September 2014 - App_rpt-users

Changing the time on the BBB
by k5tra 25 Sep '14

25 Sep '14

Mike, use the time/date control function: timedatectl type: timedatectl (for time and date info) type: timedatectl set-time "2012-10-30 18:17:16" ( to set date and time) TIMEZONE setting: timedatectl set-timezone yourzone/subzone Example: timedatectl set-timezone America/Chicago Tom / K5TRA

1 0

Changing the time on the BBB
by Mike Lussier 25 Sep '14

25 Sep '14

Greeting all, I have been testing a time announcement script and in order to see how it worked around the time of midnight I have needed to change the time on the BBB. I play the file through the radio and it works. I used this command # date -s "23 SEP 2014 23:55:00" Then I type date and verify the proper day and time. I run the same time script again and it doesn't work. I boot the BBB and the time is back to current and the script works. Any thoughts ?? -- *"We must reject the idea that every time a law is broken, society is guilty rather than the law breaker.It is time to restore the American precept that each individual is accountable for his actions." ~ Ronald Regan*

1 0

Re: [App_rpt-users] Security Issues
by Ken Boyle 25 Sep '14

25 Sep '14

You could also install fail2ban. By default it allows three failed password attempts. Than temporarily bans the IP address. On Sep 24, 2014 10:43 PM, Doug Crompton <doug(a)crompton.com> wrote: > > I assume you have the linux box behind a router? If so why would you have sip even routed to your linux box if you are not using it? Routers make good firewalls. The only thing you should have routed is 4569 (udp) and 222 (tcp) neither have to be routed. 4569 would only need to be routed if you wanted to accept incoming connections. Outgoing would work fine without it. 222 would only be needed for administration. > > From what you are saying you obviously must not have a front-end (router firewall etc.) on your system . It sounds like you are just hanging on the raw Internet!! Some people go the easy route and put thhings in the DMZ of their routers which does open them up to the world. I went into an Allstar system this week to help with setup and I immediately knew it was on the DMZ. In the Asterisk client I was getting sip messages left and right. I unloaded the sip module and they went away. Not the right way to do it though as it should not be on dmz to begin with. Simply not having a sip.conf file does not prevent sip traffic!!! > > Assuming you have a router there should be no need to disable sip as it is never going to get to your box unless you port forward it there. It would be a good idea thought to not load the code for it if you are not using it. A noload=chan_sip.so in modules.conf would take care of that. > > Most good routers also allow you to specify specific or blocks of IP addresses to disallow. If there is a specific foreign block, say in China you can identify you could probably block it. > > So the bottom line is you could make your linux system tottally unavailable to the outside world by just not forwarding any ports. The downside is no one could connect to you (sometimes desirable) and you could not remotely administer your system. > > > 73 Doug > WA3DSP > http://www.crompton.com/hamradio > > > ________________________________ > Date: Wed, 24 Sep 2014 20:52:22 -0500 > From: lorentedford(a)gmail.com > To: app_rpt-users(a)ohnosec.org > Subject: [App_rpt-users] Security Issues > > Hey its Loren here again... > > Was curious what everyone found was the most substantial security risk with a Acid installation connected too two repeaters.. The sip.conf was deleted from the asterisks folder.. Noticed a strange node connection that didn’t match all stars normal node numbers 3101702 also found some thing with x.allstarlink.org in it anybody know what this is?? Anyway my linode server has been under constant attack from China they keep wanting to ssh into the server we had to drastically beef up things on the server such as changing the whole root user issue and moving to another port number etc.. Any thoughts ideas did i just become victum of a Sip attack too besides 19 ddos attacks this week already and over a million failed ssh attempts into my person linode server... > > > Loren Tedford (KC9ZHV) > Email: lorentedford(a)gmail.com > > http://www.lorentedford.com > http://www.Ltcraft.net > http://www.richlandcountycomputers.com > http://kc9zhv.lorentedford.com > > > _______________________________________________ App_rpt-users mailing list App_rpt-users(a)ohnosec.org http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button" You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.

1 0

Security Issues
by Loren Tedford 25 Sep '14

25 Sep '14

Hey its Loren here again... Was curious what everyone found was the most substantial security risk with a Acid installation connected too two repeaters.. The sip.conf was deleted from the asterisks folder.. Noticed a strange node connection that didn’t match all stars normal node numbers 3101702 also found some thing with x.allstarlink.org in it anybody know what this is?? Anyway my linode server has been under constant attack from China they keep wanting to ssh into the server we had to drastically beef up things on the server such as changing the whole root user issue and moving to another port number etc.. Any thoughts ideas did i just become victum of a Sip attack too besides 19 ddos attacks this week already and over a million failed ssh attempts into my person linode server... Loren Tedford (KC9ZHV) Email: lorentedford(a)gmail.com http://www.lorentedford.com http://www.Ltcraft.net <http://www.ltcraft.net/> http://www.richlandcountycomputers.com http://kc9zhv.lorentedford.com

2 1

Re: [App_rpt-users] Not able to receive incoming connections
by gene＠wb9coy.com 24 Sep '14

24 Sep '14

3 2

Re: [App_rpt-users] Not able to receive incoming connections
by gene＠wb9coy.com 24 Sep '14

24 Sep '14

1 0

Not able to receive incoming connections
by gene＠wb9coy.com 23 Sep '14

23 Sep '14

My node is 41303 W6QAR I have verified that I NAT on port 4569. It was mentioned that a check can be done on my node to see if it had to be forced.

2 1

RTCM Arrived
by Robert 22 Sep '14

22 Sep '14

My first RTCM arrived and it is my intention to use one on each of my MSF 5000's. So far I haven't read of a solid way of interfacing to either CLB or CBX models. Any help would be appreciated except that I plan to place a RC-210 in front of the RTCM. We won't be voting. At best we will attempt to sync the TX and audio on three repeaters. Or not. I have no idea what the controller can do as far as external links or operating as a full repeater controller. I have a weather RX to add, a semi-duplex link, etc. I have thought of using a 2m radio (or 440; the site has 440 for control) with a RC-210 connected to it and using IT to link to the repeater. Any thoughts? I appreciate all of you! Robert

1 0

Re: [App_rpt-users] App_rpt-users Digest, Vol 67, Issue 65
by Brian Burton 22 Sep '14

22 Sep '14

In xipar its txrxdelay= 20 ms intervals. AB3AA-Brian On Sep 22, 2014 12:00 PM, <app_rpt-users-request(a)ohnosec.org> wrote: > Send App_rpt-users mailing list submissions to > app_rpt-users(a)ohnosec.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users > or, via email, send a message with subject or body 'help' to > app_rpt-users-request(a)ohnosec.org > > You can reach the person managing the list at > app_rpt-users-owner(a)ohnosec.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of App_rpt-users digest..." > > > Today's Topics: > > 1. Re: RXDELAY in XIPAR (Lu Vencl) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 22 Sep 2014 10:07:48 -0400 > From: Lu Vencl <vencl(a)att.net> > To: Tim Sawyer <tim.sawyer(a)mac.com> > Cc: "app_rpt-users(a)ohnosec.org" <app_rpt-users(a)ohnosec.org>, > "webmaster(a)n4yza.com" <webmaster(a)n4yza.com> > Subject: Re: [App_rpt-users] RXDELAY in XIPAR > Message-ID: <46719A95-463D-4B06-B7F6-6CDEB348E7FF(a)att.net> > Content-Type: text/plain; charset="utf-8" > > Just made it long to test. But not effective. Probably only need 150 ms. > > Lu Vencl > > > On Sep 22, 2014, at 9:46 AM, Tim Sawyer <tim.sawyer(a)mac.com> wrote: > > > > Really? You need a 3 second delay? > > -- > > Tim WD6AWP > > > >> On Sep 22, 2014, at 5:13 AM, Lu Vencl <vencl(a)att.net> wrote: > >> > >> I have a XIPAR node that needs a little support with pulseback removal. > Never had to utilize this before, but when looking in URD.conf, I don?t see > the rxdelay= parameter like I do on ACID builds. I went ahead and inserted > the command into the file, but there does not seem to be any action. > >> Can someone confirm the parameter and placement? > >> Here is my example: > >> [usb] > >> > >> hdwtype=0 ; 0=std,1=dev > >> eeprom=0 ; unless you have a cable w/eeprom > >> duplex=0 ; 0=simplex, 1=duplex > >> invertptt=0 > >> ;minsigproc=0 ; minimal signal processing > >> ;sendvoter=0 ; 0=default, no voter rssi, 1=enable voter rssi > >> > >> carrierfrom=usbinvert ; no,usb,usbinvert,dsp,vox > >> ctcssfrom=no ; no,usb,dsp > >> rxondelay=3000 ; Gets rid of the pulseback problem > >> ;rxboost=1 ; rx input boost of 20dB > >> rxboost=0 ; no boost > >> rxdemod=flat ; no,speaker,flat > >> txprelim=0 ; 1 = pre-emphasize and limit > >> > >> txmixa=voice ; no,voice,tone,composite > >> txmixb=tone ; no,voice,tone,composite,auxvoice > >> > >> ;txctcssdefault=77.0 > >> ;rxctcssfreqs=77.0; > >> ;txctcssfreqs=77.0; > >> txtoctype=notone; > >> > >> rxsquelchdelay=900 ; delayline in ms carrier squelch tail eliminator > >> rxnoisefiltype=0 ; 0 for +/-5KHz, 2 for +/-2.5KHz systems > >> > >> > >> Lu, > >> KA4EPS > >> _______________________________________________ > >> App_rpt-users mailing list > >> App_rpt-users(a)ohnosec.org > >> http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users > >> > >> To unsubscribe from this list please visit > http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down > to the bottom of the page. Enter your email address and press the > "Unsubscribe or edit options button" > >> You do not need a password to unsubscribe, you can do it via email > confirmation. If you have trouble unsubscribing, please send a message to > the list detailing the problem. > > >

1 0

Re: [App_rpt-users] ping pong-somewhat demystified and a turn for the twilight zone
by George Csahanin 22 Sep '14

22 Sep '14

Back in town... Limey has this script, getsrc, that worked in the past. And yeah, looks at the tgz on the CF card, but that’s old source, so eliminated that file and it did download a source file, but it is August 2011 version, not new source. I can get the source from svn, no problem. The issue is that it suddenly won’t compile. ./configure is needed to run to make a Makefile. But I even tried just adding the line to the old source (chan_simpleusb.c) to add rxondelay. Can’t get configure to run without noting these errors. It claims the said .h file is missing, I just need to know where it needs to be. It exists, just (it seems) not in the right place. And as to the vintage of the source, I recall that the source for asterisk on a limey platform was different and from a different place, but don’t know what/why/when. GeorgeC George J Csahanin W2DB Cedar Park, TX 512-401-2630 home 401-338-0568 cel From: Tim Sawyer Sent: Wednesday, September 17, 2014 9:25 AM To: George Csahanin Subject: Re: [App_rpt-users] ping pong-somewhat demystified and a turn for the twilight zone Actually I don’t think the upgrade runs configure. -- Tim WD6AWP On Sep 16, 2014, at 10:43 PM, George Csahanin <george(a)dyb.com> wrote: Looks good, thanks. I always used the built in getsrc script. I still need to solve the compiler issue so I can actually do this upgrade. Thanks, Tim. George George J Csahanin W2DB Cedar Park, TX 512-401-2630 home 401-338-0568 cel From: Tim Sawyer Sent: Tuesday, September 16, 2014 11:13 PM To: George Csahanin Subject: Re: [App_rpt-users] ping pong-somewhat demystified and a turn for the twilight zone Is there a reason not to use the normal upgrade procedure? https://allstarlink.org/support.html#astupgrade -- Tim :wq On Sep 16, 2014, at 8:54 PM, George Csahanin <george(a)dyb.com> wrote: OK, found an old message from Jim that says this was fixed by adding a line to make rxondelay work, and my source is from August 31 2011, which is two years before the fix. I’m going to step into the deep end here and ask a question that may seem like a limey question, but really a cpp question. ./configure output says cpp failed sanity test, look at the log file and I see that it was looking for an include file but cannot find it. The one in question is limits.h, supposedly in linux/limits.h and I looked in /usr/include and it is there. So, please, somebody learn me here. This has been a mystery to me since I started hacking this stuff in the early 90’s and proves why I should maybe stick to broken down TV stations...but...WHERE is it looking for this include file? In limey the source all goes under /usr/src/astsrc/ then under that in /usr/src/astsrc/asterisk is where ./configure, etc is. I tried loading new source, and the August 31, 2011 is what getsrc will download. So added question, assuming I can make this work, can I load the latest source code on the limey box, I have never seen anything different. But curious. George J Csahanin W2DB Cedar Park, TX _______________________________________________ App_rpt-users mailing list App_rpt-users(a)ohnosec.org http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button" You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.

1 0