44net

44net@mailman.ampr.org

3196 discussions

amprnet routing made simple
by Brian Rogers 07 Sep '13

07 Sep '13

http://n1uro.ampr.org/cgi-bin/safe-config.cgi will set up a *very* basic system for amprnet ipencap routing pending you have a tunnel interface already configured. Field 1: 169.228.66.251 <- ucsd Field 2: 44.0.0.1 <- ucsd Field 3: 44.x.x.x <- your amprnet gw IP Field 4: eth0/wlan0/wifi0/etc The rest gives you basic IPTable rules to allow IPEncap and ax25 frames through your firewall, route rules, and a basic route table. Load your favorite ripv2-daemon and configure it to populate "table 1" and you'll be off and running within the first rip broadcast (faster if you run the munge script - no need to wait for a broadcast). Mine looks exactly as the cgi prints: Add this to your rc.local, or whatever init script you wish to make: # allow IPEncapsulation and ax25 frames to gate through... iptables -I INPUT 1 -j ACCEPT --proto 4 iptables -I INPUT 1 -j ACCEPT --proto 93 iptables -I OUTPUT 1 -j ACCEPT --proto 4 iptables -I OUTPUT 1 -j ACCEPT --proto 93 iptables -I FORWARD 1 -j ACCEPT --proto 4 iptables -I FORWARD 1 -j ACCEPT --proto 93 # Create a policy to encap forward to your host... ip rule add from 44/8 pref 1 table 1 ip rule add to 44/8 pref 1 table 1 # Now let's set the routing accordingly... ip route add 44/8 via 169.228.66.251 dev tunl0 onlink src 44.88.0.9 table 1 ip route add default via 169.228.66.251 dev tunl0 onlink table 1 *Whether or not you're SAFed (source address filtered) this should work for you. -- 73 de Brian Rogers - N1URO email: <n1uro(a)n1uro.ampr.org> Web: http://www.n1uro.net/ Ampr1: http://n1uro.ampr.org/ Ampr2: http://nos.n1uro.ampr.org Linux Amateur Radio Services axMail-Fax & URONode AmprNet coordinator for: Connecticut, Delaware, Maine, Massachusetts, New Hampshire, Pennsylvania, Rhode Island, and Vermont.

3 5

BGP on commercial ISP lines
by Assi Friedman 07 Sep '13

07 Sep '13

So how are people dealing with running BGP over home class internet service? With ISPs becoming more and more restrictive, I can't see any ISP in the US allowing this. While not 100% sure, I believe running BGP would be in violation of the garden variety usage agreement that is tailored towards "home use" and prohibits any service that falls into the business class traffic. Also, how does BGP interoperate with the current default route of non 44 op to mirrorshades? Did Brian remove any BGP advertised subdomain from the default route? Assi KK7KX/4X1KX (www.kiloxray.com) -----Original Message----- > > I don't agree with that. > People who want to experiment with BGP are free and welcome to do > that, but there is no and there should not be any "deprecating IPIP > tunnels".

2 1

Re: [44net] 44Net Digest, Vol 2, Issue 139
by Rob Janssen 06 Sep '13

06 Sep '13

> Subject: > Re: [44net] amprnet routing made simple > From: > K7VE - John <k7ve(a)k7ve.org> > Date: > 09/06/2013 06:58 PM > > To: > n1uro(a)n1uro.ampr.org, AMPRNet working group <44net(a)hamradio.ucsd.edu> > > > This may be a stop gap for low traffic sites, but I think the goal is to > avoid sending everything through 44.0.0.1. This solution is not sending "everything through 44.0.0.1" Only traffic incoming from non-44 internet addresses to your net-44 station is replied via that path. All other traffic is going via direct tunnels. > We should be working toward deprecating hacked solutions, like the IPIP > tunnel set. I don't agree with that. People who want to experiment with BGP are free and welcome to do that, but there is no and there should not be any "deprecating IPIP tunnels". Rob

2 1

Routing and encap minor issue in JNOS
by Mark Phillips 05 Sep '13

05 Sep '13

Hi all, Firstly, if this has been done to death before please forgive me. I could not find anything in the archive. Secondly, I have noticed an "issue" with the routing and encap within JNOS. It would seem that if a 44 station tries to contact me all works fine. For example I can communicate with N2NOV and GB7CIP exactly how you would expect. However, if a "public" address contacts me, I get their connect requests in encap format via uscd but then I send them my response directly rather than back the same way it came. This means that there can be no public access to my system via the Internet. What have I missed? JNOS will not allow me to set the default route via encap/uscd and I don't really want to send all my traffic (eg DNS lookups) via there anyway. How can I respond to connections in the same way that I received them? Thinking about it, it makes sense that JNOS replies directly. Once it unpacks the packet and discovers an encap'd one inside it will work on that one exclusively. Thanks Mark

4 9

jnos
by Eric Fort 05 Sep '13

05 Sep '13

Does a version of jnos exist that is stripped of all it's networking code thus just offering the the bbs parts? AF6EP

2 2

Something simple
by Rod Ekholm 03 Sep '13

03 Sep '13

I am interested in something simple. I am not interested in creating a Linux box to do my routing, as I see no need for it. It's almost worse than having a network that is vendor specific!! I don't tell you how to run your internet.. you don't tell me what router I have to use. I use Mikrotik for my edge technology, just because it's what I am familiar with. For me it's easy enough. I am interested in creating some links with others, hopefully in the NW towards the Seattle area. I have my own system design that I am planning on implementing starting early this fall. I have no interest however in trying to use some script (nice work on it though..) to make it work, but would rather have some common assembly of networks that can connect to each other. Unfortunatley, until this is done in a large enough fashion, it looks like i am talking static routes to and from some other networks. My intention is not to rock the boat of what has been done here, but it seem like there is little direction of how the network is assembled and coming to a common point of presence. until one person or gorup comes up and offers some stability of how to route the network accordingly, I fear my use of AMPR is only for some of it's tunneling ability with the use of our 44/8 addressing. I had no intentions of it before, so if I end up not using them later, now loss on my end. Let me know if anyone is interested in creating some more static links, and / or trying to do some sort of edge router that can have an open communications standard, and not a customized (could otherwise spelled proprietary) protocol in the middle. Thanks to you all and have a great day! -- Rod Ekholm KC7AAD kc7aad(a)gmail.com Spokane, WA (509) 435-3400

8 23

Chris Smith G1FEF?
by Brian Kantor 02 Sep '13

02 Sep '13

Has anyone heard from Chris Smith, G1FEF in the past few months? All my email to him has gone unanswered so I'm worried that he might be ill. - Brian

4 3

Re: [44net] ripv2
by Rob Janssen 02 Sep '13

02 Sep '13

> Subject: > [44net] ripv2 > From: > Brian Rogers <n1uro(a)n1uro.ampr.org> > Date: > 09/01/2013 12:12 AM > > To: > AMPRNet working group <44net(a)hamradio.ucsd.edu> > > > There appears to be at least one valid route missing in the rip > broadcasts. aa6hf is not received via rip however it is using the munge > script... is there an issue in the portal? I receive the routes from RIP and his route is OK. 44.17.0.128/31 via 67.49.91.65 dev tunl0 proto ampr-ripd onlink

5 5

AMPRNet-config
by Willie Hein WJ3G 02 Sep '13

02 Sep '13

Greetings, I'm again planning the setup of a gateway here at the Balogna Capitol, much to the wonderment of a few. Prelim's are done, ie: static ip, registering in the portal, etc. Now I'm back to a place I've been before, automating the startup, and configuration. Something I'm surprised we haven't overcome with a gui by now, and unfortunately way above my pay scale.:) I did have this working before, so I'm hoping with little changes I'll have the init.d scripts and all updated. I'll certainly make them available, maybe on the wiki when I'm done. I realize that it will take changes to make them work on other distros. Maybe it's time to see what the commonalities are, in hopes of developing a standard config tool. I'd certainly like to take this off list till there is something worth showing. Anyone interested? Best regards, Willie, WJ3G

1 0

Microtik is Broadcasting
by Michael E. Fox - N6MEF 01 Sep '13

01 Sep '13

Someone with a Microtik is evidently broadcasting on the AMPRnet tunnels. Dest address 255.255.255.255 Source address 0.0.0.0 UDP port 5678 Please stop! Michael

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

44net