44net

44net@mailman.ampr.org

3194 discussions

pfSense
by Ken Adams 10 Jun '20

10 Jun '20

Has anyone got ampr 44net ipencap working.? I have a node running Linux/uronode/ax25/netrom/fbb and ampr-ripd. This then feeds into the pfsense box. AX25/Netrom/fbb are all working fine. I think I have IPENCAP on the firewall directed to the Node 198Lan address. All help very happily received. Rgds Ken (G7OAH)

3 2

Re: [44net] 44Net Digest, Vol 9, Issue 54
by Rob Janssen 04 Jun '20

04 Jun '20

> That vulnerability sounds quite like what alot of us have been saying for years....hummm...73,- Lynwood KB3VWG True! I have mentioned many times that it is best to filter incoming protocol-4 based on a list of valid gateway addresses, and also to filter traffic from those tunnels with filters allowing only AMPRnet addresses (except from amprgw when you use that to receive traffic from internet). We can only hope that this "discovery" and CERT registration will not lead to broad "protocol 4 blocks" by ISPs and transit providers, as has happened with NTP traffic when that was the topic. Maybe another motivation to move from the IPIP mesh to something more modern? Rob

1 0

Internet access
by Edward Young 02 Jun '20

02 Jun '20

Charles, thank you for confirming muy membership in the group. I am very interested in using a ham radio to connect to the internet. What equipment do I need and what do I need to do?

3 3

Mailing list
by Edward Young 02 Jun '20

02 Jun '20

I seem to be on the mailing list but I cannot post anything. Can you send me a link to confirm my membership? Edward Young

2 2

Re: [44net] 44Net Digest, Vol 9, Issue 54
by lleachii 02 Jun '20

02 Jun '20

That vulnerability sounds quite like what alot of us have been saying for years....hummm...73,- Lynwood KB3VWG null

2 1

CERT Vulnerability Note VU#636397: IP-in-IP protocol routes arbitrary traffic by default
by Chris KE2A 02 Jun '20

02 Jun '20

Reference: https://kb.cert.org/vuls/id/636397 OVERVIEW IP Encapsulation within IP (RFC2003 IP-in-IP) can be abused by an unauthenticated attacker to unexpectedly route arbitrary network traffic through a vulnerable device. Description IP-in-IP encapsulation is a tunneling protocol specified in RFC 2003 that allows for IP packets to be encapsulated inside another IP packets. This is very similar to IP GRE VPNs and IPSEC VPNs in tunnel mode, except in the case of IP-in-IP, the traffic is unencrypted at all times. As specified, the protocol unwraps the inner IP packet and forwards this packet through IP routing tables, potentially providing unexpected access to network paths available to the vulnerable device. An IP-in-IP device is considered to be vulnerable if it accepts IP-in-IP packets from any source to any destination without explicit configuration between the specified source and destination IP addresses. This unexpected Data Processing Error (CWE-19) by a vulnerable device can be abused to perform reflective DDoS and in certain scenarios used to bypass network access control lists. Because the forwarded network packet may not be inspected or verified by vulnerable devices, there are possibly other unexpected behaviors that can be abused by an attacker on the target device or the target device's network environment. IMPACT An unauthenticated attacker can route network traffic through a vulnerable device, which may lead to reflective DDoS, information leak and bypass of network access controls. -- 73, Chris KE2A

1 0

National AMPR Coordinator - info
by Marco Di Martino (IW2OHX) 30 May '20

30 May '20

Hi all, I have to do a formal communication to ARDC regarding the AMPR organization here in my Country. To whom should I address this ? Thanks Regards, Marco iw2ohx

1 0

Mikrotik help needed
by Ian Redden 29 May '20

29 May '20

Hi All; When trying to connect, the IPIP tunnel on my Mikrotik box is flapping. I am using Mikrotik OS 6.46.6. It connects, shows as registered/running, but after a random period of time, the link goes down. Eventually it reconnects and the entire process starts over again. While connected however, I am able to see the RIP routes. Configuration: /interface ipip add allow-fast-path=no local-address=24.xx1.xx4.44 name=ucsd-gw remote-address=169.228.34.84 Any ideas? Speed Test: https://cogeco-on.speedtestcustom.com/result/baacd8c0-a027-11ea-8085-870a92… Ian / VA3IAN

3 4

Portal is down
by G1FEF 29 May '20

29 May '20

Heads up, the portal appears to have crashed. Looking into it now… Regards Chris - G1FEF — AMPRNet Administrator

2 1

WWconvers Hub_NA
by Charles J. Hargrove 21 May '20

21 May '20

Looking to add another dimension to your BBS? Consider offering a chatroom to your users. There are several groups that meet worldwide on various channels, some channels are used locally for events/nets/emcomm and there are some that act as tech support for ham radio software programs. Here in NYC we use 14736 every Monday night as an alternate way to check-in to our weekly emcomm net (especially when encountering jammers). There is even a growing movement to use state or country-based channel numbers that reflect their 44net assignments like 4468 in NY, 4440 in UT, etc. Various packet bbs packages have chat capability built-in. I know of at least one station looking to incorporate it into FBB, but I have no information on that system. Connection to Hub_NA is easy. Use 44.68.41.2 (gw.n2nov.ampr.org). We currently have stations across the USA and Canada connected to Hub_NA. Come join us, ask questions and share your tips/tricks/ideas! -- Charles J. Hargrove - N2NOV NYC-ARECS/RACES Citywide Radio Officer/Skywarn Coord. NYC-ARECS/RACES Nets 441.100/136.5 PL ARnewsline Broadcast Mon. @ 8:00PM NYC-ARECS Weekly Net Mon. @ 8:30PM http://www.nyc-arecs.org NY-NBEMS Net Saturdays @ 10AM & USeast-NBEMS Net Wednesdays @ 7PM on 7.036 Mhz USB (alt 3.536)/1500 hz waterfall spot; MFSK-16 or 32 "Information is the oxygen of the modern age. It seeps through the walls topped by barbed wire, it wafts across the electrified borders." - Ronald Reagan "The more corrupt the state, the more it legislates." - Tacitus "Molann an obair an fear" - Irish Saying (The work praises the man.) "No matter how big and powerful government gets, and the many services it provides, it can never take the place of volunteers." - Ronald Reagan

1 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

44net