black listing of web traffic
Hi list I have a problem that I can't seem to find a solution to yet. My student network is being NATted out and anyone who's on that network had troubles accessing random websites. For example, going to www.apple.com or www.facebook.com would work great, but store.apple.com would either not load or take forever to open up. I've had that problem last week and thought I tracked it down to the NAT ip being black listed with one of the span black lists. Even though that IP is not used for mail out, that somehow seemed to affect it. Changing it to a different one seemed to solve the problem and I got that original address of the list in the mean time. Changed it back and everything was well, until today. Same symptoms, but now I don't see us listed anywhere. The best description of the symptoms seems to be that that IP is rate limited or something. Anyone seen that? Are there any blacklists for web access? PS. I checked everything under my control and i don't see a bottle neck anywhere or anything like and IPS working up or something - Andrey Gordon [andrey.gor...@gmail.com]
Re: black listing of web traffic
Can't find my IP on any of the black lists. Don't have any proxies. Sites that behave poorly are consistent. That is to say that facebook.com, apple.com would always come up without an issue, but cnn.com, forever21.com(i know, don't ask, students), store.apple.com would consistently take forever to come up. Just wanted to check of rate-limiting web clients is a common practice nowdays in the industry. If it's not, it's probably an unlikely cause of my troubles... Thanks, Andrey - Andrey Gordon [andrey.gor...@gmail.com] On Tue, Feb 9, 2010 at 4:40 PM, Geoffrey Keating geo...@geoffk.org wrote: Andrey Gordon andrey.gor...@gmail.com writes: Hi list I have a problem that I can't seem to find a solution to yet. My student network is being NATted out and anyone who's on that network had troubles accessing random websites. For example, going to www.apple.com or www.facebook.com would work great, but store.apple.com would either not load or take forever to open up. I've had that problem last week and thought I tracked it down to the NAT ip being black listed with one of the span black lists. Even though that IP is not used for mail out, that somehow seemed to affect it. Changing it to a different one seemed to solve the problem and I got that original address of the list in the mean time. Changed it back and everything was well, until today. Same symptoms, but now I don't see us listed anywhere. The best description of the symptoms seems to be that that IP is rate limited or something. Anyone seen that? Are there any blacklists for web access? Could it be related to the Pushdo botnet SSL traffic generation, http://www.shadowserver.org/wiki/pmwiki.php/Calendar/20100129? Perhaps you have an infected machine and so your IP is being blacklisted and/or rate-limited.
Re: black listing of web traffic
Thx to all the folks replying off the list. The more I trouble shoot the more I'm convinced that it's not the sites that are doing rate-limiting. I went to a website of one of my previous employers (a small company). Chances of them having a fancy reverse proxy with some sort of black list filtering are slim to none, yet their site barely opens up as well. Must be something that either my firewall device is doing (which is what is doing the NATting) or I don't' know what else. I'm working with my firewall guy since f/w is his domain and I have no clue about that vendor of the firewalls (PaloAlto). Thanks all for the suggestions. I'll keep digging. - Andrey Gordon [andrey.gor...@gmail.com] On Tue, Feb 9, 2010 at 4:56 PM, Jay Hennigan j...@west.net wrote: Andrey Gordon wrote: Can't find my IP on any of the black lists. Don't have any proxies. Sites that behave poorly are consistent. That is to say that facebook.com, apple.com would always come up without an issue, but cnn.com, forever21.com(i know, don't ask, students), store.apple.com would consistently take forever to come up. Just wanted to check of rate-limiting web clients is a common practice nowdays in the industry. If it's not, it's probably an unlikely cause of my troubles... It could be that the problem sites have some form of load balancer that has an issue keeping state on multiple sessions from the same IP. You mentioned that changing the source IP fixed it. Is this a temporary fix that breaks after several users access the sites from the new IP? -- Jay Hennigan - CCIE #7880 - Network Engineering - j...@impulse.net Impulse Internet Service - http://www.impulse.net/ Your local telephone and internet company - 805 884-6323 - WB6RDV
Re: black listing of web traffic
By changing my outbound IP address to a different one (i suspect effectively resetting sessions) the problem was solved. So, after that I set it back to the original source NAT. And the sites open up just fine still. It really behaves like a NAT table exhaustion, but the firewall only reports 13000 sessions in progress for all the NAT addresses on that firewall. I'm thinking memory leak or something. We only put that device in place this winter break and this is the second time this is happening. Last time was about 2-3 weeks ago. Seems to be fixed for now and the f/w dude is opening a ticket with the f/w vendor. - Andrey Gordon [andrey.gor...@gmail.com]
Re: black listing of web traffic
Thanks to all, The problem seems to be fixed by changing the NAT ip to something else and than back. It does seem much like NAT exhaustion even though the f/w claims only 13K session for two dynamic NATs and about 20 static ones. What I don't get is why there is consistency in opening sites. Why does facebook open all the time and store.apple.com barely opens all the time. I'd say if it would be NAT exhaustion, they would all behave the same way meaning open and then not open and then open again. It is solved for the time being. Again, thanks to all. - Andrey Gordon [andrey.gor...@gmail.com] On Tue, Feb 9, 2010 at 5:34 PM, Andrey Gordon andrey.gor...@gmail.comwrote: I don't know, that's true. I don't where to find that info in this particular firewall would be a more correct statement. and my f/w guy is not much help either. It definitely looks to me like a NATting issue, but what I don't understand is why the same sites (e.g. facebook) loads fine consistently and others don't. NAT exhaustion would not allow that, imo. This is the only relevant info I was able to find in the box: andrey.gor...@pa-2050-bos show session info --- number of sessions supported: 262143 number of active sessions: 6799 number of active TCP sessions: 5906 number of active UDP sessions: 889 number of active ICMP sessions: 4 number of active BCAST sessions:0 number of active MCAST sessions:0 number of predict sessions: 1884 session table utilization: 2% number of sessions created since system bootup: 142823265 Packet rate:5920/s Throughput: 45871 Kbps --- - Andrey Gordon [andrey.gor...@gmail.com] On Tue, Feb 9, 2010 at 5:31 PM, Nathan Ward nw...@daork.net wrote: You don't know how many NAT sessions are open though, right? This is where I'd start looking, if you do or not is up to you. On 10/02/2010, at 11:26 AM, Andrey Gordon wrote: Well, if I understand NATting right, I should be able to have at least 65000 sessions per NAT address to one destination. Am I wrong? the firewall is rated for 260K sessions. - Andrey Gordon [andrey.gor...@gmail.com] On Tue, Feb 9, 2010 at 5:22 PM, Nathan Ward nw...@daork.net wrote: 13,000 sessions could be your problem - perhaps you are running out of NAT state table space. On 10/02/2010, at 11:18 AM, Andrey Gordon wrote: Not 100% sure. I have more than one NAT address on that firewall two of which are dynamic: student and business. It's the student one that's broken. Now, with that said, the Palo Alto firewall shows 13,000 session in progress. Even the f/w guy does not know how to check out the session count per NATted IP. - Andrey Gordon [andrey.gor...@gmail.com] On Tue, Feb 9, 2010 at 5:08 PM, Nathan Ward nw...@daork.net wrote: How many users do you have behind your NAT? On 10/02/2010, at 11:04 AM, Andrey Gordon wrote: Thx to all the folks replying off the list. The more I trouble shoot the more I'm convinced that it's not the sites that are doing rate-limiting. I went to a website of one of my previous employers (a small company). Chances of them having a fancy reverse proxy with some sort of black list filtering are slim to none, yet their site barely opens up as well. Must be something that either my firewall device is doing (which is what is doing the NATting) or I don't' know what else. I'm working with my firewall guy since f/w is his domain and I have no clue about that vendor of the firewalls (PaloAlto). Thanks all for the suggestions. I'll keep digging. - Andrey Gordon [andrey.gor...@gmail.com] On Tue, Feb 9, 2010 at 4:56 PM, Jay Hennigan j...@west.net wrote: Andrey Gordon wrote: Can't find my IP on any of the black lists. Don't have any proxies. Sites that behave poorly are consistent. That is to say that facebook.com , apple.com would always come up without an issue, but cnn.com, forever21.com(i know, don't ask, students), store.apple.com would consistently take forever to come up. Just wanted to check of rate-limiting web clients is a common practice nowdays in the industry. If it's not, it's probably an unlikely cause of my troubles... It could be that the problem sites have some form of load balancer that has an issue keeping state on multiple sessions from the same IP. You mentioned that changing the source IP fixed it. Is this a temporary fix that breaks after several users access the sites from the new IP? -- Jay Hennigan - CCIE #7880 - Network Engineering - j...@impulse.net Impulse Internet Service
Default route with object tracking
Hi list. I'd like to setup my default routes to the Interwebz to be conditional on reachability of something on the Interwebz. I got two different ISPs (no BGP). I'm trying to figure out what would be a reliable object to track? Meaning, it's probably not reasonable to track my ISPs default gateway, since it does not protect me from someone on the ISP side screwing up. I'm thinking of tracking something like google.com, but am not sure if after I resolve google.com for the first time, it will be simply tracking an arbitrary server (or some load balancer). I wanted to see what experienced folks think is a reliable tracking target. Any comments are much appreciated. thank you, - Andrey Gordon [andrey.gor...@gmail.com]
Re: Default route with object tracking
Would it be more reasonable to track a root DNS server that is available via anycast?? Something like 192.33.4.12? Not sure how accurate this is: http://en.wikipedia.org/wiki/Root_nameserver - Andrey Gordon [andrey.gor...@gmail.com]
IOS family naming
Hi List, Anyone recalls ever seeing the IOS naming convention document. In particular I'm interested in differences between families and trains. This is all I found: http://www.cisco.com/warp/public/620/1.html#topic1 But im looking for something a bit more recent maybe? Can figure out differences between say SG, SGA, EW and EWA. A link to the cipher would certainly help. - Andrey Gordon [andrey.gor...@gmail.com]
Re: news from Google
I agree, one could find this though paranoid, but even if we don't use google out of fear that they will take over everything they still seem to be growing. What I'm trying to say is that you/we/they can take all the placards you/we/they want and go and try to convince (or at least educate) the public that google is becoming an evil empire, but there are enough sheep out there to make google succeed. Google makes it's services very attractive to use (free, convenient, great functionality, integration, etc) so we do for the most part. There is a chance that soon google will be collecting statistics on all aspects of your digital life and that government has to do is to pass a law or even more than that, nationalize google. That's just one paranoid theory I've got. Send your tin foil hats and emails to PO Box 666, Antarctica, The World. Remember? They started as a search engine? Not sure how, but they are becoming (became) the new Micro$oft, IMHO. - Andrey Gordon [andrey.gor...@gmail.com] On Fri, Dec 4, 2009 at 3:07 AM, Warren Bailey wbai...@gci.com wrote: Anyone volunteer to FedEx Scott here a tin foil hat?? If not, I'll be happy to provide one... *cue xfiles theme* Sent from my Blackberry. Please execute spelling errors. - Original Message - From: Scott Weeks sur...@mauigateway.com To: na...@merit.edu na...@merit.edu Sent: Thu Dec 03 22:14:57 2009 Subject: Re: news from Google j...@thejof.com : 6.6.6.6 belongs to the US Army look at AS 666. At least they know their position in the universe. --- andrey.gor...@gmail.com : IMHO that's where we are heading with google taking over every service imaginable Only if you let them. DBS (don't be sheep) --- At the most basic minimum manage your cookies. Just a quick search (not with google) gives: google.com/support/urchin45/bin/answer.py?answer=28710 (you'll see a LOT of _utmx type cookies as soon as you start watching them) There are many other companies out there that know more about you than you think possible. Small example: Do you allow third party cookies unfettered access to what you do? scott
Re: news from Google
I didn't say that google is now a software company, i meant they are present in more and more aspects of your life, but yeah, i guess not the best example. Cheers - Andrey Gordon [andrey.gor...@gmail.com] On Fri, Dec 4, 2009 at 9:34 AM, Jorge Amodio jmamo...@gmail.com wrote: Remember? They started as a search engine? Not sure how, but they are becoming (became) the new Micro$oft, IMHO. Hmnm, I don't agree with your opinion, Micro$oft keeps making money out of you just repackaging and reselling the same crappy software over and over and making people pay for a large number of features they will never use, imposing their OS through hardware distributors and crushing anyone who they may feel becomes a threat to their biz model. Remember? The started as a software company, and still don't get it, IMHO. Regards Jorge
Re: news from Google
uf, another question I'll have ask my users now: User: I can't get to the intranet.mycompanydomain.local! What did you break!? Me: Hey, you can't to the intranet,domain.local? Did you make your laptop use Google DNS? - Andrey Gordon [andrey.gor...@gmail.com]
Re: news from Google
I generally like goog's services and the fact that they are free, but sometimes google makes me think of all those futuristic movies where there is a single corporation running the world, everyone is 'tagged' and tracked 24/7 and everyone who works for that corporation are happy campers and live in clean and modern neighborhoods and the rest of the people are scam of the earth and live in the sewer. IMHO that's where we are heading with google taking over every service imaginable. That's the feeling I get from google. - Andrey Gordon [andrey.gor...@gmail.com] On Thu, Dec 3, 2009 at 4:44 PM, Seth Mattinen se...@rollernet.us wrote: Brielle Bruns wrote: Why is it that people start cracking out at the thought of Google offering a free service that people might have an actual use for and that is completely optional and used by choice? I take it you've never been on the receiving end of a the whole internet is down it's your fault cuz google never breaks call when google hiccups? ~Seth
Re: Wan acceleration
I don't have much to add to already said, other than, when I looked at Cisco vs. Riverbed vs. BlueCoat - Riverbed came out as a winner for a few major reasons. Can't recall all of them anymore, but the one I think still stands today is that Cisco and BlueCoat optimize protocols and, I believe, mainly CIFS and HTTP. Maybe some exchange stuff, and a few major ones. RIverbed claimed (and seemed to be true when we deployed them) that they don't optimize protocols. They optimize bit streams, which allows them to optimize a far greater number of protocols than Cisco or BlueCoat. At that company, we had a lot of home grown network apps, so that mattered. We deployed them in a few sites that suffered the most, most of them metro area, but one was in Europe (when HQs are in US). Complains stopped. Also, I can't recall if we tested the failure at the time (I think we did and it worked beautifully to open), but today I work for a different company and we have WAAS. Recent failure showed that they don't quite fail the right way. We had it respond to configuration changes, but somehow, it would mess packets up. Only a restart saved the day. So in short, I'd recommend Riverbed. - Andrey Gordon [andrey.gor...@gmail.com] On Thu, Nov 19, 2009 at 2:43 PM, Ricardo Canepa can...@lmi.net wrote: I use WAN acceleration appliances to optimize traffic over satellite links. Initially we used Blue Coats but due to some issues they have, or had, with satellite links we replaced them with Riverbeds and now we have over 100 of them deployed. The Riverbed units have done a much better job and if there is a power failure they fail open, as they use the fail-through NICs which have always worked so far. Regards, --ricardo On Thu, 19 Nov 2009, Ernest McCaleb wrote: I would certainly look at Riverbed. In my experience they make a product that is just sensational. I could really go on and on about their product but I'd come off sounding like an advertisement. Juniper's WX is a good product also and worth a look. In my experience people tend to go with the WAAS because it can be really cheap with the right bundle. Ernest. On Thu, Nov 19, 2009 at 2:00 PM, Bill Lewis ble...@hottopic.com wrote: Anyone in the group using hardware based wan acceleration and have suggestions? If so, anyone using it over a static IPSEC Cisco VPN link (or other vendor)? I've seen a demo of Cisco WAAS and why they think it's best of breed. Spoke to F5, theirs is still in beta so they suggested Riverbed. I've been told that Riverbed (unlike Cisco) reverse engineers protocols to allow for pass-through though, which worries me in case of failure. Cisco on the other hand licenses the protocols from the various vendors. Other vendors I'm looking at as possibilities are RocketConnect, RadWare, BlueCoat, and Juniper. My connectivity is a tier 2 Metro E at one site (policed at 90Mbps), Tier 1 OC3 at other. Reply to post, or off list. Cheers, Bill Lewis -- Ernest McCaleb
Re: Issues with Gmail
Seems to work with IMAP/SMTP, but no luck on the web UI in boston. On Sep 1, 2009, at 4:14 PM, m...@sabbota.com wrote: I think it just may be front end services that are impacted. I'm able to send/receive mail through my BB BIS gmail account. --Original Message-- From: Nathan Anderson To: nanog@nanog.org Subject: RE: Issues with Gmail Sent: Sep 1, 2009 2:05 PM The minute I saw your question, I tabbed over to an open session, and sure enough... -- Nathan Anderson First Step Internet, LLC nath...@fsr.com -Original Message- From: Jim Wininger [mailto:jwinin...@indianafiber.net] Sent: Tuesday, September 01, 2009 1:02 PM To: nanog@nanog.org Subject: Issues with Gmail Anyone else seeing issues with gmail? -- Jim Wininger Sent via BlackBerry by ATT
Re: PPP multilink help
Encapsulation PPP, LCP Open, multilink Open Listen: CDPCP Open: IPCP, loopback not set Keepalive set (10 sec) DTR is pulsed for 2 seconds on reset Last input 00:00:00, output never, output hang never Last clearing of show interface counters 14w0d Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 252140 Queueing strategy: Class-based queueing Output queue: 3/1000/0 (size/max total/drops) 30 second input rate 179000 bits/sec, 172 packets/sec 30 second output rate 1795000 bits/sec, 243 packets/sec 207501114 packets input, 1445648459 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 42 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 307484312 packets output, 2277871516 bytes, 0 underruns 0 output errors, 0 collisions, 3 interface resets 0 unknown protocol drops 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions I also ran 6 flows worth of iperf between a server at the site and my laptop while the transfer was running (iperf -i 2 - P 6 -t 120 -c 10.1.150.4) in the same direction core.bvzn#sh policy-map int mu1 Multilink1 Service-policy output: QWAS queue stats for all priority classes: queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/0/0 (pkts output/bytes output) 0/0 Class-map: VoIP (match-any) 0 packets, 0 bytes 30 second offered rate 0 bps, drop rate 0 bps Match: dscp ef (46) 0 packets, 0 bytes 30 second rate 0 bps Priority: 100 kbps, burst bytes 2500, b/w exceed drops: 0 Class-map: interactive (match-any) 31490239 packets, 14882494949 bytes 30 second offered rate 4000 bps, drop rate 0 bps Match: protocol rdesktop 10981329 packets, 1277510597 bytes 30 second rate 3000 bps Match: protocol telnet 1104192 packets, 183832229 bytes 30 second rate 0 bps Match: protocol ssh 9263601 packets, 11659456657 bytes 30 second rate 0 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/1103/0 (pkts output/bytes output) 31489136/14887505365 bandwidth 500 kbps Class-map: class-default (match-any) 27511 packets, 120951145536 bytes 30 second offered rate 1494000 bps, drop rate 0 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/251092/0/251092 (pkts output/bytes output) 276085337/122442704318 Fair-queue: per-flow queue limit 16 core.bvzn# - Andrey Gordon [andrey.gor...@gmail.com]
Re: recommendation for SIP integration
Does anyone have any opinion on bandwidth.com as a SIP trunk provider by any chance? - Andrey Gordon [andrey.gor...@gmail.com]
UltraDNS mail admin around?
I'm getting bombarded by these Received: from 80.224.33.155.static.user.ono.com ([80.224.33.155])by mxb2eqsj.ultradns.net with esmtp (Exim 4.43)id 1J7YZc-0007qU-4ifor [EMAIL PROTECTED]; Wed, 26 Dec 2007 15:53:36 + Message-ID: [EMAIL PROTECTED] From: Handbags [EMAIL PROTECTED] To: Replica Watches [EMAIL PROTECTED] - Andrey Gordon [EMAIL PROTECTED]
Re: UltraDNS mail admin around?
we are actually not using ultraDNS for email. DNS only. It does awfully close to some local host spamming. tx for the help to y'all - Andrey Gordon [EMAIL PROTECTED] On Wed, Oct 8, 2008 at 1:34 PM, Randy Bush [EMAIL PROTECTED] wrote: Rodney Joffe wrote: I suspect that Andrey/his $workplace uses UltraDNS and uses the Ultra mail forwarder, which forwards and does not filter. I can't tell from the minimal headers what his workplace is, so can't really conform for him. in private email, andrey said no received: line above that one. so, unless his mail spool is on one of your servers, it's a local forge. randy
Re: smstools and CDMA
From what I found is that smstools will only work with GSM AT command set, so if you are 'locked' into CDMA you are screwed in regards of using smstools. I'm attaching the html page that I wrote up after I got the modem working in case the server dies. I have to mention that i was only interested in sending sms, so that's the only part I was messing with. Andrey Gordon [EMAIL PROTECTED] On Fri, Jun 20, 2008 at 4:50 PM, Douglas K. Rand [EMAIL PROTECTED] wrote: Andrey I have a RHEL server that I connected MultiTech CDMA modem Andrey (MTCBA-C-U-N3) and running smstools3 with it. Great! Andrey Let me know if you want some documents that I wrote up when I Andrey was messing with it. Yes, that'd be great. Netmon2 CDMA modem notes ___ Operating System: RHEL4 Application: InterMapper/SMS Version: Security: Author: Andrey Gordon Last Updated: 04/08/08 Overview Here I will describe what I did to make the CDMA modem work on netmon2. [EMAIL PROTECTED]:/~$ cat /etc/redhat-release Red Hat Enterprise Linux ES release 4 (Nahant Update 6) [EMAIL PROTECTED]:/~$ uname -r 2.6.9-67.0.7.ELsmp More Information Installing the driver: When I first plugged in the modem it only showed up in /proc/bus/usb/devices with the following record: T: Bus=02 Lev=01 Prnt=01 Port=00 Cnt=01 Dev#= 5 Spd=12 MxCh= 0 D: Ver= 1.10 Cls=ff(vend.) Sub=00 Prot=00 MxPS= 8 #Cfgs= 1 P: Vendor=06e0 ProdID=f110 Rev= 1.01 S: Manufacturer=Texas Instruments S: Product=TUSB3410 Serial Port C:* #Ifs= 1 Cfg#= 1 Atr=80 MxPwr=100mA I: If#= 0 Alt= 0 #EPs= 1 Cls=ff(vend.) Sub=00 Prot=00 Driver=(none) E: Ad=01(O) Atr=02(Bulk) MxPS= 64 Ivl=0ms The device had now power (as it does even in windows before you install the driver) So I went on your support page: [1]http://multitech.com/SUPPORT/Families/MultiModemCDMA/drivers.asp There about in the middle of the page you will see Linux drivers for wireless USB modems File named wireless_linux.zip That link is broken, so is the ReadMe file. But clicking on readme takes me to [2]ftp://ftp.multitech.com/wireless/wireless_linux.txt/ (this maybe behavior of Firefox3 on Mac) I went up a directory into [3]ftp://ftp.multitech.com/wireless There was a file that should have been referenced from the support page [4]ftp://ftp.multitech.com/wireless/wireless_linux.zip Unzipping that file revealed drwxr-xr-x 3 agordon epicadm 4096 Apr 4 11:49 . drwxr-xr-x 4 agordon epicadm 4096 Apr 4 11:05 .. -rw-r--r-- 1 agordon epicadm950 Apr 4 11:06 readme.txt -rw-r--r-- 1 agordon epicadm 159077 Apr 4 11:06 ti_usb-1.1-1.src.rpm -rw-r--r-- 1 agordon epicadm 156137 Apr 4 11:06 ti_usb-1.1.tgz.gz -rw-r--r-- 1 agordon epicadm 143048 Apr 4 11:06 ti_usb_2.6-1.1-1.src.rpm -rw-r--r-- 1 agordon epicadm 140357 Apr 4 11:06 ti_usb_2.6-1.1.tgz -rw-r--r-- 1 agordon epicadm 16358 Apr 4 11:06 ti_usb_2.6_release_notes-1.1.txt -rw-r--r-- 1 agordon epicadm 16385 Apr 4 11:06 ti_usb_multitech-1.1.tgz -rw-r--r-- 1 agordon epicadm 10325 Apr 4 11:06 ti_usb_multitech_release_notes-1.1.txt -rw-r--r-- 1 agordon epicadm 22299 Apr 4 11:06 ti_usb_release_notes-1.1.txt Of particular interest I found ti_usb_2.6-1.1-1.src.rpm RedHat Enterprise server 4 has no kernel sources, just headers, so I followed the following link to get sources for RHEL4 kernel [5]http://kbase.redhat.com/faq/FAQ_85_5109.shtm After installing sources, I followed the ReadMe in the wireless_linux.zip file, basically giving these commands: sudo rpmbuild --rebuild ti_usb_2.6-1.1-1.src.rpm sudo rpm -Uvh ti_usb_2.6-1.1-1.i386.rpm After this /dev/ttyUSB0 was created and the modem received power. I have not tested the send/receive yet, but I think on the right track here. I also appears that after any RedHat updates you need to reinstall the RPM package. Installing the SMS software: I downloaded SMS server tools v.3. [6]http://smstools3.kekekasvi.com/ Unfortunately, they are written for GSM modems. They detect our CDMA modem just fine, but the message sending format is slightly different. GSM modems have a concept of PDU, which is basically all the info like destination, message text, etc encoded together. CDMA modems have to send it in clear text. After unzipping smstools3-3.0.10.tar.gz in ./src folder I edited two files: In smsd.c I replaced this text make_pdu(to,text,textlen,alphabet,flash,report,with_udh,udh_data,device s[deevice].mode,pdu,validity, replace_msg); if (strcasecmp(devices[device].mode,old)==0) sprintf(command,AT+CMGS=%i\r,(int)strlen(pdu)/2); else sprintf(command,AT+CMGS=%i\r,(int)strlen(pdu)/2-1); sprintf
Re: smstools and CDMA
geesh, I made a lot typos there. Also, i should mention that i don't know C, so don't judge me to harsh on modding the source code Andrey Gordon [EMAIL PROTECTED] On Fri, Jun 20, 2008 at 11:11 PM, Andrey Gordon [EMAIL PROTECTED] wrote: From what I found is that smstools will only work with GSM AT command set, so if you are 'locked' into CDMA you are screwed in regards of using smstools. I'm attaching the html page that I wrote up after I got the modem working in case the server dies. I have to mention that i was only interested in sending sms, so that's the only part I was messing with. Andrey Gordon [EMAIL PROTECTED] On Fri, Jun 20, 2008 at 4:50 PM, Douglas K. Rand [EMAIL PROTECTED] wrote: Andrey I have a RHEL server that I connected MultiTech CDMA modem Andrey (MTCBA-C-U-N3) and running smstools3 with it. Great! Andrey Let me know if you want some documents that I wrote up when I Andrey was messing with it. Yes, that'd be great.
