic yeah, mecworks responded to both TimRiker and I. (me over Facebook), so don't worry, he's alive and well |
| 17:09.21 | romanovic | yay |
| 17:10.04 | *** join/#utah smcquay (~smcquay@69.169.186.70.provo.static.broadweavenetworks.net) |
| 17:10.39 | romanovic | did he know what the issue was? |
| 17:12.30 | *** part/#utah smcquay (~smcquay@69.169.186.70.provo.static.broadweavenetworks.net) |
| 17:33.20 | youtah | I think one of the DNS servers were down |
| 17:33.23 | youtah | not sure |
| 17:50.28 | jima | fwiw, the sllug.org web site was broken long before it went down. some php issues, it appeared (iirc). |
| 17:50.42 | jima | i tried subscribing when i moved here, no go. |
| 17:51.55 | shalkie | I subscribed through mail. |
| 17:52.30 | jima | hmm. good idea; i'll have to try that when dns is back. |
| 18:04.31 | unum | now to look and see how well my macro is doing |
| 18:14.57 | *** join/#utah BSPsnw (~BSPsnw@114.sub-70-196-193.myvzw.com) |
| 18:15.38 | BSPsnw | Inversion much? |
| 18:16.25 | shalkie | You clearly were not around a few days ago... |
| 18:16.39 | shalkie | It looks great as far as I am concerned. :-) |
| 18:18.26 | HumanCell | Inversion? Oh ... you're not up in Heber ... :-) |
| 18:22.16 | BSPsnw | How is Heber? |
| 18:26.35 | *** join/#utah pdayton1 (~Adium@67.21.63.135) |
| 18:26.37 | HumanCell | Beautiful, sunny, and clear ... a little fog from Deer Creek. http://www.charlestonutah.org/ |
| 18:26.53 | goozbach | I'm jealous |
| 18:26.59 | goozbach | I wish I was in heber right now |
| 18:27.15 | goozbach | actually later today even which means I would be at the ski resort right now |
| 18:27.18 | HumanCell | Maybe I need to open a co-working space in my barn ... |
| 18:27.27 | goozbach | (any one of them would work...) |
| 18:27.47 | goozbach | HumanCell: I'd gladly pay $15/day for a coworking space there |
| 18:27.57 | goozbach | sadly, You'd only see me at most once a year |
| 18:28.02 | goozbach | as I'm clear out in GA |
| 18:28.39 | HumanCell | goozbach: it's not heated ... yet ... so $15 woul dbe a deal for me! :-) |
| 18:28.43 | HumanCell | What part of GA? |
| 18:29.10 | *** join/#utah bgerber (~gerberb@168.103.176.50) |
| 18:30.04 | goozbach | Athens |
| 18:30.34 | goozbach | well, just give me a rack or two to put servers in and I'll fix your heat problem really fast :) |
| 18:31.36 | HumanCell | I'm finishing my basement bed/bath first ... then considering the barn upgrades. New cement floor, insulated walls, etc. |
| 18:46.34 | Jayce^ | waves at HumanCell |
| 18:48.04 | HumanCell | waves back ... |
| 18:49.10 | goozbach | just watched the entirety of baman/piderman |
| 18:49.12 | goozbach | good stuff |
| 18:49.21 | goozbach | http://www.youtube.com/watch?v=F7-TQdN40Dk&list=PLD0750A49525188E9 |
| 18:51.31 | *** join/#utah pdayton (~pjdayton@67.21.63.152) |
| 19:02.36 | tristanbob_w | goozbach: wow, at least I only wasted 30 seconds! :) |
| 19:06.40 | fadein | does anybody know a way to map the output of `fgconsole' to the corresponding $DISPLAY? |
| 19:15.40 | fadein | maybe what I want to do is ps x | grep tty`fgconsole` |
| 19:16.50 | goozbach | that's pretty much the only way |
| 19:17.14 | goozbach | xauth or the like might have somehting to help with that |
| 19:26.31 | *** join/#utah wps (~wps@69.169.182.226.provo.static.broadweavenetworks.net) |
| 19:29.04 | *** part/#utah dfinn (~Adium@66.97.133.7) |
| 19:49.06 | *** join/#utah utlemming (~ben@67.199.187.66) |
| 20:02.35 | *** join/#utah dkelson (~dkelson@38.73.135.226) |
| 20:41.57 | *** join/#utah pdayton (~pjdayton@67.21.63.152) |
| 21:05.15 | *** join/#utah tiwula (~lane@70.89.246.241-Busname-UT.hfc.comcastbusiness.net) |
| 21:30.15 | *** join/#utah beeg98 (~btaylor@70.102.83.2) |
| 23:25.17 | youtah | This one is for Jayce^ http://ladyahhhahhhh.ytmnd.com/ |
| 23:35.52 | ezakimak | coulda just posted a link to her latest song. |
| 23:35.59 | ezakimak | it's worse than that. |
| 23:40.19 | Gate | http://www.youtube.com/watch?v=ss_BmTGv43M |
| 23:52.51 | ezakimak | awesome. i needed some levity. |
| 23:53.22 | ezakimak | i was thinking rihanah--her latest is awful |