November 2014 - App_rpt-users - lists.keekles.org

Re: [App_rpt-users] How to talk and receive from zoiper
by Skyler F 26 Nov '14

26 Nov '14

Thanks, that worked! On Wed, Nov 26, 2014 at 12:51 PM, Michael Hebert <mhebert1975(a)gmail.com> wrote: > You need to fix your context=myphone to match what is in your > extensions.conf > On Nov 26, 2014 1:48 PM, "Skyler F" <electricity440(a)gmail.com> wrote: > >> I guess I forgot to reply to the whole group. Dialing "40764 (my node >> number)" gives me an "Error #3, no route to destination" >> >> >> >> Here is my extensions.conf >> >> >> [myiphone] >> exten=40764,1,rpt(40764|P) >> >> >> >> ------------------------------------------------------- >> >> >> And here is my iAX.conf file >> [myiphone] >> username=myiphone >> type=friend >> context=myphone >> host=dynamic >> auth=md5 >> secret=<MyPasswordIsHere> >> disallow=all >> allow=ulaw >> allow=g726aal2 >> allow=gsm >> codecpriority=host >> transfer=no >> callerid="kd0whb" >> >> >> I am assuming it is ok to put the [myiphone] right before the [general] >> section. Everything Seems to be working though, becuase it would not even >> register until I fixed a typo, being one [] said myiphone and one [] said >> myphone. >> >> >> On Wed, Nov 26, 2014 at 12:40 PM, Skyler F <electricity440(a)gmail.com> >> wrote: >> >>> Yes, I modified extensions.conf and iax.conf just like it said to here >>> >>> >>> http://lists.allstarlink.org/pipermail/app_rpt-users/2014-March/008973.html >>> >>> On Wed, Nov 26, 2014 at 12:30 PM, Robert Newberry <N1XBM(a)amsat.org> >>> wrote: >>> >>>> Have you setup your node for an iax or sip connection yet? >>>> >>>> _______________________________________________ >>>> App_rpt-users mailing list >>>> App_rpt-users(a)ohnosec.org >>>> http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users >>>> >>>> To unsubscribe from this list please visit >>>> http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll >>>> down to the bottom of the page. Enter your email address and press the >>>> "Unsubscribe or edit options button" >>>> You do not need a password to unsubscribe, you can do it via email >>>> confirmation. If you have trouble unsubscribing, please send a message to >>>> the list detailing the problem. >>>> >>> >>> >>> >>> -- >>> Skyler Fennell >>> amsatnet.info >>> KDØWHB >>> electricity440(a)gmail.com >>> >> >> >> >> -- >> Skyler Fennell >> amsatnet.info >> KDØWHB >> electricity440(a)gmail.com >> >> _______________________________________________ >> App_rpt-users mailing list >> App_rpt-users(a)ohnosec.org >> http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users >> >> To unsubscribe from this list please visit >> http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll >> down to the bottom of the page. Enter your email address and press the >> "Unsubscribe or edit options button" >> You do not need a password to unsubscribe, you can do it via email >> confirmation. If you have trouble unsubscribing, please send a message to >> the list detailing the problem. >> > -- Skyler Fennell amsatnet.info KDØWHB electricity440(a)gmail.com

1 0

Re: [App_rpt-users] How to talk and receive from zoiper
by Skyler F 26 Nov '14

26 Nov '14

I guess I forgot to reply to the whole group. Dialing "40764 (my node number)" gives me an "Error #3, no route to destination" Here is my extensions.conf [myiphone] exten=40764,1,rpt(40764|P) ------------------------------------------------------- And here is my iAX.conf file [myiphone] username=myiphone type=friend context=myphone host=dynamic auth=md5 secret=<MyPasswordIsHere> disallow=all allow=ulaw allow=g726aal2 allow=gsm codecpriority=host transfer=no callerid="kd0whb" I am assuming it is ok to put the [myiphone] right before the [general] section. Everything Seems to be working though, becuase it would not even register until I fixed a typo, being one [] said myiphone and one [] said myphone. On Wed, Nov 26, 2014 at 12:40 PM, Skyler F <electricity440(a)gmail.com> wrote: > Yes, I modified extensions.conf and iax.conf just like it said to here > > http://lists.allstarlink.org/pipermail/app_rpt-users/2014-March/008973.html > > On Wed, Nov 26, 2014 at 12:30 PM, Robert Newberry <N1XBM(a)amsat.org> wrote: > >> Have you setup your node for an iax or sip connection yet? >> >> _______________________________________________ >> App_rpt-users mailing list >> App_rpt-users(a)ohnosec.org >> http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users >> >> To unsubscribe from this list please visit >> http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll >> down to the bottom of the page. Enter your email address and press the >> "Unsubscribe or edit options button" >> You do not need a password to unsubscribe, you can do it via email >> confirmation. If you have trouble unsubscribing, please send a message to >> the list detailing the problem. >> > > > > -- > Skyler Fennell > amsatnet.info > KDØWHB > electricity440(a)gmail.com > -- Skyler Fennell amsatnet.info KDØWHB electricity440(a)gmail.com

1 0

How to talk and receive from zoiper
by Skyler F 26 Nov '14

26 Nov '14

I setup zoiper on my mobile device to my node, and it says "ready" and gave me a dial pad. What should I dial to talk on my node? I know the command *99 and # are used for PTT and Key up, but I don't know how to get to the phone area. Thanks Skyler KDØWHB -- Skyler Fennell amsatnet.info KDØWHB electricity440(a)gmail.com

3 3

Re: [App_rpt-users] custom node announcement?
by mike＠midnighteng.com 26 Nov '14

26 Nov '14

Corey, I had never had the desire to try that before but I tested it tonight and I can see the benefit of the short/quick sound files over the prolonged announcement digits. So I made it into a script and sched it for update once a week on late thurs night. That won't task your server will it ? I know the subject has come up several times on the list. Just could not remember exact details. Thanks for your efforts in improving things. If for any reason you find the need to discontinue the great service, let me know. I would host it if needed. Thanks again, ...mike/kb8jnm -------- Original Message -------- Subject: Re: [App_rpt-users] custom node announcement? From: Corey Dean <n3fe(a)repeater.net> Date: Tue, November 25, 2014 2:13 pm To: Bryan Fields <Bryan(a)bryanfields.net> Cc: "mike(a)midnighteng.com" <mike(a)midnighteng.com>, APP RPT <app_rpt-users(a)ohnosec.org> I think what he is trying to do is put his node number that is in the sounds/rpt/nodenames into a global distribution that doesnt exist. I only know of 3 places that people get these updates kb2ear supports one, the wan system, and I have one that combines the two that also contains private nodes that people have. Is this what you are trying to do? If you want to send me your ulaw or gsm file, you can upload it at http://www.repeater.net/upload/html If you want to download the audio files I have, here is the command to run from your nodes cli rsync -av rsync://www.repeater.net/nodenames/ /var/lib/asterisk/sounds/rpt/nodenames/ I hope this is what you are looking for. I do look at the uploaded files every few days so once I get them and verify them, they are available in the rsync. Sent from my iPhone > On Nov 25, 2014, at 1:48 PM, Bryan Fields <Bryan(a)bryanfields.net> wrote: > >> On 11/25/14, 12:54 PM, mike(a)midnighteng.com wrote: >> >> Bryan, >> I think if you search the list archives, you will find a answer for that >> method as it has been discussed before. I even think it is posted on a >> website somewhere. > > I've only found this > http://ohnosec.org/pipermail/app_rpt-users/2009-November/000608.html > and it does not appear to have a way to do it in the portal. > > The doc site has nothing about uploading the file on this page > http://docs.allstarlink.org/drupal/node/131 > > Thank you, > -- > Bryan Fields > > 727-409-1194 - Voice > 727-214-2508 - Fax > http://bryanfields.net > _______________________________________________ > App_rpt-users mailing list > App_rpt-users(a)ohnosec.org > http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users > > To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button" > You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.

1 0

Re: [App_rpt-users] custom node announcement?
by Bryan Fields 25 Nov '14

25 Nov '14

On 11/25/14, 2:22 PM, Robert A. Poff WB3AWJ wrote: > As far as I know there is no distribution of custom node name files via the > portal. The link I posted from 2009 said there was a way via the web portal. There is this as part of the rc.updatenodelist script as well if [ $downloads -gt 100 ] then downloads=0 sleep 600 # use rsync to update the connect messages $RSYNC -av rsync://allstarlink.org/connect-messages /var/lib/asterisk/sounds/rpt/nodenames break; # Don't dwell on one server, Look for a new server fi There are node name files at rsync://allstarlink.org/connect-messages for some nodes as well If this is not a feature, why is it in the script? > > Some time ago KB2EAR had posted an rsync link to his "repository" of node name > files. > You should be able to find that post in the list archive. Ok, is that different than the rsync://allstarlink.org/connect-messages repository? I'd question which repository is the proper one for the Allstar network. Can anyone see how this can be confusing? -- Bryan Fields 727-409-1194 - Voice 727-214-2508 - Fax http://bryanfields.net

2 1

Re: [App_rpt-users] custom node announcement?
by Bryan Fields 25 Nov '14

25 Nov '14

On 11/25/14, 12:54 PM, mike(a)midnighteng.com wrote: > > Bryan, > I think if you search the list archives, you will find a answer for that > method as it has been discussed before. I even think it is posted on a > website somewhere. I've only found this http://ohnosec.org/pipermail/app_rpt-users/2009-November/000608.html and it does not appear to have a way to do it in the portal. The doc site has nothing about uploading the file on this page http://docs.allstarlink.org/drupal/node/131 Thank you, -- Bryan Fields 727-409-1194 - Voice 727-214-2508 - Fax http://bryanfields.net

3 2

Fw: Weekly Vulnerability Summary - Nov 24 2014
by Steven Donegan 25 Nov '14

25 Nov '14

Lots of Asterisk vulnerabilities in this summary :-( ____________ Steven Donegan KK6IVC SSCC/NORC Life Member, Car #86 www.sscc.us ----- Forwarded Message ----- From: SecurityTracker <newsletters(a)SECURITYTRACKER.COM> To: SECURITYTRACKER-WEEKLY-ALL(a)PEACH.EASE.LSOFT.COM Sent: Monday, November 24, 2014 1:10 AM Subject: Weekly Vulnerability Summary - Nov 24 2014 SecurityTracker Monday Morning Vulnerability Summary - Nov 24 2014 http://www.securitytracker.com If you run a web site and would like to publish SecurityTracker vulnerability headlines on your web site for free, then join our Affiliate Program: http://securitytracker.com/affiliate/affiliate_signup.html Subscriptions to this newsletter are available for free. Just visit our web site to sign up: http://www.securitytracker.com/signup/signup_now.html ------------------------------------------------------------------------ In This Week's SecurityTracker Vulnerability Summary SecurityTracker Alerts: 22 Vendors: Apple Computer - Cisco - Digium (Linux Support Services) - drupal.org - F5 Networks - Google - Microsoft - moodle.org - rubyforge.org - Tcpdump.org - wordpress.org Products: Aironet - Apple iOS - Apple TV - Asterisk - Cisco IOS - Cisco Unified Communications Manager - Drupal - F5 BIG-IP - Google Chrome - Kerberos - Mac OS X - Moodle - Rails - Tcpdump - WordPress Headlines: 1. WordPress Bugs Let Remote Users Conduct Cross-Site Scripting, Cross-Site Request Forgery, and Denial of Service Attacks 2. Moodle Bugs Permit Cross-Site Scripting, Cross-Site Request Forgery, and Information Disclosure Attacks 3. Cisco Aironet DHCP Lease Renewal Flaw Lets Remote Users Deny Service 4. Rails Action Pack Bug Lets Remote Users Determine if Specified Files Exist on the Target System 5. Tcpdump Multiple Flaws Let Remote Users Deny Service 6. Asterisk CONFBRIDGE Lets Remote Authenticated Users Execute Arbitrary System Commands 7. Asterisk DB Dialplan Function Lets Remote Authenticated Users Gain Elevated Privileges 8. Asterisk PJSIP Channel Driver Flaw in res_pjsip_refer Module Lets Remote Users Deny Service 9. Microsoft Windows Kerberos KDC Signature Validation Flaw Lets Remote Authenticated Users 10. Cisco IOS DLSw Processing Flaw Lets Remote Users Obtain Potentially Sensitive Information 11. Apple TV Bugs Let Remote Users Execute Arbitrary Code and Local Users Gain Elevated Privileges 12. Asterisk PJSIP Channel Driver Race Condition Lets Remote Users Deny Service 13. Asterisk ConfBridge State Transition Error Lets Remote Users Deny Service 14. Cisco Unified Communications Manager IM and Presence Service Discloses Valid Usernames to Remote Users 15. Apple iOS Lets Local Users Bypass Access Controls and Remote Applications Launch Arbitrary Binaries 16. Drupal Bugs Let Remote Users Highjack User Sessions and Deny Service 17. Cisco Aironet EAP Processing Error Lets Remote Users Deny Service 18. Google Chrome Multiple Bugs Let Remote Users Execute Arbitrary Code and Obtain Information 19. Apple OS X Bugs Let Remote Users Execute Arbitrary Code and Obtain Potentially Sensitive Information 20. F5 BIG-IP Lets Remote Authenticated Users Delete Files on the Target System 21. Asterisk PJSIP ACL Bug Lets Remote Users Bypass Access Controls 22. Asterisk IP Address Checking Flaw Lets Remote Users Bypass Access Controls in Certain Cases ------------------------------------------------------------------------ Your SecurityTracker Vulnerability Alerts 1. WordPress Vendor: wordpress.org Several vulnerabilities were reported in WordPress. A remote user can cause denial of service conditions. A remote user can conduct cross-site scripting attacks. A remote user can conduct cross-site request forgery attacks. A remote user can compromise a target user's account. Impact: Denial of service via network Alert: http://securitytracker.com/id/1031243 2. Moodle Vendor: moodle.org Multiple vulnerabilities were reported in Moodle. A remote user can conduct cross-site scripting attacks. A remote user can conduct cross-site request forgery attacks. A remote authenticated user can obtain potentially sensitive information. Impact: Disclosure of authentication information Alert: http://securitytracker.com/id/1031215 3. Aironet Vendor: Cisco A vulnerability was reported in Cisco Aironet. A remote user can cause denial of service conditions. Impact: Denial of service via network Alert: http://securitytracker.com/id/1031218 4. Rails Vendor: rubyforge.org A vulnerability was reported in Rails. A remote user can determine whether specified files exist on the target system. Impact: Disclosure of system information Alert: http://securitytracker.com/id/1031217 5. Tcpdump Vendor: Tcpdump.org Several vulnerabilities were reported in Tcpdump. A remote user can cause denial of service conditions. Impact: Denial of service via network Alert: http://securitytracker.com/id/1031235 6. Asterisk Vendor: Digium (Linux Support Services) A vulnerability was reported in Asterisk. A remote authenticated user can gain elevated privileges on the target system. Impact: Execution of arbitrary code via network Alert: http://securitytracker.com/id/1031250 7. Asterisk Vendor: Digium (Linux Support Services) A vulnerability was reported in Asterisk. A remote authenticated user can execute arbitrary code on the target system. Impact: User access via network Alert: http://securitytracker.com/id/1031251 8. Asterisk Vendor: Digium (Linux Support Services) A vulnerability was reported in Asterisk. A remote user can cause denial of service conditions. Impact: Denial of service via network Alert: http://securitytracker.com/id/1031249 9. Kerberos Vendor: Microsoft A vulnerability was reported in Microsoft Windows Kerberos. A remote authenticated user can gain elevated privileges. Impact: User access via network Alert: http://securitytracker.com/id/1031237 10. Cisco IOS Vendor: Cisco A vulnerability was reported in Cisco IOS. A remote user can obtain potentially sensitive information. Impact: Disclosure of authentication information Alert: http://securitytracker.com/id/1031220 11. Apple TV Vendor: Apple Computer Several vulnerabilities were reported in Apple TV. A remote user can execute arbitrary code on the target system. A local user can obtain elevated privileges on the target system. Impact: Execution of arbitrary code via local system Alert: http://securitytracker.com/id/1031231 12. Asterisk Vendor: Digium (Linux Support Services) A vulnerability was reported in Asterisk. A remote user can cause denial of service conditions. Impact: Denial of service via network Alert: http://securitytracker.com/id/1031248 13. Asterisk Vendor: Digium (Linux Support Services) A vulnerability was reported in Asterisk. A remote user can cause denial of service conditions. Impact: Denial of service via network Alert: http://securitytracker.com/id/1031247 14. Cisco Unified Communications Manager Vendor: Cisco A vulnerability was reported in Cisco Unified Communications Manager IM and Presence Service. A remote user can determine valid usernames on the target system. Impact: Disclosure of system information Alert: http://securitytracker.com/id/1031240 15. Apple iOS Vendor: Apple Computer Several vulnerabilities were reported in Apple iOS. A physically local user can bypass access controls. An application can launch arbitrary binaries on the target system. Impact: Execution of arbitrary code via local system Alert: http://securitytracker.com/id/1031232 16. Drupal Vendor: drupal.org Two vulnerabilities were reported in Drupal. A remote user can hijack another user's session. A remote user can cause denial of service conditions. Impact: Denial of service via network Alert: http://securitytracker.com/id/1031244 17. Aironet Vendor: Cisco A vulnerability was reported in Cisco Aironet. A remote user can cause denial of service conditions. Impact: Denial of service via network Alert: http://securitytracker.com/id/1031219 18. Google Chrome Vendor: Google Multiple vulnerabilities were reported in Google Chrome. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can obtain potentially sensitive information. Impact: Disclosure of system information Alert: http://securitytracker.com/id/1031241 19. Mac OS X Vendor: Apple Computer Several vulnerabilities were reported in Apple OS X. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can obtain potentially sensitive information. Impact: Disclosure of system information Alert: http://securitytracker.com/id/1031230 20. F5 BIG-IP Vendor: F5 Networks A vulnerability was reported in F5 BIG-IP. A remote authenticated user can delete files on the target system. Impact: Denial of service via network Alert: http://securitytracker.com/id/1031216 21. Asterisk Vendor: Digium (Linux Support Services) A vulnerability was reported in Asterisk. A remote user can bypass access controls. Impact: Host/resource access via network Alert: http://securitytracker.com/id/1031246 22. Asterisk Vendor: Digium (Linux Support Services) A vulnerability was reported in Asterisk. A remote user can bypass access controls. Impact: Host/resource access via network Alert: http://securitytracker.com/id/1031245 ------------------------------------------------------------------------ To join, delete, or otherwise change your subscription, visit: http://www.securitytracker.com/help/accounts.html To contact us, send e-mail to help(a)securitytracker.com (mailto:help@securitytracker.com) If you need to refer to this weekly vulnerability summary when you mail us, please provide us with following SecurityTracker message ID: <WS.ALL.2014Nov24.2244.235812.XND> Keep Track of the Latest Vulnerabilities with SecurityTracker! http://www.securitytracker.com copyright 2014, SecurityGlobal.net LLC See disclaimer notice at: http://www.securitytracker.com/learn/disclaimer.html ------------------------------------------------------------------------ ############################ To unsubscribe from the SECURITYTRACKER-WEEKLY-ALL list: write to: mailto:SECURITYTRACKER-WEEKLY-ALL-SIGNOFF-REQUEST@PEACH.EASE.LSOFT.COM or click the following link: http://peach.ease.lsoft.com/scripts/wa-PEACH.exe?SUBED1=SECURITYTRACKER-WEE…

1 0

Re: [App_rpt-users] custom node announcement?
by Bryan Fields 25 Nov '14

25 Nov '14

On 11/24/14, 11:37 PM, mike(a)midnighteng.com wrote: > > Bryan, > > I think you need to do that in your node, > > in extensions.conf > > [radio-control] > exten => 29261,1,Answer > exten => 29261,n,Wait(2) > exten => 29261,n,Playback(/path/to/file.gsm) ;<<<<<<<<<<<<<<<<<<<<<<<<<<< > exten => 29261,n,Rpt,29261|P > > Adjust as needed but use > Playback(/path/to/file.gsm) -before the actual connection is made to node I'm asking about the node announcements in /var/lib/asterisk/sounds/rpt/nodenames these override the number readouts if they exist. I've made some custom ones I'm using for my node, and the rc.updatenodelist script looks to rsync these from the allstar server. Unless asterisk can push these files some how, I don't think this is what I need. Thanks, -- Bryan Fields 727-409-1194 - Voice 727-214-2508 - Fax http://bryanfields.net

1 0

Re: [App_rpt-users] custom node announcement?
by mike＠midnighteng.com 25 Nov '14

25 Nov '14

1 0

custom node announcement?
by Bryan Fields 25 Nov '14

25 Nov '14

Where can I upload a custom announcement recording for one of my nodes in the portal page? Or if not there how can I do this? Thanks, -- Bryan Fields 727-409-1194 - Voice 727-214-2508 - Fax http://bryanfields.net

2 1