I manage many services for others on the internet, as well as my own.

Most people are happy with fairly basic security, but I prefer to tiedown my own servers- I only like to leave the ports open that I have to, and now that I’m back on a static network, I can start to block things more effectively (no, you don’t need to portscan me; I’ve still got ssh enabled globally, but it’s without-passwords, sorry).

Today I ran into an issue which I created by myself which caused an issue with my IPv6 nameservers. I probably would have found this sooner, but since I didn’t have access to debug on the hypervisor, I just assumed it was a problem with the host. Oops I broke the cardinal rule!

Long story short, I adapted my IPv4 iptables rules to IPv6 without thinking too much about it. I actually had this evilness in the wild:

ip6tables -A INPUT -p icmpv6 -m icmpv6 --icmpv6-type 8 -j ACCEPT

I swear I thought that I had thought about this. The problem with this is that ipv6-icmp is protocol 51, and I didn’t really think this through. I broke NDP with this, and didn’t notice that it happened immediately, since it took awhile for IPv6 services to completely drop. Silly me.

Thank you, RAMHost, for being more clueful than myself on this stupid I created by politely informing me of my errant ICMP block.

Every so often, you find a cute thing on the internet. One of my favorite unknown reseller non-vendor registrars started supporting .su.

On a whim..

[shawn@latty ~]$ whois aboynamed.su

Well, guess what!?

% By submitting a query to RIPN’s Whois Service
% you agree to abide by the following terms of use:
% http://www.ripn.net/about/servpol.html#3.2 (in Russian)
% http://www.ripn.net/about/en/servpol.html#3.2 (in English).

descr: My daddy left home when I was three
descr: And he didn’t leave much to ma and me
descr: Just this old guitar and an empty bottle of booze
descr: Now I dont blame him cause he run and hid
descr: But the meanest thing that he ever did
descr: Was before he left, he went and named me Sue.
nserver: ns1.dreamhost.com.
nserver: ns2.dreamhost.com.
nserver: ns3.dreamhost.com.
person: Private Person
e-mail: frijole@me.com
registrar: RUCENTER-SU
created: 2013-07-12T23:56:33Z
paid-till: 2019-07-13T00:56:33Z
free-date: 2019-08-15
source: TCI

Last updated on 2018-09-04T02:31:31Z

That briefly took me back to when the internet was still a silly, open place.

“Battle Born” is the state motto of Nevada, and as I slowly work my way away, I found this poor thing- she was certainly put away wet and and has been hurt over the years.

I figured she and my own abused Daily Driver should have a chance to be seen, even if it meant walking all the way from the rear of the Wal-Mart parking lot.

The insidious pun hit several hours later (when I looked at our now-deprecated plates).

Older Entries: Newer Entries: Stuff from before Stuff that came after this