44net

44net@mailman.ampr.org

3198 discussions

IPv6, for authentication with IPSEC
by Robert Keyes 29 Jul '18

29 Jul '18

I've read the FAQ, and see there is no equivalent IPv6 for our lovely 44/8. My question is, can we utilize IPv6 with our IPv4 address embedded in it? The reason I want to be able to easily utilize message authentication with IPSEC AH. 73, N1YRK

6 6

Re: [44net] IPv6, for authentication with IPSEC
by Rob Janssen 29 Jul '18

29 Jul '18

Yes. but that is not related to this discussion as far as I understand it. He wants to send IPv4 traffic inside IPv6, which can be done locally without issue. E.g. we have GRE6 in use (GRE over IPv6) transporting 44.x.x.x IPv4 traffic between routers. It is always possible to do that, but you need cooperating hosts at both ends. E.g. when you cannot get IP tunnel mesh working due to ISP or router restrictions. Rob

1 0

Re: [44net] IPv6, for authentication with IPSEC
by Rob Janssen 29 Jul '18

29 Jul '18

> I've read the FAQ, and see there is no equivalent IPv6 for our lovely 44/8. > My question is, can we utilize IPv6 with our IPv4 address embedded in it? > The reason > I want to be able to easily utilize message authentication with IPSEC AH. As the discussion got sidetracked into unrelated issues, let's go back to the question. What exactly are you trying to accomplish? Of course it is possible to make some form of tunnel over IPv6 between two AMPRnet systems, and transport the 44/8 IPv4 traffic over that. But you will have to admin both sides of the tunnel. The existing tunnel network operates only over IPv4. When you want to make your own branch, that connects to an existing place with AMPRnet connectivity, and you want to do that over IPv6, that is certainly possible. Rob

2 1

Setting reverse DNS
by Alistair Mackenzie 22 Jul '18

22 Jul '18

Hi, I've got my /24 running via bgp now and was wondering how to set the all the reverse DNS. Is it possible to point the arpa zone to my name servers? Thanks, Alistair

2 1

Re: [44net] edgerouter
by Rob Janssen 22 Jul '18

22 Jul '18

> got myself a nice little edgerouter X from ubiquity. > I was reading the wiki on how to setup the system and something does not ring properly in my head. ( must be the pills I take 😉 ) > So here : http://wiki.ampr.org/wiki/Setting_up_a_gateway_on_Ubiquiti_EdgeRouter Note that that article does not describe a complete configuration for an AMPRnet IPIP gateway. Maybe it was just a first attempt at writing a WiKi article, maybe the author did not realize that this method is not correct. With this configuration you would only be able to connect towards internet (which he proves by testing) but not to fellow AMPRnet participants. That requires quite some more effort, see what Marius has created for the MikroTik routers. Rob

2 1

edgerouter
by pete M 21 Jul '18

21 Jul '18

got myself a nice little edgerouter X from ubiquity. I was reading the wiki on how to setup the system and something does not ring properly in my head. ( must be the pills I take 😉 ) So here : http://wiki.ampr.org/wiki/Setting_up_a_gateway_on_Ubiquiti_EdgeRouter On a line I see: • ubnt@ubnt:~$ set interfaces ethernet eth0 address <put your AMPRNet network assignment> And when I go to my allocation I have 44.135.51.0/26 Is that what I need to enter? I am no network guru. I play with stuff and want to learn 😉 Tks Pierre VE2PF

2 2

FAO BK
by Chris 15 Jul '18

15 Jul '18

Hi Brian, Are you receiving my emails? Sent you a couple over the past two days but no replies, why is not like you! Suspect they may have been diverted to your spam folder? Chris

5 5

Beta Documentation for Setting Up BGP Routed OpenVPN Gateway
by John D. Hays 10 Jul '18

10 Jul '18

I have found a network service provider who will, upon confirmation form ARDC, advertise an AMPRnet subnet and route traffic to a virtual host (VPS). I have put together minimal instructions on how to setup the OpenVPN server that can then support multiple clients and distribute/route subnets for connectivity to the Internet using AMPRnet addresses. The cost is $5/mo. for the VPS, which could be split among a group to support multiple clients. Have a look at https://groups.io/g/net-44-vpn/wiki/home -- there is a connected file repository for scripts and templates, and a message board for sharing and support. Additional documentation will be provided as it is developed. I have used this with clients on Windows, Raspbian, MacOS, OpenWRT, ... and it works. -- ------------------------------ John D. Hays Edmonds, WA K7VE <http://k7ve.org/blog> <http://twitter.com/#!/john_hays>

2 1

Freebox bridge mode and option "multiposte"
by Frederic Zulian 30 Jun '18

30 Jun '18

Hello, I've put my Freebox in bridge mode and I begin to configure my microtik router. In bridge mode the option "multiposte TV" dosen't seem to work. I think, I must "forward" some ports but which ? Any idea ? -- F1sxo

2 1

Update of elproxy (my EchoLink proxy/relay server)
by Rob Janssen 28 Jun '18

28 Jun '18

I have updated the elproxy.tar.gz file on my webserver: http://pe1chl.nl.eu.org/Softw/elproxy.tar.gz There was a race condition in the code that ultimately resulted in some proxies being stuck in the authentication phase. It can be recognized by the debug info in square brackets appearing in the QSO column of the /dev/shm/elproxy status file, like [st4 fd20 t0] It is normal when such info briefly appears, but when it remains for a few seconds that proxy is stuck into a BUSY state without an actual user. This can be checked using: fgrep [st /dev/shm/elproxy and when output appears, repeat it 30 seconds or so later and see if it is still there. On our PI9NOZ proxies, after running 230 proxies for over two months, 6 proxies were stuck. Hard-to-locate problem... Finally, Jann Traschewski has found this bug! Thanks for debugging it and mailing me the patch! The bookkeeping of the usage of filedescriptors was somehow getting out of sync (that I already knew...) and he found it happened in the error handling of TCP connections to the directory server. I had been looking in this area for quite some time, but somehow forgot about the fd used for that purpose and only traced all the paths of open/close of the fd used for the actual user connection... To update, re-fetch the elproxy.tar.gz and unpack (only elproxy.c is changed), re-run make and re-start the program (I run it from its /home/elproxy home directory, when you put it in /usr/local/bin or similar of course remember to move it there again) This is the patchfile of the change, you can apply that using "patch --ignore-whitespace elproxy.c" instead of downloading it again. --- elproxy.c.orig 2016-11-24 10:02:22.000000000 +0100 +++ elproxy.c 2018-06-26 23:43:22.908000000 +0200 @@ -1428,6 +1428,7 @@ buf[0] = 1; close(fd); + pr->tcp_fd = 0; } else { ds->proxy = pr; ds->timeout = now + ADDR_SOCKET_TIMEOUT; @@ -1638,6 +1639,7 @@ close(fd); unregisterfd(fd); + pr->tcp_fd = 0; if (pr->state == BUSY) proxy_message(pr,PROXY_MSG_TCP_CLOSE,0,NULL,0); Again thanks to Jann for finding this! Rob

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

44net