44net

44net@mailman.ampr.org

2 participants
3205 discussions

Re: [44net] Security Idea/test: firewall rule for non AMPRGW routes
by lleachii＠aol.com 27 Jan '22

27 Jan '22

Marius, This would only apply: * if there were a malicious node on AMPR sending as 44.0.0.1 * someone "accidentally" configured RIP to broadcast routes on their AMPR interface (though there likely won't be AMPR-routes here and not 44.0.0.1; but this could wipe our tables with a misconfigured SNAT rule lying around) And yes indeed, I currently use the 2 rules - similar to what you mentioned, and you know I'm ever grateful you made sure ampr-ripd works with it! It will also ensure that a u32 rule works as ampr-ripd does not "pull the route packets off the wire". ;-) I had to upgrade my QTH router/AMPR gateway to OpenWrt 20.04.1 running on an x86_64 (I just cross-compiled with the SDK to the musl-based C running on it), so I have some more CPUs to work with for more firewall, logging, IDS/IPS, etc. now. 73, - Lynwood KB3VWG ---- Excuse the OpenWrt Syntax: config rule option src 'wan' option name 'Allow-AMPR_IPENCAP' option family 'ipv4' option proto '4' option ipset ' ipipfilter' option target 'ACCEPT' config rule option target 'ACCEPT' option proto 'udp' option dest_port '520' option name 'Allow-AMPR_RIP' option family 'ipv4' option src 'amprwan' option src_ip '44.0.0.1' option src_port '520' option dest_ip '224.0.0.9'

2 1

Internet linked RDF networks
by Robert Simmons 27 Jan '22

27 Jan '22

To all. This is a long message, apologies, hope it doesn't break any forum rules.... but it's full of worthwhile information on this topic. =========== This message will explain how you can create your own "DF plotting" website, just like the one shown in my YouTube video... and run it on your own PC... for free. ( it has a TEST mode that can run without any DF hardware attached... that's what is shown in the video ) =========== For those who haven't seen the YouTube video, it is HERE : https://www.youtube.com/watch?v=GdJqKNpWG5c That video has now received 60 views, and 45 of those were done after I announced it here on this forum. The DF display shown in that video was generated by a VB6 program, running here on my home PC. In fact, it's still running... right now. It could form the foundation of an internet-linked base station DF network, with one program installed and running at each DF site. =========== The VB6 program in that video ( called DoppSite ) is FREE. and it's available NOW, on my website. Information about it is HERE : http://www.silcom.com/~pelican2/PicoDopp/PICODOPP.htm#DS http://www.silcom.com/~pelican2/PicoDopp/DD_MORE.html NOTES for its installation and use on a PC ( NOTES = MsWord document, 1.1 Mb ) ) can be downloaded HERE : http://www.silcom.com/~pelican2/PicoDopp/DoppSite_Notes.doc ============ The actual DoppSite program is available as a ( 1.5 Mb ) zipped download, HERE : http://www.silcom.com/~pelican2/PicoDopp/DoppSite_Demo_Install.zip The program installs easily and simply... an installation "wizard" program is provided, to automate the process. Some error message will probably appear the first time the ( installed ) program runs, because it needs configuration info the be installed. ( Station LAT/LONG, COM port number, NETWORK port number... stuff like that ) ============= Some of the links on that website are dead or out of date, but the ones shown in this forum message are valid. Some of the information also is out of date, the LIVE DEMO station is dead... but more than 90% of the info is still valid. The displayed DF bearing line is 25 miles long, but the website says it is only 1 mile.... the website is wrong, but I never fixed it. ============= This program accepts an RS232 input of Agrello Doppler DF messages at 4800 band, and generates a website that can drive a ( remote, internet-linked ) GoogleEarth display, as shown in the YouTube video. It runs on a regular Windows PC and needs an RS232 COM port ( or equivalent ) and an Ethernet ( or equivalent ) network connection. ( The PC must be located at the DF site, to get the DF bearings from the RDF... but in TEST mode, it can be anywhere ) The network connection must go to an internet Gateway computer with one port ( at the PCs address ) configured for PORT FORWARDING, in the Gateway computer. ============= Some people might want to see this program... running... before they try it themselves... and I don't mean a YouTube video, I mean the "real deal", on a "live" GoogleEarth display. If you want to see the program that is running ( in TEST mode ) on my own computer here in California ( Santa Maria ) you can get a GoogleEarth NETWORK LINK file from my website, HERE : http://www.silcom.com/~pelican2/PublicIP.kmz This file must be installed in GoogleEarth, it gives the GE display all the info it needs to find and display my ( California ) station on your GE screens. ( and it refreshes every 3 seconds ) Save this file somewhere easy to find ( desktop ? ) it will be a small KMZ file, about 300 bytes, named "PublicIP.kmz" Find the file on your computer, double-click it, GoogleEarth will start up and you will see it has "installed itself" in the GE left sidebar PLACES / TEMPORARY PLACES box. Double click on the name in the GE sidebar box, ( PublicIP.kmz ) and GE will "fly to" the DF station ( at my residence ) in California, near Santa Maria. You will see a red bearing line, 25 miles long, rotating clockwise at 1 RPM, moving every 3 seconds. ( it looks just like the video... but this is LIVE... ) =============== Apologies again for the length of this posting... but there was a lot of info to convey... Best way to reach me is e-mail : pelican2(a)silcom.com Or send a small e-mail message to my SMS on my cell phone : 8055983542(a)txt.att.net Bob S. / WB6EYV

1 0

Security Idea/test: firewall rule for non AMPRGW routes
by lleachii＠aol.com 26 Jan '22

26 Jan '22

All, I thought on some security matters of AMPRNet; and one that could not be mitigated easily was: * even if you firewall IPENCAP, how to block others except AMPRGW from sending routes to port 520/udp Someone mentioned previously they saw a MAC that was a hash that contained the outer SRC IP; but after years, I cannot find an OS Kernel that produces it. I believe have a solution, it required some hexadecimal calculations (see: http://www.stearns.org/doc/iptables-u32.current.html). Using the u32 iptables module for those who can (and a compatible module on on other systems), we need to merely find in the bit/byte positions in the packet: Outer Header: * the IP of AMPRGW (0xa9e42254)* Protocol type IPENCAP (IP Protocol No. 4) (0x04) Inner Header (add 20 bytes to the offset of the first header): * SRC IP 44.0.0.1 (0x2c000001) * Protocol UDP (0x06)* UDP - port 520 (0x0208) I believe this should read as an iptables rule like: iptables <foo> -m u32 --u32 "12&0xFFFFFFFF=0xA9E42254 && 6&0xFF=0x04 && 32&0xFFFFFFFF=0x2c000001 && 26&0xFF=0x06 && 212&FFFF=0x0208" -j ACCEPT My question: has anyone already calculated these positions and values or tested before? I didn't want to have to "reinvent the wheel"...but you can just check my math now before attempting to implement. 73, Lynwood KB3VWG Member W3PGC/K3ERA - APRS Coordinator / Co-SkyWarn Coordinator

2 2

Internet linked RDF networks
by Robert Simmons 24 Jan '22

24 Jan '22

All... I am new to this forum... this topic might not be relevant, but here goes... Does anyone here have any interest in remote reporting radio direction finders ? ( RDFs ) I have developed technology for that, using Doppler direction finders.. suitable mostly for VHF and above. ============== Explaining it takes some time, but I have posted a YouTube video of a single DF station, running in TEST mode, located at my residence in California. ( video is about 1 minute long ) https://www.youtube.com/watch?v=GdJqKNpWG5c The DF displays on any PC's GoogleEarth screen, if a suitable PLACEMARK is installed for it. ( not sure about smart phone versions... ) It "refreshes" once every 3 seconds, and ( in TEST mode ) the DF bearing line ( 25 miles long ) rotates clockwise at 1 RPM. ============== This is a YouTube recording, but the real DF station ( still running in TEST mode ) can be viewed "in realtime" if I provide a KML link for it. Contact me if you want to see that... I will provide more info "off forum" about how to install and use the link in GoogleEarth. Bob Simmons / WB6EYV / pelican2(a)silcom.com ============= Multiple DF stations can be plotted simultaneously, on multiple displays... yielding a plot showing the approximate location of the "hunted" station... literally, "in seconds". If multiple hunters ( at many different locations ) are watching the same plot, those "far away" can ignore it... but those "nearby" can jump on it and maybe find the hunted station. That's the general idea... a jammer can't even "cough" without revealing their ( general ) location. ============= I'll provide more details for those who enquire, I prefer a phone call, ( include your number, if you please ) because e-mails are slow to compose. This is still in an "experimental" phase, but the basic technology is all mature and solid... All the pieces have been individually tested, time for a complete network to be built.... and I can't do that alone. More about me here : www.picodopp.com TNX DE WB6EYV

6 7

Internet linked RDF networks
by Robert Simmons 24 Jan '22

24 Jan '22

More info, sorry I don't know how to reply to posts on this forum yet. it's not very obvious how that is done. There have been more than a dozen views of the YouTube video. so there is some interest in this. I expected some e-mails sent to me but none yet. then I noticed my e-mail address on the YouTube page is SPELLED WRONG ! Apologies, a friend posted that page for me, I have asked him to correct it but in the meantime, this is my CORRECT address : pelican2(a)silcom.com ( note pelican is spelled with ONE "L", not two ) =========== I have also posted a PowerPoint show on my website ( 26 slides in it ) describing the proposed DF network, in fairly deep detail... http://www.silcom.com/~pelican2/DF_Network.ppsx Some of the info in it is obsolete, the remote control software to run the Icom PCR radios ( written in Java ) is no longer valid... Pity, it really worked great, but Oracle made some changes than rendered it useless. There are alternatives, though. All the remaining technology ( including the DF stuff and GE webserver ) remain valid. ============= The program that created that YouTube display is free and available for download on my website, here : www.picodopp.com The program is called DoppSite, you need a DF to actually use it, but there is a built-in TEST mode that allows the simulation to be run on a Windows PC without any DF or radio hardware. ( that is what the YouTube video shows ) TNX DE WB6EYV

2 1

Re: [44net] 44Net Digest, Vol 11, Issue 11
by Terry Bendell 22 Jan '22

22 Jan '22

Frankly, I feel this isn't the forum for you to sell your wares in. 73 On Saturday, January 22, 2022, 03:00:54 p.m. GMT-5, <44net-request(a)mailman.ampr.org> wrote: Send 44Net mailing list submissions to 44net(a)mailman.ampr.org To subscribe or unsubscribe via the World Wide Web, visit https://mailman.ampr.org/mailman/listinfo/44net or, via email, send a message with subject or body 'help' to 44net-request(a)mailman.ampr.org You can reach the person managing the list at 44net-owner(a)mailman.ampr.org When replying, please edit your Subject line so it is more specific than "Re: Contents of 44Net digest..." Today's Topics: 1. Internet linked RDF networks (Robert Simmons) ---------------------------------------------------------------------- Message: 1 Date: Fri, 21 Jan 2022 13:10:39 -0800 From: "Robert Simmons" <pelican2(a)silcom.com> To: <44net(a)mailman.ampr.org> Subject: [44net] Internet linked RDF networks Message-ID: <000401d80f0b$57a7eef0$06f7ccd0$(a)silcom.com> Content-Type: text/plain; charset="us-ascii" All... I am new to this forum... this topic might not be relevant, but here goes... Does anyone here have any interest in remote reporting radio direction finders ? ( RDFs ) I have developed technology for that, using Doppler direction finders.. suitable mostly for VHF and above. ============== Explaining it takes some time, but I have posted a YouTube video of a single DF station, running in TEST mode, located at my residence in California. ( video is about 1 minute long ) https://www.youtube.com/watch?v=GdJqKNpWG5c The DF displays on any PC's GoogleEarth screen, if a suitable PLACEMARK is installed for it. ( not sure about smart phone versions... ) It "refreshes" once every 3 seconds, and ( in TEST mode ) the DF bearing line ( 25 miles long ) rotates clockwise at 1 RPM. ============== This is a YouTube recording, but the real DF station ( still running in TEST mode ) can be viewed "in realtime" if I provide a KML link for it. Contact me if you want to see that... I will provide more info "off forum" about how to install and use the link in GoogleEarth. Bob Simmons / WB6EYV / pelican2(a)silcom.com ============= Multiple DF stations can be plotted simultaneously, on multiple displays... yielding a plot showing the approximate location of the "hunted" station... literally, "in seconds". If multiple hunters ( at many different locations ) are watching the same plot, those "far away" can ignore it... but those "nearby" can jump on it and maybe find the hunted station. That's the general idea... a jammer can't even "cough" without revealing their ( general ) location. ============= I'll provide more details for those who enquire, I prefer a phone call, ( include your number, if you please ) because e-mails are slow to compose. This is still in an "experimental" phase, but the basic technology is all mature and solid... All the pieces have been individually tested, time for a complete network to be built.... and I can't do that alone. More about me here : www.picodopp.com TNX DE WB6EYV ------------------------------ Subject: Digest Footer _______________________________________________ 44Net mailing list 44Net(a)mailman.ampr.org https://mailman.ampr.org/mailman/listinfo/44net ------------------------------ End of 44Net Digest, Vol 11, Issue 11 *************************************

1 0

Mfj 248
by Pamela Crabtree 21 Jan '22

21 Jan '22

I couldn’t find it listed. https://www.mods.dk/manual.php?brand=mfj

1 0

Sorry - Off Topic MFJ-248
by Peter Mallett 19 Jan '22

19 Jan '22

Greetings all, I am sorry this is off topic but I will keep the noise low. I have just purchased an MFJ-248 Analyzer and I wonder if anyone would have a circuit diagram of this unit. The has been a yellow wire cut off inside going to the top panel I think and I am also looking for the information on the rotary Frequency switch, I think it is a 6 position single pole rotary but I am not sure it is a standard one. Any info would be very welcome. Regards ..... Peter ZL2BAU

1 0

Next community meeting Saturday, January 29, 2022,
by Dan Romanchik KB6NU 15 Jan '22

15 Jan '22

Interested in what ARDC has been up to in 2021 and will be up to in 2022? Then join us for the next ARDC Community Meeting. • DATE: Saturday, 29 January 2022 • TIME: 1800 UTC (10am PST / 1pm EST / 7pm CET) • PLACE: Zoom (see Zoom info below) Topics will include: • Introduction of new GAC and TAC members • Looking back at 2021 • Looking ahead to 2022 • Questions from our attendees. This meeting is open to all interested parties, so please tell your friends! See you on January 29! --------------------------------------------------------------- Zoom URL: https://us02web.zoom.us/j/87882963306?pwd=aXdpY3B1cmFwWlNSVDJFMkpLanIyQT09 Meeting ID: 878 8296 3306 Passcode: 72396 To join by phone, go to https://us02web.zoom.us/u/kcXKMi0QGv to find your local phone number. 73, Dan Romanchik KB6NU Communications Manager Amateur Radio | Digital Communications (ARDC) 858-477-9903, ampr.org

3 3

Brian Rogers N1URO - Silent Key
by John D. Hays 12 Jan '22

12 Jan '22

On behalf of the ARDC foundation, its staff, and community, we would like to express our deep condolences to Brian's many friends and especially his family. We are sad to lose him. The benefactors of his work on amateur radio, especially on packet radio and the Amateur Radio Internet, will long enjoy the fruits of his labors. Brian was an address coordinator for AMPRnet and his efforts were greatly appreciated. Good signals and Clear To Send ... 73. *John Hays - K7VE* 📱+1-858-477-9904 <8584779904> 📠866-309-6077 PO Box 311 Kingston, WA 98346 *Grants Committee Chair and* *Outreach Manager*

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

44net