- App_rpt-users - lists.keekles.org

Security Issues
by Loren Tedford 24 Sep '14

24 Sep '14

Hey its Loren here again... Was curious what everyone found was the most substantial security risk with a Acid installation connected too two repeaters.. The sip.conf was deleted from the asterisks folder.. Noticed a strange node connection that didn’t match all stars normal node numbers 3101702 also found some thing with x.allstarlink.org in it anybody know what this is?? Anyway my linode server has been under constant attack from China they keep wanting to ssh into the server we had to drastically beef up things on the server such as changing the whole root user issue and moving to another port number etc.. Any thoughts ideas did i just become victum of a Sip attack too besides 19 ddos attacks this week already and over a million failed ssh attempts into my person linode server... Loren Tedford (KC9ZHV) Email: lorentedford(a)gmail.com http://www.lorentedford.com http://www.Ltcraft.net <http://www.ltcraft.net/> http://www.richlandcountycomputers.com http://kc9zhv.lorentedford.com

2 1

Re: [App_rpt-users] Not able to receive incoming connections
by gene＠wb9coy.com 24 Sep '14

24 Sep '14

3 2

Re: [App_rpt-users] Not able to receive incoming connections
by gene＠wb9coy.com 24 Sep '14

24 Sep '14

1 0

Not able to receive incoming connections
by gene＠wb9coy.com 23 Sep '14

23 Sep '14

My node is 41303 W6QAR I have verified that I NAT on port 4569. It was mentioned that a check can be done on my node to see if it had to be forced.

2 1

RTCM Arrived
by Robert 22 Sep '14

22 Sep '14

My first RTCM arrived and it is my intention to use one on each of my MSF 5000's. So far I haven't read of a solid way of interfacing to either CLB or CBX models. Any help would be appreciated except that I plan to place a RC-210 in front of the RTCM. We won't be voting. At best we will attempt to sync the TX and audio on three repeaters. Or not. I have no idea what the controller can do as far as external links or operating as a full repeater controller. I have a weather RX to add, a semi-duplex link, etc. I have thought of using a 2m radio (or 440; the site has 440 for control) with a RC-210 connected to it and using IT to link to the repeater. Any thoughts? I appreciate all of you! Robert

1 0

Re: [App_rpt-users] App_rpt-users Digest, Vol 67, Issue 65
by Brian Burton 22 Sep '14

22 Sep '14

In xipar its txrxdelay= 20 ms intervals. AB3AA-Brian On Sep 22, 2014 12:00 PM, <app_rpt-users-request(a)ohnosec.org> wrote: > Send App_rpt-users mailing list submissions to > app_rpt-users(a)ohnosec.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users > or, via email, send a message with subject or body 'help' to > app_rpt-users-request(a)ohnosec.org > > You can reach the person managing the list at > app_rpt-users-owner(a)ohnosec.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of App_rpt-users digest..." > > > Today's Topics: > > 1. Re: RXDELAY in XIPAR (Lu Vencl) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 22 Sep 2014 10:07:48 -0400 > From: Lu Vencl <vencl(a)att.net> > To: Tim Sawyer <tim.sawyer(a)mac.com> > Cc: "app_rpt-users(a)ohnosec.org" <app_rpt-users(a)ohnosec.org>, > "webmaster(a)n4yza.com" <webmaster(a)n4yza.com> > Subject: Re: [App_rpt-users] RXDELAY in XIPAR > Message-ID: <46719A95-463D-4B06-B7F6-6CDEB348E7FF(a)att.net> > Content-Type: text/plain; charset="utf-8" > > Just made it long to test. But not effective. Probably only need 150 ms. > > Lu Vencl > > > On Sep 22, 2014, at 9:46 AM, Tim Sawyer <tim.sawyer(a)mac.com> wrote: > > > > Really? You need a 3 second delay? > > -- > > Tim WD6AWP > > > >> On Sep 22, 2014, at 5:13 AM, Lu Vencl <vencl(a)att.net> wrote: > >> > >> I have a XIPAR node that needs a little support with pulseback removal. > Never had to utilize this before, but when looking in URD.conf, I don?t see > the rxdelay= parameter like I do on ACID builds. I went ahead and inserted > the command into the file, but there does not seem to be any action. > >> Can someone confirm the parameter and placement? > >> Here is my example: > >> [usb] > >> > >> hdwtype=0 ; 0=std,1=dev > >> eeprom=0 ; unless you have a cable w/eeprom > >> duplex=0 ; 0=simplex, 1=duplex > >> invertptt=0 > >> ;minsigproc=0 ; minimal signal processing > >> ;sendvoter=0 ; 0=default, no voter rssi, 1=enable voter rssi > >> > >> carrierfrom=usbinvert ; no,usb,usbinvert,dsp,vox > >> ctcssfrom=no ; no,usb,dsp > >> rxondelay=3000 ; Gets rid of the pulseback problem > >> ;rxboost=1 ; rx input boost of 20dB > >> rxboost=0 ; no boost > >> rxdemod=flat ; no,speaker,flat > >> txprelim=0 ; 1 = pre-emphasize and limit > >> > >> txmixa=voice ; no,voice,tone,composite > >> txmixb=tone ; no,voice,tone,composite,auxvoice > >> > >> ;txctcssdefault=77.0 > >> ;rxctcssfreqs=77.0; > >> ;txctcssfreqs=77.0; > >> txtoctype=notone; > >> > >> rxsquelchdelay=900 ; delayline in ms carrier squelch tail eliminator > >> rxnoisefiltype=0 ; 0 for +/-5KHz, 2 for +/-2.5KHz systems > >> > >> > >> Lu, > >> KA4EPS > >> _______________________________________________ > >> App_rpt-users mailing list > >> App_rpt-users(a)ohnosec.org > >> http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users > >> > >> To unsubscribe from this list please visit > http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down > to the bottom of the page. Enter your email address and press the > "Unsubscribe or edit options button" > >> You do not need a password to unsubscribe, you can do it via email > confirmation. If you have trouble unsubscribing, please send a message to > the list detailing the problem. > > >

1 0

Re: [App_rpt-users] ping pong-somewhat demystified and a turn for the twilight zone
by George Csahanin 22 Sep '14

22 Sep '14

Back in town... Limey has this script, getsrc, that worked in the past. And yeah, looks at the tgz on the CF card, but that’s old source, so eliminated that file and it did download a source file, but it is August 2011 version, not new source. I can get the source from svn, no problem. The issue is that it suddenly won’t compile. ./configure is needed to run to make a Makefile. But I even tried just adding the line to the old source (chan_simpleusb.c) to add rxondelay. Can’t get configure to run without noting these errors. It claims the said .h file is missing, I just need to know where it needs to be. It exists, just (it seems) not in the right place. And as to the vintage of the source, I recall that the source for asterisk on a limey platform was different and from a different place, but don’t know what/why/when. GeorgeC George J Csahanin W2DB Cedar Park, TX 512-401-2630 home 401-338-0568 cel From: Tim Sawyer Sent: Wednesday, September 17, 2014 9:25 AM To: George Csahanin Subject: Re: [App_rpt-users] ping pong-somewhat demystified and a turn for the twilight zone Actually I don’t think the upgrade runs configure. -- Tim WD6AWP On Sep 16, 2014, at 10:43 PM, George Csahanin <george(a)dyb.com> wrote: Looks good, thanks. I always used the built in getsrc script. I still need to solve the compiler issue so I can actually do this upgrade. Thanks, Tim. George George J Csahanin W2DB Cedar Park, TX 512-401-2630 home 401-338-0568 cel From: Tim Sawyer Sent: Tuesday, September 16, 2014 11:13 PM To: George Csahanin Subject: Re: [App_rpt-users] ping pong-somewhat demystified and a turn for the twilight zone Is there a reason not to use the normal upgrade procedure? https://allstarlink.org/support.html#astupgrade -- Tim :wq On Sep 16, 2014, at 8:54 PM, George Csahanin <george(a)dyb.com> wrote: OK, found an old message from Jim that says this was fixed by adding a line to make rxondelay work, and my source is from August 31 2011, which is two years before the fix. I’m going to step into the deep end here and ask a question that may seem like a limey question, but really a cpp question. ./configure output says cpp failed sanity test, look at the log file and I see that it was looking for an include file but cannot find it. The one in question is limits.h, supposedly in linux/limits.h and I looked in /usr/include and it is there. So, please, somebody learn me here. This has been a mystery to me since I started hacking this stuff in the early 90’s and proves why I should maybe stick to broken down TV stations...but...WHERE is it looking for this include file? In limey the source all goes under /usr/src/astsrc/ then under that in /usr/src/astsrc/asterisk is where ./configure, etc is. I tried loading new source, and the August 31, 2011 is what getsrc will download. So added question, assuming I can make this work, can I load the latest source code on the limey box, I have never seen anything different. But curious. George J Csahanin W2DB Cedar Park, TX _______________________________________________ App_rpt-users mailing list App_rpt-users(a)ohnosec.org http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button" You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.

1 0

URI Problem
by Steve Schulze 21 Sep '14

21 Sep '14

Has anyone run across a URI that goes 'offline' every 3 to 4 days? A simple warm boot command or astres.sh will bring it back on line as well as unplugging the URI and plugging back in. There is no indication that it's not working to the online user. You can connect to the box but no audio (either direction) or PTT passes to the repeater until you reset it. I have installed ferrites on each end of the USB cable and on the control cable on the URI side but no change. Any thoughts? Thanks in advance. -- Amateur Radio - The Original Social Media Steve Schulze - Radio Amateur, General Class - N9UDO Administrator, Baraboo, Wisconsin D-Star System - WB9FDZ Administrator, Baraboo, Wisconsin AllStarLink Systems - 27616, 27727 Treasurer, Badgerland Amateur Television Society - KB9SFS http://yellowthunder.org/dstar.html

2 5

Re: [App_rpt-users] user login prior to control codes?
by Bryan Fields 21 Sep '14

21 Sep '14

On 9/21/14, 5:33 PM, Jim Duuuude wrote: > That sort of a thing was never implemented because of the open-interoperability > nature of Allstar. That would prevent any user from going to any Allstar-linked > system and be able to use it, which is one of the fundamental premises of Allstar. Thanks Duuuuude, I'm not necessarily talking about the Allstar Link, but app_rpt in general. We have a need for this here and I'm generally in favor of open access, but it's become a problem to leave it open with the default Allstar Link access codes. I'm looking for better flexibility in this regard. Would it be easy to take the remote base "login" functionality and apply it to certain sections of rpt.conf? There a quite a few people running app_rpt without interlinking with Allstar at each site (private nodes). Thoughts? -- Bryan Fields 727-409-1194 - Voice 727-214-2508 - Fax http://bryanfields.net

1 0

user login prior to control codes?
by Bryan Fields 21 Sep '14

21 Sep '14

As we've had some issues with people sending control codes into the system here and linking/unlinking major hubs I'm trying to figure out a better way than just prefixing the functions in rpt.conf with a code prefix (ie *3 becomes *443). Is there a way we can do this on a per user basis? Perhaps setting up a users file with a "PIN" and then requiring a user to "login" with this PIN prior to accepting any control codes? My ideal setup would be have one rpt_users.conf file (which should be changeable with out having to reload asterisk) [users] KB9MCI 12345 KQ4ERT 43567 KB8RET 54321 Then the users would key in #PIN, the system would auth them against the file, and upon authing them, it would respond "CALLSIGN authorized", the courtesy tone would change and the user would have 60 seconds to input the control codes. On the other hand I'd be happy with a way to do this on a per user basis for each command. For Example, *3 for kb9mci would become #12345*3. Anyone have ideas on how to script this sort of a setup? 73's -- Bryan Fields 727-409-1194 - Voice 727-214-2508 - Fax http://bryanfields.net

3 2