| 00:27.02 | *** join/#uphpu clintberry (~clintberr@c-76-27-26-207.hsd1.ut.comcast.net) |
| 00:27.02 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 01:28.38 | *** join/#uphpu TuxToaster (~TuxToaste@66.133.98.20) |
| 01:28.38 | *** mode/#UPHPU [+v TuxToaster] by ChanServ |
| 01:35.10 | *** join/#uphpu TuxToaster_ (~TuxToaste@66.133.98.20) |
| 01:40.45 | *** join/#uphpu kendsnyder (~kendsnyde@65-130-97-219.slkc.qwest.net) |
| 01:40.53 | *** mode/#UPHPU [+v kendsnyder] by ChanServ |
| 01:43.36 | *** join/#uphpu clintberry (~clintberr@c-76-27-26-207.hsd1.ut.comcast.net) |
| 01:43.36 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 01:51.50 | *** join/#uphpu clintber_ (~clintberr@c-76-27-26-207.hsd1.ut.comcast.net) |
| 02:03.13 | *** join/#uphpu clintberry (~clintberr@c-76-27-26-207.hsd1.ut.comcast.net) |
| 02:03.13 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 02:06.02 | *** join/#uphpu kendsnyder (~kendsnyde@65-130-97-219.slkc.qwest.net) |
| 02:06.02 | *** mode/#UPHPU [+v kendsnyder] by ChanServ |
| 02:08.27 | *** join/#uphpu clintberry (~clintberr@c-76-27-26-207.hsd1.ut.comcast.net) |
| 02:08.27 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 02:11.42 | *** join/#uphpu clintberry (~clintberr@c-76-27-26-207.hsd1.ut.comcast.net) |
| 02:11.42 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 02:17.04 | *** join/#uphpu Skinner_PC (~david@67-222-229-97.static.spvl001.digis.net) |
| 02:33.36 | *** join/#uphpu clintberry (~clintberr@c-76-27-26-207.hsd1.ut.comcast.net) |
| 02:33.36 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 03:10.04 | *** join/#uphpu ninnypan_ (~ninnypant@69.169.155.132.provo.static.broadweavenetworks.net) |
| 03:31.42 | *** join/#uphpu TuxToaster (~TuxToaste@66.133.98.20) |
| 03:31.43 | *** mode/#UPHPU [+v TuxToaster] by ChanServ |
| 03:37.38 | *** join/#uphpu HumanCell (~Humancell@207.224.214.130) |
| 03:41.34 | *** join/#uphpu kendsnyder (~kendsnyde@65-130-97-219.slkc.qwest.net) |
| 03:41.34 | *** mode/#UPHPU [+v kendsnyder] by ChanServ |
| 03:44.47 | *** join/#uphpu eggyknap (~jtolley@unaffiliated/eggyknap) |
| 03:44.47 | *** mode/#UPHPU [+v eggyknap] by ChanServ |
| 03:52.08 | *** join/#uphpu clintberry (~clintberr@c-76-27-26-207.hsd1.ut.comcast.net) |
| 03:52.09 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 04:01.58 | *** join/#uphpu mgeary (~mgeary@69.169.142.45.provo.static.broadweavenetworks.net) |
| 04:01.58 | *** mode/#UPHPU [+v mgeary] by ChanServ |
| 04:05.24 | *** join/#uphpu mgeary_ (~mgeary@69.169.142.45.provo.static.broadweavenetworks.net) |
| 04:05.25 | *** mode/#UPHPU [+v mgeary_] by ChanServ |
| 04:28.36 | *** join/#uphpu clintberry (~clintberr@c-76-27-26-207.hsd1.ut.comcast.net) |
| 04:28.37 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 04:31.31 | *** join/#uphpu clintber_ (~clintberr@c-76-27-26-207.hsd1.ut.comcast.net) |
| 04:39.52 | *** join/#uphpu clintberry (~clintberr@c-76-27-26-207.hsd1.ut.comcast.net) |
| 04:39.53 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 05:50.27 | *** join/#uphpu clintberry (~clintberr@c-76-27-26-207.hsd1.ut.comcast.net) |
| 05:50.27 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 06:24.54 | *** join/#uphpu TuxToaster (~TuxToaste@66.133.98.20) |
| 06:24.54 | *** mode/#UPHPU [+v TuxToaster] by ChanServ |
| 08:25.43 | *** join/#uphpu TuxToaster (~TuxToaste@66.133.98.20) |
| 08:25.53 | *** mode/#UPHPU [+v TuxToaster] by ChanServ |
| 10:26.41 | *** join/#uphpu TuxToaster (~TuxToaste@66.133.98.20) |
| 10:26.41 | *** mode/#UPHPU [+v TuxToaster] by ChanServ |
| 12:14.57 | *** join/#uphpu TuxToaster (~TuxToaste@66.133.98.20) |
| 12:14.57 | *** mode/#UPHPU [+v TuxToaster] by ChanServ |
| 12:41.28 | *** join/#uphpu kendsnyder (~kendsnyde@65-130-97-219.slkc.qwest.net) |
| 12:41.28 | *** mode/#UPHPU [+v kendsnyder] by ChanServ |
| 12:49.57 | *** join/#uphpu stevecoug (~stevecoug@oalug/member/stevecoug) |
| 12:49.57 | *** mode/#UPHPU [+v stevecoug] by ChanServ |
| 13:20.56 | *** join/#uphpu WaltHaas (~haas@haas.dsl.xmission.com) |
| 13:41.41 | *** join/#uphpu TuxToaster (~TuxToaste@66.133.98.20) |
| 13:41.41 | *** mode/#UPHPU [+v TuxToaster] by ChanServ |
| 13:47.09 | *** join/#uphpu clintberry (~clintberr@c-76-27-26-207.hsd1.ut.comcast.net) |
| 13:47.10 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 13:58.42 | *** join/#uphpu mgeary (~mgeary@69.169.142.45.provo.static.broadweavenetworks.net) |
| 13:58.42 | *** mode/#UPHPU [+v mgeary] by ChanServ |
| 14:06.29 | *** join/#uphpu macnewbold (~macnewbol@66.219.204.99.provo.dynamic.broadweavenetworks.net) |
| 14:06.29 | *** mode/#UPHPU [+o macnewbold] by ChanServ |
| 14:10.10 | *** join/#uphpu kendsnyder (~kendsnyde@67.214.245.39) |
| 14:10.10 | *** mode/#UPHPU [+v kendsnyder] by ChanServ |
| 14:38.08 | *** join/#uphpu clintberry (~clintberr@75-148-102-17-Utah.hfc.comcastbusiness.net) |
| 14:38.08 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 14:38.16 | *** join/#uphpu opapo (~quassel@204.113.97.235) |
| 14:38.16 | *** mode/#UPHPU [+v opapo] by ChanServ |
| 14:39.12 | *** join/#uphpu ryan_ (~ryan@66.29.181.142.static.utbb.net) |
| 14:41.22 | *** join/#uphpu ninnypants (~ninnypant@unaffiliated/ninnypants) |
| 14:41.22 | *** mode/#UPHPU [+v ninnypants] by ChanServ |
| 14:43.50 | *** join/#uphpu MikeHansenMe (~mike@173-165-131-122-utah.hfc.comcastbusiness.net) |
| 14:46.02 | *** join/#uphpu eggyknap (~jtolley@unaffiliated/eggyknap) |
| 14:46.02 | *** mode/#UPHPU [+v eggyknap] by ChanServ |
| 14:49.21 | *** join/#uphpu TuxToaster (~TuxToaste@wfw.vivint.com) |
| 14:49.21 | *** mode/#UPHPU [+v TuxToaster] by ChanServ |
| 15:18.28 | *** join/#uphpu jnbek (~jnbek@pdpc/supporter/active/jnbek) |
| 15:18.28 | *** mode/#UPHPU [+v jnbek] by ChanServ |
| 15:18.59 | *** join/#uphpu UtahDave (~boucha@63.230.12.160) |
| 15:19.00 | *** mode/#UPHPU [+o UtahDave] by ChanServ |
| 15:20.38 | mindjuju | anybody here made an spf? |
| 15:22.13 | herlo | mindjuju: as in a DNS record? |
| 15:22.18 | mindjuju | yup |
| 15:22.40 | herlo | yes, but I haven't in a while. What are you going to use it for? |
| 15:23.05 | herlo | mail, I suppose? |
| 15:23.14 | mindjuju | oh wait, i found my answer |
| 15:23.22 | herlo | good |
| 15:23.58 | mindjuju | so i have some IPs that do one off sending for the domain i'm creating the spf for |
| 15:23.58 | mindjuju | i have to give it the ole /32 |
| 15:24.09 | mindjuju | thx herlo anyway |
| 15:24.26 | herlo | np |
| 15:24.31 | mindjuju | did you see my FB post from yesterday |
| 15:24.55 | mindjuju | the guy that was saying his pics come in fuzzy from tumblr because of underwater fiber lines being messed with? |
| 15:25.25 | herlo | yeah, that was funny |
| 15:26.35 | mindjuju | oh i meant to ask how penn and teller was |
| 15:26.35 | mindjuju | must have been fun :) |
| 15:26.58 | *** join/#uphpu benbankes (~ben@50-200-100-242-static.hfc.comcastbusiness.net) |
| 15:27.14 | herlo | was awesome! |
| 15:27.26 | herlo | it's the second time I've seen them, show is very similar to the first one. |
| 15:27.57 | herlo | but even though I've seen it before, I enjoyed the jokes, the rants, the tricks. I love how they explain tricks but it's still amazing to watch. |
| 15:28.50 | mindjuju | they have some old vhs vids out, i've seen one or two, pretty fun |
| 15:29.24 | herlo | my favorite bit is the misdirection one where teller pretends to smoke a cigarette |
| 15:30.11 | mindjuju | haven't seen that oen, i'll have to see if it is on youtube |
| 15:30.18 | *** join/#uphpu mgeary (~mgeary@67.136.112.81) |
| 15:30.19 | *** mode/#UPHPU [+v mgeary] by ChanServ |
| 15:30.36 | UtahDave | mindjuju: ping!! |
| 15:30.59 | herlo | mindjuju: you should see them live. |
| 16:32.34 | *** join/#uphpu mindjuju (mindjuju@2600:3c00::f03c:91ff:fe69:b171) |
| 16:32.34 | *** mode/#UPHPU [+o mindjuju] by ChanServ |
| 16:40.02 | *** join/#uphpu Benni_Hanna (~Benni_Han@neutroninteractive-xmission.xmission.com) |
| 16:47.41 | *** join/#uphpu HumanCell (~Humancell@216.51.68.1) |
| 16:54.58 | mindjuju | fungus or herlo, either of you have a minute? |
| 16:55.17 | mindjuju | i'm looking for more information on space between domains and domain name servers |
| 16:56.56 | mindjuju | so let's say you buy example.com at namescheap and you assign it ns1.mydns.com and ns2.mydns.com |
| 16:57.47 | mindjuju | first question: why does the zone record have ns1.mydns.com and ns2.mydns.com |
| 16:58.41 | *** join/#uphpu tierra (tierra@ibaku.net) |
| 16:58.54 | mindjuju | or from the otehr side, if i want to go to example.com, first my computer searches its cache, then the gateway dns cache, then the isp cache then what? |
| 17:00.07 | *** join/#uphpu cro (~Adium@204-228-149-217.ip.xmission.com) |
| 17:10.34 | mindjuju | another vantage point on the same line of questioning would be: does the registrar ever get queried for the correct name servers of the domain in question |
| 17:18.12 | ninnypants | anyone used owncloud before? http://owncloud.org/features/ |
| 17:21.52 | mindjuju | any spf pros in the house? |
| 17:25.04 | *** join/#uphpu SunSparc (~jonathan@69-27-175-74.acedatacenter.com) |
| 17:25.04 | *** mode/#UPHPU [+v SunSparc] by ChanServ |
| 17:28.07 | mindjuju | well, i think i've gotten myself stuck, i think ietf is saying to lay off spf and that's part of the project i'm rolling out. maybe i'll go microwave my lunch and give things a think |
| 17:28.11 | mindjuju | http://tools.ietf.org/html/draft-ietf-spfbis-4408bis-20#section-13.1 |
| 17:29.38 | *** join/#uphpu eggyknap (~jtolley@unaffiliated/eggyknap) |
| 17:29.42 | *** mode/#UPHPU [+v eggyknap] by ChanServ |
| 17:35.19 | DexterTheDragon | ninnypants: I've played with it some |
| 17:41.37 | fungus | mindjuju, registrars are responsible for updating the the DNS zone for the TLDs. When you register a domain, they add referral records into the TLD zone the point your domain to your DNS servers. |
| 17:42.54 | fungus | so the nameservers you specify to the registrar are what gets used in these referral records. Your NS records inside your own DNS records are useful and important, but are not the same thing as these all-important referral records. |
| 17:44.25 | mindjuju | so fungus, I'm adding Amazon's hosted nameservers to my domain, is this subject to DNS propigation, i want to say no, but godaddy said yes |
| 17:44.47 | fungus | yes |
| 17:45.42 | fungus | Those referral records are cached too, so if you change them, you must wait for them to expire. |
| 17:46.25 | fungus | also, propagation could also refer to the time it takes for godaddy to actually complete the change on all of the TLD's nameservers. |
| 17:46.40 | mindjuju | so based on what we've talked about so far, looks like i need to read through this: http://en.wikipedia.org/wiki/DNS_zone |
| 17:46.46 | mindjuju | and related |
| 17:47.59 | mindjuju | last quetion if you don't mind, now that i'm adding amazon to our nameserver, i've compared their copy of the DNS zone to the ones that are live now, they match perfectly |
| 17:48.09 | mindjuju | what other things should i be considering before going live on something like this |
| 17:48.24 | mindjuju | i really don't want to b0rk this and want to be sure i'm considering everything that needs to be considered |
| 17:49.23 | fungus | Is Amazon slaving the records off your own DNS master? |
| 17:49.56 | fungus | If so, make a change on your master, update the serial number, and verify that their nameservers update almost immediately. |
| 17:50.23 | mindjuju | i have amazon as alternate nameservers with identical copy of domain zone |
| 17:50.51 | fungus | Right, is that a slave relationship, or are you just duplicating the records manually? |
| 17:51.11 | mindjuju | duplicating the records manually |
| 17:51.24 | fungus | eww, why? |
| 17:51.50 | fungus | lots of room for operator error there |
| 17:52.25 | mindjuju | so i looked initially into slave, but iddn't see anything |
| 17:52.38 | fungus | also referred to as secondary DNS |
| 17:53.10 | fungus | If Amazon doesn't offer that service at all, why not just let them be the master and you not host that zone at all. |
| 17:53.27 | fungus | "No man can serve two masters" :) |
| 17:54.12 | mindjuju | we could do that, but i have this genius friend of mine who told me a few years back (iirc) that he spreads his stuff out for redundancy |
| 17:54.18 | *** join/#uphpu skinner (~david@72.250.214.16) |
| 17:54.18 | *** mode/#UPHPU [+v skinner] by ChanServ |
| 17:54.41 | fungus | that's good, but don't do it manually |
| 17:54.58 | fungus | perhaps set your server to slave off of Amazon. |
| 17:54.59 | mindjuju | k, so amazon to master, others to slave |
| 17:55.11 | mindjuju | k |
| 17:55.51 | mindjuju | you do recognize your advice from a while back on proper redundancy on dns, right? |
| 17:56.17 | mindjuju | i can't remember what the occassion was, maybe SOPA inspired attack on godaddy dns taking down millions sites, i don't remember what sparked that convo |
| 17:56.50 | fungus | right, have multiple DNS providers. |
| 17:57.01 | fungus | But 1 master, the rest slaves |
| 17:58.17 | mindjuju | k -- so now that i'm scared crapless, anything else i should be thinking before i roll this ( amazon as manually-updated secondary dns, then in a week or two, amazon as master)? |
| 17:58.20 | fungus | or at lease multiple DNS servers on different IP blocks, ISPs, geographic areas. |
| 17:58.46 | mindjuju | i've checked all my records, i'm adding an spf |
| 17:59.36 | fungus | The only thing to be scared of is remembering to update both places when a change is needed. For temp usage it's not dangerous at all. |
| 18:00.02 | mindjuju | k, thx for help -- i owe ya next time i go to uphpu afterhours |
| 18:00.02 | fungus | What about the SPF record? |
| 18:00.25 | mindjuju | we don't have one, and some of our mail is going into the spam folder |
| 18:00.45 | mindjuju | i believe that adding spf will help increase our email sending rep |
| 18:00.54 | fungus | an SPF record *may* improve that, but *may* not. |
| 18:01.05 | mindjuju | event hough ietf seems to say they no longer recommend spf |
| 18:01.22 | fungus | But adding an SPF record will not damage your rep |
| 18:01.29 | mindjuju | yeah |
| 18:01.56 | mindjuju | the sad tragedy of two weeks ago was that suddenly, our emails started going to spam and I notice major spike in activity on the primary web server |
| 18:01.57 | fungus | That article you linked indicated they were making a special RR record for SPF instead of dangling off of a TXT record. Did I misunderstand it? |
| 18:02.24 | mindjuju | analyze logs, and i see somebody using a "contact a firend" page on our site to spam off us |
| 18:02.42 | mindjuju | so i block them and hand it to the devs to fix, but the damage was done, our email rep sucks now |
| 18:02.58 | fungus | ah yes, best to check blacklists everywhere. |
| 18:03.17 | mindjuju | thankfully, we're not on spamhaus, but google hates us for now |
| 18:03.47 | fungus | SPF might not help this particular issue, but it won't hurt. |
| 18:03.54 | mindjuju | yeah |
| 18:04.13 | mindjuju | about the article i posted, maybe i misunderstood |
| 18:45.28 | *** join/#uphpu macnewbold1 (~macnewbol@66.219.204.98.provo.dynamic.broadweavenetworks.net) |
| 18:45.28 | *** mode/#UPHPU [+o macnewbold1] by ChanServ |
| 20:27.24 | mgeary | hey fungus |
| 20:27.34 | mgeary | mind looking at a postfix issue i'm seeing? |
| 20:28.08 | fungus | sure |
| 20:28.23 | mgeary | Sep 24 14:19:47 server postfix/smtp[17502]: certificate verification failed for aspmx.l.google.com: num=20:unable to get local issuer certificate |
| 20:28.37 | mgeary | Sep 24 14:19:47 server postfix/smtp[17502]: certificate verification failed for aspmx.l.google.com: num=27:certificate not trusted |
| 20:30.47 | mgeary | now, this is happening when i send an email to foo@domain.com. However, as far as i know, my emails are being sent. What i'm trying to resolve is that foo@domain.com (which is managed by google apps/mail) should auto-forward back to me, and it doesn't. However, that wouldn't be a smtp error…. |
| 20:31.20 | fungus | what is your smtp_tls_security_level set to |
| 20:31.52 | mgeary | empty value |
| 20:32.46 | fungus | Those may be warnings or errors depending on your tls configuration |
| 20:32.56 | fungus | Look at the actual delivery log line. |
| 20:33.39 | mgeary | the status=sent line? |
| 20:33.43 | fungus | yup |
| 20:33.48 | mgeary | that precedes these errors i'm getting |
| 20:34.01 | fungus | Right, so since the delivery is status=sent, they are just warnings. |
| 20:34.01 | mgeary | which makes me think the error is somehow related to the email being forwarded to me |
| 20:34.15 | mgeary | ok. i can live with ignoring those |
| 20:34.28 | fungus | Wait, precedes the errors? |
| 20:34.33 | mgeary | so is there a way to look at google mail logs to figure out why i'm not getting the forward? |
| 20:34.35 | mgeary | yes |
| 20:34.52 | mgeary | well |
| 20:34.54 | fungus | So what is the next log after those tls errors? |
| 20:35.15 | mgeary | pastbinning |
| 20:35.17 | fungus | wanna pastebin a whole snippet |
| 20:35.21 | fungus | :) |
| 20:35.30 | mgeary | http://pastebin.com/Nz0aMUrF |
| 20:35.52 | mgeary | line 9 might be a good starting point |
| 20:37.26 | fungus | lines 15-17 are the lines that apply |
| 20:37.41 | fungus | You see warnings about non-verified certs, but it sends successfully anyway. |
| 20:38.04 | mgeary | ok |
| 20:38.21 | mgeary | i'll happily ignore the warnings |
| 20:38.38 | mgeary | do you know if there's a way to see google app mail logs? |
| 20:39.07 | fungus | is it real paid for google apps? Yes. Free stuff, No. |
| 20:40.06 | mgeary | i believe it's paid. it's not my account, but i have some access to it |
| 20:40.47 | fungus | If using the new dashboard control panel, you'll find Reports hiding under "More Controls" |
| 20:41.06 | fungus | in Reports, you find "Email Log" in the left nav panel. |
| 20:58.54 | *** join/#uphpu mindjuju (~mindjuju@li598-236.members.linode.com) |
| 20:58.54 | *** mode/#UPHPU [+o mindjuju] by ChanServ |
| 21:04.31 | *** join/#uphpu flask_ (~flask@c-98-202-203-208.hsd1.ut.comcast.net) |
| 21:27.57 | *** join/#uphpu tierra (tierra@ibaku.net) |
| 21:36.16 | *** join/#uphpu NoCoolName_Tom (~NoCoolNam@64.124.34.34) |
| 22:24.41 | *** join/#uphpu cro (~Adium@204-228-149-217.ip.xmission.com) |
| 22:37.20 | *** join/#uphpu tierra (tierra@ibaku.net) |
| 23:48.02 | *** join/#uphpu linagee (~linagee@indigeotech.com) |
| 23:48.03 | *** join/#uphpu linagee (~linagee@about/linux/regular/linagee) |
| 23:54.11 | *** join/#uphpu fungus (fungus@2600:3c01::f03c:91ff:fe96:4597) |
| 23:54.11 | *** join/#uphpu peno (~irc4me@c-76-23-34-158.hsd1.ut.comcast.net) |
| 23:54.11 | *** join/#uphpu NoCoolName_Tom (~NoCoolNam@64.124.34.34) |
| 23:54.11 | *** join/#uphpu Benni_Hanna (~Benni_Han@neutroninteractive-xmission.xmission.com) |
| 23:54.11 | *** join/#uphpu mgeary (~mgeary@67.136.112.81) |
| 23:54.11 | *** join/#uphpu jnbek (~jnbek@pdpc/supporter/active/jnbek) |
| 23:54.11 | *** mode/#UPHPU [+ovvv fungus peno mgeary jnbek] by hitchcock.freenode.net |
| 23:54.11 | *** join/#uphpu WaltHaas (~haas@haas.dsl.xmission.com) |
| 23:54.11 | *** join/#uphpu Skinner_PC (~david@67-222-229-97.static.spvl001.digis.net) |
| 23:54.11 | *** join/#uphpu kim27 (~kim27@199.192.164.179) |
| 23:54.11 | *** join/#uphpu utahcon (~root@192.81.211.79) |
| 23:54.11 | *** join/#uphpu gshipley (~gshipley@cpe-174-099-013-158.nc.res.rr.com) |
| 23:54.11 | *** join/#uphpu unum (~unum@truecomputing.biz) |
| 23:54.11 | *** join/#uphpu xuu (~xuu@155.100.170.144) |
| 23:54.11 | *** join/#uphpu optikal (~optikal@failcore.com) |
| 23:54.11 | *** join/#uphpu Heartsbane (tsharpe@unaffiliated/heartsbane) |
| 23:54.11 | *** mode/#UPHPU [+vv utahcon Heartsbane] by hitchcock.freenode.net |