Hello all, I’m sorry to escalate this back to the list, but I’d like to report that there is still significant commercial abuse of AMPRNet allocated subnets in violation of the AMPRNet Terms-of-Service and nothing appears to have been done about it, despite my repeated attempts to raise the issue with the abuse(a)ampr.org <mailto:abuse@ampr.org> mailbox.
There are some 260 Helium Hotspot miners using the address space 44.144.124.0/23 to earn monetary rewards on the Helium cryptocurrency blockchain. While I am a fan of Helium and have managed to make it my full-time job, I am not a fan of seeing the AMPRNet address allocations be abused this way.
Can we discuss this here, as a group?
73,
Jeremy
While the abuse concerns should be addressed off list, I think there
may be benefit from some basic discussion about this network. I'd be
willing to bet most are unaware of this network, that it mostly uses
LoRA modulation to build a decentralized network for slower speed data
applications.
I feel there is a good amount of overlap to what we do in ham radio
and there could be things learned from it.
I'd be interested in knowing who is using the helium network (package
delivery folks I'd assume, among others) and what light weight
protocols and data they use.
A few years back someone at a DCC meeting did suggest the concept of
just such a network for the internet of things. And there have been a
few papers on LoRA.
I'm not interested in the crypto aspect of the network nor does that
fit the discussion here. But if the hardware entry cost was lower or
there was a way to build your own gateway I'd probably be doing that.
Pity there isn't enough of density of interested hams locally to do
what they are doing.
So is there anyone else doing things with LoRa chipset enabled
hardware with dialup speed applications in or out of ham radio.?
Today our external IP for the IPIP tunnel towards 44.137.0.0/16 has changed from 213.222.29.194 to 145.220.78.2
It appears that some stations have configured this statically, so it has to be changed.
(of course those that use the RIP transmissions from AMPRGW have no issue with this)
Rob
To all.
I've recently been duly scolded for soliciting $ for my DoppSite program,
which is a big no-no here on 44NET.
I'm actually not soliciting $... the program is 100% free... but the
description on the website is very old... and it does mention getting a
custom version for a sum of $.
That description is WRONG... the program is FREE... if you click the
download link, it won't ask you for any $... try it...
===========
Sorry for the confusion... a lengthy explanation follows... but I guess I
better provide it...
At one time ( many years ago ) I had a DEMONSTRATION version of that program
that was FREE, but it only generated DF bearing lines that were one mile
long.
I gave that away "for free", to promote the REGULAR ( commercial ) version,
which I tried to sell ( I think ) for $ 99, and that one had DF bearing
lines 25 miles long.
That REGULAR version plotted at a "fixed" DF location that could NOT be
changed... the customer had to specify that location, when ordering it.
I did that to prevent s/w piracy... so the REGULAR program couldn't be
copied and used at another DF site, just to dodge the $99 fee for the second
site.
Each REGULAR version was "hand carved" for a specific LAT / LONG, so it
would be useless at another DF location.
============
No-one ever responded to that, so a few years later I just upgraded the DEMO
version to display a 25 mile DF bearing line... and gave it away "for
free"... but I never updated the website text that described it.
By that time, I had given up hope that anyone would pay for it... in fact,
it seemed no-one was even looking at it, so I had no reason to update the
text information.
============
>From time to time, I would run into someone who MIGHT have an interest in
that technology, so I would send them a link to the download, so they could
try it.
I figured they better look at the BEST version of that program... that's why
I upgraded it to 25 miles... and that's what you will get NOW, if you
download, install and run it.... for FREE.
============
I've also been chastised for not offering the source code, and embracing the
"open source" model of software...
I'm not averse to sharing the source code, but it's written in VisualBasic 6
which is an obsolete language, no longer supported by MicroSoft.
Despite that, some people still write code with it, and it runs basically on
any PC machine from Windows 95 to Windows 10.
In the spirit of full disclosure, I've zipped the folder containing ALL the
Doppsite_Demo ( VB6 ) source code files, and uploaded it to my website for
others to get...
You will find it HERE :
www.silcom.com/~pelican2/DoppSite_Demo.zip
16 megs zipped, 25 megs unzipped.
=============
I've got more to say, but this is plenty for one day...
I'm not trying to make any $ on this, I'm retired and ( thank God ) I don't
need the $... I'm not rich, but I have enough.
Speaking for myself, I want to see someone create a DF network... even a
simple one... just to prove this technology works...
I won't explain why I've developed it, ( that's a whole other story ) but
it's been a passion of mine for many years...
I've done as much as I can do "alone"... I hope to meet people here ( on
this forum ) who aspire to make DF networks, but who lack the technology to
do it... or even a plan for it.
=============
I've already got almost all the technology for it, and I'll share it... for
folks that are serious about it... I'm 70 YO and it's not doing me any good
sitting here...
This DoppSite program is the first ingredient in such a network... and the
people on this forum are pretty sharp, I hope they can see the potential it
offers...
They offer grants here also. I don't want or need one, but someone making a
network might... I can offer a lot, but I can't offer everything.
Enough for one day... thanks again folks.
Bob S.
Just reminder that the Next ARDC Community Meeting is this Saturday:
• DATE: Saturday, 29 January 2022
• TIME: 1800 UTC (10am PST / 1pm EST / 7pm CET)
• PLACE: Zoom (see Zoom info below)
Topics will include:
• Introduction of new GAC and TAC members
• Looking back at 2021
• Looking ahead to 2022
• Questions from our attendees.
This meeting is open to all interested parties, so please tell your friends!
---------------------------------------------------------------
Zoom URL: https://us02web.zoom.us/j/87882963306?pwd=aXdpY3B1cmFwWlNSVDJFMkpLanIyQT09
Meeting ID: 878 8296 3306
Passcode: 72396
To join by phone, go to https://us02web.zoom.us/u/kcXKMi0QGv to find your local phone number.
73,
Dan Romanchik KB6NU
Communications Manager
Amateur Radio | Digital Communications (ARDC)
858-477-9903, ampr.org
Marius,
This would only apply:
* if there were a malicious node on AMPR sending as 44.0.0.1
* someone "accidentally" configured RIP to broadcast routes on their AMPR interface (though there likely won't be AMPR-routes here and not 44.0.0.1; but this could wipe our tables with a misconfigured SNAT rule lying around)
And yes indeed, I currently use the 2 rules - similar to what you mentioned, and you know I'm ever grateful you made sure ampr-ripd works with it!
It will also ensure that a u32 rule works as ampr-ripd does not "pull the route packets off the wire". ;-)
I had to upgrade my QTH router/AMPR gateway to OpenWrt 20.04.1 running on an x86_64 (I just cross-compiled with the SDK to the musl-based C running on it), so I have some more CPUs to work with for more firewall, logging, IDS/IPS, etc. now.
73,
- Lynwood
KB3VWG
----
Excuse the OpenWrt Syntax:
config rule
option src 'wan'
option name 'Allow-AMPR_IPENCAP'
option family 'ipv4' option proto '4'
option ipset ' ipipfilter'
option target 'ACCEPT'
config rule option target 'ACCEPT'
option proto 'udp' option dest_port '520' option name 'Allow-AMPR_RIP'
option family 'ipv4'
option src 'amprwan' option src_ip '44.0.0.1' option src_port '520'
option dest_ip '224.0.0.9'
To all.
This is a long message, apologies, hope it doesn't break any forum rules....
but it's full of worthwhile information on this topic.
===========
This message will explain how you can create your own "DF plotting" website,
just like the one shown in my YouTube video... and run it on your own PC...
for free.
( it has a TEST mode that can run without any DF hardware attached... that's
what is shown in the video )
===========
For those who haven't seen the YouTube video, it is HERE :
https://www.youtube.com/watch?v=GdJqKNpWG5c
That video has now received 60 views, and 45 of those were done after I
announced it here on this forum.
The DF display shown in that video was generated by a VB6 program, running
here on my home PC. In fact, it's still running... right now.
It could form the foundation of an internet-linked base station DF network,
with one program installed and running at each DF site.
===========
The VB6 program in that video ( called DoppSite ) is FREE. and it's
available NOW, on my website.
Information about it is HERE :
http://www.silcom.com/~pelican2/PicoDopp/PICODOPP.htm#DShttp://www.silcom.com/~pelican2/PicoDopp/DD_MORE.html
NOTES for its installation and use on a PC ( NOTES = MsWord document, 1.1
Mb ) ) can be downloaded HERE :
http://www.silcom.com/~pelican2/PicoDopp/DoppSite_Notes.doc
============
The actual DoppSite program is available as a ( 1.5 Mb ) zipped download,
HERE :
http://www.silcom.com/~pelican2/PicoDopp/DoppSite_Demo_Install.zip
The program installs easily and simply... an installation "wizard" program
is provided, to automate the process.
Some error message will probably appear the first time the ( installed )
program runs, because it needs configuration info the be installed.
( Station LAT/LONG, COM port number, NETWORK port number... stuff like that
)
=============
Some of the links on that website are dead or out of date, but the ones
shown in this forum message are valid.
Some of the information also is out of date, the LIVE DEMO station is
dead... but more than 90% of the info is still valid.
The displayed DF bearing line is 25 miles long, but the website says it is
only 1 mile.... the website is wrong, but I never fixed it.
=============
This program accepts an RS232 input of Agrello Doppler DF messages at 4800
band, and generates a website that can drive a ( remote, internet-linked )
GoogleEarth display, as shown in the YouTube video.
It runs on a regular Windows PC and needs an RS232 COM port ( or equivalent
) and an Ethernet ( or equivalent ) network connection.
( The PC must be located at the DF site, to get the DF bearings from the
RDF... but in TEST mode, it can be anywhere )
The network connection must go to an internet Gateway computer with one
port ( at the PCs address ) configured for PORT FORWARDING, in the Gateway
computer.
=============
Some people might want to see this program... running... before they try it
themselves... and I don't mean a YouTube video, I mean the "real deal", on
a "live" GoogleEarth display.
If you want to see the program that is running ( in TEST mode ) on my own
computer here in California ( Santa Maria ) you can get a GoogleEarth
NETWORK LINK file from my website, HERE :
http://www.silcom.com/~pelican2/PublicIP.kmz
This file must be installed in GoogleEarth, it gives the GE display all the
info it needs to find and display my ( California ) station on your GE
screens. ( and it refreshes every 3 seconds )
Save this file somewhere easy to find ( desktop ? ) it will be a small KMZ
file, about 300 bytes, named "PublicIP.kmz"
Find the file on your computer, double-click it, GoogleEarth will start up
and you will see it has "installed itself" in the GE left sidebar PLACES /
TEMPORARY PLACES box.
Double click on the name in the GE sidebar box, ( PublicIP.kmz ) and GE will
"fly to" the DF station ( at my residence ) in California, near Santa Maria.
You will see a red bearing line, 25 miles long, rotating clockwise at 1 RPM,
moving every 3 seconds. ( it looks just like the video... but this is
LIVE... )
===============
Apologies again for the length of this posting... but there was a lot of
info to convey...
Best way to reach me is e-mail : pelican2(a)silcom.com
Or send a small e-mail message to my SMS on my cell phone :
8055983542(a)txt.att.net
Bob S. / WB6EYV
All,
I thought on some security matters of AMPRNet; and one that could not be mitigated easily was:
* even if you firewall IPENCAP, how to block others except AMPRGW from sending routes to port 520/udp
Someone mentioned previously they saw a MAC that was a hash that contained the outer SRC IP; but after years, I cannot find an OS Kernel that produces it.
I believe have a solution, it required some hexadecimal calculations (see: http://www.stearns.org/doc/iptables-u32.current.html). Using the u32 iptables module for those who can (and a compatible module on on other systems), we need to merely find in the bit/byte positions in the packet:
Outer Header:
* the IP of AMPRGW (0xa9e42254)* Protocol type IPENCAP (IP Protocol No. 4) (0x04)
Inner Header (add 20 bytes to the offset of the first header):
* SRC IP 44.0.0.1 (0x2c000001)
* Protocol UDP (0x06)* UDP - port 520 (0x0208)
I believe this should read as an iptables rule like:
iptables <foo> -m u32 --u32 "12&0xFFFFFFFF=0xA9E42254 && 6&0xFF=0x04 && 32&0xFFFFFFFF=0x2c000001 && 26&0xFF=0x06 && 212&FFFF=0x0208" -j ACCEPT
My question: has anyone already calculated these positions and values or tested before?
I didn't want to have to "reinvent the wheel"...but you can just check my math now before attempting to implement.
73,
Lynwood
KB3VWG
Member W3PGC/K3ERA - APRS Coordinator / Co-SkyWarn Coordinator
All...
I am new to this forum... this topic might not be relevant, but here goes...
Does anyone here have any interest in remote reporting radio direction
finders ? ( RDFs )
I have developed technology for that, using Doppler direction finders..
suitable mostly for VHF and above.
==============
Explaining it takes some time, but I have posted a YouTube video of a single
DF station, running in TEST mode, located at my residence in California.
( video is about 1 minute long )
https://www.youtube.com/watch?v=GdJqKNpWG5c
The DF displays on any PC's GoogleEarth screen, if a suitable PLACEMARK is
installed for it.
( not sure about smart phone versions... )
It "refreshes" once every 3 seconds, and ( in TEST mode ) the DF bearing
line ( 25 miles long ) rotates clockwise at 1 RPM.
==============
This is a YouTube recording, but the real DF station ( still running in TEST
mode ) can be viewed "in realtime" if I provide a KML link for it.
Contact me if you want to see that... I will provide more info "off forum"
about how to install and use the link in GoogleEarth.
Bob Simmons / WB6EYV / pelican2(a)silcom.com
=============
Multiple DF stations can be plotted simultaneously, on multiple displays...
yielding a plot showing the approximate location of the "hunted" station...
literally, "in seconds".
If multiple hunters ( at many different locations ) are watching the same
plot, those "far away" can ignore it... but those "nearby" can jump on it
and maybe find the hunted station.
That's the general idea... a jammer can't even "cough" without revealing
their ( general ) location.
=============
I'll provide more details for those who enquire, I prefer a phone call, (
include your number, if you please ) because e-mails are slow to compose.
This is still in an "experimental" phase, but the basic technology is all
mature and solid...
All the pieces have been individually tested, time for a complete network to
be built.... and I can't do that alone.
More about me here :
www.picodopp.com
TNX DE WB6EYV
More info, sorry I don't know how to reply to posts on this forum yet. it's
not very obvious how that is done.
There have been more than a dozen views of the YouTube video. so there is
some interest in this.
I expected some e-mails sent to me but none yet. then I noticed my e-mail
address on the YouTube page is SPELLED WRONG !
Apologies, a friend posted that page for me, I have asked him to correct it
but in the meantime, this is my CORRECT address :
pelican2(a)silcom.com ( note pelican is spelled with ONE
"L", not two )
===========
I have also posted a PowerPoint show on my website ( 26 slides in it )
describing the proposed DF network, in fairly deep detail...
http://www.silcom.com/~pelican2/DF_Network.ppsx
Some of the info in it is obsolete, the remote control software to run the
Icom PCR radios ( written in Java ) is no longer valid...
Pity, it really worked great, but Oracle made some changes than rendered it
useless. There are alternatives, though.
All the remaining technology ( including the DF stuff and GE webserver )
remain valid.
=============
The program that created that YouTube display is free and available for
download on my website, here :
www.picodopp.com
The program is called DoppSite, you need a DF to actually use it, but there
is a built-in TEST mode that allows the simulation to be run on a Windows PC
without any DF or radio hardware.
( that is what the YouTube video shows )
TNX DE WB6EYV