Discuss EVDO PC Cards, ExpressCards, EVDO USB, PDAs, Phones, Coverage and Mobile Broadband Cards. Discuss Verizon and Sprint Coverage. CradlePoint CTR350 / PHS300/ MBR1000 & Kyocera KR1 / KR2 & LinkSys WRT54G3G-ST Forums!
EVDOforums.com
Discussion forum for EVDO users
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

Our sites Include: EVDO Info :: EVDO Forums :: EVDO Maps :: EVDO Blog :: 3Gstore.com

To purchase your EVDO Card / Antenna / Amplifier / Router from the EVDO Experts, just contact us!

DynDns abuse due to KR1 bug

 
Post new topic   Reply to topic    EVDOforums.com Forum Index -> Kyocera KR1 / KR2 Router Support Forum
View previous topic :: View next topic  
Author Message
tz1
EVDO Junkie


Joined: 29 Sep 2005
Posts: 432
Location: http://kr1gps.dyndns.org:8888/

PostPosted: Sun Apr 02, 2006 6:19 pm    Post subject: DynDns abuse due to KR1 bug Reply with quote

I just got this from dyndns.org, probably because I kept grabbing the same IP address upon each reboot:
Quote:

Dear Valued Customer:

The hostname, kr1gps.dyndns.org, in account XXXXX, has been blocked for abuse.
This action has been taken due to the receipt of multiple updates
originating from the same IP address.

Please note, updates which result in the IP address associated with a host
changing are NOT considered abusive. Only those updates which result in no
change to the host are abusive. Please take a moment to review our Update
Abuse Policy here:
...


Every time I restart the router (in the car, with my ignition), it updates dyndns.org, even if the IP address is the same one.

ez-ipupdate (which the KR1 is using) relies on a cache file to prevent this sort of thing, but it doesn't persist on the KR1 router. Adding a few lines to ez-ipupdate to verify the IP has or has not changed should fix it. (As I get ready with another firmware update).

Anyone at Kyocera ready to comply with the GPL so I can fix these things without hacking?

Update I - I doubt they fixed the ez-ipupdate vulnerability at:

http://www.gentoo.org/security/en/glsa/glsa-200411-20.xml

Which might not be exploitable on the KR1, but probably should be patched anyway.

Update II - Verizon has persistent IP addresses?!

The problem seems to be occuring because my IP address has not changed in the last 24+ hours, although I've rebooted the KR1 multiple times (since it is in my car). Last night at home it acquired the same address as it has now at work in a completely different area.

Not quite static IP, but enough to cause DynDNS to consider it abuse since the KR1 will reregister the same address every reset.

Update III - changed the title, fixed my firmware

Title change to make it easier to find, in case others have the same problem.

I also have my own attempt at a fix (including the security problem and gpsd update) at

http://homepage.mac.com/tz1/.Public/ddnsfix.bix

One potential problem is that dyndns clears the entry after 28 days, and if the IP doesn't change, this version won't update it, however if the DNS entry does disappear it will then send an update so should fix it, but it will be hard to test.
Back to top
View user's profile Send private message
tz1
EVDO Junkie


Joined: 29 Sep 2005
Posts: 432
Location: http://kr1gps.dyndns.org:8888/

PostPosted: Mon Apr 10, 2006 3:30 pm    Post subject: Reply with quote

Not quite fixed yet - I got another abuse notice today.

There was a race condition - I was checking if the IP changed, but if the DNS and stuff wasn't already up (so the lookup failed), I would reregister the IP.

(If the network isn't completely up, there is no point in registering the IP anyway, so I set it so it waits until it does get the current DNS IP address, though this will mean you will have to manually log in it the first time).

I'm trying the latest fix for that right now, and if I dont' get another abuse notice I'll have yet another BIX up later tonight or tomorrow.
Back to top
View user's profile Send private message
Michael
Site Admin


Joined: 13 Jan 2005
Posts: 5067
Location: Cary, IL

PostPosted: Mon Apr 10, 2006 8:58 pm    Post subject: Reply with quote

tz1,

Just wondering if the latest firmware also has all the previous changes (e.g. GPS)?
_________________
EVDO :: EVDO News :: EVDO Antennas :: Buy Verizon :: Buy Sprint :: EVDO Amplifier
Back to top
View user's profile Send private message Send e-mail Visit poster's website AIM Address
tz1
EVDO Junkie


Joined: 29 Sep 2005
Posts: 432
Location: http://kr1gps.dyndns.org:8888/

PostPosted: Mon Apr 10, 2006 9:00 pm    Post subject: Reply with quote

Yes, including improved GPSD - I'm fixing the transparent and a few other things.

Generally I'm releasing "full" versions with telnetd, more commands, etc. even when I fix one thing.
Back to top
View user's profile Send private message
tz1
EVDO Junkie


Joined: 29 Sep 2005
Posts: 432
Location: http://kr1gps.dyndns.org:8888/

PostPosted: Tue Apr 11, 2006 2:27 pm    Post subject: Reply with quote

Full version - with (hopefully fixed) ez-ipupdate, but with telnetd on, lots of extra commands like gzip and tar, and my latest gpsd.

http://homepage.mac.com/tz1/.Public/ddnsfix1.bix

This is a second beta. You may have to manually log in to dyndns.org the first time.

The fix involves waiting until a successful DNS lookup occurs so an IP comparison can be done. I really need to go a bit farther so that I can do the DNS and upon a successful connect and query to a host that says there is no address it would act the same as if it changed. I think it may do that now, but haven't tried thoroughly. First I need to eliminate the abuse problem.

My IP changed again Sunday afternoon. So it's been twice a week.
Back to top
View user's profile Send private message
tz1
EVDO Junkie


Joined: 29 Sep 2005
Posts: 432
Location: http://kr1gps.dyndns.org:8888/

PostPosted: Sat Jun 16, 2007 1:48 pm    Post subject: Reply with quote

Somehow I unfixed it (and Verizon wasn't using persistent IPs until late last week) so the problem is back. So I have a gps100.bix on my http://homepage.mac.com/tz1 site designed to fix it.

I'm still testing, but Kyocera shut off DynDNS but did something in the RK1010 firmware, probably updating their version of the dynamic DNS registration program.
Back to top
View user's profile Send private message
spaceskater
EVDO Fledgling


Joined: 07 Feb 2006
Posts: 15

PostPosted: Thu Jun 28, 2007 6:05 pm    Post subject: Reply with quote

tz1 any update on this? DynDNS gust deleted my host name due to abuse. I guess Verizon has been really consistent with there IPs.
I am currently running on gps10g.bix
Back to top
View user's profile Send private message
tz1
EVDO Junkie


Joined: 29 Sep 2005
Posts: 432
Location: http://kr1gps.dyndns.org:8888/

PostPosted: Fri Jun 29, 2007 5:35 am    Post subject: Reply with quote

You can ask for it to be reinstated using the link in their disconnect.

Use my latest (gps100 or 100a) versions - 10g might not have the verified fix in it but those do.
Back to top
View user's profile Send private message
picothinker
EVDO Fledgling


Joined: 02 Jul 2007
Posts: 18
Location: Catatonic State

PostPosted: Fri Jul 13, 2007 2:00 pm    Post subject: Reply with quote

It's not relevant to the thread, but tz1, you helped me out about five years ago when I was working on getting Kismet working on a Sharp Zaurus. You sent me a gpsd that worked. I figured it out when I saw your pics, that jogged my memory.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    EVDOforums.com Forum Index -> Kyocera KR1 / KR2 Router Support Forum All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum








Sprint Rev A USB: Compass 597



Sprint Rev A ExpressCard: Merlin EX720


Purchase an V740 Rev A ExpressCard


Sprint U727


CTR350 Router


CradlePoint PHS300


Purchase a MBR1000


Purchase an EVDO Booster Antenna

Purchase a LinkSys 3GV2 Router



Purchase an EVDO Amplifier


Your Mac EVDO Experts









EVDO Antenna Booster





Digg Us :: del.icio.us :: technorati :: furl

4G :: 4G Forums :: PHS300 :: MBR1000 :: KR2