Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Locked thread
rafikki
Mar 8, 2008

I see what you did there. (It's pretty easy, since ducks have a field of vision spanning 340 degrees.)

~SMcD


is the security breach that someone ran a vulnerability scanner against their public ip

Adbot
ADBOT LOVES YOU

SamDabbers
May 26, 2003



Oh no! Their PC is broadcasting an IP address!

BlankSystemDaemon
Mar 13, 2009




So is every other machine that's connected to the internet! :ohdear:

Renegret
May 26, 2007

THANK YOU FOR CALLING HELP DOG, INC.

YOUR POSITION IN THE QUEUE IS *pbbbbbbbbbbbbbbbbt*


Cat Army Sworn Enemy

D. Ebdrup posted:

So is every other machine that's connected to the internet! :ohdear:

:ohdear:

What if they find out my MAC? You can't even change it!

AlexDeGruven
Jun 29, 2007

Watch me pull my dongle out of this tiny box


A 2:30am phone call came in.

Electric company was in house doing some maintenance that was to have "no impact".

What really happened was that they somehow managed to completely take down an entire datacenter with redundant power, centrifugal UPS, and redundant generators.

I got back to bed a few minutes before daylight at least.

mewse
May 2, 2006

Alighieri posted:

Got a client with a weird issue on their juniper network equipment. We inform clients on what ports need to be forwarded for our software and leave it up to their network people to make the changes on their end. For some reason this one clients Juniper is replacing the public IP on inbound packets with the gateways IP and changing the source to say the gateway as well (10.10.1.1). If I telnet to a tcp port that is forwarded to the server with our software traces show the source as the gateway and SIP packets to the server have the public IP changed in the to,from,c= etc.. so it all shows 10.10.1.1.

And of course their network people maintain this is how port forwarding works on all routers and they say nothing is wrong.

I have seen Junipers mangle shoretel/voip traffic with application layer gateways that are enabled by default. Since you mentioned SIP that might be something worth looking into

xsf421
Feb 17, 2011

AlexDeGruven posted:

A 2:30am phone call came in.

Electric company was in house doing some maintenance that was to have "no impact".

What really happened was that they somehow managed to completely take down an entire datacenter with redundant power, centrifugal UPS, and redundant generators.

I got back to bed a few minutes before daylight at least.

I think you work for my company! I walked in at 11 to everything still on fire.

AlexDeGruven
Jun 29, 2007

Watch me pull my dongle out of this tiny box


Still seeing some fallout in my email as late as this afternoon, but nothing in my space.

Cirrhosis Johnson
Jan 9, 2014

Avenging_Mikon posted:

"For clarity in communications and to enhance rapid response ability to issues, we ask users to refrain from using jargon and abbreviations in tickets, as not all terms are universal."

Real quote from a customer:

"When I cut on the box system 10 won't Office up"

Neddy Seagoon
Oct 12, 2012

"Hi Everybody!"

AlexDeGruven posted:

A 2:30am phone call came in.

Electric company was in house doing some maintenance that was to have "no impact".

What really happened was that they somehow managed to completely take down an entire datacenter with redundant power, centrifugal UPS, and redundant generators.

I got back to bed a few minutes before daylight at least.

What'd they do, short a power bus through a rookie/colourblind sparky?

Weatherman
Jul 30, 2003

WARBLEKLONK

D. Ebdrup posted:

So is every other machine that's connected to the internet! :ohdear:

:thejoke:

Corsair Pool Boy
Dec 17, 2004
College Slice

Cirrhosis Johnson posted:

Real quote from a customer:

"When I cut on the box system 10 won't Office up"

Tell them cutting boxes had nothing to do with Office or their system. Ticket resolved.

AlexDeGruven
Jun 29, 2007

Watch me pull my dongle out of this tiny box


Neddy Seagoon posted:

What'd they do, short a power bus through a rookie/colourblind sparky?

Only thing I can think of is that they were working on, or a system near, the EPO switch. That's the only thing in the system that sits between all the power systems and <everything else>.

But I'm not a datacenter engineer or power engineer, so I can't say for sure. One thing is sure, the official story will probably be different than actual facts.

Potato Salad
Oct 23, 2014

nobody cares


Cirrhosis Johnson posted:

Real quote from a customer:

"When I cut on the box system 10 won't Office up"

Yeah, even I cut on pretty much any system 10, they don't office up either.

Ataxerxes
Dec 2, 2011

What is a soldier but a miserable pile of eaten cats and strange language?

Cirrhosis Johnson posted:

Real quote from a customer:

"When I cut on the box system 10 won't Office up"

"Cut my box into pieces / this is is my last reboot."

Malek
Jun 22, 2003

Shut up Girl!
And as always: Kill Hitler.

Renegret posted:

I wish I could share this e-mail with the thread because it makes no loving sense.

Customer is stating that there's a major security breach because their modem has a...public IP address? And they want a private IP instead? And they're dictating that it can't fall in the 10.x.x.x or the 192.168.254.x range? Also fix it immediately but also don't make any changes since it's going to have an impact on their services?

Why is my department even involved since we're not a customer facing department?

I need an adult.

e: it reads as if someone who knows what they're doing ordered someone who doesn't know jack poo poo about networking to send this e-mail without proper context, explanations, or details. There's a very professional "what the gently caress is this" e-mail from my manager so I feel safe just ignoring it.

Okay, why is this so hard? Unplug all network connections and reboot the system.

Assuming Windows, it'll be a 169 address which is definitely private and not a 10 or 192 range. And it will be the most secure.

What's the problem?

Malek fucked around with this message at 14:45 on Oct 2, 2017

SEKCobra
Feb 28, 2011

Hi
:saddowns: Don't look at my site :saddowns:
Sounds to me like the internal IP is for some reason a public IP and they want a 172.16.0.0/12 Address on it.

Renegret
May 26, 2007

THANK YOU FOR CALLING HELP DOG, INC.

YOUR POSITION IN THE QUEUE IS *pbbbbbbbbbbbbbbbbt*


Cat Army Sworn Enemy

SEKCobra posted:

Sounds to me like the internal IP is for some reason a public IP and they want a 172.16.0.0/12 Address on it.

Configuring their internal network is very much not the ISP's problem.

Knormal
Nov 11, 2001

I would like the IP 69.420.69.24/7, please assign that one to my PC. Thanks in advance.

GreenNight
Feb 19, 2006
Turning the light on the darkest places, you and I know we got to face this now. We got to face this now.

Just got back a laptop that I didn't know still existed. It had the Novell Client and GroupWise installed on Windows XP. We got rid of everything Novell in 2008. Still boots up ok though.

Hasn't had network access in years, thankfully.

Agrikk
Oct 17, 2003

Take care with that! We have not fully ascertained its function, and the ticking is accelerating.

GreenNight posted:

Just got back a laptop that I didn't know still existed. It had the Novell Client and GroupWise installed on Windows XP. We got rid of everything Novell in 2008. Still boots up ok though.

Hasn't had network access in years, thankfully.

In all seriousness, I miss Novell NetWare. There was a steady predictability to it.

Whenever $thing revealed a bug in the client, I could always count on NetWare to be 4 weeks out with a new client version that invariably solved my issue. It got to the point where I would get a Pavlovian sense of relief every time I downloaded and installed the latest build and was treated to a freshly revamped candy-apple red client window.

GreenNight
Feb 19, 2006
Turning the light on the darkest places, you and I know we got to face this now. We got to face this now.

They still come out with new builds!

Aunt Beth
Feb 24, 2006

Baby, you're ready!
Grimey Drawer

GreenNight posted:

They still come out with new builds!
If a Novell compiles in the office, and there's nobody around to install it, does it run?

Wrath of the Bitch King
May 11, 2005

Research confirms that black is a color like silver is a color, and that beyond black is clarity.

Agrikk posted:

In all seriousness, I miss Novell NetWare. There was a steady predictability to it.

Whenever $thing revealed a bug in the client, I could always count on NetWare to be 4 weeks out with a new client version that invariably solved my issue. It got to the point where I would get a Pavlovian sense of relief every time I downloaded and installed the latest build and was treated to a freshly revamped candy-apple red client window.

Years ago I worked in a Novell shop, and one of the Novell admins/gurus there absolutely refused to teach me anything about it because it would infringe on his job security.

spog
Aug 7, 2004

It's your own bloody fault.

Wrath of the Bitch King posted:

Years ago I worked in a Novell shop, and one of the Novell admins/gurus there absolutely refused to teach me anything about it because it would infringe on his job security.

Who's laughing now?

CommieGIR
Aug 22, 2006

The blue glow is a feature, not a bug


Pillbug

GreenNight posted:

They still come out with new builds!

From beyond the grave! :ghost:

Kurieg
Jul 19, 2012

RIP Lutri: 5/19/20-4/2/20
:blizz::gamefreak:

Knormal posted:

I would like the IP 69.420.69.24/7, please assign that one to my PC. Thanks in advance.

Isn't this (except for the /7) technically possible with ipv6? :v:

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum

Kurieg posted:

Isn't this (except for the /7) technically possible with ipv6? :v:
The number 7 is valid in IPv6, too.

Kurieg
Jul 19, 2012

RIP Lutri: 5/19/20-4/2/20
:blizz::gamefreak:

anthonypants posted:

The number 7 is valid in IPv6, too.

My network admin class was back before IPv6 was a thing, and I seem to have internalized my professors hatred of odd-digit-subnets as "thing that IPv4 doesn't support" rather than just something that my professor hated for some reason.

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum

Kurieg posted:

My network admin class was back before IPv6 was a thing, and I seem to have internalized my professors hatred of odd-digit-subnets as "thing that IPv4 doesn't support" rather than just something that my professor hated for some reason.
Uh, in IPv4 odd-numbered subnets are very definitely a very real thing.

ChubbyThePhat
Dec 22, 2006

Who nico nico needs anyone else
I wonder why somebody teaching networking would push an idea that odd numbered subnets are "annoying" or not-a-thing. There's no reason you can't mask a single bit.

BlankSystemDaemon
Mar 13, 2009




Maybe he learned networking before classless inter-domain routing?

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum
The only thing I can think of is that if you're subnetting, the first address will never end in an odd number, unless that subnet is /32, but that's not really subnetting.

ChubbyThePhat
Dec 22, 2006

Who nico nico needs anyone else
Or if you're having fun with wildcard masks and their "well technically you can do this" math.

Kurieg
Jul 19, 2012

RIP Lutri: 5/19/20-4/2/20
:blizz::gamefreak:
In hindsight he had a lot of weird hangups about "proper network setup" so, mea culpa I guess.

Methylethylaldehyde
Oct 23, 2004

BAKA BAKA

ChubbyThePhat posted:

Or if you're having fun with wildcard masks and their "well technically you can do this" math.

The RFQ technically doesn't explicitly state that you CAN'T do this, so through this logic it's allowable.

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum

anthonypants posted:

Yeah, IPv4 subnetting is easy.

/32 is one address, /31 is two, /30 is four, /29 is eight, etc.

32 = 32-0; 2^0 = 1
31 = 32-1; 2^1 = 2
30 = 32-2; 2^2 = 4
29 = 32-3; 2^3 = 8

32 = 32 ones, minus 0 = 11111111.11111111.11111111.11111111 = 0xffffffff = 255.255.255.255
31 = 32 ones, minus 1 = 11111111.11111111.11111111.11111110 = 0xfffffffe = 255.255.255.254
30 = 32 ones, minus 2 = 11111111.11111111.11111111.11111101 = 0xfffffffd = 255.255.255.253
29 = 32 ones, minus 3 = 11111111.11111111.11111111.11111100 = 0xfffffffc = 255.255.255.252

And then you just go from there. Also you have to keep in mind that subnets will always begin and end on certain numbers. Like you should know deep down in your heart what /8 /16 and /24 are, and that there's no way to get a /24 range to begin at some arbitrary number -- the range will always be x.x.x.0-x.x.x.255. Every other subnet works the same way, like a /23 will be x.x.y.0-x.x.z.255, where y is even and z is odd. If you get a question like you need to know what the range of addresses in a /27 is, find out how many addresses are in it (32-27 = 5; 2^5 = 32), then break down the next biggest whole octet range (a /24) into groups of that size: 0-31, 32-63, 64-95, 96-127, 128-159, 160-191, 192-223, 224-255. So if you get an address of, say, 10.10.10.56/27, you know the first usable address in that subnet is 10.10.10.33, the last usable is 10.10.10.62, and the broadcast is 10.10.10.63.

anthonypants fucked around with this message at 22:10 on Oct 3, 2017

guppy
Sep 21, 2004

sting like a byob

anthonypants posted:

Yeah, IPv4 subnetting is easy.

/32 is one address, /31 is two, /30 is four, /29 is eight, etc.

32 = 32-0; 2^0 = 1
31 = 32-1; 2^1 = 2
30 = 32-2; 2^2 = 4
29 = 32-3; 2^3 = 8

32 = 32 ones, zero zeroes = 0xffffffff
31 = 31 ones, one zero = 0xfffffffe
30 = 30 ones, two zeroes = 0xfffffffd
29 = 29 ones, three zeroes = 0xfffffffc

And then you just go from there. Also you have to keep in mind that subnets will always begin and end on certain numbers. Like you should know deep down in your heart what /8 /16 and /24 are, and that there's no way to get a /24 range to begin at some arbitrary number -- the range will always be x.x.x.0-x.x.x.255. Every other subnet works the same way, like a /23 will be x.x.y.0-x.x.z.255, where y is even and z is odd. If you get a question like you need to know what the range of addresses in a /27 is, find out how many addresses are in it (32-27 = 5; 2^5 = 32), then break down the next biggest whole octet range (a /24) into groups of that size: 0-31, 32-63, 64-95, 96-127, 128-159, 160-191, 192-223, 224-255. So if you get an address of, say, 10.10.10.56/27, you know the first usable address in that subnet is 10.10.10.33, the last usable is 10.10.10.62, and the broadcast is 10.10.10.63.

Thanks Ants posted:

And for some reason the Cisco official way of teaching that makes it sound really loving complicated

Thanks for this, I did indeed learn it the Cisco way and found it very confusing.

ChubbyThePhat
Dec 22, 2006

Who nico nico needs anyone else
If I teach subnetting, I always do it the bitwise way. In my head, I do something much closer to what anthonypants posted in that I use block sizes as a shortcut.

Adbot
ADBOT LOVES YOU

mewse
May 2, 2006

anthonypants posted:

32 = 32 ones, zero zeroes = 0xffffffff
31 = 31 ones, one zero = 0xfffffffe
30 = 30 ones, two zeroes = 0xfffffffd
29 = 29 ones, three zeroes = 0xfffffffc

Binary = Hex
1111 1110 = FE
1111 1100 = FC
1111 1000 = F8

  • Locked thread