Berkeley CSUA MOTD:Entry 37941
Berkeley CSUA MOTD
 
WIKI | FAQ | Tech FAQ
http://csua.com/feed/
2025/05/25 [General] UID:1000 Activity:popular
5/25    

2005/6/2-3 [Computer/Networking] UID:37941 Activity:moderate
6/2     I've been to many places and almost every place I go to have
        802.11b/g. However, almost all of them have protected access,
        which I presume they use because they don't want people stealing
        their bandwidth. So here is one idea I think will really
        revolutionize 802.11X... an option in the router that allows you to
        specify the percentage of unprotected bandwidth you are willing to
        share, while allowing maximum bandwidth for yourself. For example,
        I may allow 1-5% of my bandwidth to be shared by any random bozo
        while keeping 95% to myself. By doing so I hope others would do the
        same so that everyone can use 802.11X anywhere. I think this
        Socialist model benefits a lot more people than the current
        selfish model. What do you guys think?
        \_ I've wondered about that myself, but the liability issues
           might be a problem? (e.g. hacker uses that 5% to launch attacks
           anonymously?)
           \_ I treat wireless as "insecure" and have completely different
              rules for that link.  My server has three IP addresses, BTW.
              One can always limit the ports that wireless client can access.
              Limiting it to SSH port, for example, would be fairly safe.
        \_ It's not necessarily to stop bandwidth hosing.  For a long time
           (and probably still) spammers would hunt for WAPs to hijack.
           It's a liability to run an open WAP.
           \_ Holy crap!  Do you mean that by having an open WAP and monitoring
              the traffic I might actually be able to physically catch a
              spammer?  I like this idea <reaches for nunchucks>.
              \_ Indeed!  <reaches for M1911A1>.
        \_ The FREE MARKET sets the price of wireless access at zero in
           most of the coffee shops where I live.
           \_ you live in coffee shops?
        \_ I think it is not very hard to find open, free WAPs.
        \_ Actually, this is already supported by some of the enhanced WRTG54
           firmware out there.  If you wanted to revolutionize 802.11x, write
           a tool which allows people running consumer OSes (i.e. Windows and
           OS X) to perform the following with a single click:
           1) wepcrack closed network
           2) Connect to freshly opened network
           3) Act as a second level gateway for others in the vicinity.
           -dans
           \_ So is there any new wireless routers with customizable firmwares
              other than WRTG54?  I've been thinking of scrapping my Celeron
              firewall box and replace it with a small device.  But I'd like
              to have some features like logging(probably to a syslog server),
              QoS, etc.  I'm not against WRTG54, nor do I know anything about
              it.  I just want to know if there are any newer products that
              I should research as well.  Also, any good pointers on WRTG54
              websites?
              websites? - !op #13
              \_ Yes.  I keep posting this--M0n0wall running on a WRAP board.
                 M0n0 (http://m0n0.ch/wall is free, and the WRAPs (from
                 http://pcengines.ch are cheap and incredibly robust and
                 flexible.  Drop a mini PCI card in there to turn the firewall
                 into a wireless router.  Quite a few people (including some
                 very top-end security guys I know) actually do what you are
                 suggesting--open x% of wifi bandwidth to unauthenticated
                 clients.  Generally this is done with a VPN to the wifi
                 router, though.  What most people don't realize is that it's
                 not _that_ simple to crack WEP/WPA keys, although it can be
                 done with time and the right tools.  Have a look at the
                 Auditor collection (http://www.remote-exploit.org for some
                 more info on this.  -John
                 \_ So I picked up a WRT54GS last night.  I haven't played with
                    it much, but it doesn't look like sveasoft adds a whole
                    lot.  Definitely not "equivalent of products costing
                    hundreds or thousands of dollars."  Looks all the firewall
                    stuff is still done by iptables.  Since my discovery of
                    PF, I'd actually prefer M0n0, but the WRAP board you
                    mentioned doesn't seem to be a whole lot more advantageous
                    hardware-wise to the WRT54G.  I don't know how a 486 200MHz
                    compares to the MIPS based 200MHz processor in the WRT54G.
                    Thanks for the pointer though.  I still have 29 days to
                    play with other firmwares before I can return the device
                    if I don't like it. - !op #13
                    \_ Like I said elsewhere, the main value I see from the
                       sveasoft firmware is letting you boost the signal to
                       full HW specs from 27mw.  The WRAP is not that special;
                       it's a nice, robust, cheaper, faster soekris.  By
                       virtue of it basically being a PC it's extremely
                       flexible, though.  If you like pf, wait for M0n0 to
                       go back to 5.x FreeBSD-based--he had to go back to
                       4.10 due to some driver probs.  -John
              \_ Apologies, the model number is actually WRT54G.  The reason
                 folks hack on those is because they run Linux.  The most
                 common 3rd party firmware for the WRT54G is by a company at:
                 http://www.sveasoft.com
                 It costs money, but I'm told it's worth it.  Many wireless
                 routers are quite similar internally to the WRT54G.  Also,
                 when you talk about newer products, its important to realize
                 that the WRT54G has been getting frequent regular firmware
                 updates, which you can download and flash to get the latest
                 greatest features.  If you don't mind spending a fair amount
                 of cash and want to take the really DIY approach, check out
                 Soekris which makes small form factor glorified 486's that
                 are highly expandable/configurable. -dans
                 \_ I'm not looking for an ultimate router.  I just want to
                    replace my big box with something that's smaller, less
                    heat, and less power-consumption for my home, without
                    the router being a complete brain-dead.  Thanks for the
                    pointer.
                    pointer. - !op #13
                    \_ See above.  The Sveasoft firmware for the WAP-54G is
                       (was?) free and works a charm.  -John
                       \_ The older versions are free, but through a
                          Clintonesque interpretation of what the word
                          'distribute' means, they un-GPL'd the later versions.
                          Out of spite some people put newer versions in
                          bittorrent occasionaly.
                          \_ I recall a shitfest about the source not being
                             GPL'ed, and the Sveasoft guy basically saying,
                             "na na a boo boo, so don't use it."  The only
                             real advantage I saw for the casual user was
                             the 84 (?) mw power boost.  -John
                             \_ You can boost it up to 284 from the default
                                of 28.  But I believe there are plenty of
                                other firmwares that are completely free that
                                can do this. - !op #13
                                \_ I think my wap-54g only does 84.  Can you
                                   give me some pointers to other firmwares
                                   if you've tried any?  -John
                                   \_ I haven't tried it, but many people
                                      seem to like HyperWRT, whose focus is
                                      to boost the radio:
                                      http://www.hyperwrt.org - !op #13
        \_ Capitalist Wireless - sharing 0% of your wireless for free.
             Only those who pay can access wireless
           Socialist Wireless - sharing 10% of your wireless for free.
             EVERYONE gets something, but those who pay get 9X better access.
           Communist Wireless - sharing 100% of your wireless for free.
             Everyone gets something, but no one gets a premium access.
           Fascist Wireless - the government tracks down every single WAP.
           \_ 'Socialist Worker' Wireless - Mommy and Daddy pay for wireless.
2025/05/25 [General] UID:1000 Activity:popular
5/25    

You may also be interested in these entries...
2008/8/5-10 [Computer/Networking] UID:50788 Activity:nil
8/5     It looks like my company has started blocking HTTPS tunneling.
        I used to do this by tunneling SSH through the HTTP/HTTPS proxy
        server, but this seems to have stopped working. Does anyone know
        how the implementation of tunneling detection works, and whether
        there are widely available implementations? We run a bunch of MS
        stuff, so I imagine we're running an MS proxy server or something.
	...
2007/6/28-7/2 [Computer/SW/SpamAssassin] UID:47111 Activity:nil
6/28    Q: What are folks using these days for anti-spam measures?  I'm
        looking for something that integrates with my MTA (postfix) or my
        delivery agent (sieve).  Currently I'm using a crufty version of
        spamassassin wired into postfix via amavisd-new.  It's decent, but I
        don't want to be bothered with manually upgrading spamassassin or
        updating rulesets on a regular basis.  Anyone have any experience
	...
2007/4/19-21 [Computer/Networking] UID:46375 Activity:nil
4/19    After installing Logitech wireless mouse, my friend cannot connect from
        his PC to his wireless broadband router via a USB wireless network
        device.  It said that it cannot obtain IP address from the router.  Even
        uninstalling the Logitech wireless mouse doesn't help.  Do you know how
        to fix the wireless LAN problem, so that his PC can obtain IP address
        again?
	...
2006/8/29-31 [Computer/SW/Mail] UID:44187 Activity:kinda low
8/29    What SMTP settings should I be enabling/disabling for soda?  I can
        receive csua mails over IMAP on my treo just fine, but I always
        get relay denied errors when sending outside http://csua.berkeley.edu.
        \_ Dunno the answer, but I have the same problem.  I ended up
           using Gmail's SMTP server.  The only thing is that you'll have
           register your CSUA email account with Gmail so that it'll let
	...
2006/3/25-27 [Computer/Networking] UID:42433 Activity:nil
3/24    I want to write in my DSL router to allow incoming connection
        from certain IP range. How do I find out the IP range for SBC
        DSL say in Bay Area/SF?
	...
2006/2/18-23 [Computer/Networking] UID:41923 Activity:low
2/18    My DSL modem's ip address is 192.168.0.1, my internal network
        behind my router is 10.0.0.x. Is there a way I can configure
        the router so I can access the DSL modem from my 10.0.0.x
        network directly without re-wiring? Static routes? I tried it
        but no much luck. I also tried changing my internal network to
        192.168.0.x, but still does not work. Thanks.
	...
2006/1/28-31 [Computer/Networking] UID:41585 Activity:low
1/28    Just switched to Comcast from SBC and generally happy with it.  But
        can someone please explain to me why they are constantly pumping
        ARP traffic through the network?  It seems harmless, but I'm curious
        as I didn't see it with DSL.  It's a little disconcerting to see
        constant traffic on your router, even if ARPs are harmless from
        a bandwidth perspective, and it makes the WAN send/receive light
	...
2006/1/22-24 [Computer/Networking] UID:41477 Activity:nil
1/21    I am trying to setup a small network for my girlfriend's
        mom's company.  They just bought an accounting package
        which requires windows 2003 server.  And they want internet
        access from each computer.  How should the network be setuped?
        Would it be dumb to use static IP for each computer and a
        computer as internet gateway?
	...
2005/8/29-30 [Computer/Networking] UID:39329 Activity:moderate 54%like:37400
8/29    What's the difference between a hub, a switch and a router?  Thx.
        \_ AFAIK, probably be corrected by someone:
           hub: Allows communication on a LAN with bandwith shared amongs all
                the nodes on the hub and maxing out at the max line speed.
           switch: Allows communication on a LAN with bandwith greater than
                the max line speed (point to point)
	...
2005/5/23-25 [Computer/Networking] UID:37799 Activity:nil
5/23    Has anyone played with carp/pfsync on OpenBSD? I have a simple
        two firewall setup, one fw running 3.6, the other running 3.7.
        Right now the 3.6 system is the "master" and everything seems
        to work properly except that I can't ping the virtual ip from
        the master system. Any ideas?
        \_ I've seen this with a lot of virtual IP/failover/load balancers.
	...
2005/2/25-27 [Computer/Networking] UID:36421 Activity:moderate
2/25    What is the smallest (physical and price) cisco router that can
        handle BGP?  It should be able to have more than 256 ram.
        \_ When you say ``handle BGP'', do you mean supports the bgp
           protocol or supports enough ram to keep a reasonable (what do you
           consider to be reasonable) number of routes in memory?  Do you want
           to be peering at PAIX, or do you just need a router to run the T1
	...
Cache (679 bytes)
m0n0.ch/wall -> m0n0.ch/wall/
RSS m0n0wall is a project aimed at creating a complete, embedded firewall sof tware package that, when used together with an embedded PC, provides all the important features of commercial firewall boxes (including ease of use) at a fraction of the price (free software). m0n0wall is based on a bare-bones version of FreeBSD, along with a web se rver, PHP and a few other utilities. The entire system configuration is stored in one single XML text file to keep things transparent. m0n0wall is probably the first UNIX system that has its boot-time configu ration done with PHP, rather than the usual shell scripts, and that has the entire system configuration stored in XML format.
Cache (604 bytes)
pcengines.ch
Engines Home Home | About | Embedded PC | tinyBIOS | WRAP | CompactF lash Adapter | Test Tools | Resources | Shop PC Engines - your flexible partner in Embedded PC Design Embedded PC hardware design tinyBIOS - a BIOS designed from the ground up for embedde d PC applications Design for manufacturing and test, functional test solutions Wireless Router Application Platform Embedded storage solutions Engineering test tools PC platform and system architecture (mechanical, thermal, lay out, cost considerations) Innovative solutions - many patents issued 2002-2005 PC Engines GmbH. All rights reserved.
Cache (1774 bytes)
www.remote-exploit.org
We are just a group of people that like to experiment with computers. We hope that we can provide some information back to the public and support the ongoing process of learning. News: Customized releases of Auditor When you like to have a custom logo branded auditor release to use it as a give away to your customers in courses etc. News: Released a new website whith default settings and vulnerabilities I have just setup the first draft of the list of default settings of wire less products. I w ill add other vendor settings as soon i have some time. News: cowpatty-20 released Check out our newest release from Joshua Wright. coWPAtty is designed to audit the pre-shared key (PSK) sele ction for WPA networks based on the TKIP protocol. Supply a libpcap file that includes the TKIP four-way handshake to mount an offline dictionar y attack with a supplied wordlist. The Auditor Security Collection is the most advanced an d up-to-date penetration testing linux live distro available. Its perfec t for security analyses, wireless security analysis and ...... PS Send us some photo shots, which shows auditor in action. Append wher e you have been with it, so i know where auditor has been used so far. News: Requesting Auditor Security Collection actionshots Hi all, please send us your Auditor Security Collection - action-screensh ots. Send us your auditor action pictures at the usual place. org) News: Hotspotter 04 released Hotspotter 04 has been released right now. It fixes a bug and enhances the hotspotter with the a bility to execute a script before going to accesspoint mode. There you will find hotspotter 04 on it in addition to some fake daemon and automated dhcp/dns script for hot spotter. org Well we have updated the website right now, as you can see.
Cache (1932 bytes)
www.sveasoft.com
Search Wireless Everywhere WRT54GS Wireless networking has become a pervasive technology and is used in millions of homes and businesses. Anyone who has worked with the tan gle of wires necessary for even simple wired networks can appreciated th e beauty and simplicity of wireless networking. Wireless is no longer confined to laptops and handhelds. With recent adva nces in speed and security wireless has become the technology of choice for home and office network installations. Installing a wireless network takes just minutes and can create instant coverage over large areas. Our firmare adds dozens of sophist icated features to these sub-$100 routers turning them into the equivale nt of products costing hundreds or thousands of dollars. Sveasoft firmware and support is available for a yearly $20 USD subscript ion fee. A subscription includes unlimited access to firmware upgrades a nd unlimited access to priority support in our forums. Talisman firmware delivers unmatched functionality for wireless routers. Talisman/Basic is now available for the Linksys WRT54 G and WRT54GS. Belkin, Buffalotech, and several more manufacturers will be supported in the coming months. Talisman uses state-of-the-art compression to deliver the well-known Alch emy firmware features in 2/3 of the space. Talisman also sports a non-vo latile read-write area in flash memory where programs, logs, configurati on, or other data can be stored. The following Talisman firmware "flavors" are currently under development : Talisman - Basic This firmware delivers the core Alchemy feature set together with a 1-5 M B read-write area of flash memory (dependent on the model's flash memory size). The goal is to enable customization via external programs downlo aded to the read-write area. A remote file system tool using the highly secure SSH protocol will allow remote mounting of file systems to make t he transfer and testing process a snap.
Cache (241 bytes)
www.hyperwrt.org
HyperWRT is a power boost firmware for the Linksys WRT54G and WRT54GS rou ter. The goal of this project is to add a limited set of features to the last Linksys firmware, extending its possibilities but staying close to the official firmware.