**** BEGIN LOGGING AT Wed May 13 02:59:57 2009
May 13 06:38:54 <Danicasti> Hi! Buongiorno!
May 13 08:41:28 <blogic> morning
May 13 08:41:44 <c_up> morgen
May 13 08:41:52 <c_up> was neues von cyrus ?
May 13 08:44:18 <blogic> ja
May 13 08:44:25 <blogic> er bekommt volle bandbreite mit rc1
May 13 08:44:29 <blogic> bzw trunk/
May 13 08:44:34 <blogic> was 2-3 tage neuer ist
May 13 08:44:51 <blogic> ich werde es beim nächsten release vorher testen und dir sagen was du erwarten solltests
May 13 08:45:01 <Decodecoding> good morning
May 13 08:45:05 <blogic> Hi Decodecoding
May 13 08:45:16 * blogic is installing a hackintosh
May 13 08:45:56 <Decodecoding> hackintosh in a MSI wind?
May 13 08:48:59 <blogic> 0no
May 13 08:49:01 <blogic> a desktop pc
May 13 09:12:22 <Decodecoding> blogic, I have an external IP hammering on my ftp server doing hundreds of attemps to log in. How can I block that IP?
May 13 09:12:41 <blogic> hmmm
May 13 09:12:48 <blogic> you need to add a iptable rule
May 13 09:12:51 <blogic> or disable ftp
May 13 09:13:00 <Decodecoding> I mean, this is on the fonera ftp server
May 13 09:13:12 <blogic> i do not know directly what the iptables rule would be right now
May 13 09:13:57 <Decodecoding> In Filezilla Server you can set a ban time for IPs failing e certain number of login attemps
May 13 09:13:59 <xMff> iptables -I INPUT -s bad_ip_address -p tcp --dport 21 -j DROP
May 13 09:15:18 <Decodecoding> that could be a good feature fot fonera ftp.
May 13 09:15:57 <Decodecoding> I'll try that rule manually
May 13 09:17:24 <xMff> use: iptables -D INPUT -s bad_ip_address -p tcp --dport 21 -j DROP to remove it again
May 13 09:18:04 <xMff> you can see the hitcount with: iptables -nvL INPUT
May 13 09:19:02 <xMff> if it's a somewhat intelligent bot, it will stop spamming if no responses are given anymore
May 13 09:20:32 <Decodecoding> I can't shake them
May 13 09:20:38 <blogic> xMff: we should add knockd :)
May 13 09:20:55 <xMff> blogic: ipt_limit, to enforce soft limits
May 13 09:21:12 <xMff> must normal users lack tools for port knocking imho
May 13 09:21:14 <xMff> *most
May 13 09:21:26 <Decodecoding> http://pastebin.com/m794032f6
May 13 09:21:49 <xMff> ah, chinese... how unexpected
May 13 09:22:17 <Decodecoding> The thing is pure-ftp reports ERROR too many login failures, but does nothin about it....
May 13 09:22:47 <xMff> I think it will drop the connections then but the client will jsut reconnect
May 13 09:23:32 <xMff> Decodecoding: btw, you can also paste the hostname instead of ip address in the iptables rule
May 13 09:23:47 <Decodecoding> I see
May 13 09:25:59 <xMff> blogic: maybe develop something like failtoban, that can also monitor ftp connection attempts
May 13 09:27:43 <blogic> hmm
May 13 09:28:43 <xMff> or let pureftpd write a tempfile with failed ips and make rules for them, then a cronjob would be enough
May 13 09:35:01 <blogic> yeah
May 13 09:36:39 <Decodecoding> beat those hackers!
May 13 09:36:55 <xMff> crackers!
May 13 09:37:04 <Decodecoding> yes sorry
May 13 09:37:07 <xMff> :)
May 13 11:18:16 <Decodecoding> I've disabled ftp temporarily.
May 13 13:27:49 <Kyros> hi friends
May 13 13:29:03 <Kyros> little question: is there a way to store the settings and to reload them after fw-upgrade?
May 13 13:32:36 <Kyros> @ iurgi + blogic: is there a way to store the settings and to reload them after fw-upgrade?
May 13 13:52:19 <blogic> Kyros: we will add it soonish
May 13 14:07:10 <Decodecoding> blogic, any clue on the memory problems? Could it be I have a defective fonera?
May 13 14:35:25 <inouk>  Decodecoding what's the memory problem?
May 13 14:48:12 <zen2> hello
May 13 14:48:24 <Decodecoding> The crashes while using torent app
May 13 14:50:25 <zen2> fon has amind of it's own.. :p
May 13 14:50:38 <zen2> maybe he thinks you shouldn't be dowloading that torrent.. :p
May 13 14:54:52 <Decodecoding> I only download linux .iso images for testing them
May 13 14:56:55 <zen2> me too. :) and I delete them immediately... just like fon's boss... ;)
May 13 16:47:09 <burton-ng> hello
May 13 16:49:52 <burton-ng> has anybody checked wether webcam works or not in the last firmware 2.2.6.0
May 13 16:51:50 <blogic> i have not tested it
May 13 16:51:55 <blogic> i will do it tomorrow
May 13 16:54:00 <burton-ng> i have tested it with a logitech e3500
May 13 16:54:05 <burton-ng> it used to work with flipper 2.2.5
May 13 16:54:13 <burton-ng> now it doesnt
May 13 16:54:44 <burton-ng> not from network...nor wan
May 13 17:15:02 <blogic> ok
May 13 17:15:06 <blogic> i will update it tomorrow
May 13 18:01:33 <c_up> hi, from time to time, i loose my lan and wlan connection, anything know about it?
May 13 18:02:04 <blogic> no
May 13 18:08:47 <c_up> hm, fonera is also very slow, have about 40 files in downlod que
May 13 18:09:25 <c_up> wan connection from fonera works fine everytime
May 13 18:11:20 <c_up>  Fonera local6.info chillispot[2365]: options.c: 782: Rereading configuration file and doing DNS lookup
May 13 18:11:37 <c_up> Fonera user.notice root: adding tun0 to firewall zone hotspot
May 13 18:11:47 <c_up> thats what logread says at this time
May 13 18:12:46 <c_up> https://www.mibbit.com/pb/DITxzy
May 13 18:22:59 <C_up> damn connection lost again
May 13 18:26:08 <C_up> https://www.mibbit.com/pb/G7X1YR
May 13 19:05:06 <Decodecoding> * Iurgi won't miss today's match :-d
May 13 19:21:18 <burton-ng> soo any future release? are more surprises coming?
May 13 19:21:42 <Styx``> of ... ?
May 13 19:21:50 <burton-ng> fonera 2.0
May 13 19:22:10 <burton-ng> or even fonera 2100...a repeater mode woudl be nice
May 13 19:27:27 <Styx``> on which one ?
May 13 19:27:39 <Styx``> 2100 or 2.0 ?
May 13 19:51:09 <burton-ng> i am using freewlan in order to get qrm (repeater)working but it is not so simple
May 13 19:51:59 <burton-ng> i once saw 1 year ago..that fon was going to include the possibility to use a wireless bridge mode
May 13 19:52:18 <burton-ng> it would be helpful to locate foneras near windows
May 13 19:52:38 <burton-ng> i am talking about 2100/2200
May 13 20:29:04 <c_up> damn disconnect feature ;)
May 13 20:29:31 <xMff> does it correlate with the dhcp lease time of your isp?
May 13 20:29:41 <xMff> or wan router
May 13 20:30:03 <c_up> no, wan is ok, only lan and wlan
May 13 20:30:29 <xMff> I mean, maybe the wan ip is refreshed and nat rules do not catch up or sth. like that
May 13 20:30:35 <xMff> but unlikely
May 13 20:30:53 <xMff> would be interesting to know what actually prevents the traffic forwarding
May 13 20:30:55 <c_up> no, wan ip is ok, no refresh
May 13 20:31:03 <xMff> did you watched dmesg?
May 13 20:31:12 <xMff> any warnings about a full conntrack table?
May 13 20:31:22 <c_up> ?
May 13 20:31:32 <c_up> conntrackt table ?
May 13 20:31:55 <xMff> yeah, that things holds info about open (natted) connections
May 13 20:32:10 <xMff> if it runs full, no new connections can be made from lan or wifi to wan
May 13 20:32:28 <c_up> i think it is because i have ~40 files in rs.com dl que and downloading
May 13 20:32:43 <c_up> hm, wlan brokes complete
May 13 20:33:09 <xMff> have you tried to log in with ssh if it's broken and look what "logread" and "dmesg" report?
May 13 20:33:09 <c_up> and fonera is slow, i think it is too much for my little fonera
May 13 20:33:40 <c_up> yes, posted lnks in the last 2 hours
May 13 20:34:20 <c_up> but can't see them anymore, because of the disconnect ;)  maybe you ?
May 13 20:35:17 <xMff> yeah, just took a look
May 13 20:35:33 <xMff> but I don't know enough about the firmware to interpret the messages
May 13 20:36:03 <c_up> iurgi can!
May 13 20:36:56 <c_up> can you post them again, so i can save em ?
May 13 20:37:15 <xMff> moment
May 13 20:37:26 <xMff> https://www.mibbit.com/pb/DITxzy - https://www.mibbit.com/pb/G7X1YR
May 13 20:38:41 <c_up> thx
May 13 20:42:26 <xMff> next time it happens, try also to save the output of "iptables -nvL; iptables -t nat -nvL"
May 13 20:44:50 <c_up> ok, tryed it, so much entrys, putty don't show all of them
May 13 20:45:12 <c_up> https://www.mibbit.com/pb/O8qCPg
May 13 20:45:17 <xMff> you have a disk attached?
May 13 20:45:26 <c_up> will try it, when it happens next time
May 13 20:45:30 <c_up> yes, i have
May 13 20:45:51 <xMff> then you could also do this: (iptables -nvL; iptables -t nat -nvL) > /patch/where/disk-is-mounted/debug.txt
May 13 20:46:01 <xMff> then you can pull the generated file with samba or ftp
May 13 20:46:56 <xMff> but maybe you should wait until someone from the firmware team gives directions :)
May 13 20:47:01 <xMff> not that this breaks something
May 13 20:49:10 <c_up> running rc1 maybe thats the thing
May 13 21:52:28 <Styx``> good night
May 13 21:57:48 <Decodecoding> Hi ya
**** ENDING LOGGING AT Thu May 14 02:59:57 2009