Talk:LaFonera Software Heartbeat

From DD-WRT Wiki

Jump to: navigation, search

The first method shown is extremely dangerous. If somebody could make the router think that he (the attacker) is www.wildblue.de, he is able to do *anything* as root! I recommend not to choose that approach. --Mercurix 13:54, 6 Feb 2007 (CET)


added your warning to the main page --Krikkit 20:25, 6 Feb 2007 (CET) removed your warning from the main page (see below) --wildblue 2007-03-07

Contents

[edit] Using internal memory for heartbeat files ?

Is it possible, for better security, to save the 3 files under /tmp/... and not using wget ? Microbug , 28 Feb 2007


[edit] the whole story about my modification

I wanna tell you something about security. I gave some people with no or little knowledge about ftp/webserver skills the possiblilty to activate their device as easy as possible. Also not everybody has its own ftp/webserver nor their desktop computers running 24/7. You have no possibility to store any document on your fonera. If you reboot the device, all settings are gone.

So i made some modifications to the original script and made it running this way. If you feel sad about running someone elses code you cant use any other code, too. But who knows what any script you just downloaded will do.

I know that some people with some more IT-skills will write their own script or will test every line of code from a script just downloaded. But take a look at the forum and see what kind of users work with dd-wrt. Not everybody is mr. super-it-skill.

Also i think that everybody's looking at this page will read the whole site. And thus who are scared of some paranoic conspiration would use the second way to activate the fonera. The "security warning" is also written on this site, therefore i removed it.

?? DO YOU TRUST WWW.DD-WRT.COM ?? The same thing you discribed can also happen to the dd-wrt site.


You can allways take a look at the files that were downloaded and if you run them you will see the version of the file. I collect all versions on my webpage, so you can test them for issues. My mailadress is also published so you can drop a message if you have some updates or modifications.

I think in the near future this script will be included in the source, maybe.

wildblue 2007-03-07


[edit] Final version

I think you described the situation in the right way. The changes you made, krikkit, are ok.

wildblue 2007-03-08


[edit] Solution + Question

One solution to all your peoples concerns (haven't reed all of it though) is to download the files and put them on your own fileserver / webpage / whatever. I did. You wont get all the updates, but that's something you will have to live with and do manually.


Now to my question. I've pasted the script to my router. Stuff seams ok. But my fonera router doesn't become active at maps.fon.com.

On the fon webpage I can see that my router has the MAC address 00-18-84-10-77-bd, but at the my routers web gui (the 'Status -> Router' tab) it says 00-18-84-10-77-bc. Could that be the problem?

Under 'Status -> Lan' it says 00:19:84:10:77:BD though.

Edit:

SSHed to the router, got this:

Your WLAN MAC is: 00:19:84:10:77:BD Your Ethernet MAC is: 00:19:84:10:77:BD

  • starting ...
  • Standard mode - Repeating is done with a sleep command!
  • making connection to fon
  • Can't find a new version

./simthefon: ./simthefon: 130: hexdump: not found ./simthefon: ./simthefon: 130: Syntax error: 0x % 1800

Suggestions?

Mille 15:57, 8 April 2008 (CEST)


The script seems to use the wrong MAC in my Fonera as well.

The Webinterface says my MACs are:

  • LAN MAC 00:19:...
  • WAN MAC 00:18:...
  • Wireless MAC 00:19:...

Now, the script always takes the "00:19:..." MACs (from reading the .log and taking a look at the script (nvram get ath0_hwaddr, nvram get et0macaddr)), but the MAC the fonera homepage tells me is "00:18:...".
I fixed this issue by changing the parts ath0_hwaddr and wan_hwaddr (line 40, 41) in simthefon:

WLMAC="$(nvram get ath0_hwaddr )" #the WLAN mac-adress
MAC="$(nvram get wan_hwaddr)" #the WAN mac-adress

to wan_hwaddr. Maybe you just need to change one of these. The fonera was shown online immediately on the fon.com page. --Lbt 19:03, 2 January 2009 (CET)