Does anyone know how to reach VE2HOM? He is keeping his contact information well-hidden, it appears.
His gateway at 206.80.251.222 is sending a lot of traffic with RFC1918 source address:
Feb 19 15:00:53 Packet DROP: IN=tunl0 OUT=eth1 TUNL=206.80.251.222 SRC=192.168.0.5 DST=44.137.42.18 LEN=60 TOS=0x00 PREC=0x00 TTL=62 ID=13455 DF PROTO=TCP SPT=40510 DPT=443 WINDOW=29200 RES=0x00 SYN URGP=0
Feb 19 15:00:57 Packet DROP: IN=tunl0 OUT=eth1 TUNL=206.80.251.222 SRC=192.168.0.5 DST=44.137.42.18 LEN=60 TOS=0x00 PREC=0x00 TTL=62 ID=38262 DF PROTO=TCP SPT=40512 DPT=443 WINDOW=29200 RES=0x00 SYN URGP=0
Feb 19 15:01:01 Packet DROP: IN=tunl0 OUT=eth1 TUNL=206.80.251.222 SRC=192.168.0.5 DST=44.137.42.18 LEN=60 TOS=0x00 PREC=0x00 TTL=62 ID=14124 DF PROTO=TCP SPT=40480 DPT=443 WINDOW=29200 RES=0x00 SYN URGP=0
Everyone remember: when you are combining the routing of AMPRnet and other network traffic, make sure you
have the proper routing and/or NAT rules in place, and preferably also a filter, to make sure you don't send traffic
with a source address like 192.168.0.5 into an AMPRnet tunnel.
Rob
> I am trying to get a feel for how active AMPR is today.
This varies a lot by region. The old network (1200/9600 bps packet radio) is completely dead in most
regions and what is left over in those speeds is usually only APRS, so unrelated to IP used in AMPRnet.
However, in some places new networks are being built using WiFi technology. Much faster and much more
usable. Plus there is tunneling and direct routing of the net-44 space over internet to interconnect those islands.
Rob
Greetings,
I am trying to get a feel for how active AMPR is today. I am a software developer by trade these days and am relatively new to the hobby but not to IT / networking. Looking for a place to get involved and give back to the community.
Regards,
Jim KD8MTY
Sent from my iPhone
> Subject:
> [44net] Amprnet vpn
> From:
> Shawn Bush <daemon75joker(a)gmail.com>
> Date:
> 02/17/2017 01:18 PM
>
> To:
> 44net(a)hamradio.ucsd.edu
>
>
> something
> that I couldn't figure out how to get a ubuntu vm to run with.
>
> In the ubuntu host, the ipip works just fine and there is a module for it.
> But the module isn't in the VM and I dont see why.
You probably are not running a full VM (hardware virtualization with a standard OS running in it)
but paravirtualization like Xen which runs a special kernel in the guest machine.
This is popular for providing virtual webservers and other "cloud" servers.
However, as those servers are normally not full-featured, the guest kernel is compiled with
limited selections in the kernel config, and it may well be that exotic features like IPIP tunnels
are not provided in that config.
When it is your own system, you could opt to compile your own kernel and modify the config
while doing that. It may be easier to run the IPIP tunnel gateway on a dedicated system, e.g.
a Raspberry Pi (as I do myself) or router (e.g. a MikroTik using Marius YO2LOJ's method.
Rob
Shawn,
I'm lost; but I guess my inquires sum up to:
- Are you running a stock installation of Ubuntu, or is it a version
offered by the Virtual Machine Provider?
- How are you "receiving the route information" and what do you mean by
"but that would be it"?
Did you receive route information via rip44d and confirm it by typing:
ip route show table 44 ?
Have you been successful at getting rip44d to run as a service?
If the routes are there, this indicates you may have already made great
progress.
Did you attempt to ping or traceroute any IPs from an interface assigned
an AMPR IP?
If so, did you receive a reply?
In any case, this means you are receiving the packets at the VM. We need
to determine if the tunnel interface Up. Please verify by typing: ifconfig
If you used startampr, you should see an interface listed as tunl0, it
MIGHT say IPIP or UNSPEC, but you will recall you configured it for
IPENCAP (this is because the Linux Kernel module for both are the same).
Also note the names of your other interfaces, as the names used in the
script must also be correct. Since Ubuntu 16.04, the Ethernet interfaces
were no longer named: eth0, eth1, etc. Since I used eth0 and eth1 in
documentation, you must account for variations in your system
configuration. The ifconfig command will be most helpful to that end.
You can also assign an IP to tunl0 (a commented-out line in the script
allows for that).
Lastly, have you ever received a copy of startampr from me? If you're
using a script from Internet, that might be your problem (earlier
versions contained less documentation). The current copy is only
available on AMPR at:
http://kb3vwg-010.ampr.org/amprnet_docs/start_ampr_version2/startampr
Since that presents a chicken-and-the-egg problem for you at this time,
contact me off-forum and we can arranging for you to get a copy.
- KB3VWG
Thanks for the detailed reasponce. I have work with the 44ripd daemon and I
was recieveing the route information but that would be it. In thr startampr
script that is show, it tries to setup mode ipip and that is just something
that I couldn't figure out how to get a ubuntu vm to run with.
In the ubuntu host, the ipip works just fine and there is a module for it.
But the module isn't in the VM and I dont see why. But I was told ipensec
is what I'm supposed to be using? I have no idea how to route diffrent
protocols....
Sean,
If you are using the AMPR VPN listed on the services wiki site, it uses
the allocation given to its operator.
You MUST setup an IPENCAP tunnel, or have your subnet routed over the
global Internet via BGP.
You might be able to have your allocation directed to the VPN operator
(callsign - OH7LZB) and then arrange for him to route your IPs to the
tunnel connection you have established between him. Please be advised,
out of all the options, this one is not regularly supported. In
addition, your latency would be extremely poor, since you appear to be
in the United States and the VPN endpoint is in Finland. Lastly, from
what I observed, the AMPR VPN appears to be a Layer 3 VPN (not Layer 2).
This means that more detailed configuration (on part of the operator)
may be required to route multiple IPs to your VPN instance - my
understanding is that the VPN is maintained on a volunteer basis.
What issue(s) are you having getting "[IPENCAP] over to the VM"?
I ran my AMPR router as an Ubuntu VM for many years before migrating it
to an actual hardware border router running OpenWRT; perhaps I can assist.
73,
Lynwood
KB3VWG
I recently setup a AMPR NET VPN with openvpn in a OpenVZ container due to
the fact I couldn't figure out how to get IPIP over to the VM.
My question is this, I have a weird ip a 44.x.x.x number and I want to be
able to use my given IP of 44.102.204.32, can I route my IP over the given
one from the VPN?
I'm using Ubuntu in the container and the routing for the VPN is working
just fine. I want to setup linBPQ32 with this IP and start routing this way
if I can.
I'm pretty good with Linux, but not so much with routing. I setup a ampr
interface and gave it my 44.102.204.32 IP, but from their I am stuck.
73's
KD8NCV
Shawn Bush
Hi there
We got permission to use our local university network for ham radio
We plan to connect our DMR repeater to this network (some ports needed to be opened to allow the repeater to connect to the server)
In adddiotion i want to place a AmprNET IPIP gateway there
The University protected by firewall no outgoing and no incomming packets free flow..
What should I tell the IT person to open in order to allow gateway to run ?
Does Firewall have IPIP protocole definition ?
if not ... what should they open ? Outbond and inbond and from /to UCSD 44 Net Router ?
Please Advice
Thanks Forward
Regards
Ronen - 4Z4ZQ
http://www.ronen.org
Ronen Pinchooks (4Z4ZQ) WebSite<http://www.ronen.org/>
www.ronen.orgronen.org (Ronen Pinchooks (4Z4ZQ) WebSite) is hosted by domainavenue.com
