- App_rpt-users - lists.keekles.org

Re: [App_rpt-users] remote base
by George Csahanin 06 Sep '18

06 Sep '18

Mike, I have done all of the above fir my remote, a ft897 . But something is not right. When I try showvard fir the node I get a core dump, and asterisk exits. I just need to find a complete how-to on it. What is on the wiki is very thin on info. There used to be sample config files for a remote but can’t find it. If I comment out remote = ft897 and do showvars I get no dump. Is current DIAL for Pi able to do remotes? I have to dig, maybe I can find the computer I used fir a remote in 2010... George Csahanin Retired Sent from my iPhone > On Sep 5, 2018, at 11:58 PM, Mike <mm(a)midnighteng.com> wrote: > > A file would be dependent on your particulars. > But, > It's just a node as any other, define your cor/ptt/pl logic & audio methods, > and if is a freq agile remote, you may need to define port for tuning. See the wiki (i think it's in there) but some tune via serial and a DH-1 and some other though a parallel port definition. And define what kind of radio remote it is so it's tuning the right data instructions on that port. > > A parallel port definition in rpt.conf > iobase=0x378 ; Parallel port address > or > civaddr=72 ;(for ic-706) > Radio: > remote=ic706 > remote=rbi ; (doug hall rbi-1) > > and last you need to specify that the node number is a remote base > in rpt.conf node descriptions, with a 'Y' > 1999 = radio@127.0.0.1:4569/1999,Y > > But it might help some if you state what kind of remote base you wish to set-up. It's not all the same. hope this helped. > > ...mike/kb8jnm > >> On 9/6/2018 12:35 AM, George Csahanin wrote: >> Folks, I had a remote working back around 2010 using app_rpt. B ut I cannot find my documentation. I'm trying to lash it up again. But hit a brick wall on setting it up. Anybody have any config info that pertains specifically to remote. >> I've googled it but it leads to pretty incomplete info on this... >> GeorgeC W2DB >> nodes 2360, 2428, 28599 >> --- >> This email has been checked for viruses by AVG. >> https://www.avg.com >> _______________________________________________ >> App_rpt-users mailing list >> App_rpt-users(a)lists.allstarlink.org >> http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users >> To unsubscribe from this list please visit http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button" >> You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem. >

1 0

Server Security
by Mike 06 Sep '18

06 Sep '18

While I don't have time to get into a in depth discussion on this, I just want to raise awareness with those that read. From time to time I remind some folks about some security issues. It is normally said to anyone to change your ssh port in your first steps, and most will do that if they know how, but if you don't, please ask someone as it is important. The latest ASL package has a nice working firewall that can be enabled from a command line menu (asl-menu) and there is no excuse for not enabling this. But I encourage you to do it in the first steps of your install. You may need to re-run the scripts from the menu as your port usage changes, but it's still a simple thing to do, even if your command line skills are low. The dev team did well on this. It's easy ! The reason I am encouraging you to do this in your first steps, within hours of your install is that I am seeing faster much more craftier hacks that do not do much more than watch as the server goes up and capture ssl data and or passwords, but take no initial actions. Only to come back later and use that data. Really just have their way with it. Whole disk back-ups may not be effective in restoring because the sleeper software may be captured in the backup, so you may just be giving them a easy in the next time. Back-up your important conf files separately, no matter what other method you use. Marking the 'bad guys' by IP with repetitive rejected attempts is starting to fail for me on certain servers unrelated to ASL because they seem to have a unlimited supply of IP's they can use. They don't use the same IP often the same day, but hit the server twice a minute. (many hacked systems just become a launching point to hack others and use your IP). While I have not seen one of these attacks to any of my ASL servers, I know it's coming. I spent the weekend figuring this last one out. So I remind many of you to take action 'without delay' and do those basic things to at least slow the progress of hacks. 1 - change your ssh port 2 - Turn on your firewall and do not enable ports not used. 3 - do not use/enable FTP or the ports for it. SFTP is the only method you should be using. 4 - Back-up your important conf files/scripts separately, no matter what other method you use. That will at least slow/stop many amateurs that are working from a how2 they found on the web. Often, when your system is compromised, it may continue to run as always while they just use it to hack other systems, so, if you can keep a eye on your cpu/bandwidth usage to see when something is not normal is a great help. While doing 'loss prevention', I have been thinking about how to best defend our ASL servers going forward. Do to the nature of our international connections, I am thinking we just need to create and maintain a whitelist of IP's to the 'system IP Tables' as a whole, not asterisk only. It should be easy since the IP list is shared as it is, and we just need to add other outside services IP's to that. But I'm still thinking on it. Perhaps this note will encourage others to think on it as well. These things always get worse, not better. I may write/experiment with this 'whitelist' idea this winter, but be aware, if you are not defending your system, you make it all the easier to hack others as well. Just because your system is running as intended does not mean it has not been compromised. 73, ...mike/kb8jnm

4 4

remote base
by George Csahanin 06 Sep '18

06 Sep '18

Folks, I had a remote working back around 2010 using app_rpt. B ut I cannot find my documentation. I'm trying to lash it up again. But hit a brick wall on setting it up. Anybody have any config info that pertains specifically to remote. I've googled it but it leads to pretty incomplete info on this... GeorgeC W2DB nodes 2360, 2428, 28599 --- This email has been checked for viruses by AVG. https://www.avg.com

2 1

Dial raspberry pi install
by n3ssl 05 Sep '18

05 Sep '18

All, Downloaded 2/13/18 jessie for raspberry pi. Installed and changed password. How do I get into the first time install. Appears things are locked down. Ryan n3ssl N3ssl at Yahoo com

3 2

Ideas re: Unable to connect to remote asterisk (does/var/run/asterisk/asterisk.ctl exist?)
by Clifford Novey 05 Sep '18

05 Sep '18

Pi stretch, stock allstar install and allmon2. Using asl-menu I get this message. Have tried to create the dir w diff permissions and owners. I use pi not root for main user. Ideas as to how I can solve or what the core issue may be? Thanks Clifford KK6QMS IAX2 show registry: Unable to connect to remote asterisk (does/var/run/asterisk/asterisk.ctl exist?)

4 10

rpi root passwd
by REDBUTTON_CTRL 03 Sep '18

03 Sep '18

Hi All, trying to set up a new RPI node. Using latest rpi Dial release. But need the default root password. Doesn't seem to be listed on the Allstar wiki. the one for Repeater is listed but not root. Anyone point me in the right direction? Cant proceed with configuring my node until I have rot password. Used to be debian but I guess it was changed since the last release. Thanks, Jon RQ

3 4

Allmon2 not working.
by condronj＠sky.com 03 Sep '18

03 Sep '18

Good morning all, I have just installed allmon2 on ASL_1.01-20180417-amd64-i386-debian-stretch. unfortunately, I can only see who is connected to my main node 48640 and not my other nodes 48641 - 48645. Any ideas? http://45.76.140.82/allmon2/link.php?nodes=48640,48641,48642,48643,48644,48… Thank you, for reading. Warmest Regards Joe G7kdz.

2 1

duplex=0 bug?
by Stephen - K1LNX 03 Sep '18

03 Sep '18

Hi guys, I recently re-built the node that interfaces to my controller, and one of the things I noticed after re-building it that there was a fairly long hang time, anywhere from 5-10 seconds. I have the following set, and unless I'm misinterpreting how this is expected to work, could this be a potential bug? duplex = 0 ;0 = Half duplex with no telemetry tones or hang time. linktolink = yes ; disables forcing physical half-duplex operation of main repeater while ; still keeping half-duplex semantics (optional) I am still testing, but setting the the hang time to "0" appears to have fixed it, I also tried setting other params to "0" in the wait-times section: hangtime = 0 ; squelch tail hang time (in ms) (optional, default 5 seconds, 5000 ms) althangtime = 0 ; longer squelch tail [wait-times] telemwait = 0 ; Time to wait before sending most telemetry idwait = 500 ; Time to wait before starting ID unkeywait = 0 ; Time to wait after unkey before sending CT's and link telemetry calltermwait = 0 ; Time to wait before announcing "call terminated" Anyone else run into this, or is this working as expected? Hardware is a Raspberry Pi 3 B+ and Repeater Builder RIM "lite" SCOM interface. 73 Stephen K1LNX

2 2

Deploying a virtual ASL server on Vultr
by Buddy Brannan 02 Sep '18

02 Sep '18

…Or, if there’s a better option, I’m all ears. But I saw a Youtubevideo on this from WB4ULK, and they did indeed have a deal I couldn’t very well pass up. So I signed up and got the server configured and the ASL ISO uploaded to the service and the server started. Here’s where I’ve hit a snag. When I went to view the console, this is what the console window says, along with a “send ctrl+alt+del”. Canvas not supported. This is on a Mac using Safari. Using Google Chrome instead, I get a graphic instead. Presumably that might be a VNC? I don’t know. If it is, it doesn’t help, since I’m blind and can’t work with whatever it is. If anyone wants to try it, you can get a $25 free credit, and the $5/month server is enough for a virtual ASL server. https://www.vultr.com/promo25b <https://www.vultr.com/promo25b>/?ref=7524970 It’s my promo code, but if you don’t want to use it, just delete everything from the ? onwards, it’s of no consequence to me :) So…since this is before anything is set up, so can’t ssh in, I’m kind of stuck right at the beginning and, apparently, have to handle from the console available from the website. Anyone willing/able to help me get past this and onwards to somewhere I can take over? Thanks, —Buddy, KB5ELV

4 13

Re: [App_rpt-users] Power Point
by John Wagner 02 Sep '18

02 Sep '18

Hi Alejandro, absolutely! I’m glad to see it get some use outside of our club. Feel free to use & translate any parts of it that can help you. Have fun and good luck with the classes. - John, N8CD > Date: Sun, 2 Sep 2018 15:54:30 +0000 (UTC) > From: Alejandro Pereida <xe2_bss(a)yahoo.com> > To: Users of Asterisk app_rpt <app_rpt-users(a)lists.allstarlink.org> > Subject: Re: [App_rpt-users] Power Point > Message-ID: <612543128.2497362.1535903670585(a)mail.yahoo.com> > Content-Type: text/plain; charset="utf-8" > > John excellent slide show, can I translate your slide show into spanish and use it on our radio club's ham classes? > > Thanks in advance > Alejandro Pereida XE2BSS / N2IX > On Thursday, August 30, 2018, 10:47:53 AM PDT, David Shaw <shawpbx(a)gmail.com> wrote: > > Thanks John, You saved me a lot of time. It looks great. > > > --Thanks, David > > > > On Thu, Aug 30, 2018 at 10:15 AM John Wagner <john(a)n8cd.com> wrote: > > Hi David - Here's a slide deck I did for our club that you're welcome to use. This is a couple years old so it's a little dated, and probably has a lot more than you need, but maybe you can use parts of it.? https://docs.google.com/presentation/d/1lvr3acd16nWjUXIuiOpyRaTF7XzMrF4gfhR… > > I'm pretty sure that link should work for anyone that can use it. > ?- John, N8CD >

2 1