Attempting to test VPN-related DNS lookups with a business partner.
I IMMEDIATELY called earthlink business T1 support and the guy on the phone had no idea what I was talking about.
Why would a company roll out something like this WITHOUT telling its support people and without letting customers know in advance? Why do they not have an opt out option?
I'm in the process of going over the contract for our T1 to see if it's early enough to break (the service was purchased before I came on board but only by a month or so).
I'll get a Speakeasy T1 and be done with it. Why is it so damn hard to find a provider who gives you IP with no bullshit?
"Hardware is cheap enough that it wouldn't seem all that onerous to stick with one box per OS installation..."
Hardware *IS* cheap. However, power,cooling and floor space is NOT cheap. At my last company we were spending over 40k a month in power alone for our servers. We weren't allowed to install any MORE servers because the datacenter could not provide any more cooling. With the exception of the IBM T42 Cabinet holding the pSeries gear, under VMWare we could have consolidated 5 racks of servers into 3. That would cut the square footage needs, the cooling needs AND the power needs.
Virtualization is something that has been around for a long time (zOS, lpars on the pSeries). The x86 world has been sorely lacking this for a while. Hell Sun just got something in place with the last release in the form of Zones. You could do the same thing on HP Superdome gear ( I think ).
So yes, hardware is cheap but the associated costs (power, cooling, real estate) and the sheer amount of things that can break on that many servers makes virtualization of the x86 platform the tastiest thing since sliced cheese.
but why even bother blowing up the plane? The security lines at airports are going to be incredibly dense and an airport has plane-loads of people in it. A coordinated simultaneous detenation of something inside the airport would work just as well.
When was the last time you went through a security checkpoint to get IN the airport?
I don't see openAIX floating around. Sure they've ported some of the technologies and added the opensource toolbox to AIX (imagine an RPM that can be installed on AIX and interfaces with the existing AIX package system).
Why is there no JFS2 for Linux? Why can't I mount a JFS2 filesystem on the SAN on my Linux machine? Why has the AIX lvm not been ported to Linux or why has IBM not contributed to the Linux LVM2 the ability to import AIX volume groups along with the requiste filesystem support on Linux? Why the hell don't I have lsdev, lscfg, lsattr for Linux? That alone would save me alot of effort.
Look the ODM is not the greatest thing since sliced bread but AIX has other good ideas that IBM should contribute instead of bitching about OpenSolaris. Shit they just want to sell more pSeries boxes anyway;)
We actually did that for a while but got tired of maintaining our own RPMS. CentOS uses yum and the local up2date install points to the CentOS mirrors. We actually have a rsync mirror of CentOS 3 and 4 that we go against internally for dependancies and kickstart http installs. I prefer yum over up2date anyway.
on Ubuntu, I won't be installing anything but CentOS and RedHat 4 on my servers. I installed Ubuntu on my brand new laptop and I run it on my desktop mind you.
Yes, IBM DB2, is certified to run on Ubuntu and IBM will support it. Same thing for MySQL but until something like Tivoli Storage Manager or WebSphere Application Server or BEA or any other host of products are certified and are listed as "supported configurations" by vendors, Ubuntu will only be for non-commerical applications in the corporate world.
Our model is RedHat for stuff that requires a support contract (WebSphere, TSM) and CentOS for development boxes or things like our Apache servers, CUPS servers and what not. It provides the same interface and knowledge as the RHEL stuff so there's no need to document something different.
I honestly think what's going to eat RHAT's lunch in the smaller markets is CentOS.
Why does he have to be a fanatic? It was totally relevent to the conversation at hand. Is someone who supports the side of an issue you obviously don't support a fanatic?
I think it's mostly religious. Certain people of the Christian faith probably hate the Jews for being the "chosen people" and others might hate them for "rejecting the Messiah". Certain people of the Muslim faith might take that whole "Issac and Ishmael" thing pretty seriously.
There is nothing that anyone can do. Personally, I'm on Israel's side in this but I'm realistic in thinking that there is nothing that anyone can do until both sides kill each other totally.
I second this. I'm in the process of switching to another company and one thing I never had time to do at the current place is document. It was always a low priority because we were always going.
I installed a wiki for the helpdesk and decided to create another one for the SA team. The linking alone has helped us tremendously. I've also created a system profile template wiki entry that can be copied and pasted and used by operators to help us document the systems.
Let me know if anyone wants a copy of the template. I like it but it could probably use additional input. It's currently geared towards linux servers.
That doesn't address what they do when they get inside. In fact most janitorial staff have more access then some employees. I can't get into a boss' office but the jan. staff have a key to empty his trash can because he can't be assed to leave it outside the door.
The secondary fact that they could bring in a laptop and plug in anywhere demonstrates a TOTAL lack of insight into security. Most people assume that if you're inside you belong. Not just physically but by having live ethernet jacks everywhere that don't have MAC restrictions or that aren't in a dead VLAN.
True someone could snag the MAC address that is always on the sticker on the back of an existing computer and spoof it but that's a whole different issue in itself.
That would be the Christopher Walken method mentioned above.
"So he hid it in the one place he knew he could hide somethin'. His ass. Five long years, he wore this watch up his ass. Then when he died of disentary, he gave me the watch. I hid with uncomfortable hunk of metal up my ass for two years."
In my mind, this is the single most sureal scene in that whole movie. Probably one of my favorites.
I think this only applies to the Beta and is really just to cover thier asses. The betas actually expired after x number of months so you were forced to stay current if you...oh I don't know....platformed a new environment on vmware server and were waiting to turn it live when the real version came out?
This is exactly what I did when I rebuilt my server. Mind you I purchased a VMTN subscription so I'm running GSX but I rebuilt my server with CentOS 4 and GSX. I have 3 VMs running currently (this is a dual P3 with 2GB of memory):
- CentOS 4 Samba PDC - CentOS 4 oxylbox web server for my media adapter (nfs mount of the big storage on the GSX host) - pfSense as my firewall.
I have two nics and one is brought up with no IP. It's on my public connection and assigned to the VM running pfSense.
I love it and the only thing I have to do if I want to wipe the box for some reason or upgrade the hardware is shutdown the VMs, back them up and move them to the new server. Now that ESX supports the new VMX files, I may do just that except install ESX for that extra oomph. Honestly the majority of my VMs are 4GB each so I won't need that much local DASD. I can still keep the big boy with all my SATA storage around as a dedicated NAS.
I feel you on all those points. I would also profer that if you need to eek out the extra performance 5k per CPU is not a bad deal for Infrastructure 3. If you can work with a reseller, you might be able to get lower.
The only downside I see to ESX 3 is they STILL won't support SATA.
Well VMware server is not really for your desktop. It's really designed to be headless. If you want a desktop, you should really go to VMware Workstation. Now you CAN use server to install and create a virtual machine and then load that up in player but it seems like alot of trouble to go through to get a VM.
The VMware tools ARE very helpful. It offers an accelerated network driver an accelerated video driver and also provides an interface for the Guest operating system from the host operating system side.
Unless you were running AS 2.1 and got bit by the kswapd bug.
Not that it happened to just Oracle but also DB2, Lotus Notes and I just heard from someone that they saw the same problem on a 2 way running WebLogic.
Having said that, Redhat and IBM were very helpful in solving our problems regarding that bug. We don't pay for RHEL now unless its a box running a product that has a "supported configuration" mind you but Redhat has always been very good on the support side for us.
The money generated for the town by having Pfizer there is going to allow them to increase the quality of their public services greatly.
And what happens when Pfizer decides to bugger off because the place in New London is worth the cost anymore? I'm surprised they didn't just say "screw it" because of the bad publicity already.
The problem with justifying a taking to give to a private business is that there is no guarantee that the economic boon will happen. To me that's justification enough to NOT take the land.
I see it all the time with greyfields..empty former walmart shopping centers that have only been there a year or two.
The town made a heavily debated and difficult decision, and made it for the benefit of it's residents as a group.
You can't make decisions that overrule someone's personal rights as enumerated by the Constitution (not an absolute statement mind you). Just because a town decided it doesn't like black people, doesn't mean that town can make "a heavily debated and difficult decision, and made it for the benefit of it's(sic) residents".
As someone else said in reply to your comment, "boohoo for New London". I feel for the town personally. I really do. Growing up Deep South, I see poor rural areas all the time. Hell, I've lived in a few. The point is that at some point you have to fish or cut bait. If the population and tax base isn't enough to justify a full fledged city government then maybe it's time to disband the city government and absorb into a large entity.
Slashdot Mirror
Attempting to test VPN-related DNS lookups with a business partner.
I IMMEDIATELY called earthlink business T1 support and the guy on the phone had no idea what I was talking about.
Why would a company roll out something like this WITHOUT telling its support people and without letting customers know in advance? Why do they not have an opt out option?
I'm in the process of going over the contract for our T1 to see if it's early enough to break (the service was purchased before I came on board but only by a month or so).
I'll get a Speakeasy T1 and be done with it. Why is it so damn hard to find a provider who gives you IP with no bullshit?
"...not being a sysadmin type...:
Because of that, I'll explain this:
"Hardware is cheap enough that it wouldn't seem all that onerous to stick with one box per OS installation..."
Hardware *IS* cheap. However, power,cooling and floor space is NOT cheap. At my last company we were spending over 40k a month in power alone for our servers. We weren't allowed to install any MORE servers because the datacenter could not provide any more cooling. With the exception of the IBM T42 Cabinet holding the pSeries gear, under VMWare we could have consolidated 5 racks of servers into 3. That would cut the square footage needs, the cooling needs AND the power needs.
Virtualization is something that has been around for a long time (zOS, lpars on the pSeries). The x86 world has been sorely lacking this for a while. Hell Sun just got something in place with the last release in the form of Zones. You could do the same thing on HP Superdome gear ( I think ).
So yes, hardware is cheap but the associated costs (power, cooling, real estate) and the sheer amount of things that can break on that many servers makes virtualization of the x86 platform the tastiest thing since sliced cheese.
but why even bother blowing up the plane? The security lines at airports are going to be incredibly dense and an airport has plane-loads of people in it. A coordinated simultaneous detenation of something inside the airport would work just as well.
When was the last time you went through a security checkpoint to get IN the airport?
I don't see openAIX floating around.
;)
Sure they've ported some of the technologies and added the opensource toolbox to AIX (imagine an RPM that can be installed on AIX and interfaces with the existing AIX package system).
Why is there no JFS2 for Linux? Why can't I mount a JFS2 filesystem on the SAN on my Linux machine? Why has the AIX lvm not been ported to Linux or why has IBM not contributed to the Linux LVM2 the ability to import AIX volume groups along with the requiste filesystem support on Linux? Why the hell don't I have lsdev, lscfg, lsattr for Linux? That alone would save me alot of effort.
Look the ODM is not the greatest thing since sliced bread but AIX has other good ideas that IBM should contribute instead of bitching about OpenSolaris. Shit they just want to sell more pSeries boxes anyway
My first thought was "Such a typical attitude for a kid to have these days".
;)
I wonder if the person interviewed would have said "Who cares?" to anything
We actually did that for a while but got tired of maintaining our own RPMS. CentOS uses yum and the local up2date install points to the CentOS mirrors. We actually have a rsync mirror of CentOS 3 and 4 that we go against internally for dependancies and kickstart http installs. I prefer yum over up2date anyway.
on Ubuntu, I won't be installing anything but CentOS and RedHat 4 on my servers. I installed Ubuntu on my brand new laptop and I run it on my desktop mind you.
Yes, IBM DB2, is certified to run on Ubuntu and IBM will support it. Same thing for MySQL but until something like Tivoli Storage Manager or WebSphere Application Server or BEA or any other host of products are certified and are listed as "supported configurations" by vendors, Ubuntu will only be for non-commerical applications in the corporate world.
Our model is RedHat for stuff that requires a support contract (WebSphere, TSM) and CentOS for development boxes or things like our Apache servers, CUPS servers and what not. It provides the same interface and knowledge as the RHEL stuff so there's no need to document something different.
I honestly think what's going to eat RHAT's lunch in the smaller markets is CentOS.
"Some Israel supporting fanatic leaked the log,"
Why does he have to be a fanatic? It was totally relevent to the conversation at hand. Is someone who supports the side of an issue you obviously don't support a fanatic?
I think it's mostly religious. Certain people of the Christian faith probably hate the Jews for being the "chosen people" and others might hate them for "rejecting the Messiah". Certain people of the Muslim faith might take that whole "Issac and Ishmael" thing pretty seriously.
There is nothing that anyone can do. Personally, I'm on Israel's side in this but I'm realistic in thinking that there is nothing that anyone can do until both sides kill each other totally.
I second this. I'm in the process of switching to another company and one thing I never had time to do at the current place is document. It was always a low priority because we were always going.
I installed a wiki for the helpdesk and decided to create another one for the SA team. The linking alone has helped us tremendously. I've also created a system profile template wiki entry that can be copied and pasted and used by operators to help us document the systems.
Let me know if anyone wants a copy of the template. I like it but it could probably use additional input. It's currently geared towards linux servers.
And hell, I didn't realize that Richard Biggs was dead too.
He passed away earlier this year.
The next generation of geek will have massive calfs and thighs instead of a single massive forearm
That we can fly now and thus avoid the snakes!
That doesn't address what they do when they get inside. In fact most janitorial staff have more access then some employees. I can't get into a boss' office but the jan. staff have a key to empty his trash can because he can't be assed to leave it outside the door.
The secondary fact that they could bring in a laptop and plug in anywhere demonstrates a TOTAL lack of insight into security. Most people assume that if you're inside you belong. Not just physically but by having live ethernet jacks everywhere that don't have MAC restrictions or that aren't in a dead VLAN.
True someone could snag the MAC address that is always on the sticker on the back of an existing computer and spoof it but that's a whole different issue in itself.
That would be the Christopher Walken method mentioned above.
"So he hid it in the
one place he knew he could hide
somethin'. His ass. Five long
years, he wore this watch up his
ass. Then when he died of
disentary, he gave me the watch. I
hid with uncomfortable hunk of
metal up my ass for two years."
In my mind, this is the single most sureal scene in that whole movie. Probably one of my favorites.
It must have been a toy gun since personal firearms are illegal in the UK.
I think this only applies to the Beta and is really just to cover thier asses. The betas actually expired after x number of months so you were forced to stay current if you...oh I don't know....platformed a new environment on vmware server and were waiting to turn it live when the real version came out?
This is exactly what I did when I rebuilt my server. Mind you I purchased a VMTN subscription so I'm running GSX but I rebuilt my server with CentOS 4 and GSX. I have 3 VMs running currently (this is a dual P3 with 2GB of memory):
- CentOS 4 Samba PDC
- CentOS 4 oxylbox web server for my media adapter (nfs mount of the big storage on the GSX host)
- pfSense as my firewall.
I have two nics and one is brought up with no IP. It's on my public connection and assigned to the VM running pfSense.
I love it and the only thing I have to do if I want to wipe the box for some reason or upgrade the hardware is shutdown the VMs, back them up and move them to the new server. Now that ESX supports the new VMX files, I may do just that except install ESX for that extra oomph. Honestly the majority of my VMs are 4GB each so I won't need that much local DASD. I can still keep the big boy with all my SATA storage around as a dedicated NAS.
I feel you on all those points. I would also profer that if you need to eek out the extra performance 5k per CPU is not a bad deal for Infrastructure 3. If you can work with a reseller, you might be able to get lower.
The only downside I see to ESX 3 is they STILL won't support SATA.
Well VMware server is not really for your desktop. It's really designed to be headless. If you want a desktop, you should really go to VMware Workstation. Now you CAN use server to install and create a virtual machine and then load that up in player but it seems like alot of trouble to go through to get a VM.
The VMware tools ARE very helpful. It offers an accelerated network driver an accelerated video driver and also provides an interface for the Guest operating system from the host operating system side.
Unless you were running AS 2.1 and got bit by the kswapd bug.
Not that it happened to just Oracle but also DB2, Lotus Notes and I just heard from someone that they saw the same problem on a 2 way running WebLogic.
Having said that, Redhat and IBM were very helpful in solving our problems regarding that bug. We don't pay for RHEL now unless its a box running a product that has a "supported configuration" mind you but Redhat has always been very good on the support side for us.
As someone else said in reply to your comment, "boohoo for New London". I feel for the town personally. I really do. Growing up Deep South, I see poor rural areas all the time. Hell, I've lived in a few. The point is that at some point you have to fish or cut bait. If the population and tax base isn't enough to justify a full fledged city government then maybe it's time to disband the city government and absorb into a large entity.
I *THINK* this only applies to federal agencies. Sort of a mandate from the Boss. This wouldn't affect any STATE and lower governments from taking.
When are people going to learn? The rule in security is denied unless explicitly allowed.
Simple math says there are an infinite number of sites to be blocked but only a handful of sites to be unblocked!
I have no sympathy for:
a) a company that allows the users to install software
b) a company that allows everything and only blocks after the fact