Is anyone using pfsense as your gateway/router? If so how do you handle
rip44? Is anyone interested in testing a package if I compile ampr-ripd?
Tom/N2XU/BSCS/CASP, Security+ ce
--
73 de N2XU/Tom Cardinal/MSgt USAF (Ret)/BSCS/Security+/IPv6 Certified
Hi folks on the list,
The obligatory introduction email.
I am Marc (2w0pnt) based in the Vale of Glamorgan in Wales.Currently messing around with ax25 on 2m and wifi meshing using Ubiquiti equipment. All this is currently around serving an Synchonet bbs system.I have been collecting packet tnc gear for a few years now buying it cheap whenever it appears on gumtree/ebay/etc and now finally have moved to a location with the space for me to properly play with it all.
Cheers Marc
Hello ! I'm trying a node on linux I leave the data to see if you can
connect Your nodes to mine route lu9dce-2 lu9dce.ampr.org udp 93 b Can
also be used udp 10093 and tcp ============= 73
I currently use Proxmox, a virtualizing operating system. It uses OpenVZ
and I was wondering if there is a image for ham radio users. If not I was
thinking of using my web server and maybe hosting a image that I could
maintain. I currently have net44 [some what] running in a VM alone with
linBPQ32. It has a web based login to the shell and webmin for maintaining
the VM.
I would probably like to setup something like that for the VM. I'm by far
an expert with net44, but would be interested in providing this if there
would be a need for it. The road to net44 comes with alot of upward
climbing without much help.
73's
Shawn Bush
KD8NCV
> I am sorry about my multitude of questions but sometimes I can read
> things a million times and still not understand.
> Would I have to use either ampr-ripd
> <http://wiki.ampr.org/wiki/Ampr-ripd>, or rip44d
> <http://wiki.ampr.org/wiki/Rip44d> on the server to forward the traffic
> to my AMPRnet box? Would I have to use either ampr-ripd
> <http://wiki.ampr.org/wiki/Ampr-ripd>, or rip44d
> <http://wiki.ampr.org/wiki/Rip44d> to tell the server where to send the
> AMPRnet traffic cumming from the box.
Rip44 is not for forwarding. It is used to populate the routing table for
the IPIP tunnel system. The forwarding is done by the kernel and is configured
the usual way. I.e. forwarding is to be enabled in the kernel and the proper
interfaces and subnets are added.
You would be setting up the AMPR IPIP tunneling on your brother's computer
(first ask if he agrees with that) and you get a subnet from your coordinator,
e.g. a /28 network, where your brother's computer gets an AMPRnet address
and your own computer gets another address in the same subnet, you set your
brother's computer as the default gateway, and all AMPRnet traffic is forwarded
via your brother's computer that will tunnel it over the IPIP network.
The ampr-ripd running on your brother's computer will receive the AMPRnet RIP
packets and maintain a routing table with about 400 routes, plus it has the
locally attached AMPRnet subnet that was assigned to you. All AMPRnet traffic
is forwarded between the IPIP tunnels and your local subnet.
> Or can I use a "simple" tool such as BIRD Internet Routing Daemon
> http://bird.network.cz/ <http://bird.network.cz/> (the first thing that came up when I searched
> for ipip routing deamons).
No. That software only handles standard protocols, and RIP44 isn't one.
(well, it almost is, it is just RIPv2, but the handling of the information by
the routing daemon is different)
An alternative when you do not want to do as much on your brother's computer
and do have a Linux system yourself, is to just forward all IPIP traffic received
by your brother's computer to your computer over the local network, and run
ampr-ripd etc on your own computer.
Rob
> Subject:
> Re: [44net] Trouble creating a Gateway into 44net
> From:
> "Augustine Tabeling, W8AWT" <w8awt(a)qsl.net>
> Date:
> 03/24/2017 12:36 PM
>
> To:
> 44net(a)hamradio.ucsd.edu
>
>
>
> "An alternative when you do not want to do as much on your brother's computer
>> and do have a Linux system yourself, is to just forward all IPIP traffic received
>> by your brother's computer to your computer over the local network, and run
>> ampr-ripd etc on your own computer. "
>> ---
>> This is exactly what I want to do but I have no Idea how to do it. By "all IPIP traffic" do you mean _only_ the IP Protocol 4 Traffic or do you mean effectivly all IP traffic (I dont think that would be ok.)? I ask this because my brothers
>> computer has several websites and a few other web services (IRC, SSH, FTP, Minecraft) running on it and everything that I do cannot interfere with them.
On a Linux system, this is easy.
IPIP stands for "IP in IP" which is the protocol that is used for AMPRnet tunnels. The outer IP packet has protocol 4, the inner IP packet is the actual packet to be transferred.
Use the following command to send all incoming IPIP traffic (IP protocol 4) to another system using a destination NAT rule:
*|iptables -t nat -A PREROUTING -p 4 -j DNAT --to-destination 1.2.3.4|*
Instead of the 1.2.3.4 you put the IP address of your own computer.
The replies to those packets can be sent directly to the router so it is not required to configure a reverse for this.
(assuming the router does NAT itself)
This command has to be repeated every time the computer is booted.
To do that, you can add it to the file /etc/rc.local
Rob
Hi All,
>
> I am new to 44net and I am trying to create a gateway into it. but I
> am running into problems.
> My brother runs a Ubuntu server on our LAN and has the router DMZ'd to
> it. I would like to create a gateway to 44net on the LAN but not on
> his server. Would it be possible to set up 44net access on the LAN and
> working with but not on his server. if possible I would like to start
> by using a Ubuntu Server Virtual Machine and later move to a Linksys
> wifi router If I get it working well.
> I am new to networking and learning slowly. My brother is willing to
> work with me if I tell him what I need him to do but wont put a lot of
> energy into figuring out how to make it work.
>
> 73!,
> Augustine, W8AWT
>
> While ago, just for fun, SUCCESSFULLY compiled JNOS-2.0k
> on Debian-8.7/64 bit with CFLAGS -m64
> This binary is running right now on desktop PC instance of JNOS:
> 2LPJNS:SP2L - simply flawlessly... Hi!
Ok, that is good! I once tried this with NETCHL and it failed, and I did not
want to spend the effort of going through all code to make it 64-bit secure,
and this is a waste for such a program anyway (it does not require large integers
or pointers that can access more than 2GB).
So for NETCHL the -m32 flag is mandatory.
Of course, with Debian8.7 there still are several compiler options (4.6 - 4.9 and
maybe more) so there may be some issue with a different version of the compiler,
I have seen that happen in the past.
Otherwise I have no clue what could be happening, we would need at least the
stack backtrace and maybe more.
Rob
