Develop your Cybersecurity Framework
Supply chain attacks, ransomware attacks, phishing, data breaches; all these types of attacks are on the rise, thanks to the expansion of the connected world. With greater expansion comes greater security risk.Recent comments
- After the initial Kong Mod 5 months 2 days ago
- Working the EXACT same 5 months 2 days ago
- While the "5 Easy Steps" 5 months 1 week ago
- R8000P would be grate to see. 5 months 2 weeks ago
- Have a R8000 but ordered a 5 months 2 weeks ago
i found something on openwrt on how to get the ip if wan IP change
https://forum.openwrt.org/viewtopic.php?pid=192875#p192875
eliz82:
OK, it’s up to you. IMO it is better to use some well known tools. ddclinent I use for example supports various types of DDNS providers. It process for me about 8 names in DynDNS and afraid.org.
IP, I use on one of my router the following script to display IP, you can modify it for your needs:
#!/bin/sh
# Display current WAN IP address
count=0
while [ $count -le 20 ]; do
/usr/bin/wget -q -O /tmp/wanip.txt http://checkip.dyndns.org:8245/
if [ $? -eq 0 ]; then
/bin/cat /tmp/wanip.txt | /bin/grep -o -E "Current IP Address: .*[0-9]"
/bin/rm -f /tmp/wanip.txt
break
fi
/bin/rm -f /tmp/wanip.txt
count=$(($count+1))
done
Cycle is to avoid temporary problems with DynDNS service.
For your script you can use either cron or modify my /usr/sbin/net-wall adding call of your script after line with “iptables”. So it will be called every time when router set/reset current firewall rules.
Voxel.
Excuse me for jumping into your conversation.
Is there any way to clear "ReadyCLOUD" without reseting router to default and reconfiguring everything over again? In my case router is shoing that is registered to ReadyCLOUD but on the web page is not. Clicking on "unregister" just quickly reload the page and status remained "registered". Currently my router is running latest official release because bridge mode is temporarry broken in Voxel's build.
Hi Zeljko,
As far as I know to clear ReadyCLOUD it is necessary to remove:
/opt/leafp2p/
/opt/rcagent/
/opt/remote/
/opt/xagent/
/usr/lib/rclibrary.so
/www/cgi-bin/genie.cgi
/www/bin/readycloud_control.cgi
then remove /opt/ if no Entware is here.
And reboot router.
Voxel.
I have have added "/usr/sbin/net-wall"
#!/bin/sh
# register my IP to my custom DDNS
AGENT=Custom
USERNAME=myuser
PASSWORD=mypass
SUBDOMAIN=eliz.some-ddns.ro
IP=$(wget -O - -q http://myip.dnsomatic.com/)
URL=http://www.some-ddns.ro/update.php
curl -A "$AGENT" -d "username=$USERNAME&password=$PASSWORD&subdomain=$SUBDOMAIN&ipaddr=$IP&change=Update" $URL
and it seems to work. I reconnected my pppoe connection from the webgui to get a new wan ip and it seem the address on my custom ddns was updated for the first time in the last 5 days.
---
but i would preffered a more classical aproach like the guys from openwrt are doing it https://wiki.openwrt.org/doc/techref/hotplug
I have created a file "/etc/hotplug.d/iface/99-wanup" that contain a script like this
#!/bin/sh
[ "$ACTION" = "ifup" ] && {
cat >> /opt/test.txt <<EOF
99-wanup
EOF
}
however nothing appear in my "/opt/test.txt" if I reconnect my pppoe connection. any idea why hotplug script dont work ? teoretically it should detect when wan is up.
Thx Voxel. You are really Netgear expert. However, looks like that is easier to do factory reset and quickly configure router again :)
by the way Voxel i don't seem to find netdata in your entware x3
in the original entware-ng is there http://pkg.entware.net/binaries/armv7/Packages.html
More fresh version of Entware-3x:
https://yadi.sk/d/DTr4u2IRxe8AF
Voxel.
Is it possible to plug in USB WiFi stick and connect to internet over another WiFi network instead of using bridge mode and lost most of the R7800 funcionality?
WiFi stick - problematic. Impossible w/o changes in FW.
Maybe it is more easy to use some additional cheap router working in bridge mode and connected to WAN of R7800 working in router mode. With cost $20-25. Tp-Link produces chear compact routers e.g. TL-MR3020. OpenWRT can be installed to such router.
Voxel.
Thx Voxel. After some research, I figured the same :)
Some feedback
1) Netdata is not running with Entware 3x alternative instalation, again problems with user nobody (the default in netdata config). I used standard installation (I renamed the files and manually made symlinks myself) and it's running fine now (with the default config, I didn't test the plugins at the moment).
2) By puting registering ddns script to "/usr/sbin/net-wall" some users can have problems. I have made a log to check how many times the file is executed and it seems sometimes is running the script 4 times in the same minute. Some ddns host may have some protection implemented and ban you for making to many update requests in a short time. For example my ddns host ban you for 24h if you make more then 10 requests in 10 minutes.
Example from my log:
2016/12/27 22:54:12
2016/12/27 22:54:18
2016/12/27 22:58:54
2016/12/27 22:58:59
2016/12/27 22:59:14
2016/12/27 22:59:20
3) Inadyn client for ddns is not working in my case, it do not have a capability to specify user agent when trying to acces the ddns update page. I have made a request but it seems the developer don't want to add this future as he dosent use it , pff
https://github.com/troglobit/inadyn/issues/153
Hi,
"1)" is a specific of Entware 3x. Not so difficult to correct either init files or use own user "nobody". All depens on concrete package.
"2)" and "3)" as I wrote it is own Netgear's firewall. It run it depending on own logic. One precompiled binary from second precompiled binary. Specific of the stock FW. IMO it is better to use standard tools. You can use e.g. cron every 5 min to check WAN IP. And if it is changed then use your script with curl. How to check WAN IP: I placed script I use above. DynDNS provides relatively good service to get your WAN IP.
P.S.
I use ddclient for my needs. It is Perl client so it does not depend on platform (computer or router or whatever else). Only needs to install Perl from Entware.
Voxel.
Updated version of Entware-3x.
More than 150 packages are upgraded, new packages are added.
Link is the same:
https://yadi.sk/d/DTr4u2IRxe8AF
It is enough to do "
opkg update
" and "opkg upgrade
". No re-install is needed.Voxel.
Zeljko:
You are welcome ;-)
Regarding forum: I face "lost last message" is I dod not login. Cannot see my last published message.
BTW, new stock FW 1.0.2.20 is released by Netgear. So new release of my FW will be soon (most probably tomorrow).
Regards,
Voxel.
Thank you Voxel! Excellent work!
Terrible message editor in this forum )
Vladlenas:
My respect: you started with this almost as a beginner, and after three weeks you are practically pro ;-)
P.S. Forum is really too strange.
Voxel.
What about moving to another forum, for example http://www.snbforums.com/forums/?
Zeljko (other forum):
Well, if someone would start a topic there, I'll be glad to participate/migrate. I am too modest (and too lazy) to start it myself ;-)
Regards,
Voxel.
I publish new version of custom firmware:1.0.2.21SF.
The link for download is https://yadi.sk/d/KEqUa7j738b72u
Changes (vs 1.0.2.15SF):
Voxel.
Just checked release notes, not many changes.
A bit more than in release notes, see my post above. You probably will be interested in newer version of ReadyCLOUD.
Funny, I cannot create the thread in snbforum. I am blocked there too ;-)
OK, I send them message about this using “Contact us” link.
Voxel.
So you had/have account there? Otherwise, how could you be blocked there? By default, you are too suspicious :D
Yeah, I had an account there: registered about 3-4 years ago. Almost no post from me.
And yes, I am too suspicious ;-) Software is afraid of me ;-). Forum robot blocked me, mail from forum admin:
Cloudflare thinks you are trying to attack. Not sure why.
I posted the
text for you.
Finally:
http://www.snbforums.com/threads/custom-firmware-build-for-r7800.36859/
Voxel.
i saw there is a package on mynetgear:
http://downloads.mynetgear.com/entware/cortex-a15-3x
is this the hard float and optimized version ?
eliz82:
Interesting... I am shocked. Where from did you find it? It's my own private site.. My DNS registered in my R7800. Yeah, HF and optimized. But I do not want to leave it public accessible. So OK, let's it be sometimes here, bu then I'll close it. It equals to what I published in past (Entware-3x).
Voxel.
Pages