| 00:10.55 | jlp_znc | So I'm taking a survey, and it gets to the gender question... "Are you... Male, Femail, Other" |
| 00:22.18 | jlp_znc | s/Femail/Female/ |
| 00:35.25 | spangborn | Robot |
| 01:04.58 | *** join/#utah RobertReynolds (~RobertRey@2605:a601:53b:f800:c8a7:286f:6709:21ee) |
| 01:08.30 | frostyfrog | I generally pick Robot. I may try Hacker or frog one of these days, however. |
| 01:20.57 | *** join/#utah infobot (ibot@rikers.org) |
| 01:20.57 | *** topic/#utah is Utah related discussion including user groups | logs @ http://ibot.rikers.org/%23utah/ | See also ##lds |
| 01:20.57 | *** mode/#utah [+o infobot] by ChanServ |
| 01:24.05 | *** join/#utah RobertReynolds (~RobertRey@2605:a601:53b:f800:f84b:3fe3:1d90:6127) |
| 01:43.36 | *** join/#utah RobertReynolds (~RobertRey@2605:a601:53b:f800:9c52:513:cea4:190e) |
| 02:12.55 | *** join/#utah RobertReynolds (~RobertRey@2605:a601:53b:f800:19aa:253b:afe9:e0b) |
| 02:44.17 | *** join/#utah RobertReynolds (~RobertRey@2605:a601:53b:f800:5c40:e591:6358:f1d6) |
| 03:34.31 | *** join/#utah RobertReynolds (~RobertRey@2605:a601:53b:f800:5c40:e591:6358:f1d6) |
| 03:46.22 | *** join/#utah RobertReynolds (~RobertRey@2605:a601:53b:f800:5c40:e591:6358:f1d6) |
| 05:06.31 | *** join/#utah harleypig (~harleypig@harleypig.com) |
| 06:10.20 | harleypig | I'm using ufw (which lays on top of iptables, I know). Is there a way to block *:12345, but allow app.somedomain.com:12345 ? |
| 06:10.25 | harleypig | Does that make any sense? |
| 06:23.07 | TodPunk | blacklist except for a domain |
| 06:23.28 | TodPunk | allow the specific, deny the less specific |
| 06:23.56 | TodPunk | in that order, in fact |
| 06:26.44 | harleypig | Yeah, but how do I allow a specific domain (not ip)? |
| 06:28.12 | TodPunk | a domain is not supported in the linux ip filtering stacks |
| 06:29.25 | harleypig | That's what I thought, but I have someone telling me that I should be able to allow anyone to access app.somedomain.com:12345, but any other connection (like, somedomain.com:12345, someotherdoamin.com:12345) will be rejected. |
| 06:29.39 | harleypig | I just wanted to double check I wasn't missng something. |
| 06:29.43 | TodPunk | so you either need to figure out what your system resolves it to and refresh that resolution in the dns cache WHILE updating the rule's IP, or just use a DNS server rule instead or soemthing |
| 06:29.44 | spangborn | Sounds like a good use for a webserver |
| 06:31.11 | harleypig | I'm using a webserver, but the app wants to connect directly to 12345. I have a reverse proxy so that app.somedomain.com redirects internally, but the app hardcodes app.somedomain.com:12345 |
| 06:31.30 | TodPunk | I'm guessing that person uses a firewall product that supports domains and just assumes all firewalls are the same |
| 06:31.36 | TodPunk | that person is, of course, incorrect |
| 06:32.13 | TodPunk | somewhat related workaround: http://unix.stackexchange.com/questions/91701/ufw-allow-traffic-only-from-a-domain-with-dynamic-ip-address |
| 06:33.01 | harleypig | I was thinking of adding some way of inserting a temporary ip exception to iptables. |
| 06:33.04 | harleypig | reading |
| 06:36.23 | harleypig | Hmmm ... that seems to be close, but I'd have to set something up based on access to app.somedomain.com ... |
| 06:37.23 | TodPunk | you make it however complicate you want |
| 06:37.39 | harleypig | heh |
| 06:37.47 | TodPunk | *complicated |
| 09:33.51 | *** join/#utah RobertReynolds (~RobertRey@2605:a601:53b:f800:5c40:e591:6358:f1d6) |
| 11:34.24 | *** join/#utah RobertReynolds (~RobertRey@2605:a601:53b:f800:5c40:e591:6358:f1d6) |
| 13:02.02 | *** join/#utah RuShan (~RuShan@74.sub-174-208-10.myvzw.com) |
| 13:34.59 | *** join/#utah RobertReynolds (~RobertRey@2605:a601:53b:f800:5c40:e591:6358:f1d6) |
| 14:55.48 | *** join/#utah harleypig (~harleypig@harleypig.com) |
| 15:24.55 | *** join/#utah RobertReynolds (~RobertRey@128.187.116.26) |
| 15:48.44 | *** join/#utah aeryndunham (~jacki@170.250.131.39) |
| 15:58.01 | aeryndunham | they are testing the fire alarms in my building all day today and tomorrow and it is horrible >.< |
| 15:58.03 | *** join/#utah nage (~nathan.ge@unaffiliated/nage) |
| 16:14.09 | jima | that sounds SUPER AWESOME |
| 16:14.11 | jima | no wait |
| 16:14.15 | jima | that's not the word |
| 16:14.19 | jima | SUPER AWFUL |
| 16:18.45 | spangborn | I always wonder what happens if there's an actual fire on a test day |
| 16:20.08 | aeryndunham | I imagine someone would have to make some kind of announcement |
| 16:20.32 | aeryndunham | I am going to go to the Humane Society later and hang out with cats just to get myself out of the house :p |
| 16:22.24 | spangborn | Do they have cat cafes in Florida? |
| 16:22.38 | aeryndunham | Nothing near me, it seems |
| 16:22.47 | aeryndunham | but that one shelter is right on the train, so I can actually get to it |
| 16:47.01 | *** join/#utah SunSparc (~jonathan@45.56.57.85) |
| 17:05.31 | *** join/#utah tiwula (~lane@70.89.246.241-Busname-UT.hfc.comcastbusiness.net) |
| 18:22.21 | *** join/#utah aeryndunham (~aeryndunh@2607:fb90:40a5:9c4c:d981:8eef:a63e:457b) |
| 18:23.21 | aeryndunham | I'm at a very sketchy train station |
| 18:23.43 | joshh | where at |
| 18:24.03 | aeryndunham | Hialeah Market Station |
| 18:24.07 | aeryndunham | Hialeah, FL |
| 18:24.24 | aeryndunham | The physical building is boarded up |
| 18:24.35 | aeryndunham | And a man just tried to sell me a hat from s plastic bag |
| 18:24.37 | spangborn | Darn hurricanes |
| 18:24.45 | spangborn | Was it a fedora at least? |
| 18:24.52 | aeryndunham | Haha yes |
| 18:25.38 | spangborn | Could have been worse, he could have tried to sell you a Gentoo Penguin |
| 18:25.57 | spangborn | hides from the awful Linux jokes |
| 18:26.26 | aeryndunham | Well done |
| 18:26.41 | aeryndunham | Train here |
| 18:27.09 | aeryndunham | Going 6 stops but not sure how far that is |
| 18:27.17 | aeryndunham | Its more commuter train than metro |
| 18:28.23 | aeryndunham | But I <3 public transportation |
| 18:40.57 | *** join/#utah aeryndunham (~aeryndunh@211.sub-166-241-20.myvzw.com) |
| 18:41.23 | SunSparc | nice, aeryndunham had an v6 ip. |
| 18:42.12 | aeryndunham | Huh, I'm on Miami Tri-Rail Wifi |
| 18:42.28 | SunSparc | Yep, v4 now. |
| 18:42.45 | spangborn | T-Mobile does IPv6 now :) |
| 18:42.49 | aeryndunham | Ahhh |
| 18:43.02 | spangborn | I commonly notice my phone on an IPv6 connection |
| 18:43.03 | aeryndunham | Oh yeah I scrolled up, see it.now |
| 18:43.15 | spangborn | My security camera system apparently barfed on IPv6 connections |
| 18:43.25 | spangborn | So for a while, I couldn't see my cameras on LTE unless I VPN'd |
| 18:44.06 | aeryndunham | I think this is the first time I've seen ipv6 in the wild |
| 18:44.30 | spangborn | I think it was actually a problem with the iOS app, but I dunno |
| 18:47.37 | aeryndunham | I should have done this earlier in the day, I.imagine ill be in rush hour traffic later trying to come back from station |
| 19:34.31 | jima | i didn't even need to look up the prefix to know that was tmo |
| 19:35.37 | spangborn | That's because you're SMRT |
| 19:50.58 | jima | no, it's because i'm That IPv6 Guy |
| 19:55.33 | spangborn | That too |
| 20:54.13 | *** join/#utah RobertReynolds (~RobertRey@128.187.116.26) |
| 21:20.57 | SunSparc | ~jima |
| 21:20.57 | infobot | jima <3's IPv6 |
| 21:24.46 | jima | yep |
| 21:25.11 | jima | e.g. https://jima.us/ipv6/lp/ |
| 21:26.56 | SunSparc | Nice :) |
| 21:27.27 | jima | to be fair, i got my job in #ipv6, so... :-P |
| 21:27.44 | SunSparc | That helps. |
| 21:28.04 | jima | SunSparc: did the https not work? :-\ |
| 21:28.28 | SunSparc | ? |
| 21:28.39 | jima | i saw an https hit, then an http hit |
| 21:28.51 | SunSparc | I went to other parts of the site. |
| 21:29.06 | SunSparc | https worked fine. |
| 21:29.14 | jima | no, i was grepping specifically for /ipv6/lp/ |
| 21:29.15 | jima | weird |
| 21:29.23 | SunSparc | Oh, hmm.. |
| 21:29.39 | SunSparc | Visited again, works fine. |
| 21:30.17 | jima | ok. weird. thanks for confirming. |
| 21:30.41 | jima | i generally prefer to use the https link, with the times being how they are |
| 21:32.46 | SunSparc | Was the http from the same IP? Perhaps another hit at the same time? |
| 21:33.23 | SunSparc | just realized how much more work it is to view certificates in Chrome vs Safari. |
| 21:33.50 | SunSparc | oh, jima, this might help: Mixed Content: The page at 'https://jima.us/ipv6/lp/' was loaded over HTTPS, but requested an insecure script 'http://ipv6-test.com/api/widget.php?domain=referer'. This request has been blocked; the content must be served over HTTPS. |
| 21:34.04 | jima | shakes fist |
| 21:34.07 | SunSparc | :) |
| 21:34.25 | jima | SunSparc: same ip, same url, 19 seconds later |
| 21:34.45 | SunSparc | Yep, must be the mixed content. |
| 21:35.12 | SunSparc | A Tesla S with an IPV6 license plate. How apropo. |
| 21:35.56 | SunSparc | lol@the virgina plate |
| 21:36.09 | SunSparc | united we stand |
| 21:51.28 | jima | removes the references to the http-only script |
| 21:51.42 | jima | SunSparc: yeah, i've gotten quite the collection |
| 21:51.54 | jima | still adding 'em though |
| 21:52.01 | SunSparc | Apparently. Way to go. :D |
| 21:54.17 | jima | i periodically do google image search to look for new ones, except now my page is the top hit, sooo... |
| 22:06.06 | frostyfrog | -site:jima.us ? |
| 22:39.40 | *** join/#utah aeryndunham (~jacki@170.250.131.39) |
| 22:45.21 | *** join/#utah SunSparc (~jonathan@45.56.57.85) |
| 23:02.35 | aeryndunham | Hmm, I don't have any appropriate side dishes for my fajitas tonight |
| 23:06.27 | SunSparc | chips and salsa |
| 23:06.37 | SunSparc | beans and rice |
| 23:06.44 | SunSparc | tossed salad |
| 23:07.06 | SunSparc | tequilla |
| 23:41.55 | *** join/#utah JPaul (~JPaul@jager.allenrdco.com) |
| 23:52.57 | *** join/#utah JPaul (~JPaul@2604:a880:800:10::16e:c001) |
| 23:59.44 | *** join/#utah JPaul (~JPaul@2604:a880:800:10::16e:c001) |