44net

44net@mailman.ampr.org

3194 discussions

Re: [44net] ampr.org mail
by Steve L 10 Jul '15

10 Jul '15

Jerry, Are you talking about the BBS Hierarchical Addressing Protocol that is common with people running NOS BBS'es? ftp://ftp.tapr.org/bbssig/recommendations/hierarchical In all honesty from what I remember it's a lot of manual configuration, that really seems quaint to me since all the NOS programs also speak SMTP, the standard today. It would seem the same could be accomplished using SMTP standards by setting up some mail aliases. I'm going to recommend the TAPR NOS-BBS list for (Hierarchical forwarding) things of the non 21st century: https://www.tapr.org/mailman/listinfo/nos-bbs ---- Quote ---- Is there anything written on the operation of amper.org mail forwarding? We routinely run h-address packet mail forwarding and I see some ampr.org mail bulletins coming in from all over the world. I’m interested in the addressing, routing, and just how does this mail forward. I run Ubuntu Linux JNOS latest version. Jerry, N0MR

1 0

ampr.org mail
by Lakenet 10 Jul '15

10 Jul '15

Is there anything written on the operation of amper.org mail forwarding? We routinely run h-address packet mail forwarding and I see some ampr.org mail bulletins coming in from all over the world. I’m interested in the addressing, routing, and just how does this mail forward. I run Ubuntu Linux JNOS latest version. Jerry, N0MR

1 0

Is the Portal down
by William Lewis 07 Jul '15

07 Jul '15

I can't seem to get a response from the portal? Anyone else having issues? Been this way for over 24 hours. Bill KG6BAJ

6 6

Re: [44net] Is the Portal down - loss of communications
by Assi Friedman 07 Jul '15

07 Jul '15

"Loss of communications can only mean one thing... INVASION." Sorry guys, someone had to say it ;-) Assi kk7kx -----Original Message----- From: 44net-bounces+assi=kiloxray.com(a)hamradio.ucsd.edu [mailto:44net-bounces+assi=kiloxray.com@hamradio.ucsd.edu] On Behalf Of Paul Lewis Sent: Tuesday, July 07, 2015 9:11 AM To: AMPRNet working group Subject: Re: [44net] Is the Portal down (Please trim inclusions from previous messages) _______________________________________________ Hi Brian Thanks for the confirmation that the services are down. 73 de Paul G4APL GB7CIP -- paul(a)skywaves.demon.co.uk _________________________________________ 44Net mailing list 44Net(a)hamradio.ucsd.edu http://hamradio.ucsd.edu/mailman/listinfo/44net

1 0

Re: [44net] Gateway filtering?
by Steve L 04 Jul '15

04 Jul '15

Thanks Rob, your message was helpful. It gives me some good ideas and a place to start. 73 Steve, KB9MWR

1 0

Gateway filtering?
by Rob Janssen 04 Jul '15

04 Jul '15

> Subject: > [44net] Gateway filtering? > From: > Steve L <kb9mwr(a)gmail.com> > Date: > 07/03/2015 09:05 PM > > To: > "44net(a)hamradio.ucsd.edu" <44net(a)hamradio.ucsd.edu> > > > A few hosts behind my gateway want to accept general inbound internet > connections. > > As discussed earlier there is a lot of crap and the gateway I run is > off a residential internet connection. Combine that with some limited > bandwidth radio links. > > I have been thinking about applying some IP blacklists using the ipset tool. > > ex:https://github.com/trick77/ipset-blacklist > > I am not super savvy on the more advanced functions of tcpip in the > Linux networking stack. > > Since those in all the inbound packets from the internet are > encapsulated at UCSD, how can I apply blacklisting? Can I apply them > to the eth1 (wireless lan) output interface somehow? > > Examples are especially helpful. > > Thanks > > Steve, kb9mwr > I use this a lot in the Dutch gateway. First, I have an ipset that is loaded with the list of allocated addresses within 44.137.0.0/16. You don't need to do that when you are behind the UCSD gateway, but we have a BGP-advertised /16 so we get a lot of crap for addresses that are not allocated. Then, there is an ipset that is loaded with addresses of persistent abusers like shodan.io. Finally, I have an ipset with those addresses for which the user has indicated that they want to receive inbound connections from outside 44.0.0.0/8. This works in combination with an iptables -m state --state ESTABLISHED,RELATED entry that passes the traffic related to outgoing connections. As a lot of hams are not interested in providing connectivity to the large internet, this filter removes a lot of incoming traffic that would otherwise be blocked further down the path. (at their incoming firewall) The use of these ipset filters in the firewall is quite simple: # Drop traffic from abusers $ipt -A amprifwd -m set --match-set Hackers src -j DROP # Drop traffic for addresses not registered in DNS $ipt -A amprifwd -m set ! --match-set PAnet dst -j DROP # Allow related traffic $ipt -A amprifwd -m state --state ESTABLISHED,RELATED -j ACCEPT # Drop traffic to stations that don't want incoming from internet to HAMnet $ipt -A amprifwd ! -s 44.0.0.0/8 -m set ! --match-set HAMnet dst -j DROP # Drop invalid traffic (not related to existing connections) except TCP close-down traffic $ipt -A amprifwd -p tcp --tcp-flags ACK,FIN ACK,FIN -j ACCEPT $ipt -A amprifwd -p tcp --tcp-flags RST RST -j ACCEPT $ipt -A amprifwd -m state --state INVALID -j DROP # Accept remaining traffic $ipt -A amprifwd -j ACCEPT Of course you need to apply this filter to the FORWARD chain for traffic incoming on your tunnel interface and being forwarded to your radio interface. You can write such a filter (without the ESTABLISHED,RELATED part) for traffic forwarded outbound as well. E.g. to block traffic from nonregistered addresses. When loading the ipsets, it is important to note that you cannot delete a set that is in use in iptables. So I use this method (in a script that reloads the sets e.g. after an address update): ipset create HAMnet bitmap:ip range 44.137.0.0/16 2>/dev/null ipset create HAMnet_new bitmap:ip range 44.137.0.0/16 ipset flush HAMnet_new grep '^44\.137\.' hamnet | cut -f1 | while read ip do ipset add HAMnet_new $ip || echo "Failed to insert $ip in HAMnet_new" done ipset swap HAMnet_new HAMnet ipset destroy HAMnet_new 2>/dev/null This creates a new set, loads it with the data, then swaps it with the currently used set and destroys that one. This operation is allowed while the set is in use, and of course is preferred over just flushing the set and loading it, as during that brief time the filter could drop traffic. Rob

1 0

Gateway filtering?
by Steve L 03 Jul '15

03 Jul '15

A few hosts behind my gateway want to accept general inbound internet connections. As discussed earlier there is a lot of crap and the gateway I run is off a residential internet connection. Combine that with some limited bandwidth radio links. I have been thinking about applying some IP blacklists using the ipset tool. ex: https://github.com/trick77/ipset-blacklist I am not super savvy on the more advanced functions of tcpip in the Linux networking stack. Since those in all the inbound packets from the internet are encapsulated at UCSD, how can I apply blacklisting? Can I apply them to the eth1 (wireless lan) output interface somehow? Examples are especially helpful. Thanks Steve, kb9mwr

1 0

Not able to fill subnet IP
by Libor Berka 29 Jun '15

29 Jun '15

I am trying to register amprnet gate at IP 147.229.242.130 (ok0nmg.ddns.net) at portal.ampr.org but there is no offer to put a subnet (here 44.177.10.254/32). I ahve already registered 2 gateways before succesfully with their subnets but this a/m one its not possible to put a subnet. (The ampr-ripd system is running well on ok0nmg.ddns.net.) I need some help please. Best 73 Libor OK2PEN (PY2ZEN) sysop of gates ok2koj.ampr.org, ok2pen.ampr.org and ok0nmg.ampr.org

2 1

Test New Tool - APRS Code Recovery
by lleachii＠aol.com 24 Jun '15

24 Jun '15

All, I've added a new tool that I'd like you to test. This web application should provide the registration code required by APRS software suites. In order to use it, you must browse to: http://kb3vwg-010.ampr.org/tools/aprscode or http://44.60.44.10/tools/aprscode If you're on AMPRNet, you should be able to enter the callsign and look up the registration code. If you access it from outside of AMPRNet, you will be prompted for an access code (1234). Please let me know how it works 73, KB3VWG

39 87

Re: [44net] attacks on 44 net !
by Gustavo Ponza 24 Jun '15

24 Jun '15

> Hi Maiko and all, > > since from three or more years I'm visited from many > attackers which I mainly identified as government agencies > and/or research/industrial groups... just note the inbound and > the outbound traffic below. > A very big attack at 23.30 - 00.30 is shown > > gus i0ojj > > > ----------------- ***Image 'attacks.png' deleted*** The tonight visitor(s) was the following: org. 128054 IN NS b2.org.afilias-nst.org. org. 128054 IN NS b0.org.afilias-nst.org. org. 128054 IN NS c0.org.afilias-nst.info. org. 128054 IN NS d0.org.afilias-nst.org. org. 128054 IN NS a2.org.afilias-nst.info. org. 128054 IN NS a0.org.afilias-nst.info. a0.org.afilias-nst.info. 128054 IN A 199.19.56.1 a0.org.afilias-nst.info. 128054 IN {28} a2.org.afilias-nst.info. 128054 IN A 199.249.112.1 a2.org.afilias-nst.info. 128054 IN {28} b0.org.afilias-nst.org. 128054 IN A 199.19.54.1 b0.org.afilias-nst.org. 128054 IN {28} b2.org.afilias-nst.org. 128054 IN A 199.249.120.1 b2.org.afilias-nst.org. 128054 IN {28} c0.org.afilias-nst.info. 128054 IN A 199.19.53.1 c0.org.afilias-nst.info. 128054 IN {28} d0.org.afilias-nst.org. 128054 IN A 199.19.57.1 d0.org.afilias-nst.org. 128054 IN {28} ---------------- ... and in the past few days as below: ---------------- www.google.it. 0 IN A 74.125.206.94 . 93348 IN NS b.root-servers.net. . 93348 IN NS j.root-servers.net. . 93348 IN NS i.root-servers.net. . 93348 IN NS e.root-servers.net. . 93348 IN NS k.root-servers.net. . 93348 IN NS m.root-servers.net. . 93348 IN NS d.root-servers.net. . 93348 IN NS c.root-servers.net. . 93348 IN NS g.root-servers.net. . 93348 IN NS f.root-servers.net. . 93348 IN NS a.root-servers.net. . 93348 IN NS l.root-servers.net. . 93348 IN NS h.root-servers.net. dnsscan.shadowserver.org. 0 IN A 184.105.143.133 satellite.cs.washington.edu. 41243 IN A 198.48.92.101 satellite.cs.washington.edu. 41243 IN A 198.48.92.103 satellite.cs.washington.edu. 41243 IN A 198.48.92.102 satellite.cs.washington.edu. 41243 IN A 198.48.92.104 cs.washington.edu. 0 IN A 128.208.3.200 www.google.com. 0 IN A 64.233.184.103 www.google.com. 0 IN A 64.233.184.106 www.google.com. 0 IN A 64.233.184.105 www.google.com. 0 IN A 64.233.184.99 www.google.com. 0 IN A 64.233.184.104 www.google.com. 0 IN A 64.233.184.147 a.root-servers.net. 473340 IN A 198.41.0.4 b.root-servers.net. 473340 IN A 192.228.79.201 c.root-servers.net. 473340 IN A 192.33.4.12 defcon.org. 197093 IN SOA dns-1.datamerica.com. hostmaster.defcon.org. 2015051025 43200 600 86400 86400 defcon.org. 197093 IN TXT =v=spf1 defcon.org. 197093 IN MX 10 mail-1.datamerica.com. defcon.org. 197093 IN A 162.222.171.206 ----------------------

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

44net