Notices by The Psychotic Network Ferret (nuintari@infosec.exchange), page 3

Okay, I need to figure out how to stream MP3s from my file server to my phone, and have a local cache of my favs for when in airplane mode.

I am fucking done paying for streaming services.

@silverwizard They probably gave them 50,000 karma for free.

nuintari's rules of networking 0x42:

Devices that can do everything, often achieve very little. A Swiss army knife has every conceivable hand tool crammed into itself, all of them equally terrible.

@admin Sure, if you only need the knife or the screwdriver.

Everything else is about useless.

But you should really just get some better tools.

Carrying around a Swiss army knife does not satisfy another groups prime rule of, "Be Prepared." If all you had is the shitty knife, you weren't prepared.

Likewise, if all you have is a shitty everything device, you have failed to properly plan.

nuintari's rules of networking 0x2f:

Defense in depth is dead, long live defense in depth!

Seriously, the alternative is to expect your single line of defense to be perfect, and that has worked sooooo well so far.

About ten years ago, the IT building for a local highschool burned to the ground.

My company donated a spare Juniper EX3200 switch to help get them back online. They had erected a small structure without any insulation, and left the switch inside unpowered for a day while the fiber splicers got them hooked back up.

They started the switch, and it immediately shutdown. They looked a gift horse in the mouth and bitched to us that our donation was garbage.

I was dispatched to assist. I connected to the serial console and powered the device up. It immediately indicated that the CPU temperature was 252 C, and shut itself down.

It was January, the outside temperature was -3 C. The Juniper device was storing temperature as an 8-bit unsigned integer value. It got so cold, it thought it was on fire.

Can't say I ever expected to use a heat gun to get a switch to start before that day. Got it warm enough to power on, and then it kept itself plenty warm to continue operating.

Data types matter, yo.

@mw1cgg @quixoticgeek Oh, it most def was not rated for extreme cold.

But the console clearly warned me it was OVER heat threshold.

For reference, we regularly had the same model in exterior shelters year round, they stayed warm enough in the winter, and often got 85c+ in the summer.

Just, cold starting one in January in Northern Ohio?.... small problem.

Wow, Ethernet is 50 years old (as of yesterday).

Ethernet is not perfect, but it is pretty damn good, and pretty damn near universal, hence its longevity. It's really a testament to proper, simple designs.

I had a point to make, decided not.

@silverwizard Remember, this is a glorified email system that the spammers have barely noticed is worth paying attention to.

The antispam/antitroll controls right now are: Mute, Block, De-Federate!

All basically forms of RBLs. This will not go well in its current form.

nuintari's rules of networking 0x28:

The proper amount of ICMP filtering is none.

@silverwizard MOAR POWER!

@silverwizard They have excellent customer service!

Not helping, I know, sorry.

Fucking love techmikeny.com.

Just ordered 32 cores and 256 GB ram for less than a grand.

Dual PSU, four fast disks, dual 10gigE.... I'll have it in a week or so. Gonna make one hell of a fine VMware server for the house.

@silverwizard Can I help? This sounds fun.

nuintari's rules of networking 0x0f:

Your dearest friends are named SNMP and syslog.

Your bested buddy in the whole wide world is called tcpdump.

@silverwizard At a previous job, we were allocated a /23 out of 192.211.0.0/16 from ARIN.

We ended up migrating our loopbacks and /31s into it, because our original plan, using it for business customers who needed routables in the era of CGNAT, resulted in way too much, "Nooooo! We need a PUBLIC IP!" from idiot IT workers.

@FritzAdalis This place was using 172.32.0.0/16.....

Think about that _real_ hard.

I swear to god, all networks, big and small, and of nearly all ages beyond "literally born last week," have an IP swamp. An area of IP addressing that predates any sane documentation and allocation policy. A giant prefix of just icky mess.

At current job, I have two public /24s, and multiple /16s carved out of RFC1918 space that area fucking mess.

Previous admin had a policy of, "when in doubt, throw a /22 at it."

And they aren't all together. But remember, we are talking about a network that uses OSPF where they should use iBGP, and eBGP where they should use OSPF.

@sternecker I won't hold it against you. ?

127.0.0.0/8

16,777,216 synonyms for "here."