September 2018 - App_rpt-users

Allmon2 /Supermon x.x Sources?
by Jim Aspinwall No1PC 13 Sep '18

13 Sep '18

I'm perplexed/challenged to locate install-able, agnostic sources for either Allmon2 and/or SuperMon x.yy.zzz.... preferring the latter. How/where does one acquire and apply working code for either/both?

2 1

Trouble with minicom on new install
by TGundo 2003 12 Sep '18

12 Sep '18

Morning all- Just did a fresh install, upgraded to a new Pi. Everything went very smooth, copied over my config files and everything started working as it should. One issue though- I am trying to put Minicom back on and I get this: root@repeater:~# apt-get install minicomReading package lists... DoneBuilding dependency treeReading state information... DoneE: Unable to locate package minicomroot@repeater:~# Any ideas? I am running this as root. Thanks!TomW9SRV

3 4

AP2CJ Node 48092 no longer in DB
by Shehzad Hamid 12 Sep '18

12 Sep '18

Greetings, A little background, ive installed ASL on intel Atom with the modified usb FOB cm108 and an HT for RF on 144MHz, have echolink enabled and all connections from echolink and allstar in and out establish perfectly, configured the port forwarding on the router and all worked well. The bigger plan is to putup at least 3 nodes in Pakistan linking 3 city coverage repeaters together in future while having the facility of world being connected to us or vise versa :D. The issue in subject line has been posted many times before and I have gone through almost all of them for the past 3+ days now but to no avail. The node does not show up in the online nodes list nor on http://status.allstarlink.org/nodeinfo.cgi?node=48092 where as it does showup green in system-wide node list, the iax2 show registry shows allstarlink1*CLI> iax2 show registry Host dnsmgr Username Perceived Refresh State 67.215.233.178:4569 Y 48092 39.50.88.107:10880 60 Registered have checked all possible network settings and no change from the first day it went online. repeater@allstarlink1:~$ sudo cat /tmp/rpt_extnodes-temp | grep 48092 48092=radio@39.50.88.107:4569/48092,39.50.88.107 repeater@allstarlink1:~$ sudo grep 48092 /var/lib/asterisk/rpt_extnodes 48092=radio@39.50.88.107:4569/48092,39.50.88.107 ran tcpdump on the allstarnode and I can see the packets being sent and acknowledged (below). 14:22:47.299321 IP 192.168.1.5.35422 > stats.allstarlink.org.http: Flags [S], seq 1388935083, win 29200, options [mss 1460,sackOK,TS val 1223790 ecr 0,nop,wscale 7], length 0 14:22:47.303605 IP 192.168.1.5.35424 > stats.allstarlink.org.http: Flags [S], seq 2416777296, win 29200, options [mss 1460,sackOK,TS val 1223791 ecr 0,nop,wscale 7], length 0 14:22:47.625331 IP stats.allstarlink.org.http > 192.168.1.5.35422: Flags [S.], seq 953265040, ack 1388935084, win 28960, options [mss 1452,sackOK,TS val 914084267 ecr 1223790,nop,wscale 7], length 0 14:22:47.625451 IP 192.168.1.5.35422 > stats.allstarlink.org.http: Flags [.], ack 1, win 229, options [nop,nop,TS val 1223872 ecr 914084267], length 0 14:22:47.625642 IP 192.168.1.5.35422 > stats.allstarlink.org.http: Flags [P.], seq 1:316, ack 1, win 229, options [nop,nop,TS val 1223872 ecr 914084267], length 315: HTTP: GET /uhandler.php?node=48092&time=1529313767&seqno=107&nodes=&apprptvers=0.327&apprptuptime=1875&totalkerchunks=0&totalkeyups=5&totaltxtime=33&timeouts=0&totalexecdcommands=1 HTTP/1.1 14:22:47.632208 IP stats.allstarlink.org.http > 192.168.1.5.35424: Flags [S.], seq 1293069211, ack 2416777297, win 28960, options [mss 1452,sackOK,TS val 914084267 ecr 1223791,nop,wscale 7], length 0 14:22:47.632359 IP 192.168.1.5.35424 > stats.allstarlink.org.http: Flags [.], ack 1, win 229, options [nop,nop,TS val 1223873 ecr 914084267], length 0 14:22:47.632735 IP 192.168.1.5.35424 > stats.allstarlink.org.http: Flags [P.], seq 1:217, ack 1, win 229, options [nop,nop,TS val 1223873 ecr 914084267], length 216: HTTP: GET /uhandler.php?node=48092&time=1529313767&seqno=108&keyed=0&keytime=1885 HTTP/1.1 14:22:47.953808 IP stats.allstarlink.org.http > 192.168.1.5.35422: Flags [.], ack 316, win 235, options [nop,nop,TS val 914084349 ecr 1223872], length 0 14:22:47.958200 IP stats.allstarlink.org.http > 192.168.1.5.35422: Flags [P.], seq 1:208, ack 316, win 235, options [nop,nop,TS val 914084350 ecr 1223872], length 207: HTTP: HTTP/1.1 200 OK 14:22:47.958288 IP 192.168.1.5.35422 > stats.allstarlink.org.http: Flags [.], ack 208, win 237, options [nop,nop,TS val 1223955 ecr 914084350], length 0 14:22:47.960295 IP 192.168.1.5.35422 > stats.allstarlink.org.http: Flags [F.], seq 316, ack 208, win 237, options [nop,nop,TS val 1223955 ecr 914084350], length 0 14:22:47.962823 IP stats.allstarlink.org.http > 192.168.1.5.35424: Flags [.], ack 217, win 235, options [nop,nop,TS val 914084350 ecr 1223873], length 0 14:22:47.966204 IP stats.allstarlink.org.http > 192.168.1.5.35424: Flags [P.], seq 1:208, ack 217, win 235, options [nop,nop,TS val 914084351 ecr 1223873], length 207: HTTP: HTTP/1.1 200 OK 14:22:47.966263 IP 192.168.1.5.35424 > stats.allstarlink.org.http: Flags [.], ack 208, win 237, options [nop,nop,TS val 1223957 ecr 914084351], length 0 14:22:47.968871 IP 192.168.1.5.35424 > stats.allstarlink.org.http: Flags [F.], seq 217, ack 208, win 237, options [nop,nop,TS val 1223957 ecr 914084351], length 0 14:22:48.284755 IP stats.allstarlink.org.http > 192.168.1.5.35422: Flags [F.], seq 208, ack 317, win 235, options [nop,nop,TS val 914084432 ecr 1223955], length 0 14:22:48.284887 IP 192.168.1.5.35422 > stats.allstarlink.org.http: Flags [.], ack 209, win 237, options [nop,nop,TS val 1224037 ecr 914084432], length 0 14:22:48.296156 IP stats.allstarlink.org.http > 192.168.1.5.35424: Flags [F.], seq 208, ack 218, win 235, options [nop,nop,TS val 914084433 ecr 1223957], length 0 14:22:48.296248 IP 192.168.1.5.35424 > stats.allstarlink.org.http: Flags [.], ack 209, win 237, options [nop,nop,TS val 1224039 ecr 914084433], length 0 Please advise -- 73's Shehzad AP2CJ

4 10

Pi-Zero Support?
by ssedgwick 11 Sep '18

11 Sep '18

Does the Pi-Zero work with ASL_1.01-20180228 version of allstar? It see to load fine and I have wifi working on the pi-Zero, but it’s not registering and the heart beat LED on the fob is not flashing. I may have done something wrong, but before I start over I want to make sure it will work. The reason I’m using the pi-zero is I need the lowest possible power consumption and wifi connectivity. Thanks, Steve_WB8GRS

1 0

failed to connect error message
by George Csahanin 10 Sep '18

10 Sep '18

Trying to connect from 28599 (192.168.1.107) to 2428 (192.168.1.73) I get the following failure message on 2428: -- Accepting UNAUTHENTICATED call from 192.168.1.107: > requested format = gsm, > requested prefs = (gsm|ilbc|g726aal2|ulaw), > actual format = g726aal2, > host prefs = (g726aal2|gsm), > priority = mine -- Executing [2428@radio-secure:1] Rpt("IAX2/192.168.1.107:4571-5221", "2428") in new stack [Sep 9 11:49:25] WARNING[24760]: app_rpt.c:22701 rpt_exec: Reported node 28599, name none cannot be found!! == Spawn extension (radio-secure, 2428, 1) exited non-zero on 'IAX2/192.168.1.107:4571-5221' -- Hungup 'IAX2/192.168.1.107:4571-5221' 2428*CLI> Again, a head scratcher for me. As I get older this is more frequent... GeorgeC W2DB --- This email has been checked for viruses by AVG. https://www.avg.com

2 2

odd remote base problem
by George Csahanin 08 Sep '18

08 Sep '18

I managed to get my remote working. sort of... All functions work, its a ft-897, its running ACID. But it had one very odd issue. Three nodes at home, 28599 (900 MSF), 2360 (440 simplex node (original repeater failed) and node 2428, the remote base. It runs on ACID, 2360 is Limey, 28599 a one year old DIAL on a Pi. I cannot connect 28599 to 2428, it tells me there is a conflict I have all three with their rpt.conf have node entries for each other. That issue seems unrelated. I can connect node 2360 to 2428. I hear audio from the remote just fine. But when I talk into 2360 from my portable no audio comes out the FOB on the 2428 ACID PC. If I do radio-tune menu on 2428 and have a tone sent out to the remote that works. If I connect 28599 to 2360 and use a talky to transmit to 28599 that audio comes out 2428 to the ft-897. The docs on remote base are real thin. I had this all figured out in 2010 but can't find any notes on it after two moves. Using USBRADIO on the remote right now. Anybody have any suggestions? Thanks GeorgeC W2DB -- George Csahanin 10100 Carson Ranch Rd. Crowley, TX 76036 682-708-5710 office 401-338-0568 cel george(a)w2db.com

1 0

Re: [App_rpt-users] remote base
by George Csahanin 06 Sep '18

06 Sep '18

Mike, I have done all of the above fir my remote, a ft897 . But something is not right. When I try showvard fir the node I get a core dump, and asterisk exits. I just need to find a complete how-to on it. What is on the wiki is very thin on info. There used to be sample config files for a remote but can’t find it. If I comment out remote = ft897 and do showvars I get no dump. Is current DIAL for Pi able to do remotes? I have to dig, maybe I can find the computer I used fir a remote in 2010... George Csahanin Retired Sent from my iPhone > On Sep 5, 2018, at 11:58 PM, Mike <mm(a)midnighteng.com> wrote: > > A file would be dependent on your particulars. > But, > It's just a node as any other, define your cor/ptt/pl logic & audio methods, > and if is a freq agile remote, you may need to define port for tuning. See the wiki (i think it's in there) but some tune via serial and a DH-1 and some other though a parallel port definition. And define what kind of radio remote it is so it's tuning the right data instructions on that port. > > A parallel port definition in rpt.conf > iobase=0x378 ; Parallel port address > or > civaddr=72 ;(for ic-706) > Radio: > remote=ic706 > remote=rbi ; (doug hall rbi-1) > > and last you need to specify that the node number is a remote base > in rpt.conf node descriptions, with a 'Y' > 1999 = radio@127.0.0.1:4569/1999,Y > > But it might help some if you state what kind of remote base you wish to set-up. It's not all the same. hope this helped. > > ...mike/kb8jnm > >> On 9/6/2018 12:35 AM, George Csahanin wrote: >> Folks, I had a remote working back around 2010 using app_rpt. B ut I cannot find my documentation. I'm trying to lash it up again. But hit a brick wall on setting it up. Anybody have any config info that pertains specifically to remote. >> I've googled it but it leads to pretty incomplete info on this... >> GeorgeC W2DB >> nodes 2360, 2428, 28599 >> --- >> This email has been checked for viruses by AVG. >> https://www.avg.com >> _______________________________________________ >> App_rpt-users mailing list >> App_rpt-users(a)lists.allstarlink.org >> http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users >> To unsubscribe from this list please visit http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button" >> You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem. >

1 0

Server Security
by Mike 06 Sep '18

06 Sep '18

While I don't have time to get into a in depth discussion on this, I just want to raise awareness with those that read. From time to time I remind some folks about some security issues. It is normally said to anyone to change your ssh port in your first steps, and most will do that if they know how, but if you don't, please ask someone as it is important. The latest ASL package has a nice working firewall that can be enabled from a command line menu (asl-menu) and there is no excuse for not enabling this. But I encourage you to do it in the first steps of your install. You may need to re-run the scripts from the menu as your port usage changes, but it's still a simple thing to do, even if your command line skills are low. The dev team did well on this. It's easy ! The reason I am encouraging you to do this in your first steps, within hours of your install is that I am seeing faster much more craftier hacks that do not do much more than watch as the server goes up and capture ssl data and or passwords, but take no initial actions. Only to come back later and use that data. Really just have their way with it. Whole disk back-ups may not be effective in restoring because the sleeper software may be captured in the backup, so you may just be giving them a easy in the next time. Back-up your important conf files separately, no matter what other method you use. Marking the 'bad guys' by IP with repetitive rejected attempts is starting to fail for me on certain servers unrelated to ASL because they seem to have a unlimited supply of IP's they can use. They don't use the same IP often the same day, but hit the server twice a minute. (many hacked systems just become a launching point to hack others and use your IP). While I have not seen one of these attacks to any of my ASL servers, I know it's coming. I spent the weekend figuring this last one out. So I remind many of you to take action 'without delay' and do those basic things to at least slow the progress of hacks. 1 - change your ssh port 2 - Turn on your firewall and do not enable ports not used. 3 - do not use/enable FTP or the ports for it. SFTP is the only method you should be using. 4 - Back-up your important conf files/scripts separately, no matter what other method you use. That will at least slow/stop many amateurs that are working from a how2 they found on the web. Often, when your system is compromised, it may continue to run as always while they just use it to hack other systems, so, if you can keep a eye on your cpu/bandwidth usage to see when something is not normal is a great help. While doing 'loss prevention', I have been thinking about how to best defend our ASL servers going forward. Do to the nature of our international connections, I am thinking we just need to create and maintain a whitelist of IP's to the 'system IP Tables' as a whole, not asterisk only. It should be easy since the IP list is shared as it is, and we just need to add other outside services IP's to that. But I'm still thinking on it. Perhaps this note will encourage others to think on it as well. These things always get worse, not better. I may write/experiment with this 'whitelist' idea this winter, but be aware, if you are not defending your system, you make it all the easier to hack others as well. Just because your system is running as intended does not mean it has not been compromised. 73, ...mike/kb8jnm

4 4

remote base
by George Csahanin 06 Sep '18

06 Sep '18

Folks, I had a remote working back around 2010 using app_rpt. B ut I cannot find my documentation. I'm trying to lash it up again. But hit a brick wall on setting it up. Anybody have any config info that pertains specifically to remote. I've googled it but it leads to pretty incomplete info on this... GeorgeC W2DB nodes 2360, 2428, 28599 --- This email has been checked for viruses by AVG. https://www.avg.com

2 1

Dial raspberry pi install
by n3ssl 05 Sep '18

05 Sep '18

All, Downloaded 2/13/18 jessie for raspberry pi. Installed and changed password. How do I get into the first time install. Appears things are locked down. Ryan n3ssl N3ssl at Yahoo com

3 2