**** BEGIN LOGGING AT Sun Dec 06 02:59:58 2009 Dec 06 09:25:01 oi Dec 06 09:25:10 how to access from wan ftp service? Dec 06 10:07:07 ciao a tutti! Dec 06 10:09:12 I read the news of the next fw: there's the bridge! Dec 06 10:11:08 yea XD Dec 06 10:11:25 where is that news? Dec 06 10:17:35 Barbon: You'll have to enable FTP on the firewal settings page AFAIK Dec 06 10:21:23 @blathijs: do you have experience with pure-ftpd? Dec 06 10:26:05 blath i have already enabled Dec 06 10:26:20 what is the andress that i have to use? Dec 06 10:29:00 my andress is https://xion.getmyip.com/ Dec 06 10:29:00 Barbon: That depends on the address your Fonera has gotten from your modem. Dec 06 10:29:31 Barbon: But you might need to setup port forwarding on your modem as well, since it is likely that it also performs NAT Dec 06 10:29:47 i have already do it Dec 06 10:29:49 Barbon: (ie, "WAN side" from the Fonera pov is not usually the same as "The internet" Dec 06 10:30:19 giuseppeg88: Nope, though there was somebody here recently that tried to setup multiple accounts with pure-ftpd (or was that you?) Dec 06 10:30:30 so the ftp andress is ftp://xion.getmyip.com/ Dec 06 10:30:32 ? Dec 06 10:31:05 yes, he is me! Dec 06 10:31:57 Barbon: Dunno, did you setup some kind of dyndns service there? Dec 06 10:32:07 Barbon: I can't seem to connect to ftp on that address, though Dec 06 10:32:08 yea Dec 06 10:32:21 i have opened the port Dec 06 10:32:25 mmm Dec 06 10:32:34 giuseppeg88: Ah. Any luck with it? Dec 06 10:32:41 what is the ftp port? Dec 06 10:32:47 21 IIRC? Dec 06 10:33:26 and 20 for ftp-data, but I'm not completely sure how that is used Dec 06 10:34:02 But with just 21 you should be able to at least setup an ftp connection Dec 06 10:34:20 Barbon: You should check if you can connect to your Fonera from its WAN side Dec 06 10:34:57 e.g., plug in a computer directly into the modem, next to the Fonera, instead of plugging it into the Fonera's LAN ports (or wireless) Dec 06 10:35:04 i can connect on it Dec 06 10:35:05 https://xion.getmyip.com/ Dec 06 10:35:50 mm wait Dec 06 10:35:58 i think my father has turned off my fon Dec 06 10:36:00 1 sec Dec 06 10:36:01 Ah, right. So that either means your port forward on the modem is wrong, or the Fonera doesn't have its FTP port open on its WAN side Dec 06 10:36:30 * blathijs is off to the shower and breakfast, back in a bit. Dec 06 10:37:13 nope it work Dec 06 10:41:19 danicasti clone invaders Dec 06 10:41:21 :S Dec 06 10:41:38 uff..... Dec 06 10:41:46 bad connection.... Dec 06 10:57:04 i see Dec 06 10:57:05 XD Dec 06 15:56:02 hey! Dec 06 15:56:19 Anyone feel like helping me with a crazy problem? Dec 06 15:56:37 e7jonas: whats wrong? Dec 06 15:56:51 well, just bought a 2.0n router Dec 06 15:57:21 when i connect to my cable modem it does not connect to internet, my computer does (with the same cable) Dec 06 15:57:48 i have managed to connect to internet trough the router, but the router itself does not understand that it is connected Dec 06 15:58:14 sometimes I can ping ip numbers, do dig lookups if i choose another dns-server Dec 06 15:58:19 e7jonas: how have you managed to connect to internet through router? Dec 06 15:59:16 yes, I have, after I opened a terminal window and did dig lookups, all of a sudden I had a different DNS server in my settings and i could reach da interwebs Dec 06 15:59:42 but only with one computer, my mac, not with a PC connected to the same wireless network... really strange problems Dec 06 16:00:33 wondering if I should get the DEV firmware so I can SSH to the router Dec 06 16:01:03 But my only reasonable conclusion to all this is that the SW in the router is broken Dec 06 16:01:56 ping norrkoping.aftonbladet.se Dec 06 16:01:56 PING norrkoping.aftonbladet.se (192.71.238.76): 56 data bytes Dec 06 16:01:57 36 bytes from 192.71.238.14: Communication prohibited by filter Dec 06 16:01:57 Vr HL TOS Len ID Flg off TTL Pro cks Src Dst Dec 06 16:01:57 4 5 00 5400 8dd8 0 0000 78 01 fbd3 10.0.0.105 192.71.238.76 Dec 06 16:03:38 Any clues? Dec 06 16:04:31 e7jonas: can you set up custom dnses in fonera's internet configuration? Dec 06 16:04:55 yes, I have tried that, does not help Dec 06 16:06:34 everything seems so strange, that the router gets an ip number, dns and all that, and occasionally I can even surf the web, but the router doesnt understand that is has internet connection... thinking about returning the router. Dec 06 16:07:12 e7jonas: what's firmware version? Dec 06 16:08:04 I have gotten the same problem with both the original 2.2.6 and I have now upgraded to 2.3.0 and the problem persists Dec 06 16:10:23 e7jonas: how router tells you, it thinks it's not connected to the internet? Dec 06 16:10:46 I can not install applications and the power button flashes Dec 06 16:13:31 try to reset Dec 06 16:17:34 I have done that several times Dec 06 16:18:12 e7jonas you have make a complete reset or partial? Dec 06 16:18:32 both Dec 06 16:18:51 "factory settings" in the webinterface and also the button on the back of the router Dec 06 16:20:29 you have to try to reload firmware by using redboot Dec 06 16:20:58 what is redboot? Dec 06 16:21:12 1 sec... Dec 06 16:21:17 ok Dec 06 16:21:45 i have updated the firmware, but still have the same problem Dec 06 16:22:51 The Fonera 2 (2202) sold since January 2009 has RedBoot disabled on the network port as well. Dec 06 16:22:54 -.- Dec 06 16:23:18 http://wiki.fon.com/wiki/Firmware_Update_Instructions Dec 06 16:28:12 I have not tried Redboot, but why would I want to? Dec 06 16:31:54 What do you think, should I send it back? Dec 06 16:32:14 To me it seems like the router is not working like it should, even after FW update... Dec 06 16:35:02 "Communication prohibited by filter" sounds like firewall - this is no dns issue Dec 06 16:35:55 dns would be "bad address", "unkown host" or "no route to host" Dec 06 16:39:05 I know... I classify this as "a strange problem" Dec 06 16:39:07 :D Dec 06 16:39:19 also: are you on the public or the private network? Iirc the public network has certain address restrictions Dec 06 16:39:21 That's why I need your help Dec 06 16:39:25 private Dec 06 16:39:47 also tried with cable Dec 06 16:39:51 then sometimes cable modems need a reset as well before accepting a new device, they tend to cache the mac internally Dec 06 16:40:14 I know, but I have plugged in a new computer, and it gets an IP without problem Dec 06 16:40:26 also how is your isp modem configured? using pppoe or dhcp? Dec 06 16:40:44 er scratch that, if it is a cablemodem then most likely dhcp Dec 06 16:40:52 and also, I can reach internet through the Fonera router sometimes, but the router does not understand that it has connection Dec 06 16:41:00 dhcp, yes Dec 06 16:41:42 in what range are the ip address handed out by your isp router? Dec 06 16:41:52 192.168.0 Dec 06 16:41:52 192.168.1.x ? Dec 06 16:41:55 ok Dec 06 16:42:04 the fonera uses a different range on its lan? Dec 06 16:42:15 and I have tried to use 10.0.0 for my local network Dec 06 16:42:25 ok Dec 06 16:42:31 default is 192.168.10 i think Dec 06 16:43:24 and how does a traceroute from a client host to an internet ip looks like? Dec 06 16:43:43 it stops at the router adress Dec 06 16:43:54 which router? Dec 06 16:43:57 isp one? Dec 06 16:44:00 or fonera? Dec 06 16:44:02 i have not tried traceroute when I got connection Dec 06 16:44:05 fonera Dec 06 16:44:28 does your isp router offer some kind of client overview? Dec 06 16:44:40 where you can see what ips are leased Dec 06 16:45:50 no, the interface is really limited Dec 06 16:46:01 if the fonera has sometimes connection and sometimes not, maybe some internet availability check failed Dec 06 16:46:16 like ping to fon.com not successful or similar Dec 06 16:46:53 well, I can ping ip numbers Dec 06 16:46:57 not do a lookup Dec 06 16:46:58 always? Dec 06 16:47:06 but all of a sudden I had connection Dec 06 16:47:16 even with the browser Dec 06 16:48:52 i can do lookup if I specify a server Dec 06 16:48:56 not default server Dec 06 16:49:17 what is the default server? fonera itself? Dec 06 16:49:22 which is a valid dns server, by the way, the same I get if i connect with the same cable Dec 06 16:49:44 so the fonera shows your isp dns in its connection overview? Dec 06 16:49:50 I have tried to define a different dns, no luch Dec 06 16:49:51 luck Dec 06 16:49:55 yes Dec 06 16:50:48 and your client uses the fonera as dns? Dec 06 16:51:03 and if I am connected my buddy can connect but not reach anything but some strange Fon page that says "webserver - 4" or something Dec 06 16:51:30 this really looks like captive portal stuff Dec 06 16:51:33 yes Dec 06 16:51:39 which is? Dec 06 16:52:01 if a user connects, whatever he requests is redirected to some agreement page Dec 06 16:52:27 yeah, that happened before, no matter what lookup i did i got the same ip Dec 06 16:52:37 even on lan? Dec 06 16:52:42 yes Dec 06 16:53:04 ok Dec 06 16:53:07 i think so, dont remember all the crap I have tried :D Dec 06 16:53:14 to make it work Dec 06 16:53:30 on the fonera there are some settings for firewalling, hotspot etc. Dec 06 16:53:38 right... Dec 06 16:53:40 try disabling all that stuff for now Dec 06 16:53:43 how? Dec 06 16:54:03 in the web interface? Dec 06 16:54:16 i tried to "allow" everything in the firewall Dec 06 16:54:34 well first disable the fon spot Dec 06 16:54:57 ok, just did Dec 06 16:55:10 no internet Dec 06 16:56:18 no dns or no internet? Dec 06 16:57:05 can not ping ip number Dec 06 16:57:27 and the comp has fonera as dns Dec 06 16:57:29 you're connected to the wireless network right now? Dec 06 16:57:33 yes Dec 06 16:57:36 change? Dec 06 16:57:47 maybe reassociate Dec 06 16:57:53 or try cable Dec 06 16:58:07 ok, connecting the cable... Dec 06 16:58:25 but yeah, I think you should install a dev firmware to gain ssh access, then you can check routing, ping etc. from there Dec 06 16:58:31 otherwise it is just guessing around Dec 06 16:58:47 i have installed the dev fw, in pure desperation hehe Dec 06 16:58:58 yeah Dec 06 16:59:23 okay, you need to set a "secure" pwd via webif to enable ssh, it needs to contain upper + lowercase letters and digits Dec 06 16:59:48 there is a check in the firmware which checks the password strength before opening ssh Dec 06 16:59:50 no, I already have ssh, able to log in Dec 06 16:59:57 good Dec 06 16:59:57 no prob Dec 06 17:00:06 never had to do that Dec 06 17:00:09 ? Dec 06 17:00:17 but I have a good pw Dec 06 17:00:51 ok. if you run "route -n" is there a default route? Dec 06 17:01:08 thanks for helping me, by the way :D Dec 06 17:01:35 ok, the router can ping an external webpage Dec 06 17:02:04 ok, client still not? Dec 06 17:02:45 exactly Dec 06 17:02:51 client has no route Dec 06 17:03:05 no default route? Dec 06 17:03:09 that's off Dec 06 17:03:11 *odd Dec 06 17:03:22 well, where do I read the default route? Dec 06 17:03:38 it is a table with ips and gateway is 0.0.0.0 Dec 06 17:03:40 on most Dec 06 17:03:42 what system runs on your client? Dec 06 17:03:55 I am on a mac, the comp testing is XP Dec 06 17:04:34 last one "Destination" is 0.0.0.0 and gateway 192.168.0.1 Dec 06 17:04:59 wait Dec 06 17:05:04 this is wrong Dec 06 17:05:11 what is? Dec 06 17:05:28 so the client connected to the fonera tries to use your isp router as gateway Dec 06 17:05:32 this can not work Dec 06 17:05:53 oh Dec 06 17:05:55 hmm Dec 06 17:06:04 the entry with 0.0.0.0 0.0.0.0 should have the fonera lan ip as third ip Dec 06 17:06:33 "route print" in cmd.exe prints the routing table on xp Dec 06 17:06:57 no, that was route -n on the router... Dec 06 17:07:21 ah Dec 06 17:07:21 wow, more ips than I can write Dec 06 17:07:59 on xp it is 10.0.0.1 Dec 06 17:08:23 ok, try this on the fonera: /etc/init.d/firewall stop Dec 06 17:09:02 ok Dec 06 17:09:03 doe Dec 06 17:09:04 done Dec 06 17:09:38 retry tracert/ping on the xp system Dec 06 17:09:59 no route Dec 06 17:10:13 "no route to host" ? Dec 06 17:10:24 timed out Dec 06 17:10:45 but it can ping 10.0.0.1 ? Dec 06 17:11:02 no Dec 06 17:11:06 ... Dec 06 17:11:08 hmmm? Dec 06 17:11:10 strange Dec 06 17:11:21 try: iptconfig /renew Dec 06 17:11:29 or disable/enable the lan/wifi interface on xp Dec 06 17:11:49 *ipconfig /renew Dec 06 17:11:52 wifi is off Dec 06 17:12:00 and renewed, no route Dec 06 17:12:25 but you got an ip assigned? Dec 06 17:12:28 yes Dec 06 17:12:35 10.0.0.x ? Dec 06 17:12:38 yes Dec 06 17:12:47 can you ping 10.0.0.1 now? Dec 06 17:12:53 no Dec 06 17:13:11 oO Dec 06 17:13:30 wich is strange, cause I have an open ssh window to 10.0.0.1 Dec 06 17:13:40 can the fonera ping the ip you got assigned? Dec 06 17:13:48 maybe I should use my mac for this instead, I dont trust xp ;) Dec 06 17:14:44 nope, timed out Dec 06 17:14:58 hmmm Dec 06 17:15:32 iptables -P INPUT ACCEPT; iptables -P OUTPUT ACCEPT; iptables -P FORWARD ACCEPT and repeat Dec 06 17:16:30 xp? Dec 06 17:16:36 on the fonera Dec 06 17:17:58 ok Dec 06 17:18:16 repeat? Dec 06 17:18:23 yes Dec 06 17:18:57 you mean write the same thing more than once? Dec 06 17:19:13 sorry, not sure what you mean Dec 06 17:19:52 no, you execute the iptables commands above once on the fonera, then try to ping xp->fonera, fonera->xp Dec 06 17:20:00 ok Dec 06 17:20:34 no luck Dec 06 17:21:24 but i can still reach the webinterface Dec 06 17:21:36 then something is really strange Dec 06 17:22:02 you can't ping it but reach the webif and ssh Dec 06 17:22:13 i know, i have been trying to fix this all day today Dec 06 17:22:15 this is kind of unlogical Dec 06 17:22:43 maybe I should try to do this with my mac instead... then I can copy output to you? Dec 06 17:22:49 run this on the fonera: iptables -nvL; iptables -t nat -nvL and copy the output to pastebin.com Dec 06 17:22:58 you're using putty? Dec 06 17:23:20 cause the win comp is a company comp with crap on it Dec 06 17:23:24 my mac is private Dec 06 17:23:33 I see Dec 06 17:23:39 yes, maybe try with the mac instead Dec 06 17:23:51 let me connect to the router with my mac, and connect to internet with my phone Dec 06 17:23:55 be right back! Dec 06 17:24:02 is there some kind of personal fw on the xp box? Dec 06 17:24:02 ok Dec 06 17:33:35 back! Dec 06 17:35:43 with my mac I can ping both ways Dec 06 17:36:48 ok Dec 06 17:37:58 and nslookup works with the fonera Dec 06 17:44:55 xMff: any more ideas? Dec 06 17:45:43 http://www.youtube.com/watch?v=1IAn85-q5PA fanera Dec 06 17:45:45 LOL Dec 06 17:45:47 yes, reboot the fonera because the firewall stop you did earlier disabled the nat Dec 06 17:46:26 ah Dec 06 17:47:36 done Dec 06 17:48:10 btw - fonera boots really fast :) Dec 06 17:48:43 that is a good thing... Dec 06 17:55:50 i am fresh out of ideas... Dec 06 17:55:53 nothing works Dec 06 17:56:11 hmm Dec 06 17:57:05 you can ping 10.0.0.1 now? Dec 06 17:57:15 but still can't reach the web? Dec 06 17:57:19 but the fonera can? Dec 06 17:58:14 i can ping 10.0.0.1, no web... fonera can ping da interwebs Dec 06 17:59:02 feels like the routing sw is broken Dec 06 17:59:31 but at the same time the router doesnt allow me to install apps, because its "offline Dec 06 18:00:09 check "logread" on the fonera Dec 06 18:00:44 should I grep something, it is a long list Dec 06 18:00:56 no just look for error messages etc. Dec 06 18:01:14 ok Dec 06 18:05:22 cannot find anything that gives a hint about what is wrong Dec 06 18:06:40 what is the output of iptables -nvL; iptables -t nat -nvL ? Dec 06 18:09:01 a very long list Dec 06 18:09:04 ;) Dec 06 18:09:42 can you put it into pastebin.com ? Dec 06 18:09:47 sure Dec 06 18:11:38 its under e7jonas at pastebin Dec 06 18:14:10 post the url Dec 06 18:14:14 can't find it Dec 06 18:14:16 ok Dec 06 18:14:27 http://pastebin.com/d6f539ff6 Dec 06 18:20:09 looks okay Dec 06 18:20:17 okay, good... Dec 06 18:20:51 on the fonera: cat /proc/sys/net/ipv4/ip_forward Dec 06 18:20:51 should return "1" Dec 06 18:21:20 it does Dec 06 18:21:29 sysctl net.ipv4.tcp_ecn Dec 06 18:21:33 should return "0" Dec 06 18:21:57 net.ipv4.tcp_ecn = 1 Dec 06 18:22:01 grr Dec 06 18:22:08 :D what? Dec 06 18:22:19 this is beyond me, have no clue what we are doing Dec 06 18:22:27 well, some clue Dec 06 18:22:34 we're checking kernel settings Dec 06 18:22:37 ok Dec 06 18:22:55 are you familiar with vi? Dec 06 18:23:09 well, some, but have problem to leave it every time ;) Dec 06 18:23:19 :wq! right? Dec 06 18:23:20 :x Dec 06 18:23:31 ah Dec 06 18:23:36 :x = :wq Dec 06 18:23:48 ok Dec 06 18:23:54 key, then edit /etc/sysctl.conf Dec 06 18:24:01 find the key named net.ipv4.tcp_ecn Dec 06 18:24:04 and set it to 0 Dec 06 18:24:07 then reboot Dec 06 18:24:31 "i" to enter edit mode Dec 06 18:26:11 haha, good tip, I kept jumping to the start of the line Dec 06 18:26:14 :) Dec 06 18:26:56 well, now it is 0 Dec 06 18:27:08 net.ipv4.tcp_ecn = 0 Dec 06 18:28:14 this is the only common problem I know, if it still does not work I'm out of ideas Dec 06 18:28:24 it is working... Dec 06 18:28:46 would you mind explaining what we did and what the problem was? Dec 06 18:29:24 tcp_ecn is a tcp extension called "explicit congestion notification" inteded for bandwidth management Dec 06 18:29:45 ah, ok Dec 06 18:29:54 many routers and hosts in the internet have broken firewalls deployed that silently drop packets using this mechanism Dec 06 18:30:10 this seems to be the case for fon's servers too Dec 06 18:30:11 hmmm Dec 06 18:30:34 the ultimative result is that tcp connections made from the router do not work Dec 06 18:30:36 and this is random? Dec 06 18:30:44 but icmp (ping) works fine Dec 06 18:30:52 crazy Dec 06 18:30:54 this causes the fon connection test to fail Dec 06 18:31:07 which results in non working forwarding Dec 06 18:31:53 I'm about to create a ticket now Dec 06 18:32:07 well, i am really happy that you helped me with this, xMff Dec 06 18:32:15 thanks a bunch!! Dec 06 18:32:16 the tcp_ecn parameter already caused weeks of debugging efford Dec 06 18:32:29 ouch Dec 06 18:32:34 weeks? Dec 06 18:32:55 if you do not know about of its existance Dec 06 18:33:01 ... and ping works fine Dec 06 18:33:18 you start to get crazy :) Dec 06 18:33:25 i did :D Dec 06 18:34:25 how hard is it to get a 3G dongle to work, now that the router is fixed Dec 06 18:34:26 ? Dec 06 18:34:43 depends Dec 06 18:34:50 I have two, neither was working before, but I felt that this was prio 1 Dec 06 18:34:57 if it is officially supported it should be just plug & play Dec 06 18:35:35 I have one Huawei E220, which is supposed to work, but doesnt Dec 06 18:35:51 and one SonyEricsson MD400 Dec 06 18:36:05 saw something about changing the settings Dec 06 18:36:24 it is supposed to dial *99# Dec 06 18:49:31 blogic, iurgi: http://trac.fonosfera.org/fon-ng/ticket/479 Dec 06 18:50:03 e7jonas: certain dongles require some sepcial setup to disable the mass storage mode Dec 06 18:50:52 are there instructions on the wiki on how to do this? Dec 06 18:51:28 I am not sure Dec 06 18:51:55 search for "fonera usb_modeswitch" in google Dec 06 18:52:25 or "fonera ozerocdoff" Dec 06 18:53:14 the E220 is definitely a "flip-flop" device Dec 06 18:53:30 it presents itself as usb storage and needs to be switched into modem mode Dec 06 18:56:05 the MD400 too Dec 06 18:56:11 you need usb_modeswitch for both Dec 06 18:57:29 you can automate it by creating a script similar to /etc/hotplug.d/usb/10-hso Dec 06 18:57:45 this script gets executed every time an usb device is plugged in Dec 06 18:58:21 there you need to place the usb_modeswitch command Dec 06 18:58:50 okay, and this requires me to install stuff on the router Dec 06 18:58:50 aha, nice Dec 06 18:58:50 is this really something I should try to do? Dec 06 18:59:02 would be stupid to brick it Dec 06 18:59:07 :) Dec 06 18:59:51 well should be no problem to install the binaries Dec 06 18:59:57 the root filesystem is writeable Dec 06 19:00:03 so you can just scp stuff over Dec 06 19:00:20 just be careful to not fill up the entire space Dec 06 19:00:28 df -h tells you the remining storage Dec 06 19:03:10 so, you consider this to be easy peasy? ;) Dec 06 19:03:20 just follow the instructions... Dec 06 19:03:38 http://wiki.fon.com/wiki/FON2-Tweak-3G-IT-TIM Dec 06 19:03:53 yeah, just read through that... Dec 06 19:05:26 but I need to do lspci to find vendor id Dec 06 19:06:05 cat /proc/bus/usb/devices works too Dec 06 19:06:31 that works on the fonera too, right? Dec 06 19:06:34 yep Dec 06 19:06:38 nice Dec 06 19:07:49 I think this usb_modeswitch.conf will work for the E220: http://pastebin.com/m55215bc9 Dec 06 19:08:27 okay, thanks... but the SonyEricsson is more important Dec 06 19:09:02 and probably more difficult to get to work, :( Dec 06 19:10:14 like it says in the instructions, maybe the modem changes id when chaning to a serial device Dec 06 19:10:38 changing Dec 06 19:10:43 :) Dec 06 19:14:54 http://pastebin.com/m994610e - this should work for the md400 Dec 06 19:15:03 http://www.draisberghof.de/usb_modeswitch/usb_modeswitch.conf Dec 06 19:15:22 this page contains examples for all kinds of devices (just search for md400 or e220) Dec 06 19:16:40