#networking | Linus Tech Tips | Page 330

green forge Apr 23, 2021, 5:35 PM

#

what now

copper rover Apr 23, 2021, 5:35 PM

#

bada bing!

green forge Apr 23, 2021, 5:35 PM

#

i logged in

copper rover Apr 23, 2021, 5:36 PM

#

type help

#

info

#

Something

green forge Apr 23, 2021, 5:36 PM

#

digital wren Apr 23, 2021, 5:36 PM

#

Do you know for a fact the 6A Cable is good?
broken cables are uncommon, but absolutely do happen

peak cloak Apr 23, 2021, 5:36 PM

#

don't even need putty

turbid rover Apr 23, 2021, 5:36 PM

#

So 6A should work but it's just broken?

#

Wow what a waste of money

peak cloak Apr 23, 2021, 5:37 PM

#

turbid rover So 6A should work but it's just broken?

6e isn't a standard?

digital wren Apr 23, 2021, 5:37 PM

#

what?

green forge Apr 23, 2021, 5:37 PM

#

@copper rover do you want to do this in dms

peak cloak Apr 23, 2021, 5:37 PM

#

peak cloak 6e isn't a standard?

ah nevermind

#

never heard of it

turbid rover Apr 23, 2021, 5:37 PM

#

Wait no, I made a typo

#

My 6A doesn't work and my 6E does

digital wren Apr 23, 2021, 5:38 PM

#

got a cable tester?

turbid rover Apr 23, 2021, 5:38 PM

#

No

copper rover Apr 23, 2021, 5:38 PM

#

green forge <@!821472301627080766> do you want to do this in dms

I'm not that free at the moment. But yeah, try a few of those commands. Unless there's documentation out there to enable TFTP

turbid rover Apr 23, 2021, 5:38 PM

#

How does that work

#

The tester, what is it

green forge Apr 23, 2021, 5:38 PM

#

@copper rover so i need to enable tftp in ssh?

copper rover Apr 23, 2021, 5:38 PM

#

Kinda stumbling in the dark

peak cloak Apr 23, 2021, 5:38 PM

#

turbid rover The tester, what is it

tests to see if all the pairs work

copper rover Apr 23, 2021, 5:38 PM

#

Yeah, see if you can

green forge Apr 23, 2021, 5:38 PM

#

alr

peak cloak Apr 23, 2021, 5:38 PM

#

for continuity

green forge Apr 23, 2021, 5:38 PM

#

ty

digital wren Apr 23, 2021, 5:38 PM

#

it's a device that plugs into a network cable, and tests to make sure all the wires inside it work correctly / are crimped in the proper order

turbid rover Apr 23, 2021, 5:39 PM

#

Oooh

tame carbon Apr 23, 2021, 5:39 PM

#

@peak cloak having issues over here with my VPN..

#

DNS is not working properly

green forge Apr 23, 2021, 5:42 PM

#

@copper rover umm

copper rover Apr 23, 2021, 5:42 PM

#

Very good news

green forge Apr 23, 2021, 5:42 PM

#

hehe

copper rover Apr 23, 2021, 5:42 PM

#

So, you have a way

green forge Apr 23, 2021, 5:42 PM

#

yes

#

im kinda starting to understand

#

its like cmd

#

but your on the chip

#

https://superuser.com/questions/791909/copy-file-from-network-device-to-local-computer-via-tftp

Super User

copy file from network device to local computer via TFTP

Network device (embedded Linux) connected to local computer (Windows OS). What is tftp command to copy binary file from network device to local computer? Also, what's command to copy file in the op...

copper rover Apr 23, 2021, 5:43 PM

#

Yes

green forge Apr 23, 2021, 5:43 PM

#

i need to put, right?

copper rover Apr 23, 2021, 5:44 PM

#

Basically you need to instruct the router to get the file from your TFTP server hosting the file

green forge Apr 23, 2021, 5:44 PM

#

i dont have a tftp server tho..

#

how do i make one

copper rover Apr 23, 2021, 5:45 PM

#

check tftp server tab

green forge Apr 23, 2021, 5:45 PM

#

on tftpd64?

copper rover Apr 23, 2021, 5:45 PM

#

Yeah, I think that also can serve files from your PC if I'm not mistaken

green forge Apr 23, 2021, 5:45 PM

#

ok

#

its open

copper rover Apr 23, 2021, 5:46 PM

#

Be sure your local Windows firewall isn't blocking it though

green forge Apr 23, 2021, 5:46 PM

#

i set it to work with private and public

#

so both will work

copper rover Apr 23, 2021, 5:46 PM

#

The real question is this. Once the router downloads the file, does it know what to do with it? I'm assuming that's the flash process?

green forge Apr 23, 2021, 5:47 PM

#

maybe

#

if theres a flash command

copper rover Apr 23, 2021, 5:47 PM

#

Dunno

green forge Apr 23, 2021, 5:47 PM

#

how about we put it on first

#

and then figure out how to flash

copper rover Apr 23, 2021, 5:47 PM

#

Sure

green forge Apr 23, 2021, 5:47 PM

#

i think thats good

copper rover Apr 23, 2021, 5:47 PM

#

seems reasonable. It's not like you're going to make the router any worse condition

#

lol

green forge Apr 23, 2021, 5:48 PM

#

yeah xd

#

even if i do brick it

#

that makes it better for me

copper rover Apr 23, 2021, 5:48 PM

#

exactly.

green forge Apr 23, 2021, 5:48 PM

#

alr

#

to make a tftp server

#

i need to

#

install tftp client first

hollow marlin Apr 23, 2021, 5:52 PM

#

tame carbon DNS is not working properly

Rather be tshooting DNS issues right now instead of SIP

tame carbon Apr 23, 2021, 5:52 PM

#

@hollow marlin I managed to connect with l2tp

copper rover Apr 23, 2021, 5:52 PM

#

BRB, need to go for awhile

tame carbon Apr 23, 2021, 5:52 PM

#

And am now in the router config througj socks proxy with my server

green forge Apr 23, 2021, 5:53 PM

#

alr

tame carbon Apr 23, 2021, 5:53 PM

#

But I think fw is blocking 53

green forge Apr 23, 2021, 5:53 PM

#

ill try to solve it

tame carbon Apr 23, 2021, 5:54 PM

#

I enabled dns on my other mikrotik, and I can reach that one

turbid rover Apr 23, 2021, 5:54 PM

#

Strange, 6A works on my other computer

#

But not on my main computer

#

6E works on both

#

And my CAT.6 (it doesn't have a letter) works on both too

tame carbon Apr 23, 2021, 5:58 PM

#

@hollow marlin test.

green forge Apr 23, 2021, 6:01 PM

#

@tame carbon imma go swap it with my main router and see if it get a update

hollow marlin Apr 23, 2021, 6:02 PM

#

tame carbon But I think fw is blocking 53

That'll do it

tame carbon Apr 23, 2021, 6:02 PM

#

@hollow marlin ok so I can do dns from commandline now, I accepted input on 53 from all dynamic interfaces

#

But applications still cant resolve addresses

hollow marlin Apr 23, 2021, 6:03 PM

#

If you torch an interface, where do you see the request dying? what does it show for connection in the FW

tame carbon Apr 23, 2021, 6:06 PM

#

It shows up in torch

#

But dst address is incorrect

hollow marlin Apr 23, 2021, 6:06 PM

#

on request or reply?

tame carbon Apr 23, 2021, 6:06 PM

#

#

Sorry, phone is not on vpn rn

green forge Apr 23, 2021, 6:07 PM

#

@tame carbon well crap

tame carbon Apr 23, 2021, 6:07 PM

#

Src address matches my phone's LAN, and it hits the bridge at 192.168.99.0/24

green forge Apr 23, 2021, 6:08 PM

#

so im gonna have to force on a version that was never meant to be on here

tame carbon Apr 23, 2021, 6:08 PM

#

@hollow marlin not sure if this is a router issue, something in my client is funny.

#

Its not even honoring me using 1.1.1.1

hollow marlin Apr 23, 2021, 6:09 PM

#

3 rx/tx should mean its successful. Try a PCAP through winbox

tame carbon Apr 23, 2021, 6:10 PM

#

Cant do winboz

hollow marlin Apr 23, 2021, 6:10 PM

#

GUI works too

tame carbon Apr 23, 2021, 6:11 PM

#

#

Hope you can read

green forge Apr 23, 2021, 6:11 PM

#

@tame carbon wait bu do you know the reason why isps lock down routers?

tame carbon Apr 23, 2021, 6:13 PM

#

Does MTU have anything to do with this?

#

Its on 1300

hollow marlin Apr 23, 2021, 6:13 PM

#

Remove the 192.168.99.10 from the DNS server, and try again

#

No MTU issue, packets are still well under in bytes

tame carbon Apr 23, 2021, 6:13 PM

#

Wow wait

#

@hollow marlin if i go to ip addresses

#

Theres the 192.168.99.10 on network 10.0.0.1

#

That can't be right.

#

Its a 32

hollow marlin Apr 23, 2021, 6:15 PM

#

wtf, you can have multiple addresses under an interface

tame carbon Apr 23, 2021, 6:15 PM

#

That's the address of the l2tp session

#

#

This is wack af

hollow marlin Apr 23, 2021, 6:16 PM

#

Under the PCAP, if you click on the packet you can see the header, look at the responses for each to see if its responding with the address or not

tame carbon Apr 23, 2021, 6:17 PM

#

I think something is seriously broken

#

Its responding to the wrong address

hollow marlin Apr 23, 2021, 6:20 PM

#

where is the 10.x address originating from?

tame carbon Apr 23, 2021, 6:20 PM

#

OH?!

#

OH?!

#

Is it working?!

#

Nope

#

@hollow marlin i think thats the local address my phone gets

hollow marlin Apr 23, 2021, 6:22 PM

#

Oh is this a VPN directly to your phone?

tame carbon Apr 23, 2021, 6:22 PM

#

Nah, laptop to home

#

And all works, except dns

#

@hollow marlin ugh, I probably will have a look at this when I am back homr

hollow marlin Apr 23, 2021, 6:25 PM

#

I guess I cannot picture the layout. That address list is throwing me off lol

tame carbon Apr 23, 2021, 6:26 PM

#

@hollow marlin i think my ppp profile is not configured properly

hollow marlin Apr 23, 2021, 6:27 PM

#

Possibly but equal request/reply should mean its successful. are you testing DNS with the laptop?

tame carbon Apr 23, 2021, 6:27 PM

#

#

There's a seperate /24 and bridge for all vpn

#

@hollow marlin yeah nslookup and I put the IP of my mikrotik as dns server

#

Then it works

#

But not automatically for all other programs

#

@hollow marlin when I return home next week, I think I need to relearn how to properly configure l2tp

#

Because This was hastily put together, and worked at first glance

hollow marlin Apr 23, 2021, 6:37 PM

#

It might be because you are using the wrong addresses. You'll want to create separate interfaces for the tunnel interface

tame carbon Apr 23, 2021, 6:38 PM

#

@hollow marlin are you willing to help me out with this next week?

#

If I attempted this now, I'd lock myself out

hollow marlin Apr 23, 2021, 6:39 PM

#

Sure thing

tame carbon Apr 23, 2021, 6:39 PM

#

And besides the poor config, I can at least access my NAS

#

Which is most important

hollow marlin Apr 23, 2021, 6:39 PM

#

Is this the config on your local side?

tame carbon Apr 23, 2021, 6:39 PM

#

Nah, Im connected with l2tp right now

#

And those screenshots are all from thr rb4011

green forge Apr 23, 2021, 6:40 PM

#

does anyone know how to put a file onto a router using tftp in ssh

tame carbon Apr 23, 2021, 6:40 PM

#

tftp -p file.bin

green forge Apr 23, 2021, 6:40 PM

#

o

tame carbon Apr 23, 2021, 6:40 PM

#

Might need a -r

#

To specify a remote

green forge Apr 23, 2021, 6:41 PM

#

still

#

nothing

#

dont i need to state where the file is?

hollow marlin Apr 23, 2021, 6:41 PM

#

tame carbon If I attempted this now, I'd lock myself out

Click this before making any changes. If you break something and it loses connection, it will revert back to when it was clicked

#

That way you can try fixing it remotely without screwing yourself over

tame carbon Apr 23, 2021, 6:42 PM

#

Yeah, I'm aware. But I think for now, I'll crack open another cold one and watch the sunset

#

Ill fix the vpn next week

hollow marlin Apr 23, 2021, 6:42 PM

#

That works as well lol

green forge Apr 23, 2021, 6:42 PM

#

@tame carbon doesnt tftp only work if the firmware is corrupt

tame carbon Apr 23, 2021, 6:43 PM

#

😐

#

Idk

green forge Apr 23, 2021, 6:43 PM

#

man i need him rn

#

but he left :(

#

@hollow marlin do you know how to do tftp?

tame carbon Apr 23, 2021, 6:53 PM

#

@green forge sorry, I'm technically on holiday

#

Not on pc all day long

#

Normally 18hours/day

green forge Apr 23, 2021, 6:56 PM

#

oh ok

copper rover Apr 23, 2021, 7:32 PM

#

green forge <@!167698274969452544> doesnt tftp only work if the firmware is corrupt

tftp doesn't care about the firmware. tftp is just a method of transferring the file. It doesn't care about the intention as to why you want to do that.

green forge Apr 23, 2021, 7:33 PM

#

yay your back!

copper rover Apr 23, 2021, 7:33 PM

#

The idea is to send the firmware from your local PC (hosting the file) to the router. Then flashing that firmware to the router.

In some cases, it will flash the firmware as you transfer it. I've seen this before with some printers

green forge Apr 23, 2021, 7:33 PM

#

i tried other meathods that people suggested which didntwor

#

the thing is

#

how do i makemy pc a tftp server

copper rover Apr 23, 2021, 7:35 PM

#

https://www.youtube.com/watch?v=YdVEonLMWYs

YouTube

Niyas C

How to Setup TFTP Server in Windows Using Tftpd64/Tftpd32

How to install and configure TFTP Server using Tfptd32/Tftpd64 in windows 10, windows8.1 , 8, 7. Best free TFTP Server software

Download link and full tutorial : http://techzain.com/how-to-setup-tftp-server-tftpd64-tfptd32-windows

Problem starting tftpd32/tftpd64
Tftpd64 unable to transfer file to client
how to use tftpd32 by ph. jounin

▶ Play video

#

The magic of YT

green forge Apr 23, 2021, 7:36 PM

#

ill take a look at it

#

uhh where is tftp space directory

copper rover Apr 23, 2021, 7:38 PM

#

BTW, I had to leave because of some server issue. It's what happens when someone doesn't do as I recommend such as put the HyperV box on a UPS, and a brownout occurs.

green forge Apr 23, 2021, 7:38 PM

#

ono

copper rover Apr 23, 2021, 7:38 PM

#

Yeah, dirty shutdowns are never fun

green forge Apr 23, 2021, 7:38 PM

#

mhm

#

what does this mean

copper rover Apr 23, 2021, 7:40 PM

#

I believe that's the directory that will host your firmware file

green forge Apr 23, 2021, 7:40 PM

#

umm

#

it tells me to set it to 172.xx

peak cloak Apr 23, 2021, 7:40 PM

#

copper rover I believe that's the directory that will host your firmware file

this is why I don't like yt tutorials

green forge Apr 23, 2021, 7:40 PM

#

but i dont have a 172

#

only 192

copper rover Apr 23, 2021, 7:40 PM

#

Create a folder under C:\TFTP and place your firmware file there

green forge Apr 23, 2021, 7:41 PM

#

i put it in my storage drive

#

OOHH

#

wt

#

it doesnt save it

#

or it did

#

alr

#

so i put file in folder

#

now what im supposed to do

copper rover Apr 23, 2021, 7:46 PM

#

The point is that the file need to be located in a folder that TFTP will host from. From the perspective of the client (in this case your router because it will pull from your computer) that will be its root directory.

green forge Apr 23, 2021, 7:46 PM

#

yes

#

hold up

copper rover Apr 23, 2021, 7:47 PM

#

So, it doesn't really matter where you physically have that file you want to send to the router, so long as the TFTP server settings are pathed to point to that directory

tender hazel Apr 23, 2021, 7:47 PM

#

tame carbon That's the address of the l2tp session

what are you trying to do?

green forge Apr 23, 2021, 7:47 PM

#

why does the program go back to defalt after restart it

tender hazel Apr 23, 2021, 7:48 PM

#

what does L2TP have to do with it

#

oh ok

green forge Apr 23, 2021, 7:48 PM

#

maybe i need to install the tftpd32 version, not 64?

tender hazel Apr 23, 2021, 7:49 PM

#

@tame carbon what exactly are you trying to do and what isn't working?

copper rover Apr 23, 2021, 7:49 PM

#

green forge maybe i need to install the tftpd32 version, not 64?

That doesn't matter

#

It runs it runs. That's what matters

green forge Apr 23, 2021, 7:49 PM

#

But why does all the settings that i just did go back to defalt

copper rover Apr 23, 2021, 7:50 PM

#

Is there no save or ok button?

green forge Apr 23, 2021, 7:51 PM

#

GOT IT

copper rover Apr 23, 2021, 7:51 PM

#

Keep in mind I haven't used that program. But basically it should save whatever changes to you make

green forge Apr 23, 2021, 7:51 PM

#

i just need to be admin mode

copper rover Apr 23, 2021, 7:51 PM

#

Ahh ok,

green forge Apr 23, 2021, 7:51 PM

#

alr

#

you know what i found funny

#

while you were gone

#

i plugged it into the internet

#

and did a software update check

#

said that no new updates

#

so maybe

#

we might be the first to allow a new version of this firmware to be on a isp locked router

copper rover Apr 23, 2021, 7:54 PM

#

Possibly.

They do purchase hardware in bulk and then upload custom firmware. Basically it's tailored to that specific ISP. I'm guessing that was a managed router so they could remote in and assist customers.

green forge Apr 23, 2021, 7:54 PM

#

it is

#

oohhh

#

thats why they dont want you to update

#

so then they could help you

copper rover Apr 23, 2021, 7:54 PM

#

So, not sold but leased equipment. Maybe someone didn't return the equipment and just dumped it at Goodwill

green forge Apr 23, 2021, 7:55 PM

#

but at least they could have included a thing so you could upgrade the router if you dont have cci anymore

copper rover Apr 23, 2021, 7:55 PM

#

green forge thats why they dont want you to update

No, I don't think that was it. I don't think it was sold, but leased monthly as part of the subcription

green forge Apr 23, 2021, 7:55 PM

#

it was in a goodwill

copper rover Apr 23, 2021, 7:55 PM

#

Meaning, I don't think that router should have ever fell to a 2nd hand market

#

But whatever, it's yours now

#

I'm sure the ISP billed the original customer for non-returned equipment in full. lol

green forge Apr 23, 2021, 7:56 PM

#

yeah

#

xd

#

so im kinda lucky that i got a isp locked router?

copper rover Apr 23, 2021, 7:57 PM

#

Kinda, yeah...IF you can get it to work with your own firmware

#

WWDRT might be an option too you can try later if it's compatible

green forge Apr 23, 2021, 7:57 PM

#

yeah lets try this first

copper rover Apr 23, 2021, 7:58 PM

#

agreed

green forge Apr 23, 2021, 7:58 PM

#

so im guessing the server is online

#

should i start up the putty?

copper rover Apr 23, 2021, 7:58 PM

#

Sure

green forge Apr 23, 2021, 7:59 PM

#

logged in

copper rover Apr 23, 2021, 7:59 PM

#

See if you can run the TFTP command from the router via SSH and specify the IP address of your computer hosting the file

green forge Apr 23, 2021, 7:59 PM

#

well i know that ssh has tftp command

#

but i dont know like how to make that command

copper rover Apr 23, 2021, 8:00 PM

#

ssh is just terminal into the OS on the router. Think of it was a remote session to the command prompt INSIDE the router. Nothing is being executed on your PC when you SSH into a remote device.

green forge Apr 23, 2021, 8:01 PM

#

so like cmd?

#

but remotely?

copper rover Apr 23, 2021, 8:01 PM

#

Yeah, CLI (command line interface)

green forge Apr 23, 2021, 8:01 PM

#

ok

#

copper rover Apr 23, 2021, 8:01 PM

#

It's like connecting a monitor and keyboard to the router. Command executed inside of it

#

only terminal text and not GUI

#

no graphics

hollow marlin Apr 23, 2021, 8:02 PM

#

tender hazel <@!167698274969452544> what exactly are you trying to do and what isn't working?

Pretty sure he is using the wrong tunnel addresses and resulting in asymmetric routing

green forge Apr 23, 2021, 8:02 PM

#

do i get first and then put?

copper rover Apr 23, 2021, 8:03 PM

#

just a moment

green forge Apr 23, 2021, 8:03 PM

#

alr

tender hazel Apr 23, 2021, 8:03 PM

#

@hollow marlin crystal specified to use 10.0.0.1 for the client side and 192.168.99.10 for the router side

#

the use of 192.168.99.10 is not necessary

#

it uses another address for no reason, might as well be 192.168.99.1

copper rover Apr 23, 2021, 8:04 PM

#

tftp -g -r firmwarefile ipaddress.

replace firmwarefile with the name of your actual file you're trying to download.
replace ipaddress with the actual IP address bound to the TFTP service on your PC, probably same IP as your computer

tender hazel Apr 23, 2021, 8:04 PM

#

so crystal's laptop will be getting the IP 10.0.0.1

green forge Apr 23, 2021, 8:04 PM

#

but dont i have to specify where the file is located?

copper rover Apr 23, 2021, 8:04 PM

#

No, I don't think so.

tender hazel Apr 23, 2021, 8:04 PM

#

and it looks like it is connected, so I am wondering what is not working?

green forge Apr 23, 2021, 8:05 PM

#

alr

#

lets try this

#

ohno

#

copper rover Apr 23, 2021, 8:06 PM

#

Example, I host TFTP from my PC using that application and place it under C:\My Stuff\Stuff-n-stuff\firmware.bin

When I connect to it from the router, the root directory is Stuff-in-stuff. So you should only have to specify the file name

green forge Apr 23, 2021, 8:06 PM

#

do i have to use the tftp server ip or the routers?

copper rover Apr 23, 2021, 8:07 PM

#

server ip.

green forge Apr 23, 2021, 8:07 PM

#

hmm

copper rover Apr 23, 2021, 8:07 PM

#

You're getting the file from a source. The source is not the router

green forge Apr 23, 2021, 8:07 PM

#

still read only file system

copper rover Apr 23, 2021, 8:07 PM

#

Hmmm. just a sec

green forge Apr 23, 2021, 8:07 PM

#

lemme google it

#

@copper rover https://superuser.com/questions/328470/how-can-i-make-the-read-only-file-system-writable-on-busybox

Super User

How can I make the read only file system writable on BusyBox?

I want to change some files on my router. Firstly I can change everything in /var, but I want to change /etc/fstab. When I try to change it, I get an error message that says the file system is read...

#

this has alot of info

tender hazel Apr 23, 2021, 8:10 PM

#

you shouldn't have to make the read only file system writeable on busybox, that is what /tmp is for

copper rover Apr 23, 2021, 8:10 PM

#

it's not a busybox. That's what search came up as

#

Basically the file system on the router looks to be in read-only mode. At least from what I can see

tender hazel Apr 23, 2021, 8:11 PM

#

right but isn't that typical?

green forge Apr 23, 2021, 8:11 PM

#

shoot

#

how do we make it readable

tender hazel Apr 23, 2021, 8:11 PM

#

usually you would have a /tmp folder that you can write to

copper rover Apr 23, 2021, 8:11 PM

#

tender hazel right but isn't that typical?

Trying up download new firmware to the router. We're not sure if this can be done however

green forge Apr 23, 2021, 8:12 PM

#

hold up

#

i just did /tmp

tender hazel Apr 23, 2021, 8:12 PM

#

what folder is the firmware supposed to be placed in to apply to the router?

green forge Apr 23, 2021, 8:12 PM

#

...

copper rover Apr 23, 2021, 8:12 PM

#

No clue

green forge Apr 23, 2021, 8:12 PM

#

uhhhh

copper rover Apr 23, 2021, 8:12 PM

#

tender hazel what folder is the firmware supposed to be placed in to apply to the router?

Long story short....

green forge Apr 23, 2021, 8:13 PM

#

wait

#

does serial make things more accessable?

copper rover Apr 23, 2021, 8:13 PM

#

He has a netgear router that's been flashed with custom ISP provided firmware. He obtained this equipment from a Goodwill. It's either ewaste, or can be hacked to be reflashed with stock firmware again

#

Trying to correct it 😉

green forge Apr 23, 2021, 8:13 PM

#

but i really need it to work due to all my other routers being 100mgb

#

this is the only 1gb

#

one i have

#

just need to update it for security

tender hazel Apr 23, 2021, 8:14 PM

#

did you try this procedure first? https://kb.netgear.com/000059633/How-to-upload-firmware-to-a-NETGEAR-router-using-TFTP-client

green forge Apr 23, 2021, 8:14 PM

#

this is kinda fun but challenging in a way

green forge Apr 23, 2021, 8:15 PM

#

tender hazel did you try this procedure first? https://kb.netgear.com/000059633/How-to-upload...

you see, thats if the firmware is corrupted

#

which i tried to corrupt with no avail

#

and no documentation on how to make the router go into tftp mode without corrupted firmware

copper rover Apr 23, 2021, 8:18 PM

#

I think @tender hazel is on the right track.

See, the custom firmware might still contain common code with the original Netgear. Meaning it's hard-coded to look at 192.168.1.10 when downloading firmware from TFTP.

You'll have to set that static IP to the NIC, and then connect a single patch cable from the router to your PC, then follow those steps

green forge Apr 23, 2021, 8:18 PM

#

nic??/

copper rover Apr 23, 2021, 8:18 PM

#

NIC = Network Interface Card

green forge Apr 23, 2021, 8:18 PM

#

so my pc

copper rover Apr 23, 2021, 8:18 PM

#

Yes

green forge Apr 23, 2021, 8:19 PM

#

where do i change my static ip

copper rover Apr 23, 2021, 8:19 PM

#

Essentially, the router has to request the file upon bootup.

green forge Apr 23, 2021, 8:19 PM

#

so we need to trick it to download the file?

tame carbon Apr 23, 2021, 8:19 PM

#

@tender hazel i appreciate the help

copper rover Apr 23, 2021, 8:19 PM

#

https://www.youtube.com/watch?v=5iRp1Nug0PU

YouTube

howtwos101

How to assign a static IP Address in Windows 10

This video will show you how to assign a permanent IP address in Windows 10.

First, right click on your network connection in the bottom right, and then choose the Network and Sharing Center option.

In the window that pops up, choose the interface that you want to set a static IP address for. If you are connected to wireless and to Ethernet th...

▶ Play video

green forge Apr 23, 2021, 8:20 PM

#

mmm yt

tame carbon Apr 23, 2021, 8:20 PM

#

But me being drunk rn, cant really do networking

green forge Apr 23, 2021, 8:20 PM

#

ofc

tender hazel Apr 23, 2021, 8:20 PM

#

oh ok heh

green forge Apr 23, 2021, 8:20 PM

#

tell me a random thought in your head

tame carbon Apr 23, 2021, 8:20 PM

#

Beer

green forge Apr 23, 2021, 8:20 PM

#

nice.

tender hazel Apr 23, 2021, 8:21 PM

#

@tame carbon you configured things so that the l2tp client will get the ip 10.0.0.1 and the router will use 192.168.99.10 on the local side.. there is no need to use a separate IP for that, you can just use the same 192.168.99.1 that the router already has

#

but that isn't anything to do with your problem

tame carbon Apr 23, 2021, 8:21 PM

#

Oh really? I thought those had to ne different

#

Lemme get on laptop

#

Earier to type

tender hazel Apr 23, 2021, 8:22 PM

#

no - the "local address" can be set to basically any IP the router already has on any interface - the only IP you would want to avoid using as the "local address" is the one that you are using to remotely connect to the device with L2TP

tame carbon Apr 23, 2021, 8:23 PM

#

so leave the local-ip blank

tender hazel Apr 23, 2021, 8:23 PM

#

no - set it for like 192.168.99.1

#

instead of .10

tame carbon Apr 23, 2021, 8:24 PM

#

@tender hazel discord breaks when I turn on my vpn, which I need to configure this..

#

which is kinda why I wanted to fix this next week

#

@tender hazel and remote-address can be blank then?

#

or the same?

copper rover Apr 23, 2021, 8:25 PM

#

Can't you tell the VPN to not use it as the default GW?

tender hazel Apr 23, 2021, 8:25 PM

#

remote address should be the address that you want your computer to get.. if you want to have a pool of addresses instead you can configure that through the profile.. but if it is just you it is easier to specify it in the secret like you are

#

10.0.0.1 is fine for that

#

so remote-address can be left as you have it

#

but the default mikrotik firewall, assuming you are using that or some variation on it, is going to block you from getting online

tame carbon Apr 23, 2021, 8:26 PM

#

Quite the contrary.

#

I can reach any public IP

#

all works.

#

except DNS.

#

even traceroute properly reports it

#

I made sure to add an accept rule for port 53 input

sour minnow Apr 23, 2021, 8:27 PM

#

copper rover https://www.youtube.com/watch?v=5iRp1Nug0PU

Wouldn't this be easier from router settings lol?
Or am I stupid?

tame carbon Apr 23, 2021, 8:27 PM

#

but I think my client is borked.

tender hazel Apr 23, 2021, 8:27 PM

#

what dns servers are you trying to use?

tame carbon Apr 23, 2021, 8:27 PM

#

192.168.88.1

#

and I also tried 192.168.99.1

#

which is the IP of the mikrotik on bridge-vpn

#

that's the bridge that the l2tp-server binds to

green forge Apr 23, 2021, 8:28 PM

#

@copper rover done

copper rover Apr 23, 2021, 8:28 PM

#

sour minnow Wouldn't this be easier from router settings lol? Or am I stupid?

@green forge needs to host a file from his PC via TFTP via a static IP

tame carbon Apr 23, 2021, 8:28 PM

#

@tender hazel if I do nslookup google.com 192.168.88.1 it works.

green forge Apr 23, 2021, 8:28 PM

#

@sour minnow its a locked down isp router

sour minnow Apr 23, 2021, 8:28 PM

#

oh

copper rover Apr 23, 2021, 8:28 PM

#

It's basically junk. Trying to res it to work again

tender hazel Apr 23, 2021, 8:29 PM

#

tame carbon that's the bridge that the l2tp-server binds to

the L2TP server doesn't actually bind to a bridge

tame carbon Apr 23, 2021, 8:29 PM

#

its a config field though?

green forge Apr 23, 2021, 8:29 PM

#

@copper rover i set the static ip to 192.168.1.4

tender hazel Apr 23, 2021, 8:29 PM

#

yeah that field is for something called BCP (bridge control protocol) but >99% of L2TP clients/servers do not have BCP support

tame carbon Apr 23, 2021, 8:30 PM

#

@tender hazel mh. that would explain why the accept rule on interface list didnt work. But did work if I selected dynamic

copper rover Apr 23, 2021, 8:30 PM

#

green forge <@!821472301627080766> i set the static ip to 192.168.1.4

Well, the idea is that the same recovery method for the default Netgear firmware (per those instructions on their site) should still be applicable for the custom firmware the ISP loaded. We don't know that for a fact, but it's an educated guess that the did keep it the same

tame carbon Apr 23, 2021, 8:30 PM

#

@tender hazel I tried overriding the DNS server on my client, to use 1.1.1.1 instead

#

but even that didn't work

tender hazel Apr 23, 2021, 8:30 PM

#

so that setting won't really do what you want unless you are establishing l2tp from mikrotik to mikrotik

green forge Apr 23, 2021, 8:30 PM

#

so much stuff going on

tender hazel Apr 23, 2021, 8:31 PM

#

what you can do is make a special profile for l2tp

green forge Apr 23, 2021, 8:31 PM

#

copper rover Well, the idea is that the same recovery method for the default Netgear firmware...

OOHHHH

tame carbon Apr 23, 2021, 8:31 PM

#

https://i.imgur.com/DFlhNPE.png

tender hazel Apr 23, 2021, 8:31 PM

#

#

like so

tame carbon Apr 23, 2021, 8:32 PM

#

nggh ok, let me try :D

tender hazel Apr 23, 2021, 8:32 PM

#

setting interface list to LAN (assuming you are using the default config or something similar) will take care of teh proper firewall stuff

tame carbon Apr 23, 2021, 8:32 PM

#

I just poked a hole in my firewall

#

so I can access webfig without vpn

#

through a socks proxy on my server

tender hazel Apr 23, 2021, 8:33 PM

#

you can start by making a copy of the default-encryption profile

#

and make the changes to that

#

since some of the other settings are better

green forge Apr 23, 2021, 8:33 PM

#

sorry discord crash

tame carbon Apr 23, 2021, 8:33 PM

#

ka-ching https://i.imgur.com/Q7walnN.png

Imgur

#

@tender hazel any way I can copy a config from webfig?

#

theres no button to do so

tender hazel Apr 23, 2021, 8:36 PM

#

you can export config to a file and then download the file

tame carbon Apr 23, 2021, 8:36 PM

#

https://i.imgur.com/kP0Z1xA.png

Imgur

#

half the fields are missing.

green forge Apr 23, 2021, 8:36 PM

#

@copper rover so we need to now find a wayto make the filesystem not read only?

tender hazel Apr 23, 2021, 8:36 PM

#

yeah setting interface list to LAN is ok in the default-encryption as long as you aren't using default encryption for something else like a pppoe client

tame carbon Apr 23, 2021, 8:37 PM

#

@tender hazel nah its literally not used by anything, other than my VPN.

#

THere's a 2nd device that uses the VPN, but thats not important right now

tender hazel Apr 23, 2021, 8:37 PM

#

ok then yeah that is fine..

green forge Apr 23, 2021, 8:37 PM

#

im gonna start the server

copper rover Apr 23, 2021, 8:37 PM

#

green forge <@!821472301627080766> so we need to now find a wayto make the filesystem not re...

No, I think that's a fools errand. We need the router to request the firmware file and flash itself

tame carbon Apr 23, 2021, 8:37 PM

#

@tender hazel bridge-learning doesnt exist, is that important?

tender hazel Apr 23, 2021, 8:37 PM

#

what will happen once that is done is when you connect to the vpn you will automatically get added to the interface list LAN

#

no

plain siren Apr 23, 2021, 8:37 PM

#

I dont think Mikrotik lets you export with the Webfig right?

green forge Apr 23, 2021, 8:37 PM

#

thats what i wrote before my discord crashed

#

and it got lost

tame carbon Apr 23, 2021, 8:38 PM

#

@plain siren I can always connect via ssh if need be

plain siren Apr 23, 2021, 8:38 PM

#

Only commandline/Winbox IIRC

tender hazel Apr 23, 2021, 8:38 PM

#

@plain siren there is a terminal in webfig

#

there's a button in the upper right corner of the webfig window that calls up the terminal

plain siren Apr 23, 2021, 8:38 PM

#

oh then you can just export from that with literally export file=file.config right?

tender hazel Apr 23, 2021, 8:38 PM

#

yup

tame carbon Apr 23, 2021, 8:39 PM

#

Ok, so I set both DNS and local address, as well as LAN interface list

tender hazel Apr 23, 2021, 8:39 PM

#

ok

tame carbon Apr 23, 2021, 8:39 PM

#

anything else I Need to look at ?

#

I set some configurations in the secret too

green forge Apr 23, 2021, 8:40 PM

#

how are you doing this while drunk?.

tender hazel Apr 23, 2021, 8:40 PM

#

no, everything else should be just fine

plain siren Apr 23, 2021, 8:40 PM

#

How do you do this while sober?

tame carbon Apr 23, 2021, 8:40 PM

#

@green forge most of the time when I am in this channel, I'm stoned.

plain siren Apr 23, 2021, 8:40 PM

#

^

tame carbon Apr 23, 2021, 8:40 PM

#

Its just.. germans don't approve

#

so I get drunk instead

plain siren Apr 23, 2021, 8:41 PM

#

I get both sometimes

green forge Apr 23, 2021, 8:41 PM

#

ah makes sense

copper rover Apr 23, 2021, 8:41 PM

#

@green forge
6. Turn router OFF for 10 seconds and then turn it back ON.
7. Watch the Power LED. It will start with an orange color and then start flashing.
8. Press PUT button on the Tftpd64 utility to perform the firmware upload.
9. You should see a pop up saying that “0 block retransmitted”. If not, you may need to repeat above.

plain siren Apr 23, 2021, 8:41 PM

#

Then I spend like 3 days on #tech-support trying to get a high score

tender hazel Apr 23, 2021, 8:41 PM

#

@tame carbon I had looked at your config in the secret and it was fine

tame carbon Apr 23, 2021, 8:41 PM

#

alc + weed = nausea for me. :P

#

https://i.imgur.com/IaqNAr8.png

Imgur

#

@tender hazel are you sure ?

green forge Apr 23, 2021, 8:41 PM

#

copper rover <@!362089571254665218> 6. Turn router OFF for 10 seconds and then turn it back...

thats for tftp client, and idk if it will work again

tender hazel Apr 23, 2021, 8:41 PM

#

except for the local address

tame carbon Apr 23, 2021, 8:41 PM

#

Leave that blank?

green forge Apr 23, 2021, 8:41 PM

#

well here goes nothing

tender hazel Apr 23, 2021, 8:42 PM

#

you can leave that blank now that you have it set in the default-encryption profile instead

tame carbon Apr 23, 2021, 8:42 PM

#

@tender hazel and remote-address is just the local IP that appears on the client itself right?

tender hazel Apr 23, 2021, 8:42 PM

#

yes, it is the IP that the client gets

tame carbon Apr 23, 2021, 8:42 PM

#

If I have mutiple secrets, do I modify this to 10.0.0.2 ?

tender hazel Apr 23, 2021, 8:43 PM

#

yes, if you have a second client you can do that

#

the other thing you can do is if you want dynamic, you can make a pool called something like VPN-pool, set a range like 10.0.0.1-10.0.0.20, and set VPN-pool as the remote address in the default-encryption PPP profile

#

that's if you want dynamic VPN IP allocation

tame carbon Apr 23, 2021, 8:43 PM

#

I think I had that at one point yes.

tender hazel Apr 23, 2021, 8:44 PM

#

but since it is just you, static is fine

tame carbon Apr 23, 2021, 8:44 PM

#

ok. lets try to connect

#

test

#

okay I'm now connected via vpn

tender hazel Apr 23, 2021, 8:44 PM

#

great

tame carbon Apr 23, 2021, 8:44 PM

#

 crystal@watomat  ~  ip route
default dev ppp0  proto static  scope link  metric 50 
default via 192.168.1.1 dev wlp3s0  proto static  metric 600

green forge Apr 23, 2021, 8:44 PM

#

umm

tame carbon Apr 23, 2021, 8:45 PM

#

 ✘ crystal@watomat  ~  traceroute 1.1.1.1
traceroute to 1.1.1.1 (1.1.1.1), 30 hops max, 60 byte packets
 1  192.168.99.1 (192.168.99.1)  30.820 ms  30.797 ms  30.789 ms
 2  46.243.152.3 (46.243.152.3)  31.830 ms  31.825 ms  31.819 ms

tender hazel Apr 23, 2021, 8:46 PM

#

great

tame carbon Apr 23, 2021, 8:46 PM

#

Seems to work

tender hazel Apr 23, 2021, 8:46 PM

#

yup

tame carbon Apr 23, 2021, 8:46 PM

#

lets see if chrome plays ball.

#

Nope.

#

no DNS.

green forge Apr 23, 2021, 8:46 PM

#

@copper rover it wont work, i tried doing this before and the block #0 wouldnt move

plain siren Apr 23, 2021, 8:46 PM

#

do you have DNS over TLS or whatever enabled in Chrome Settings?

tame carbon Apr 23, 2021, 8:46 PM

#

Discord just died

#

On phone now

tender hazel Apr 23, 2021, 8:47 PM

#

but when you use nslookup it is fine?

#

you can resolve against the router just fine with nslookup?

copper rover Apr 23, 2021, 8:47 PM

#

green forge <@!821472301627080766> it wont work, i tried doing this before and the block #0 ...

And the firmware file is named what it's expecting, yes?

tame carbon Apr 23, 2021, 8:47 PM

#

green forge Apr 23, 2021, 8:48 PM

#

copper rover And the firmware file is named what it's expecting, yes?

what should i name it?

#

it has the .chk at the end

#

i called it updatedversion.chk

tender hazel Apr 23, 2021, 8:48 PM

#

your issue has to be client side

#

the mikrotik itself is set up just fine

copper rover Apr 23, 2021, 8:49 PM

#

green forge what should i name it?

Leave it the same name as you've downloaded it. Don't rename

green forge Apr 23, 2021, 8:49 PM

#

ok

tender hazel Apr 23, 2021, 8:49 PM

#

something is screwy on your computer

#

maybe you are overriding the DNS somewhere

green forge Apr 23, 2021, 8:49 PM

#

@copper rover port needs to be 69 right?

copper rover Apr 23, 2021, 8:49 PM

#

green forge <@!821472301627080766> port needs to be 69 right?

Based on those instructions, I'm going to say "yes"

plain siren Apr 23, 2021, 8:49 PM

#

Waiiit

#

Hold on

#

Can you DM me your config @tame carbon

tame carbon Apr 23, 2021, 8:50 PM

#

Which one

plain siren Apr 23, 2021, 8:51 PM

#

/ppp profile set <profilething> dns-server=

#

did we do this?

tame carbon Apr 23, 2021, 8:51 PM

#

Yes

green forge Apr 23, 2021, 8:51 PM

#

@copper rover never blinks, man this is tough

tender hazel Apr 23, 2021, 8:52 PM

#

I think the dns is overridden on the client side so the ppp profile supplied dns server is not being used

#

it is a client side setting that is wrong

copper rover Apr 23, 2021, 8:52 PM

#

green forge <@!821472301627080766> never blinks, man this is tough

So " It will start with an orange color and then start flashing" never occurs?

plain siren Apr 23, 2021, 8:52 PM

#

Lemem just ask a stupid question

#

Is there 2 or 1 DNS servers defined?

green forge Apr 23, 2021, 8:52 PM

#

copper rover So " It will start with an orange color and then start flashing" never occurs?

you see its always orange

tame carbon Apr 23, 2021, 8:52 PM

#

green forge Apr 23, 2021, 8:52 PM

#

lemme open it tosee the led color

plain siren Apr 23, 2021, 8:52 PM

#

If you only define one on Mikrotik shit, itll bug.

#

Idk why

copper rover Apr 23, 2021, 8:53 PM

#

green forge lemme open it tosee the led color

You have to leave it unplugged for 10 seconds, then plug it in, and then you should get that sequence

#

The power that is

#

To the router

#

It should be part of its boot sequence.

#

shrug

plain siren Apr 23, 2021, 8:54 PM

#

And last stupid question: did we ip dns set allow-remote-requests=yes?

tame carbon Apr 23, 2021, 8:55 PM

#

I can do nslookup from shell just fine

tender hazel Apr 23, 2021, 8:55 PM

#

@plain siren allow remote requests has to be set, otherwise the resolution wouldn't work from the command line

#

yeah

plain siren Apr 23, 2021, 8:55 PM

#

thats why I said it was a stupid question

tame carbon Apr 23, 2021, 8:56 PM

#

Theres an accept rule on all dynamic Interfaces

#

So it works

#

Just not on my client

#

When attempting to use system wide vpn

tender hazel Apr 23, 2021, 8:56 PM

#

what if you override the home settings on the client side

#

the home vpn settings

#

hard set dns of 192.168.99.1 instead of getting automatically

#

you shouldn't have to do that, but try it

tame carbon Apr 23, 2021, 8:57 PM

#

I tried that earlier, didn't make a difference

green forge Apr 23, 2021, 8:57 PM

#

got the cover off

tame carbon Apr 23, 2021, 8:57 PM

#

I removed it just now, to make sure it uses the provided ond

#

That didnt make a difference either

plain siren Apr 23, 2021, 8:57 PM

#

Ah yeah

copper rover Apr 23, 2021, 8:57 PM

#

green forge got the cover off

cover off??? 0_o

Why? I don't understand why you need to take that off

plain siren Apr 23, 2021, 8:57 PM

#

Crystal, do me a favor just for shits and giggles

tame carbon Apr 23, 2021, 8:58 PM

#

I even enabled dns on my 2nd tik

plain siren Apr 23, 2021, 8:58 PM

#

I am having a bug that might be related on my shit

tame carbon Apr 23, 2021, 8:58 PM

#

And I could reach it, but didn't work either

green forge Apr 23, 2021, 8:58 PM

#

copper rover cover off??? 0_o Why? I don't understand why you need to take that off

i need to see the true color of the led

plain siren Apr 23, 2021, 8:58 PM

#

Add 8.8.8.8 to the DNS Server list if you only have 1 listed

green forge Apr 23, 2021, 8:58 PM

#

its orange

plain siren Apr 23, 2021, 8:58 PM

#

I know it sounds stupid but this is annoying me

copper rover Apr 23, 2021, 8:58 PM

#

green forge i need to see the true color of the led

Uhh, ok. Umm, if it make that easy for you, sure.

tame carbon Apr 23, 2021, 8:59 PM

#

#

Like so?

plain siren Apr 23, 2021, 8:59 PM

#

yes

#

DNS Doesnt work with my S-S VPN on my Mikrotik Endpoint if I use only 1 DNS Entry.

copper rover Apr 23, 2021, 8:59 PM

#

Basically, it should light up orange and then flash

plain siren Apr 23, 2021, 8:59 PM

#

It has to be 2.

#

L2TP over IPSec

copper rover Apr 23, 2021, 8:59 PM

#

That's when you're supposed to press the PUT button

tame carbon Apr 23, 2021, 9:00 PM

#

Waaaaaaat

green forge Apr 23, 2021, 9:00 PM

#

well the led doesnt flash

#

just kinda sits there

plain siren Apr 23, 2021, 9:00 PM

#

Omg dont tell me

tame carbon Apr 23, 2021, 9:00 PM

#

#

Nope

plain siren Apr 23, 2021, 9:00 PM

#

whew

#

In your Firewall you have NAT enabled right?

tame carbon Apr 23, 2021, 9:00 PM

#

Yes...

tender hazel Apr 23, 2021, 9:01 PM

#

yes, crystal is able to ping online

green forge Apr 23, 2021, 9:01 PM

#

@copper rover dam it

#

what do i do now.

#

we cant copy files to it

#

in ssh

plain siren Apr 23, 2021, 9:01 PM

#

Couldve been static, i cover all stupid bases

green forge Apr 23, 2021, 9:01 PM

#

we cant get it to blink

#

cuz it only works when the firmware is corrupted

tender hazel Apr 23, 2021, 9:01 PM

#

the client is using something else for dns obviously

tame carbon Apr 23, 2021, 9:01 PM

#

tender hazel Apr 23, 2021, 9:02 PM

#

what happens when you nslookup without specifying the server name? what server is it using?

green forge Apr 23, 2021, 9:02 PM

#

maybe we need v1?

tame carbon Apr 23, 2021, 9:02 PM

#

It times out

tender hazel Apr 23, 2021, 9:02 PM

#

and when it times out does it tell you what server it is using?

tame carbon Apr 23, 2021, 9:02 PM

#

Its normally using 127.0.0.1#53

tender hazel Apr 23, 2021, 9:02 PM

#

or what server it is trying to use

#

yeah so there is your problem.. it is something on the system itself, it is trying to resolve against localhost

tame carbon Apr 23, 2021, 9:03 PM

#

Let me boot the official distro kernel, just for sanity sake

#

Using a modified one

tender hazel Apr 23, 2021, 9:03 PM

#

it isn't using the provided dns for whatever reason

#

yeah it is something wrong with the client, it is nothing wrong with the mikrotik config

tame carbon Apr 23, 2021, 9:04 PM

#

Ok booting distro kernel

#

No difference...

tender hazel Apr 23, 2021, 9:05 PM

#

check your resolv.conf file

tame carbon Apr 23, 2021, 9:06 PM

#

 ✘ crystal@watomat  ~  cat /etc/resolv.conf
# Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8)
#     DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN
nameserver 127.0.0.1

plain siren Apr 23, 2021, 9:08 PM

#

Wait... but why is it using itself as a resolver actually... Shouldnt the router be the DNS resolver?

#

not localhost?

tender hazel Apr 23, 2021, 9:08 PM

#

ubuntu?

#

green forge Apr 23, 2021, 9:09 PM

#

@copper rover i hit a block, i dont know what to do now

tame carbon Apr 23, 2021, 9:09 PM

#

Ubuntu 16 yes.

tender hazel Apr 23, 2021, 9:09 PM

#

it is using itself as a dnsmasq server

green forge Apr 23, 2021, 9:09 PM

#

we cant trick it

#

to intall it

plain siren Apr 23, 2021, 9:09 PM

#

ugh ew

tender hazel Apr 23, 2021, 9:09 PM

#

perhaps dnsmasq isn't running

tame carbon Apr 23, 2021, 9:10 PM

#

● dnsmasq.service - dnsmasq - A lightweight DHCP and caching DNS server
   Loaded: loaded (/lib/systemd/system/dnsmasq.service; enabled; vendor preset: enabled)
  Drop-In: /run/systemd/generator/dnsmasq.service.d
           └─50-dnsmasq-$named.conf, 50-insserv.conf-$named.conf
   Active: active (running) since vr 2021-04-23 23:04:34 CEST; 5min ago
  Process: 1446 ExecStartPost=/etc/init.d/dnsmasq systemd-start-resolvconf (code=exited, status=0/SUCCESS)
  Process: 1324 ExecStart=/etc/init.d/dnsmasq systemd-exec (code=exited, status=0/SUCCESS)
  Process: 1142 ExecStartPre=/usr/sbin/dnsmasq --test (code=exited, status=0/SUCCESS)
 Main PID: 1406 (dnsmasq)
    Tasks: 1
   Memory: 4.4M
      CPU: 93ms
   CGroup: /system.slice/dnsmasq.service
           └─1406 /usr/sbin/dnsmasq -x /var/run/dnsmasq/dnsmasq.pid -u dnsmasq -r /var/run/dnsmasq/resolv.conf -7 /etc/dnsmasq.d,.dpkg-dist,.dpkg-old,.dpkg-new --local-service --trust-anchor=.,19036,8,2,49aac11d7b

tender hazel Apr 23, 2021, 9:10 PM

#

what's in /var/run/dnsmasq/resolv.conf?

tame carbon Apr 23, 2021, 9:10 PM

#

@tender hazel wait...

#

apr 23 23:04:24 watomat dnsmasq[1142]: dnsmasq: syntax check OK.
apr 23 23:04:24 watomat dnsmasq[1406]: started, version 2.75 cachesize 150
apr 23 23:04:24 watomat dnsmasq[1406]: compile time options: IPv6 GNU-getopt DBus i18n IDN DHCP DHCPv6 no-Lua TFTP conntrack ipset auth DNSSEC loop-detect inotify
apr 23 23:04:24 watomat dnsmasq[1406]: using nameserver 127.0.0.1#40
apr 23 23:04:24 watomat dnsmasq[1406]: no servers found in /var/run/dnsmasq/resolv.conf, will retry
apr 23 23:04:24 watomat dnsmasq[1406]: read /etc/hosts - 18 addresses
apr 23 23:04:34 watomat systemd[1]: Started dnsmasq - A lightweight DHCP and caching DNS server.

#

this is... ^ interesting..

#

nameserver 127.0.1.1

tender hazel Apr 23, 2021, 9:12 PM

#

https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/1090589

Launchpad

Bug #1090589 “Empty /var/run/dnsmasq/resolv.conf” : Bugs : dnsmasq ...

Ubuntu version 12.10
Dnsmasq version 2.63-1ubuntu1
Same as bug #875950

network-manager is not installed.

Dnsmasq generates empty /var/run/dnsmasq/resolv.conf

Error: no servers found in /var/run/dnsmasq/resolv.conf, will retry

/etc/resolv.conf:
nameserver 127.0.0.1

/etc/dnsmasq.conf:
resolv-file=/etc/dnsmasq-resolv.conf
dhcp-option=option:ro...

plain siren Apr 23, 2021, 9:13 PM

#

https://github.com/nm-l2tp/NetworkManager-l2tp/wiki/Known-Issues

tender hazel Apr 23, 2021, 9:13 PM

#

"In your case /var/run/dnsmasq/resolv.conf is empty or absent. This suggests that you are not using resolvconf in the normal way, or not using it at all."

tame carbon Apr 23, 2021, 9:13 PM

#

@tender hazel someones suggested this: https://i.imgur.com/1XXaaAD.png

Imgur

plain siren Apr 23, 2021, 9:13 PM

#

Hah here it is

tender hazel Apr 23, 2021, 9:13 PM

#

ahh yes that's it

#

https://github.com/nm-l2tp/NetworkManager-l2tp/wiki/Known-Issues#networkmanager--162-and-systemd-resolved-ignoring-vpn-servers-dns

GitHub

nm-l2tp/NetworkManager-l2tp

L2TP and L2TP/IPsec support for NetworkManager. Contribute to nm-l2tp/NetworkManager-l2tp development by creating an account on GitHub.

#

routiing found it

#

oops

#

rouing

tame carbon Apr 23, 2021, 9:14 PM

#

ok, summarize drunk me can't read pages right now

#

do I just modify my NetworkManager.conf ?

plain siren Apr 23, 2021, 9:14 PM

#

tame carbon Apr 23, 2021, 9:15 PM

#

https://i.imgur.com/J4ZbIlG.png

Imgur

copper rover Apr 23, 2021, 9:15 PM

#

green forge we cant trick it

Yeah, I was hoping there was a way to manually put it in recovery mode

tame carbon Apr 23, 2021, 9:15 PM

#

@plain siren that line is already present.

tender hazel Apr 23, 2021, 9:16 PM

#

@copper rover there might be a way of manually putting into recovery mode by holding down the reset button for a certain number of seconds, like with mikrotik?

green forge Apr 23, 2021, 9:16 PM

#

im stumped

copper rover Apr 23, 2021, 9:16 PM

#

^

#

Wort a shot. I'm still looking online to see

#

I think the reset button just clears config, but more than likely that's a point of interest to initiate that function...if it exists

green forge Apr 23, 2021, 9:17 PM

#

you see

#

if i reset it

#

the cciadmin password stays on

#

so that means

#

that that is kept somewhere else

copper rover Apr 23, 2021, 9:18 PM

#

The password is the default in the custom firmware

green forge Apr 23, 2021, 9:18 PM

#

yes

copper rover Apr 23, 2021, 9:18 PM

#

You're trying to replace the firmware. That will also clear the old default CCIADMIN account too

tame carbon Apr 23, 2021, 9:18 PM

#

@tender hazel I think...

#

I fixed it..

#

I commented the line dns=dnsmasq (prefixed with #)

#

restarted the network daemon

#

now it seems to work ? :o

copper rover Apr 23, 2021, 9:19 PM

#

Once the firmware is replaced with stock from Netgear, that will give it the default netgear admin account as though it's a retail unit

tender hazel Apr 23, 2021, 9:19 PM

#

interesting

tame carbon Apr 23, 2021, 9:19 PM

#

https://i.imgur.com/tufwaWb.png

Imgur

#

Yeah, so DNS works now.

#

wtf.

green forge Apr 23, 2021, 9:20 PM

#

copper rover Once the firmware is replaced with stock from Netgear, that will give it the def...

mhm

plain siren Apr 23, 2021, 9:21 PM

#

I think it has to do with this

#

This is why

copper rover Apr 23, 2021, 9:21 PM

#

green forge mhm

Does the power light always stay amber (orange)?

#

Or does it turn green after awhile?

tame carbon Apr 23, 2021, 9:21 PM

#

@plain siren

✘ crystal@watomat  ~  cat /etc/NetworkManager/NetworkManager.conf 
[main]
plugins=ifupdown,keyfile,ofono
#dns=dnsmasq

[ifupdown]
managed=false

plain siren Apr 23, 2021, 9:21 PM

#

tame carbon Apr 23, 2021, 9:21 PM

#

I commented that line, and now it works.

plain siren Apr 23, 2021, 9:21 PM

#

So if you set managed to true, I wonder if dnsmasq would work

tame carbon Apr 23, 2021, 9:21 PM

#

I can try.

green forge Apr 23, 2021, 9:22 PM

#

copper rover Does the power light always stay amber (orange)?

always stays orange

tame carbon Apr 23, 2021, 9:22 PM

#

Removed the comment, and set managed to true

#

Let's see

plain siren Apr 23, 2021, 9:22 PM

#

im gonna laugh if it works.

#

pls dont work

tame carbon Apr 23, 2021, 9:22 PM

#

I owe you a drink if it does

copper rover Apr 23, 2021, 9:23 PM

#

green forge always stays orange

Does it ever change status when powered off and then back on? Does it ever flash at any time?

tame carbon Apr 23, 2021, 9:23 PM

#

@plain siren nope.

plain siren Apr 23, 2021, 9:23 PM

#

systemd-resolve --status

#

what does that say

tame carbon Apr 23, 2021, 9:23 PM

#

green forge Apr 23, 2021, 9:23 PM

#

copper rover Does it ever change status when powered off and then back on? Does it ever flash...

well all the lights go on while booting

tame carbon Apr 23, 2021, 9:24 PM

#

@plain siren invalid option

green forge Apr 23, 2021, 9:24 PM

#

i can record boot sequence

tender hazel Apr 23, 2021, 9:24 PM

#

@tame carbon systemctl status systemd-resolved

plain siren Apr 23, 2021, 9:25 PM

#

resolvectl query google.com

tame carbon Apr 23, 2021, 9:25 PM

#

Inactive - Deax

#

Dead*

copper rover Apr 23, 2021, 9:26 PM

#

@green forge Try this . It's where you force recovery mode then push the file to the router. It might work, or might not.

https://kb.netgear.com/000059634/How-to-upload-firmware-to-a-NETGEAR-router-using-Windows-TFTP

#

Read those steps

plain siren Apr 23, 2021, 9:26 PM

#

dead

#

systemctl start systemd-resolved

green forge Apr 23, 2021, 9:26 PM

#

copper rover <@!362089571254665218> Try this . It's where you force recovery mode then push ...

use windows?

copper rover Apr 23, 2021, 9:27 PM

#

green forge use windows?

Sure. why not?

Turn router OFF for 10 seconds.
Hold down the reset button on the back of router with a paper clip.
Power ON the router while holding down the reset button.
Watch the Power LED. It starts with an orange color, and then start flashing.

tame carbon Apr 23, 2021, 9:27 PM

#

Ok its running nos

#

Now*

green forge Apr 23, 2021, 9:27 PM

#

UMM

#

caps sry

tame carbon Apr 23, 2021, 9:28 PM

#

Connected to vpn, lemme see if it works now

copper rover Apr 23, 2021, 9:28 PM

#

green forge UMM

I know. But what else you going to try?

green forge Apr 23, 2021, 9:28 PM

#

ok

#

lemme chug this thing

#

oke done

tame carbon Apr 23, 2021, 9:28 PM

#

@plain siren service is running, still timing out

green forge Apr 23, 2021, 9:28 PM

#

lets see

tender hazel Apr 23, 2021, 9:29 PM

#

systemd-resolve is something different from dnsmasq

#

systemd-resolve --status

tame carbon Apr 23, 2021, 9:30 PM

#

But it was working momentarily when I commented the dns config line

plain siren Apr 23, 2021, 9:30 PM

#

Yeah I would just revert

#

Waiiiiiiiit I just got a VM running and I noticed something

copper rover Apr 23, 2021, 9:31 PM

#

@green forge I think by holding down the reset button WHILE power it up might be what unlocks the router to accept a TFTP connection to upload firmware to it.

plain siren Apr 23, 2021, 9:31 PM

#

ln -sf /run/systemd/resolve/resolv.conf /etc/resolv.conf < omegalul

#

Why isnt this done by default

#

wtf ubuntu

#

Fucking stub dns shit

tender hazel Apr 23, 2021, 9:31 PM

#

it auto generates the /etc/resolv.conf

green forge Apr 23, 2021, 9:31 PM

#

copper rover <@!362089571254665218> I think by holding down the reset button WHILE power it u...

well

tender hazel Apr 23, 2021, 9:31 PM

#

and I think systemd-resolve is actually in ubuntu 18 but crystal is using 16 I think

tame carbon Apr 23, 2021, 9:32 PM

#

@plain siren that file in /run/systemd/resolve/resolv.conf doesn't exist.

green forge Apr 23, 2021, 9:32 PM

#

plain siren Apr 23, 2021, 9:32 PM

#

tame carbon Apr 23, 2021, 9:32 PM

#

This is 16 LTS.

copper rover Apr 23, 2021, 9:32 PM

#

plain siren Why isnt this done by default

Ubuntu DNS hell. Been there with PiHole. And I forgot all about that

tender hazel Apr 23, 2021, 9:32 PM

#

what happens if you run resolvconf

plain siren Apr 23, 2021, 9:32 PM

#

Ahhhhhhhhh no wonder

tame carbon Apr 23, 2021, 9:33 PM

#

Welp

green forge Apr 23, 2021, 9:33 PM

#

@copper rover cannot read from local file, does it require full path again?

tame carbon Apr 23, 2021, 9:33 PM

#

It works now

#

Thanks guys ❤️

green forge Apr 23, 2021, 9:33 PM

#

o gg

tame carbon Apr 23, 2021, 9:33 PM

#

commenting dns=dnsmasq did the trick.

green forge Apr 23, 2021, 9:33 PM

#

we hopefully will be done soon too

#

if all wants to work

tame carbon Apr 23, 2021, 9:34 PM

#

@tender hazel now I can finally watch netflix without german synchronization kek

copper rover Apr 23, 2021, 9:34 PM

#

Well, first see if the router can go into recovery mode via the status lights. If it does follow that power up sequence, chances are you can push the firmware through with TFTP

tender hazel Apr 23, 2021, 9:34 PM

#

what is german synchronization?

copper rover Apr 23, 2021, 9:34 PM

#

tender hazel what is german synchronization?

Goose stepping?

tame carbon Apr 23, 2021, 9:34 PM

#

@tender hazel basically. all movies in germany are dubbed.

#

and it ruins the acting

tender hazel Apr 23, 2021, 9:35 PM

#

wow

tame carbon Apr 23, 2021, 9:35 PM

#

because you get some generic german voice over

tender hazel Apr 23, 2021, 9:35 PM

#

yeah that's.. terrible

tame carbon Apr 23, 2021, 9:35 PM

#

its same in cinemas here

#

EXCEPT

tender hazel Apr 23, 2021, 9:35 PM

#

I can't stand dubbed movies, I always would rather watch with subtitles if I don't understand the language

tame carbon Apr 23, 2021, 9:35 PM

#

in Rammstein.

#

That's a US military base, and that Cinema plays unsynchronized movies

tender hazel Apr 23, 2021, 9:36 PM

#

are those terms synchronized and unsynchronized normal for movies? I have never heard them before

#

except when I think of audio being unsynchronized with video it means that the audio is early or late compared to video

tame carbon Apr 23, 2021, 9:38 PM

#

 ✘ crystal@watomat  ~  systemctl status xl2tpd
● xl2tpd.service - LSB: layer 2 tunelling protocol daemon
   Loaded: loaded (/etc/init.d/xl2tpd; bad; vendor preset: enabled)
   Active: active (running) since vr 2021-04-23 23:31:10 CEST; 6min ago
     Docs: man:systemd-sysv-generator(8)
  Process: 3227 ExecStart=/etc/init.d/xl2tpd start (code=exited, status=0/SUCCESS)
    Tasks: 1
   Memory: 116.0K
      CPU: 8ms
   CGroup: /system.slice/xl2tpd.service
           └─3348 /usr/sbin/xl2tpd

apr 23 23:31:10 watomat systemd[1]: Starting LSB: layer 2 tunelling protocol daemon...
apr 23 23:31:10 watomat xl2tpd[3313]: Not looking for kernel SAref support.
apr 23 23:31:10 watomat xl2tpd[3227]: Starting xl2tpd: xl2tpd.
apr 23 23:31:10 watomat xl2tpd[3348]: xl2tpd version xl2tpd-1.3.6 started on watomat PID:3348
apr 23 23:31:10 watomat xl2tpd[3348]: Written by Mark Spencer, Copyright (C) 1998, Adtran, Inc.
apr 23 23:31:10 watomat xl2tpd[3348]: Forked by Scott Balmos and David Stipp, (C) 2001
apr 23 23:31:10 watomat xl2tpd[3348]: Inherited by Jeff McAdams, (C) 2002
apr 23 23:31:10 watomat xl2tpd[3348]: Forked again by Xelerance (www.xelerance.com) (C) 2006
apr 23 23:31:10 watomat xl2tpd[3348]: Listening on IP address 0.0.0.0, port 1701
apr 23 23:31:10 watomat systemd[1]: Started LSB: layer 2 tunelling protocol daemon.

#

@plain siren something something , you just figured it out??

plain siren Apr 23, 2021, 9:39 PM

#

it was xl2tpd, its interfering with network managers UI config.

green forge Apr 23, 2021, 9:39 PM

#

@copper rover you know, if i hold down the reset button after the router booted up, for like 20 secs, it starts blinks, but nothing changes in the tftpd64

plain siren Apr 23, 2021, 9:39 PM

#

it has to be disabled

#

or the whole thing resets

#

on runtime

tame carbon Apr 23, 2021, 9:39 PM

#

@plain siren should I care about this? or is it good as it is right now?

plain siren Apr 23, 2021, 9:39 PM

#

I wouldnt touch it unless it becomes an issue

copper rover Apr 23, 2021, 9:39 PM

#

green forge <@!821472301627080766> you know, if i hold down the reset button after the route...

What if you hold down the reset button before plugging in power to the router?

green forge Apr 23, 2021, 9:39 PM

#

ok

plain siren Apr 23, 2021, 9:40 PM

#

but you could just systemctl disable xl2tpd

tame carbon Apr 23, 2021, 9:40 PM

#

are you sure?

plain siren Apr 23, 2021, 9:40 PM

#

and "systemctl stop xl2tpd`

#

I just fixed my own issue with that xD

#

literally same shit

tame carbon Apr 23, 2021, 9:40 PM

#

I stopped the service

#

VPN still works

copper rover Apr 23, 2021, 9:41 PM

#

green forge ok

It says count 10 flashing power LED and release the button. That's when you press enter to start the TFTP transfer

tame carbon Apr 23, 2021, 9:41 PM

#

and so does DNS.

green forge Apr 23, 2021, 9:41 PM

#

@copper rover the tdtp doesnt even move tho

copper rover Apr 23, 2021, 9:42 PM

#

green forge <@!821472301627080766> the tdtp doesnt even move tho

Try the TFTP client. But those instructions should be self-explanatory on how to do it with the Windows command prompt

#

Make sure you're running it from the same path the firmware file is in

green forge Apr 23, 2021, 9:42 PM

#

#

it should work

#

but it doesnt

#

what

copper rover Apr 23, 2021, 9:43 PM

#

FYI, Got to leave in 15

tame carbon Apr 23, 2021, 9:46 PM

#

#overclocking

peak cloak Apr 23, 2021, 9:47 PM

#

what speed

#

and what are you paying for

#

and what did you pay for

#

smells like dns

copper rover Apr 23, 2021, 9:48 PM

#

green forge

Check this out.

https://wnsnty.xyz/entry/how-to-install-dd-wrt-on-cox-netgear-r6300v2

How To Install DD-WRT On Cox Netgear R6300v2 - wnsnty.xyz

Firmware flashing guide for the COX ISP variant of the Netgear R6300v2 AC1750 router. Disassembly, serial TFTP flashing, and initial DD-WRT flash.

green forge Apr 23, 2021, 9:48 PM

#

dd wrt

#

ah

copper rover Apr 23, 2021, 9:48 PM

#

Right, but look at what he had to do with the Cox provided unit

peak cloak Apr 23, 2021, 9:49 PM

#

probobly default ISP

copper rover Apr 23, 2021, 9:49 PM

#

Real insightful. Had to use USB to push it with a pinned connector to the board

peak cloak Apr 23, 2021, 9:49 PM

#

you can change it network wide if you want to

#

idk how to specifically on ipad

copper rover Apr 23, 2021, 9:49 PM

#

So, it's not entirely a lost cause here. It might be salvageable. Don't give up yet 🙂

tame carbon Apr 23, 2021, 9:50 PM

#

@tender hazel @plain siren @hollow marlin thanks again for all the help. Wouldn't have been able to do it without you guys ^^

copper rover Apr 23, 2021, 9:50 PM

#

You be looking at a factory reset if the credentials are lost.

#

Yup, by design

#

Try look up the default user/pass for it.

green forge Apr 23, 2021, 9:51 PM

#

too much work and wrong model

#

jeez why do companys make this so hard

plain siren Apr 23, 2021, 9:51 PM

#

I bet it uses signed binaries too

copper rover Apr 23, 2021, 9:52 PM

#

green forge jeez why do companys make this so hard

Because they're dickheads?

#

lol

green forge Apr 23, 2021, 9:52 PM

#

i really want to go to goodwill rn and get a new one

plain siren Apr 23, 2021, 9:52 PM

#

Because they want to use your router to do their Diagnostics Work and Telemetry

green forge Apr 23, 2021, 9:52 PM

#

i was in one goodwill and i saw one WITH ITS PEEL ON

tame carbon Apr 23, 2021, 9:52 PM

#

@green forge do yourself a favor, and buy a mikrotik instead :)

#

@green forge that's the last router you'll ever own.

plain siren Apr 23, 2021, 9:52 PM

#

ISP Routers are basically big ass sensors for them

copper rover Apr 23, 2021, 9:53 PM

#

They locked that one up tight.

green forge Apr 23, 2021, 9:53 PM

#

like why tf do you lock it in the first place

tame carbon Apr 23, 2021, 9:53 PM

#

to prevent exactly what you are trying to do right now

plain siren Apr 23, 2021, 9:53 PM

#

Because that would be one big ass whooping security hole otherwise

green forge Apr 23, 2021, 9:54 PM

#

oh big ass security hole?

#

well the firmware is alr one

copper rover Apr 23, 2021, 9:54 PM

#

tame carbon to prevent exactly what you are trying to do right now

Yup.

plain siren Apr 23, 2021, 9:54 PM

#

Yeah, imagine hitting one of the side-of-the-road access systems and then just... attacking an entire neighborhoods routers

copper rover Apr 23, 2021, 9:54 PM

#

@green forge I thought you have the r6300v2?

green forge Apr 23, 2021, 9:54 PM

#

i do

plain siren Apr 23, 2021, 9:55 PM

#

Boom, you now have a MITM for an entire local area

green forge Apr 23, 2021, 9:55 PM

#

model and specs say it is

copper rover Apr 23, 2021, 9:55 PM

#

https://wnsnty.xyz/entry/how-to-install-dd-wrt-on-cox-netgear-r6300v2

How To Install DD-WRT On Cox Netgear R6300v2 - wnsnty.xyz

Firmware flashing guide for the COX ISP variant of the Netgear R6300v2 AC1750 router. Disassembly, serial TFTP flashing, and initial DD-WRT flash.

#

You're saying those are wrong pictures?

green forge Apr 23, 2021, 9:55 PM

#

copper rover https://wnsnty.xyz/entry/how-to-install-dd-wrt-on-cox-netgear-r6300v2

let me explain.

plain siren Apr 23, 2021, 9:55 PM

#

Serial TFTP Flashing

green forge Apr 23, 2021, 9:55 PM

#

lemme take a few pics of this thing

plain siren Apr 23, 2021, 9:55 PM

#

You gotta solder these suckers

#

to the UART Debug port

green forge Apr 23, 2021, 9:56 PM

#

my eee box has a serial port built in

copper rover Apr 23, 2021, 9:56 PM

#

Yeah, but you can get a cheap soldering gun

#

even battery powered one

plain siren Apr 23, 2021, 9:57 PM

#

Yeah but that serial port and the "DEBUG UART" is prob 2 diff things

green forge Apr 23, 2021, 9:57 PM

#

have it alr

stiff panther Apr 23, 2021, 9:59 PM

#

green forge Apr 23, 2021, 10:00 PM

#

nicceeee

stiff panther Apr 23, 2021, 10:00 PM

#

From 64 to 128 GB ram

#

64gb extra for 70€

copper rover Apr 23, 2021, 10:00 PM

#

I see 8 drives in that Dell PowerEdge server. Why are only two active?

#

Oh, no drives in the caddy

#

duh

stiff panther Apr 23, 2021, 10:01 PM

#

first 4 to the left is the vm pools

#

the boot drive is inside the chassis

#

the 2 in the right are truenas drives

green forge Apr 23, 2021, 10:01 PM

#

pics are coming

stiff panther Apr 23, 2021, 10:01 PM

#

and the last 2 drives to the right are other vms

copper rover Apr 23, 2021, 10:01 PM

#

I'm perpexed the drives don't have power LEDs on them though.

stiff panther Apr 23, 2021, 10:02 PM

#

at some weird way two of my drives use the led the inverted way

#

thats why thesse 2 led lights up

green forge Apr 23, 2021, 10:03 PM

#

here

#

#

#

#

@copper rover hopefully this explains your thoughts

stiff panther Apr 23, 2021, 10:03 PM

#

https://cdn.discordapp.com/attachments/375449815275929622/835271708914221056/unknown.png

copper rover Apr 23, 2021, 10:04 PM

#

stiff panther thats why thesse 2 led lights up

Crazy, ok. Looks to be an R720 unit

stiff panther Apr 23, 2021, 10:04 PM

#

its an R720

copper rover Apr 23, 2021, 10:04 PM

#

Yeah, I"ve worked on em before. Normally with a PERC

copper rover Apr 23, 2021, 10:06 PM

#

green forge

That's the same board in the link

https://wnsnty.xyz/entry/how-to-install-dd-wrt-on-cox-netgear-r6300v2

How To Install DD-WRT On Cox Netgear R6300v2 - wnsnty.xyz

Firmware flashing guide for the COX ISP variant of the Netgear R6300v2 AC1750 router. Disassembly, serial TFTP flashing, and initial DD-WRT flash.

green forge Apr 23, 2021, 10:07 PM

#

completely different firmwar

#

e

copper rover Apr 23, 2021, 10:07 PM

#

green forge completely different firmwar

Firmware has nothing to do with it. It's the same board, same PCB. In theory, you should upload other firmware the serial way

fringe pelican Apr 23, 2021, 10:09 PM

#

Ive got an old computer with an i7 and i was wanting to turn it into a home server but i also want to have it be my router. Anyone done this before? not sure if i can have it (or if its even a good idea) be a router and a server at the same time. I seen some os for being a router, possible to do with a vm? i couldnt find any software that i could just install.

copper rover Apr 23, 2021, 10:10 PM

#

GTG.

fringe pelican Apr 23, 2021, 10:10 PM

#

not yet but when i upgrade my internet. When i get starlink ill probably try to set something up

stiff panther Apr 23, 2021, 10:11 PM

#

What my lab used to look like back in 2015

green forge Apr 23, 2021, 10:13 PM

#

@copper rover did you see the pictures

#

oh ok

plain siren Apr 23, 2021, 10:16 PM

#

fringe pelican Ive got an old computer with an i7 and i was wanting to turn it into a home serv...

VyOS

fringe pelican Apr 23, 2021, 10:16 PM

#

thank you

peak cloak Apr 23, 2021, 10:18 PM

#

fringe pelican thank you

that's for router

#

if you want to host vms you would want a hypervisor like proxmox

#

I wouldn't recommend having your core router being a full x86 machine and instead have a dedicated hardware router

peak cloak Apr 23, 2021, 10:20 PM

#

stiff panther What my lab used to look like back in 2015

similar to my current one

#

https://cdn.discordapp.com/attachments/387022787480387605/829745549652918312/20210401_121908.jpg

stiff panther Apr 23, 2021, 10:20 PM

#

nice

peak cloak Apr 23, 2021, 10:21 PM

#

stiff panther nice

what are you using for routing?

stiff panther Apr 23, 2021, 10:21 PM

#

pfsense

peak cloak Apr 23, 2021, 10:21 PM

#

ah

stiff panther Apr 23, 2021, 10:21 PM

#

running on a optiplex 7010

peak cloak Apr 23, 2021, 10:21 PM

#

I don't like software routers

stiff panther Apr 23, 2021, 10:21 PM

#

had for 3 years and had no issue

tame carbon Apr 23, 2021, 10:21 PM

#

@stiff panther what kind of throughput do you get on that??

plain siren Apr 23, 2021, 10:22 PM

#

peak cloak I wouldn't recommend having your core router being a full x86 machine and instea...

I guess I shouldve expanded that VyOS would be ran in a VM but this is correct

peak cloak Apr 23, 2021, 10:22 PM

#

yep

plain siren Apr 23, 2021, 10:22 PM

#

Isnt all routers software routers?

peak cloak Apr 23, 2021, 10:22 PM

#

I run vyos as my kubernetes edge router

peak cloak Apr 23, 2021, 10:22 PM

#

plain siren Isnt all routers software routers?

I meant like a dedicated box

#

not a full x86 machine

stiff panther Apr 23, 2021, 10:23 PM

#

tame carbon <@!494821109745713182> what kind of throughput do you get on that??

quite good actually

plain siren Apr 23, 2021, 10:23 PM

#

😛 Im being facetious

tame carbon Apr 23, 2021, 10:23 PM

#

@plain siren well, except those fabric based routers like Juniper

#

they use ASICs

peak cloak Apr 23, 2021, 10:23 PM

#

peak cloak I run vyos as my kubernetes edge router

and then instead of nating I setup static routes between that and my core router which is a ER-X (HEX-S is coming soon hopefully)

tame carbon Apr 23, 2021, 10:23 PM

#

and with Router OS v7 may well become something we can all use

#

hardware offloaded routing

plain siren Apr 23, 2021, 10:24 PM

#

Can I offload it to AWS instead

tame carbon Apr 23, 2021, 10:24 PM

#

AWS Lambda router KEKW

plain siren Apr 23, 2021, 10:24 PM

#

an actual question I got regarding hardware offloading for networking one time *

plain siren Apr 23, 2021, 10:24 PM

#

tame carbon AWS Lambda router <:KEKW:670048864052445204>

this is a thing

tame carbon Apr 23, 2021, 10:24 PM

#

wat

plain siren Apr 23, 2021, 10:24 PM

#

Yeah

tame carbon Apr 23, 2021, 10:25 PM

#

wut xD

plain siren Apr 23, 2021, 10:25 PM

#

https://github.com/Nike-Inc/lambda-router < not the router you are thinking tho

tame carbon Apr 23, 2021, 10:26 PM

#

@plain siren thats just HTTP request routing.

tender hazel Apr 23, 2021, 10:26 PM

#

the bridge mode in this new ISP gateway I upgraded to a few months ago is kinda weird

plain siren Apr 23, 2021, 10:27 PM

#

http://optiputer.net/publications/articles/TSUKISHIMA-OFC-NFOEC06-FirstApplicationTrial.pdf But there is also this

tender hazel Apr 23, 2021, 10:27 PM

#

the gateway itself still gets public v4 and v6 addresses, and so does my router, but of course they are different ones

green forge Apr 23, 2021, 10:27 PM

#

@copper rover well, thank you for helping me out. Ill see if i can do it, but thank you spending 4 hours trying to get this thing to work

plain siren Apr 23, 2021, 10:27 PM

#

tender hazel Apr 23, 2021, 10:27 PM

#

it seems a waste of addresses

peak cloak Apr 23, 2021, 10:27 PM

#

tame carbon <@!589542595341058048> thats just HTTP request routing.

I mean that is a router..

tender hazel Apr 23, 2021, 10:27 PM

#

why does the gateway still need to get public v4 and v6 when it is bridging to me anyway

tame carbon Apr 23, 2021, 10:27 PM

#

@peak cloak nah its a layer 7 mechanism.

tender hazel Apr 23, 2021, 10:27 PM

#

I find it kinda bizarre

#

they obviously aren't worried about wasting IPs

peak cloak Apr 23, 2021, 10:28 PM

#

tame carbon <@!222482269829332992> nah its a layer 7 mechanism.

routing http is still, by definition a router...

plain siren Apr 23, 2021, 10:28 PM

#

#

huehuehue

peak cloak Apr 23, 2021, 10:28 PM

#

traefik uses the term routers

tame carbon Apr 23, 2021, 10:29 PM

#

@peak cloak yeah its request routing

#

But its not the same as 'Routing' in an IP network

#

There's no end to end connection

plain siren Apr 23, 2021, 10:29 PM

#

Sure there is, your browser and a NodeJS/nginx/whatever server

peak cloak Apr 23, 2021, 10:30 PM

#

speaking of traefik, trying to get it to get it to get certs from let's encrypt but it's just not working

#

cannot get ACME client get directory at 'https://acme-staging-v02.api.letsencrypt.org/directory': Get https://acme-staging-v02.api.letsencrypt.org/directory: dial tcp: lookup acme-staging-v02.api.letsencrypt.org on 10.96.0.10:53: server misbehaving"

#

seems like issue with DNS?

#

restarted coredns pod

#

no luck

tame carbon Apr 23, 2021, 10:30 PM

#

10.96.0.10:53 ?

plain siren Apr 23, 2021, 10:30 PM

#

I encountered the "server misbehaving" error when an internal authoritative DNS server did not resolve the public domain name.

#

I had this problem once, that fix was in my bookmarks lol

peak cloak Apr 23, 2021, 10:31 PM

#

tame carbon 10.96.0.10:53 ?

coredns cluster ip

#

#

huh

tame carbon Apr 23, 2021, 10:32 PM

#

KEKW KEKW KEKW KEKW

#

Welcome to the club

plain siren Apr 23, 2021, 10:32 PM

#

LOL

tame carbon Apr 23, 2021, 10:33 PM

#

'normal' dns?

plain siren Apr 23, 2021, 10:33 PM

#

is kubedns crashing

peak cloak Apr 23, 2021, 10:33 PM

#

plain siren is kubedns crashing

No

#

At least not the pod

green forge Apr 23, 2021, 10:35 PM

#

superHammer hypecrab

peak cloak Apr 23, 2021, 10:36 PM

#

Restarted coredns deployment

#

No luck

plain siren Apr 23, 2021, 10:37 PM

#

Did you change your public IP from the node?

peak cloak Apr 23, 2021, 10:38 PM

#

plain siren Did you change your public IP from the node?

Wdym?

#

This is all local

#

Behind nat

plain siren Apr 23, 2021, 10:38 PM

#

Did you change your public facing IP allocation however

#

like did you change the NAT Public IP

#

While kube-dns was running

peak cloak Apr 23, 2021, 10:38 PM

#

Oh, no

#

I'm running metallb if that makes any difference

plain siren Apr 23, 2021, 10:39 PM

#

AH

#

Ok for the said traefik container

#

You have to use a public DNS first

peak cloak Apr 23, 2021, 10:41 PM

#

How exactly would I do that

plain siren Apr 23, 2021, 10:41 PM

#

So traefik needs to have a hardcoded DNS in its config

peak cloak Apr 23, 2021, 10:41 PM

#

Link to docs would be fine

plain siren Apr 23, 2021, 10:41 PM

#

version: "2"
services:
  composeservicefortraefik?:
    dns:
      - 1.1.1.1```
would be a compose example

#

so set the container dns

#

I dont know the docs I know this from tho so

#

But ACME requires Authoritative DNSSEC (internally) Validated Resolves.

peak cloak Apr 23, 2021, 10:43 PM

#

Ah ok

#

I'll try that

tame carbon Apr 23, 2021, 10:43 PM

#

wait, if all local services use 1.1.1.1, couldn't you translate destination on the router, to force it to use your own DNS ? :o

#

dns doesnt do verification checking at all

plain siren Apr 23, 2021, 10:43 PM

#

no, you dont have zone delegation so the DNSSEC Signature would fail

#

ACME Does.

#

The ACME Client.

#

No "resolve fail" but "server misbehaving"

#

Misbehaving cuz invalidated sig

tame carbon Apr 23, 2021, 10:45 PM

#

yawn I'm gonna head off

#

its 00:45

#

time for my beauty sleep

plain siren Apr 23, 2021, 10:45 PM

#

I wont be long myself

tame carbon Apr 23, 2021, 10:46 PM

#

cya

plain siren Apr 23, 2021, 10:46 PM

#

l8r

green forge Apr 23, 2021, 10:50 PM

#

@peak cloak i think i found out what isp locked down this router

#

peak cloak Apr 23, 2021, 11:34 PM

#

huh

#

green forge Apr 24, 2021, 12:53 AM

#

@copper rover i got telnet to work, just that gearguy and geardog dont work

#

and i dont know what to do next

thorny vector Apr 24, 2021, 12:58 AM

#

telnet into your router? @green forge

green forge Apr 24, 2021, 12:59 AM

#

thorny vector telnet into your router? <@!362089571254665218>

yes

#

heres a better explanation

#

does anyone know how to do telnet on a isp locked netgear router?
i got telnet to open up in putty
but i wasnt able to login, i was using gearguy and geardog

thorny vector Apr 24, 2021, 1:00 AM

#

so you don't have the creds for it?

green forge Apr 24, 2021, 1:00 AM

#

nope

#

i reset many times

thorny vector Apr 24, 2021, 1:00 AM

#

what router?

green forge Apr 24, 2021, 1:00 AM

#

i did telnet enable

#

its a netgear r6300v2

#

spectrum wifi locked down

#

i think

thorny vector Apr 24, 2021, 1:01 AM

#

did you try admin:password?

green forge Apr 24, 2021, 1:01 AM

#

#

you see

#

if i want to log into this thing

#

its username: admin Password: cciadmin

#

not admin password

#

heres a pic

thorny vector Apr 24, 2021, 1:02 AM

#

give admin:password a try

green forge Apr 24, 2021, 1:02 AM

#

i did

thorny vector Apr 24, 2021, 1:02 AM

#

ah

green forge Apr 24, 2021, 1:02 AM

#

is it upercased?

#

Upper**

thorny vector Apr 24, 2021, 1:05 AM

#

It's for an older firmware version, but this unauth disclosure exploit may still work

#

https://www.exploit-db.com/exploits/41205

Exploit Database

Netgear Routers - Password Disclosure

green forge Apr 24, 2021, 1:05 AM

#

i have it on my desk for quick turn off or reconnection

#

@thorny vector i cant install any new or old version of firmware due to it being locked down

thorny vector Apr 24, 2021, 1:06 AM

#

I'm saying the exploit may not be patched out.

green forge Apr 24, 2021, 1:07 AM

#

o

#

what do i do with it now

peak cloak Apr 24, 2021, 1:08 AM

#

green forge what do i do with it now

to try to use the exploit?

green forge Apr 24, 2021, 1:08 AM

#

how do i open it in the first place

peak cloak Apr 24, 2021, 1:08 AM

#

it's a python script

green forge Apr 24, 2021, 1:08 AM

#

i have python installed

#

but it just closed immediately

peak cloak Apr 24, 2021, 1:08 AM

#

it's a cli thing

thorny vector Apr 24, 2021, 1:08 AM

#

Another more recent RCE exploit too

#

https://securityreport.com/netgear-routers-vulnerable-to-root-code-execution-no-patch-yet/

Security Report

Ax Sharma

NETGEAR routers vulnerable to "root" code execution, no patch yet -...

In a recently released vulnerability disclosure from d4rkn3ss from VNPT ISC as well as Adam Nichols of GRIMM, we learn of an unpatched vulnerability impacting

green forge Apr 24, 2021, 1:08 AM

#

peak cloak it's a cli thing

hm?

peak cloak Apr 24, 2021, 1:08 AM

#

green forge hm?

command line

thorny vector Apr 24, 2021, 1:09 AM

#

This is why I don't use consumer routers, lol