Tag Info

Hot answers tagged

9

iwconfig (and its wireless extension API) is deprecated (it's in "maintenance only mode" and "no new features will be added"). Use iw instead. This requires a moderately recent kernel (e.g. >= 3.0) with support for nl80211. using iw dev wlan0 scan, you can figure out the protocol used: If there are Supported rates below 11mbps (except 6), there is ...


4

OpenVPN is designed to be secure. It will only allow clients who have the keys signed by you. The most important thing is keeping the private keys secure. Always encrypt them on the clients and check the permissions on the key file on the server. Don't keep the CA private keys on the server it doesn't need them. Encrypt it put it on a pendrive and protect ...


4

No. For so many reasons. One obvious one: 802.11 = 2.4, 3.6, or 5 GHz X band = 8-12 GHz K band = 18-27 GHz Ka band = 26.5 - 40 GHz Layman's explanation of the above: The router cannot "tune" to the needed frequencies. (Then there's the DSSS vs burst detection, etc, etc, etc...)


4

If you need to guard against malicious damage, then MD5 is the fastest hash which is secure enough (although it does have known weaknesses and so SHA2 is strongly preferred). If you just want to guard against accidental damage, then a CRC checksum will be faster and good enough. The standard cksum utility can be used to calculate this.


3

1) These rules afaik completely USELESS, I'm sure about this, so there is no real question regarding this, at least a "fixme". No, these rules are useful. I'll tell you why if you tell me why you think they're useless. Ok, I'm kidding, I'll tell you whether you want it or not. The purpose of these rules are to keep the design simple. Simplicity is ...


3

Sat Jul 9 13:14:21 2011 WARNING: potential route subnet conflict between local LAN [192.168.80.0/255.255.255.0] and remote VPN [192.168.80.1/255.255.255.255] For some reason, your configuration seems to be sharing ip address space. Your VPN is selecting addresses from the 192.168.80.x address space, and your local LAN is selecting addresses from the ...


3

With SSH unavailable (and possibly no UNIX/Linux machine the FTP server runs on, you could use netcat otherwise, too), the following might work: Using curl, you can upload from STDIN to a file via FTP this way: tcpdump -w - | curl -u FTPUSER:FTPPASS ftp://ftpserver/where/ever/dump.pcap -T - where tcpdump outputs raw packets (compare this question) and ...


3

'tr' can be used for this. Normally, you could do the following: tr -cd '\11\12\15\40-\176' < raw.php This deletes any characters that aren't one of the ones listed. The \NNN notation represents the character in octal, this lets us get tab, newline, carriage return in addition to the other characters. Busybox's tr currently has a bug when it comes to ...


3

OpenWRT and DDWRT are the two main distros in this category. I would encourage you to help find and fix the issue. If it's affecting both distros, it's likely to be a kernel problem that you would run into even if you built your own system from sources only. It is unfortunate that the developer community is so small compared to the user base on these ...


3

[TL,DR: use the urlencode_grouped_case version in the last code block.] Awk can do most of the job, except that it annoyingly lacks a way to convert from a character to its number. If od is present on your device, you can use it to convert all characters (more precisely, bytes) into the corresponding number (written in decimal, so that awk can read it), ...


3

I think that what you're looking for is -T as documented in man dmesg: -T, --ctime Print human readable timestamps. The timestamp could be inaccurate! The time source used for the logs is not updated after system SUSPEND/RESUME. So, for example: [ 518.511925] usb 2-1.1: new low-speed USB device number 7 using ehci-pci [ 518.615735] ...


2

OpenWRT versions from Kamikaze onwards (which is basically Kamikaze and Backfire, but not White Russian) do not use NVRAM to store settings or configuration. It is all stored in the filesystem, either in the base squashfs image or the overlayed jffs image. This means you should be able to re-flash the image and get back to "factory defaults". The way to ...


2

So where points that address you typed in a gateway field? I've never configured OpenVPN using NetworkManager but i suppose that is the place where you should provide the address of your router. And in your log file there is a line which says: Mar 7 15:42:43 ASDF nm-openvpn[23554]: Cannot load certificate file /home/g/Desktop/client1/client1.crt: ...


2

I can't see a way using Busybox's sed, but you could use Busybox's sh and grep like this: while IFS=' ' read -r line; do printf "%s\n" "$line" | grep -qi '<script' || printf "%s\n" "$line" done <SOMETHING.html >SOMETHING.html.tmp mv SOMETHING.html.tmp SOMETHING.html


2

Traffic reporting on OpenWRT is not much different than on other Linux platforms. You can use a shell to look at the interface statistics or use one of the several reporting / monitoring packages. Personally I use collected to gather some data from my OpenWRT routers and build graphs on another machine along with some other relevant data.


2

If I understand your question correctly (which is always dubious with your questions), this isn't possible. Forwarding doesn't keep any state: the router receives a packet, analyses it, sends it onwards to its next destination, and forgets what the packet was. You can count or log packets, but you can't keep track of connections at that level. It would make ...


2

Take a look at the -C option to tcpdump: -C Before writing a raw packet to a savefile, check whether the file is currently larger than file_size and, if so, close the current savefile and open a new one. Savefiles after the first savefile will have the name specified with the -w flag, with a number after it, starting at 1 and ...


2

You can write the tcpdump output to a pipe and then save it elsewhere. I updated your BPF filter as well. tcpdump -w - host 10.10.10.10 | ssh host2 'cat - > `date +%F-%Hh-%Mm-%Ss-%N`.pcap' This will write the packets to stdout, then write it over an ssh connection to another host. You can also turn it around and run it from the other host. ssh ...


2

You could look at using inadyn, a client to update your DNS entries. There is a page about it on the DynDNS support site. Alternatively, there is this line[1]: curl -v -k -u user:password "https://members.dyndns.org/nic/update?hostname=&myip=$(curl -s http://checkip.dyndns.org | sed 's/[a-zA-Z/ :]//g')&wildcard=NOCHG&mx=NOCHG&backmx=NOCHG" [1] ...


2

Have a look at the IPv6 HowTo on the OpenWRT wiki. It's a pretty good starting point. I'm not going to give a detailed guide here, but a point-form summary of the broad steps to take. First, choose a static IPv6 address from the /64 block your ISP gave you, and assign that address to the LAN side of your OpenWrt router. Next, install and configure radvd in ...


2

With iptables firewall this works (Openwrt also uses iptables): iptables -t nat -A PREROUTING -s 192.168.1.0/24 -p udp --dport 53 -j DNAT --to 192.168.1.1 iptables -t nat -A PREROUTING -s 192.168.1.0/24 -p tcp --dport 53 -j DNAT --to 192.168.1.1 On your router use Opendns servers. 192.168.1.1 is the Openwrt router ip. 192.168.1.0/24 is the LAN network ...


2

No tool other than iw can give you more information. iw already gives all information that the network driver gives. If some information is missing, update your network driver (that mean your kernel) and/or iw. An example of an up-to-date iw output: BSS 42:42:42:42:42:42 (on w0) TSF: 4922636642679 usec (56d, 23:23:56) freq: 2437 beacon ...


2

You need to install the configure files (delegates.xml etc.) to a directory which imagemagick searches (/root/.magick/ or /usr/share/doc/ImageMagick-6.7.8/ or /usr/share/ImageMagick-6.7.8/ or /usr/lib/ImageMagick-6.7.8/config/ or /etc/ImageMagick/.) If it should search in another directory, you can e.g. symlink on of these directories to the correct one, or ...


2

First of all I'm guessing that filesystem /www is mapped to http://servername/ root, which means that folder /www/cgi-bin/ maps to http://servername/cgi-bin/ and thus you should be hunting for http://servername/cgi-bin/first.cgi instead. It also might be that the http server process cannot read, even if you can. The file mode should be 555 (r-xr-xr-x) or ...


1

As far as I know, the firewall is generated from some higher-level configuration file on openwrt. As a lot of different possibilities need to be supported, the actually generate rules are not optimized and can contain therefore unnecessary/unused/empty chains. See OpenWRT's wiki article for more details. To answer some of your questions why is ...


1

Normally, I would expect you to have VLANs. These are commonly all allocated to eth0 with names like eth0.0 and eth0.1. Starting there would be a good start. All your LAN acccess is likely on the br_lan (which may be eth0.0). If weren't using pppoe, the the WAN would be accessed over the other VLAN (likely eth0.1). The VLAN assignments may be different ...


1

I solved it with a bash script.. (in short it uses rmmod cifs/modprobe cifs - after this I could mount the share without the timeout..ΓΌ) #!/bin/bash which timeout > /dev/null 2>&1; if [[ $? -ne 0 ]]; then echo -e '\nerror, no coreutils package'; exit 1; fi which nc > /dev/null 2>&1; if [[ $? -ne 0 ]]; then echo -e '\nerror, no nc ...


1

Yes, it is possible to make all the hosts in the local network to use only specific DNS provider. You can do this by configuring a Proxy server like Squid Proxy and making all the hosts in the local network to access the Internet only through this proxy server. So every request whether it is DNS request or HTTP request or any other request, will first go to ...


1

The user fyi on the OpenWRT forum suggested that using WEP is a bad idea for bridges and that using WDS instead could fix this. Did you try that? In reviewing your configs and comaring them to the tutorial you linked, it looks like you might be missing a whole section. In /etc/config/wireless you need two sections titled config 'wifi-iface'. Both of them ...


1

Until you determine, what type and size of Flash ROM is used in the device, you should not risk flashing it with anything other than dedicated firmware. Atheros chipsets are very common across a wide range of wireless devices and the sole fact of using a particular chip does not guarantee that the entire device will work correctly with your firmware. The ...



Only top voted, non community-wiki answers of a minimum length are eligible