[WISPA] Time to update the National WISP Map?
I have been thinking that I should do another update to the WISP National Map. I would really love to improve the quality of the coverage area this time. The thought is to have each WISP who participated in their respective state broadband mapping initiative request a copy of the shape file for their network. If everyone sent that information to me I could use that to create a better nationwide map. Thoughts, ideas, complaints? For those who are not familiar with my previous work on this project you can visit these links: http://www.wirelessmapping.com/National-Coverage-Map-for-Fixed-Wireless-ISP% 27s.php this page describes the project http://www.wirelessmapping.com/Google%20Maps3.htm this links to the live Google Map Brian WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Time to update the National WISP Map?
Brian, I think this is a wonderful idea. :) On 10/11/2010 07:04 AM, Brian Webster wrote: I have been thinking that I should do another update to the WISP National Map. I would really love to improve the quality of the coverage area this time. The thought is to have each WISP who participated in their respective state broadband mapping initiative request a copy of the shape file for their network. If everyone sent that information to me I could use that to create a better nationwide map. WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] port 5060 relaying attack?
Ok I was just looking at my firewall rules. I have a rule that was instead of dropping blacklisted IPs it was tarpitting them. Do you think the tarpit may have been the problem? I changed that rule to drop instead and havnt had the problem since. Kurt Fankhauser WAVELINC P.O. Box 126 Bucyrus, OH 44820 419-562-6405 _ From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of RickG Sent: Saturday, October 09, 2010 6:13 PM To: WISPA General List Subject: Re: [WISPA] port 5060 relaying attack? Packet sniffer works better for this. On Sat, Oct 9, 2010 at 5:45 PM, Gustavo Santos gustkil...@gmail.com wrote: Try using mikrotik´s TORCH on your wan interface to see exectly what´s going on. 2010/10/8 Kurt Fankhauser k...@wavelinc.com I think its starting from outsite Kurt Fankhauser WAVELINC P.O. Box 126 Bucyrus, OH 44820 419-562-6405 _ From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Cameron Crum Sent: Friday, October 08, 2010 3:09 PM To: WISPA General List Subject: Re: [WISPA] port 5060 relaying attack? Can't you look at the inside of your network to see which ip is generating the traffic? O Ris it originating off your network? On Thu, Oct 7, 2010 at 11:17 PM, RickG rgunder...@gmail.com wrote: I had that same EXACT thing happen to me about a month ago. Sniffed it out (with the help from the list) and blocked the ip. Yes, I'm on TW fiber. -RickG On Thu, Oct 7, 2010 at 4:22 PM, Kurt Fankhauser k...@wavelinc.com wrote: I never have had this happen for 6 years until I got my new fiber line installed form Time Warner. Apparently a few times a day somone starts a relay of SIP connections (or so it appears) through my fiber connection. It maxes out the download and upload of my 30/30 meg fiber and has about 30k-50k packets-per-second coming in and going right back out at the same time it maxes out the RB1000 CPU usage. Most of the time the problem only last for a few minutes but earlier today it lasted for over an hour. I have attached a few screenshots from Winbox during the attack. The 98.102.246.252 address is the address that all my NAT customers are being SRCNAT'ed to. Does anyone have a dynamic firewall rule handy that would stop this? I can't seem to find the IP address it is coming from because my core router's IP's are the ones showing up in the fire wall connections. Possibly be-ing spoofed I presume. -Kurt Fankhauser WAVELINC P.O. Box 126 Bucyrus, OH 44820 www.wavelinc.com WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- Gustavo Santos Analista de Redes -Tecnólogo em Redes de Computadores -Pós Graduando em Redes de Computadores e Telecomunicações -Cisco Certified Network Associate -Juniper Certified Internet Associate - ER -Mikrotik Certified Consultant WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Time to update the National WISP Map?
And I wonder what everyone would think about the idea of identifying which WISP is serving the area this time? With all the requests Matt Larson sends out from the WISP Directory, they come directly from the national map. We don't identify who serves the area currently and thus the consumer questions who they should contact. Again, thoughts and ideas or complaints? The last version I ran the WISP's were promised anonymity. This would be a big change and I don't want to violate any trust I had with those who provided information in the past. Brian From: Charles N Wyble [mailto:char...@knownelement.com] Sent: Monday, October 11, 2010 10:13 AM To: bwebs...@wirelessmapping.com; WISPA General List Subject: Re: [WISPA] Time to update the National WISP Map? Brian, I think this is a wonderful idea. :) On 10/11/2010 07:04 AM, Brian Webster wrote: I have been thinking that I should do another update to the WISP National Map. I would really love to improve the quality of the coverage area this time. The thought is to have each WISP who participated in their respective state broadband mapping initiative request a copy of the shape file for their network. If everyone sent that information to me I could use that to create a better nationwide map. WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] port 5060 relaying attack?
...delays incoming connections for as long as possible. http://en.wikipedia.org/wiki/Tarpit_%28networking%29 Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Mon, Oct 11, 2010 at 10:35 AM, Kurt Fankhauser k...@wavelinc.com wrote: Ok I was just looking at my firewall rules. I have a rule that was instead of “dropping” blacklisted IP’s it was “tarpitting” them. Do you think the tarpit may have been the problem? I changed that rule to drop instead and havn’t had the problem since. Kurt Fankhauser WAVELINC P.O. Box 126 Bucyrus, OH 44820 419-562-6405 -- *From:* wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] *On Behalf Of *RickG *Sent:* Saturday, October 09, 2010 6:13 PM *To:* WISPA General List *Subject:* Re: [WISPA] port 5060 relaying attack? Packet sniffer works better for this. On Sat, Oct 9, 2010 at 5:45 PM, Gustavo Santos gustkil...@gmail.com wrote: Try using mikrotik´s TORCH on your wan interface to see exectly what´s going on. 2010/10/8 Kurt Fankhauser k...@wavelinc.com I think its starting from outsite Kurt Fankhauser WAVELINC P.O. Box 126 Bucyrus, OH 44820 419-562-6405 -- *From:* wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] *On Behalf Of *Cameron Crum *Sent:* Friday, October 08, 2010 3:09 PM *To:* WISPA General List *Subject:* Re: [WISPA] port 5060 relaying attack? Can't you look at the inside of your network to see which ip is generating the traffic? O Ris it originating off your network? On Thu, Oct 7, 2010 at 11:17 PM, RickG rgunder...@gmail.com wrote: I had that same EXACT thing happen to me about a month ago. Sniffed it out (with the help from the list) and blocked the ip. Yes, I'm on TW fiber. -RickG On Thu, Oct 7, 2010 at 4:22 PM, Kurt Fankhauser k...@wavelinc.com wrote: I never have had this happen for 6 years until I got my new fiber line installed form Time Warner. Apparently a few times a day somone starts a relay of SIP connections (or so it appears) through my fiber connection. It maxes out the download and upload of my 30/30 meg fiber and has about 30k-50k packets-per-second coming in and going right back out at the same time it maxes out the RB1000 CPU usage. Most of the time the problem only last for a few minutes but earlier today it lasted for over an hour. I have attached a few screenshots from Winbox during the attack. The 98.102.246.252 address is the address that all my NAT customers are being SRCNAT'ed to. Does anyone have a dynamic firewall rule handy that would stop this? I can't seem to find the IP address it is coming from because my core router's IP's are the ones showing up in the fire wall connections. Possibly be-ing spoofed I presume. -Kurt Fankhauser WAVELINC P.O. Box 126 Bucyrus, OH 44820 www.wavelinc.com WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- Gustavo Santos Analista de Redes -Tecnólogo em Redes de Computadores -Pós Graduando em Redes de Computadores e Telecomunicações -Cisco Certified Network Associate -Juniper Certified Internet Associate - ER -Mikrotik Certified Consultant WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/
Re: [WISPA] Time to update the National WISP Map?
Anonymity only hurts us (as WISPs and WISPA as a whole). - Mike Hammett Intelligent Computing Solutions http://www.ics-il.com On 10/11/2010 9:37 AM, Brian Webster wrote: And I wonder what everyone would think about the idea of identifying which WISP is serving the area this time? With all the requests Matt Larson sends out from the WISP Directory, they come directly from the national map. We don't identify who serves the area currently and thus the consumer questions who they should contact. Again, thoughts and ideas or complaints? The last version I ran the WISP's were promised anonymity. This would be a big change and I don't want to violate any trust I had with those who provided information in the past. Brian *From:* Charles N Wyble [mailto:char...@knownelement.com] *Sent:* Monday, October 11, 2010 10:13 AM *To:* bwebs...@wirelessmapping.com; WISPA General List *Subject:* Re: [WISPA] Time to update the National WISP Map? Brian, I think this is a wonderful idea. :) On 10/11/2010 07:04 AM, Brian Webster wrote: I have been thinking that I should do another update to the WISP National Map. I would really love to improve the quality of the coverage area this time. The thought is to have each WISP who participated in their respective state broadband mapping initiative request a copy of the shape file for their network. If everyone sent that information to me I could use that to create a better nationwide map. WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Time to update the National WISP Map?
Brian, Any tips on turning radiomobile coverage overlays into shape files? I've been playing with some open source tools and have made a little progress, but haven't had time to refine the technique yet. I think if ISPs could produce shape files more easily, the response would be much greater. For our state program (Utah), we gave them gps coords for each subscriber, which they used to extrapolate approximate area. I know they also accepted radiomobile graphic overlays and converted them for some ISP's. Of course they have millions of dollars to spend on such projects... I was disappointed with how few did submit this round. Randy On 10/11/2010 8:04 AM, Brian Webster wrote: I have been thinking that I should do another update to the WISP National Map. I would really love to improve the quality of the coverage area this time. The thought is to have each WISP who participated in their respective state broadband mapping initiative request a copy of the shape file for their network. If everyone sent that information to me I could use that to create a better nationwide map. Thoughts, ideas, complaints? For those who are not familiar with my previous work on this project you can visit these links: http://www.wirelessmapping.com/National-Coverage-Map-for-Fixed-Wireless-ISP%27s.php this page describes the project http://www.wirelessmapping.com/Google%20Maps3.htm this links to the live Google Map Brian WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- Randy Cosby| InfoWest, Inc | www.infowest.com Vice President | 435-674-0165 x 2010 | facebook.com/infowest WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Time to update the National WISP Map?
The problem with the Radio Mobile plots is that they are just image overlays. Shape files are referred to as vector files similar to what Autocad files are. What that means is that the file is a series of instructions of points and instruction on how to connect them to create lines which render at the proper scale and proportion at whatever zoom level the map is rendered. You can equate this to a picture that becomes pixilated when you zoom in too far. To answer your question, I know of no free tools to do what you mention (although they may exist but I don't use them because I have tools for the job already). The process would be to take your image in to some sort of mapping program and calibrate the image so that the software knows the latitude and longitude of any pixel in the image area. You would then have to do some process which would create an outline of the coverage area to develop a polygon line system. This polygon is not a line but a series of instructions using points and commands on how to draw the line at any given zoom level. I do these things in my GIS software and it is a tedious process. One could always hand trace the coverage area using Google Earth. Many did this for the original map. Brian From: Randy Cosby [mailto:dco...@infowest.com] Sent: Monday, October 11, 2010 10:55 AM To: bwebs...@wirelessmapping.com; WISPA General List Subject: Re: [WISPA] Time to update the National WISP Map? Brian, Any tips on turning radiomobile coverage overlays into shape files? I've been playing with some open source tools and have made a little progress, but haven't had time to refine the technique yet. I think if ISPs could produce shape files more easily, the response would be much greater. For our state program (Utah), we gave them gps coords for each subscriber, which they used to extrapolate approximate area. I know they also accepted radiomobile graphic overlays and converted them for some ISP's. Of course they have millions of dollars to spend on such projects... I was disappointed with how few did submit this round. Randy On 10/11/2010 8:04 AM, Brian Webster wrote: I have been thinking that I should do another update to the WISP National Map. I would really love to improve the quality of the coverage area this time. The thought is to have each WISP who participated in their respective state broadband mapping initiative request a copy of the shape file for their network. If everyone sent that information to me I could use that to create a better nationwide map. Thoughts, ideas, complaints? For those who are not familiar with my previous work on this project you can visit these links: http://www.wirelessmapping.com/National-Coverage-Map-for-Fixed-Wireless-ISP% 27s.php this page describes the project http://www.wirelessmapping.com/Google%20Maps3.htm this links to the live Google Map Brian WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- Randy Cosby| InfoWest, Inc | www.infowest.com Vice President | 435-674-0165 x 2010 | facebook.com/infowest WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Time to update the National WISP Map?
We use Splat! to generate raster maps of our coverage. With the new Splat! HD version, and the SRTM1 data, you can produce 30m accurate plots. We then use perl bindings for the GDAL/OGR libraries to convert them into GeoTIFFs (geo-located raster files). The magic trick is that the library has a polygonize function that converts the raster data set into a vector which can be output into the shapefile format. Once scripted, the process isn't too time consuming from an operator standpoint, but takes ~8 hours to complete for our entire network at the 30m resolution on a relatively fast machine. The input for the script is a set containing antenna location, bearing, beamwidth, polarity, and the acceptable RSL. Brian, I know you're a GIS ninja, but I'd be happy to share info on the process if you think it would be helpful. Regards, -Kristian On Mon, 2010-10-11 at 11:10 -0400, Brian Webster wrote: The problem with the Radio Mobile plots is that they are just image overlays. Shape files are referred to as vector files similar to what Autocad files are. What that means is that the file is a series of instructions of points and instruction on how to connect them to create lines which render at the proper scale and proportion at whatever zoom level the map is rendered. You can equate this to a picture that becomes pixilated when you zoom in too far. To answer your question, I know of no free tools to do what you mention (although they may exist but I don’t use them because I have tools for the job already). The process would be to take your image in to some sort of mapping program and calibrate the image so that the software knows the latitude and longitude of any pixel in the image area. You would then have to do some process which would create an outline of the coverage area to develop a polygon line system. This polygon is not a line but a series of instructions using points and commands on how to draw the line at any given zoom level. I do these things in my GIS software and it is a tedious process. One could always hand trace the coverage area using Google Earth. Many did this for the original map. Brian From:Randy Cosby [mailto:dco...@infowest.com] Sent: Monday, October 11, 2010 10:55 AM To: bwebs...@wirelessmapping.com; WISPA General List Subject: Re: [WISPA] Time to update the National WISP Map? Brian, Any tips on turning radiomobile coverage overlays into shape files? I've been playing with some open source tools and have made a little progress, but haven't had time to refine the technique yet. I think if ISPs could produce shape files more easily, the response would be much greater. For our state program (Utah), we gave them gps coords for each subscriber, which they used to extrapolate approximate area. I know they also accepted radiomobile graphic overlays and converted them for some ISP's. Of course they have millions of dollars to spend on such projects... I was disappointed with how few did submit this round. Randy On 10/11/2010 8:04 AM, Brian Webster wrote: I have been thinking that I should do another update to the WISP National Map. I would really love to improve the quality of the coverage area this time. The thought is to have each WISP who participated in their respective state broadband mapping initiative request a copy of the shape file for their network. If everyone sent that information to me I could use that to create a better nationwide map. Thoughts, ideas, complaints? For those who are not familiar with my previous work on this project you can visit these links: http://www.wirelessmapping.com/National-Coverage-Map-for-Fixed-Wireless-ISP%27s.php this page describes the project http://www.wirelessmapping.com/Google%20Maps3.htm this links to the live Google Map Brian WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- Randy Cosby| InfoWest, Inc | www.infowest.com Vice President | 435-674-0165 x 2010 | facebook.com/infowest WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/
Re: [WISPA] Time to update the National WISP Map?
sounds great to me. What do we need to send you? Martha Huizenga DC Access, LLC http://www.dcaccess.net 202-546-5898 */Friendly, Local, Affordable, Internet!/**/ Connecting the Capitol Hill Community Join us on Facebook http://www.facebook.com/home.php?#/pages/Washington-DC/DC-Access-LLC/64096486706?ref=tsor follow us on Twitter http://twitter.com/dcaccess /* On 10/11/2010 10:37 AM, Brian Webster wrote: And I wonder what everyone would think about the idea of identifying which WISP is serving the area this time? With all the requests Matt Larson sends out from the WISP Directory, they come directly from the national map. We don't identify who serves the area currently and thus the consumer questions who they should contact. Again, thoughts and ideas or complaints? The last version I ran the WISP's were promised anonymity. This would be a big change and I don't want to violate any trust I had with those who provided information in the past. Brian *From:* Charles N Wyble [mailto:char...@knownelement.com] *Sent:* Monday, October 11, 2010 10:13 AM *To:* bwebs...@wirelessmapping.com; WISPA General List *Subject:* Re: [WISPA] Time to update the National WISP Map? Brian, I think this is a wonderful idea. :) On 10/11/2010 07:04 AM, Brian Webster wrote: I have been thinking that I should do another update to the WISP National Map. I would really love to improve the quality of the coverage area this time. The thought is to have each WISP who participated in their respective state broadband mapping initiative request a copy of the shape file for their network. If everyone sent that information to me I could use that to create a better nationwide map. WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Time to update the National WISP Map?
Thanks Brian, Kristian, I'll have to check out Splat! some time soon. My process involved converting the Radiomobile overlay into a raster (svg) in Inkscape, then convert that to KML. I can't remember off the top of my head how I did it, but I was able to preserve the gps coordinates of the shape through the conversions. My primary need was to create interactive Google maps (ie: your home can be served by ap1, ap3 and ap4, with ap1 being the closest). There are a number of apps for converting from KML shapes to .shp files, just haven't had a chance to experiment with them yet. * Inkscape: http://inkscape.org/ * KML2SVG: http://kml2svg.free.fr/index3.php -- Randy Cosby| InfoWest, Inc | www.infowest.com Vice President | 435-674-0165 x 2010 | facebook.com/infowest WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Time to update the National WISP Map?
ogr2ogr can convert KML to Shapfile (and many other formats). Here's a list of all the supported formats... http://www.gdal.org/ogr/ogr_formats.html The command line is something like... ogr2ogr -f ESRI Shapefile output.shp input.kml This is the python wrapper for the polygonize functionality... http://svn.osgeo.org/gdal/trunk/gdal/swig/python/scripts/gdal_polygonize.py It comes packaged with the RPMs in EPEL, if RHEL or CentOS is your thing. -Kristian On Mon, 2010-10-11 at 10:09 -0600, Randy Cosby wrote: Thanks Brian, Kristian, I'll have to check out Splat! some time soon. My process involved converting the Radiomobile overlay into a raster (svg) in Inkscape, then convert that to KML. I can't remember off the top of my head how I did it, but I was able to preserve the gps coordinates of the shape through the conversions. My primary need was to create interactive Google maps (ie: your home can be served by ap1, ap3 and ap4, with ap1 being the closest). There are a number of apps for converting from KML shapes to .shp files, just haven't had a chance to experiment with them yet. * Inkscape: http://inkscape.org/ * KML2SVG: http://kml2svg.free.fr/index3.php WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Time to update the National WISP Map?
Interesting. So if the kml file includes a .png shape, it will convert that to vector first, then into shp? Randy On 10/11/2010 10:26 AM, Kristian Hoffmann wrote: ogr2ogr can convert KML to Shapfile (and many other formats). Here's a list of all the supported formats... http://www.gdal.org/ogr/ogr_formats.html The command line is something like... ogr2ogr -f ESRI Shapefile output.shp input.kml This is the python wrapper for the polygonize functionality... http://svn.osgeo.org/gdal/trunk/gdal/swig/python/scripts/gdal_polygonize.py It comes packaged with the RPMs in EPEL, if RHEL or CentOS is your thing. -Kristian On Mon, 2010-10-11 at 10:09 -0600, Randy Cosby wrote: Thanks Brian, Kristian, I'll have to check out Splat! some time soon. My process involved converting the Radiomobile overlay into a raster (svg) in Inkscape, then convert that to KML. I can't remember off the top of my head how I did it, but I was able to preserve the gps coordinates of the shape through the conversions. My primary need was to create interactive Google maps (ie: your home can be served by ap1, ap3 and ap4, with ap1 being the closest). There are a number of apps for converting from KML shapes to .shp files, just haven't had a chance to experiment with them yet. * Inkscape: http://inkscape.org/ * KML2SVG: http://kml2svg.free.fr/index3.php WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- Randy Cosby| InfoWest, Inc | www.infowest.com Vice President | 435-674-0165 x 2010 | facebook.com/infowest WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Time to update the National WISP Map?
Go ahead and share. Anything to help this industry stand up and be counted is good in my book. Brian -Original Message- From: Kristian Hoffmann [mailto:kh...@fire2wire.com] Sent: Monday, October 11, 2010 11:41 AM To: bwebs...@wirelessmapping.com; WISPA General List Cc: 'Randy Cosby' Subject: Re: [WISPA] Time to update the National WISP Map? We use Splat! to generate raster maps of our coverage. With the new Splat! HD version, and the SRTM1 data, you can produce 30m accurate plots. We then use perl bindings for the GDAL/OGR libraries to convert them into GeoTIFFs (geo-located raster files). The magic trick is that the library has a polygonize function that converts the raster data set into a vector which can be output into the shapefile format. Once scripted, the process isn't too time consuming from an operator standpoint, but takes ~8 hours to complete for our entire network at the 30m resolution on a relatively fast machine. The input for the script is a set containing antenna location, bearing, beamwidth, polarity, and the acceptable RSL. Brian, I know you're a GIS ninja, but I'd be happy to share info on the process if you think it would be helpful. Regards, -Kristian On Mon, 2010-10-11 at 11:10 -0400, Brian Webster wrote: The problem with the Radio Mobile plots is that they are just image overlays. Shape files are referred to as vector files similar to what Autocad files are. What that means is that the file is a series of instructions of points and instruction on how to connect them to create lines which render at the proper scale and proportion at whatever zoom level the map is rendered. You can equate this to a picture that becomes pixilated when you zoom in too far. To answer your question, I know of no free tools to do what you mention (although they may exist but I don’t use them because I have tools for the job already). The process would be to take your image in to some sort of mapping program and calibrate the image so that the software knows the latitude and longitude of any pixel in the image area. You would then have to do some process which would create an outline of the coverage area to develop a polygon line system. This polygon is not a line but a series of instructions using points and commands on how to draw the line at any given zoom level. I do these things in my GIS software and it is a tedious process. One could always hand trace the coverage area using Google Earth. Many did this for the original map. Brian From:Randy Cosby [mailto:dco...@infowest.com] Sent: Monday, October 11, 2010 10:55 AM To: bwebs...@wirelessmapping.com; WISPA General List Subject: Re: [WISPA] Time to update the National WISP Map? Brian, Any tips on turning radiomobile coverage overlays into shape files? I've been playing with some open source tools and have made a little progress, but haven't had time to refine the technique yet. I think if ISPs could produce shape files more easily, the response would be much greater. For our state program (Utah), we gave them gps coords for each subscriber, which they used to extrapolate approximate area. I know they also accepted radiomobile graphic overlays and converted them for some ISP's. Of course they have millions of dollars to spend on such projects... I was disappointed with how few did submit this round. Randy On 10/11/2010 8:04 AM, Brian Webster wrote: I have been thinking that I should do another update to the WISP National Map. I would really love to improve the quality of the coverage area this time. The thought is to have each WISP who participated in their respective state broadband mapping initiative request a copy of the shape file for their network. If everyone sent that information to me I could use that to create a better nationwide map. Thoughts, ideas, complaints? For those who are not familiar with my previous work on this project you can visit these links: http://www.wirelessmapping.com/National-Coverage-Map-for-Fixed-Wireless-ISP%27s.php this page describes the project http://www.wirelessmapping.com/Google%20Maps3.htm this links to the live Google Map Brian WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- Randy Cosby| InfoWest, Inc | www.infowest.com Vice President | 435-674-0165 x 2010 | facebook.com/infowest WISPA Wants You! Join today! http://signup.wispa.org/
Re: [WISPA] Time to update the National WISP Map?
If you can ask your broadband mapping authority to send you the shape file package they created and/or used to show your network coverage I will use that data directly. Brian From: Martha Huizenga [mailto:mar...@dcaccess.net] Sent: Monday, October 11, 2010 11:51 AM To: bwebs...@wirelessmapping.com; WISPA General List Cc: motor...@afmug.com; memb...@wispa.org Subject: Re: [WISPA] Time to update the National WISP Map? sounds great to me. What do we need to send you? Martha Huizenga DC Access, LLC http://www.dcaccess.net 202-546-5898 Friendly, Local, Affordable, Internet! Connecting the Capitol Hill Community Join us on Facebook http://www.facebook.com/home.php?#/pages/Washington-DC/DC-Access-LLC/640964 86706?ref=ts or follow us on Twitter http://twitter.com/dcaccess On 10/11/2010 10:37 AM, Brian Webster wrote: And I wonder what everyone would think about the idea of identifying which WISP is serving the area this time? With all the requests Matt Larson sends out from the WISP Directory, they come directly from the national map. We don't identify who serves the area currently and thus the consumer questions who they should contact. Again, thoughts and ideas or complaints? The last version I ran the WISP's were promised anonymity. This would be a big change and I don't want to violate any trust I had with those who provided information in the past. Brian From: Charles N Wyble [mailto:char...@knownelement.com] Sent: Monday, October 11, 2010 10:13 AM To: bwebs...@wirelessmapping.com; WISPA General List Subject: Re: [WISPA] Time to update the National WISP Map? Brian, I think this is a wonderful idea. :) On 10/11/2010 07:04 AM, Brian Webster wrote: I have been thinking that I should do another update to the WISP National Map. I would really love to improve the quality of the coverage area this time. The thought is to have each WISP who participated in their respective state broadband mapping initiative request a copy of the shape file for their network. If everyone sent that information to me I could use that to create a better nationwide map. WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Time to update the National WISP Map?
Most of the kml to shape file tools will only work on files that are polygons. The image overlays won't necessarily work. Brian -Original Message- From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Randy Cosby Sent: Monday, October 11, 2010 12:09 PM To: WISPA General List Subject: Re: [WISPA] Time to update the National WISP Map? Thanks Brian, Kristian, I'll have to check out Splat! some time soon. My process involved converting the Radiomobile overlay into a raster (svg) in Inkscape, then convert that to KML. I can't remember off the top of my head how I did it, but I was able to preserve the gps coordinates of the shape through the conversions. My primary need was to create interactive Google maps (ie: your home can be served by ap1, ap3 and ap4, with ap1 being the closest). There are a number of apps for converting from KML shapes to .shp files, just haven't had a chance to experiment with them yet. * Inkscape: http://inkscape.org/ * KML2SVG: http://kml2svg.free.fr/index3.php -- Randy Cosby| InfoWest, Inc | www.infowest.com Vice President | 435-674-0165 x 2010 | facebook.com/infowest WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Time to update the National WISP Map?
Right.. I've already converted the overlay to vector before feeding it into the kml to shp. I said the Radiomobile overlay into a raster (svg) in Inkscape ... I should have said the Radiomobile overlay into a _vector_ (svg) in Inkscape On 10/11/2010 10:39 AM, Brian Webster wrote: Most of the kml to shape file tools will only work on files that are polygons. The image overlays won't necessarily work. Brian -Original Message- From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Randy Cosby Sent: Monday, October 11, 2010 12:09 PM To: WISPA General List Subject: Re: [WISPA] Time to update the National WISP Map? Thanks Brian, Kristian, I'll have to check out Splat! some time soon. My process involved converting the Radiomobile overlay into a raster (svg) in Inkscape, then convert that to KML. I can't remember off the top of my head how I did it, but I was able to preserve the gps coordinates of the shape through the conversions. My primary need was to create interactive Google maps (ie: your home can be served by ap1, ap3 and ap4, with ap1 being the closest). There are a number of apps for converting from KML shapes to .shp files, just haven't had a chance to experiment with them yet. * Inkscape: http://inkscape.org/ * KML2SVG: http://kml2svg.free.fr/index3.php -- Randy Cosby| InfoWest, Inc | www.infowest.com Vice President | 435-674-0165 x 2010 | facebook.com/infowest WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Time to update the National WISP Map?
For those that have that, I'd agree that would be easiest, and have the added benefit that the updated WISP map would match State Maps. But... We cant assume for majority of members that they participated with their States and disclosed their data, nor that the State's shape files are accessible to the WISP. I'm aware that most states asked for WISP data, but I'm not confident that all States agreed to provide data or mapping product back. I'd be interested in learning what percentage of WISPA members gave their data to States. Whether WISPs gave shape files to States, or whether States made the shape files with the provided data. As well interesting to learn how many States used similar methods as other states to map the data. I know many WISPs did not participate with their States, because their states did not give them adequate time to provide data, or terms for participation were not safe by default, and some WISPs thought that evn though States would likely work with the WISP's concerns, that the WISP might not have had the time to deal with the agrevation on the State's time line. I would like to see a process be developed or defined, in which members of WISPA could be included at their own time table, within reason. For example, if after the first MAP update, if a new prospect signed up to be a WISPA member that they had a way to get their data added. (Whether for a fee, or at a defined update interval, if it made it more affordable to do bulk updates). Part of this process would be a quick overview document on what the member would need to do to participate. EVen if it was as simple as... We support the following formats The following tools can produce such formats... If additional consultant help needed, Contact Brian :-) As well, our NAtional MAP must continue to be a process that gives the member the choice of anonymous versus Full Data. Tom DeReggi RapidDSL Wireless, Inc IntAirNet- Fixed Wireless Broadband - Original Message - From: Brian Webster To: 'Martha Huizenga' ; 'WISPA General List' Cc: memb...@wispa.org ; motor...@afmug.com Sent: Monday, October 11, 2010 12:37 PM Subject: Re: [WISPA] Time to update the National WISP Map? If you can ask your broadband mapping authority to send you the shape file package they created and/or used to show your network coverage I will use that data directly. Brian From: Martha Huizenga [mailto:mar...@dcaccess.net] Sent: Monday, October 11, 2010 11:51 AM To: bwebs...@wirelessmapping.com; WISPA General List Cc: motor...@afmug.com; memb...@wispa.org Subject: Re: [WISPA] Time to update the National WISP Map? sounds great to me. What do we need to send you? Martha Huizenga DC Access, LLC 202-546-5898 Friendly, Local, Affordable, Internet! Connecting the Capitol Hill Community Join us on Facebook or follow us on Twitter On 10/11/2010 10:37 AM, Brian Webster wrote: And I wonder what everyone would think about the idea of identifying which WISP is serving the area this time? With all the requests Matt Larson sends out from the WISP Directory, they come directly from the national map. We don't identify who serves the area currently and thus the consumer questions who they should contact. Again, thoughts and ideas or complaints? The last version I ran the WISP's were promised anonymity. This would be a big change and I don't want to violate any trust I had with those who provided information in the past. Brian From: Charles N Wyble [mailto:char...@knownelement.com] Sent: Monday, October 11, 2010 10:13 AM To: bwebs...@wirelessmapping.com; WISPA General List Subject: Re: [WISPA] Time to update the National WISP Map? Brian, I think this is a wonderful idea. :) On 10/11/2010 07:04 AM, Brian Webster wrote: I have been thinking that I should do another update to the WISP National Map. I would really love to improve the quality of the coverage area this time. The thought is to have each WISP who participated in their respective state broadband mapping initiative request a copy of the shape file for their network. If everyone sent that information to me I could use that to create a better nationwide map. WISPA Wants You! Join today!http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe:http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wants You! Join today! http://signup.wispa.org/
Re: [WISPA] Time to update the National WISP Map?
Radiomobile can output a .kml file directly. That's what we sent to the Oregon broadband mapping program -- it opens directly in Google earth, and if we were to have a overview of total WISP coverage, a series of .kml files in Google Earth might not be a bad way to go. Kevin - Original Message - From: Randy Cosby To: bwebs...@wirelessmapping.com ; WISPA General List Sent: Monday, October 11, 2010 7:54 AM Subject: Re: [WISPA] Time to update the National WISP Map? Brian, Any tips on turning radiomobile coverage overlays into shape files? I've been playing with some open source tools and have made a little progress, but haven't had time to refine the technique yet. I think if ISPs could produce shape files more easily, the response would be much greater. For our state program (Utah), we gave them gps coords for each subscriber, which they used to extrapolate approximate area. I know they also accepted radiomobile graphic overlays and converted them for some ISP's. Of course they have millions of dollars to spend on such projects... I was disappointed with how few did submit this round. Randy On 10/11/2010 8:04 AM, Brian Webster wrote: I have been thinking that I should do another update to the WISP National Map. I would really love to improve the quality of the coverage area this time. The thought is to have each WISP who participated in their respective state broadband mapping initiative request a copy of the shape file for their network. If everyone sent that information to me I could use that to create a better nationwide map. Thoughts, ideas, complaints? For those who are not familiar with my previous work on this project you can visit these links: http://www.wirelessmapping.com/National-Coverage-Map-for-Fixed-Wireless-ISP%27s.php this page describes the project http://www.wirelessmapping.com/Google%20Maps3.htm this links to the live Google Map Brian WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- Randy Cosby| InfoWest, Inc | www.infowest.com Vice President | 435-674-0165 x 2010 | facebook.com/infowest -- WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] port 5060 relaying attack?
Was hoping you'd chime in Josh :) On Mon, Oct 11, 2010 at 10:37 AM, Josh Luthman j...@imaginenetworksllc.comwrote: ...delays incoming connections for as long as possible. http://en.wikipedia.org/wiki/Tarpit_%28networking%29 Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Mon, Oct 11, 2010 at 10:35 AM, Kurt Fankhauser k...@wavelinc.comwrote: Ok I was just looking at my firewall rules. I have a rule that was instead of “dropping” blacklisted IP’s it was “tarpitting” them. Do you think the tarpit may have been the problem? I changed that rule to drop instead and havn’t had the problem since. Kurt Fankhauser WAVELINC P.O. Box 126 Bucyrus, OH 44820 419-562-6405 -- *From:* wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] *On Behalf Of *RickG *Sent:* Saturday, October 09, 2010 6:13 PM *To:* WISPA General List *Subject:* Re: [WISPA] port 5060 relaying attack? Packet sniffer works better for this. On Sat, Oct 9, 2010 at 5:45 PM, Gustavo Santos gustkil...@gmail.com wrote: Try using mikrotik´s TORCH on your wan interface to see exectly what´s going on. 2010/10/8 Kurt Fankhauser k...@wavelinc.com I think its starting from outsite Kurt Fankhauser WAVELINC P.O. Box 126 Bucyrus, OH 44820 419-562-6405 -- *From:* wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] *On Behalf Of *Cameron Crum *Sent:* Friday, October 08, 2010 3:09 PM *To:* WISPA General List *Subject:* Re: [WISPA] port 5060 relaying attack? Can't you look at the inside of your network to see which ip is generating the traffic? O Ris it originating off your network? On Thu, Oct 7, 2010 at 11:17 PM, RickG rgunder...@gmail.com wrote: I had that same EXACT thing happen to me about a month ago. Sniffed it out (with the help from the list) and blocked the ip. Yes, I'm on TW fiber. -RickG On Thu, Oct 7, 2010 at 4:22 PM, Kurt Fankhauser k...@wavelinc.com wrote: I never have had this happen for 6 years until I got my new fiber line installed form Time Warner. Apparently a few times a day somone starts a relay of SIP connections (or so it appears) through my fiber connection. It maxes out the download and upload of my 30/30 meg fiber and has about 30k-50k packets-per-second coming in and going right back out at the same time it maxes out the RB1000 CPU usage. Most of the time the problem only last for a few minutes but earlier today it lasted for over an hour. I have attached a few screenshots from Winbox during the attack. The 98.102.246.252 address is the address that all my NAT customers are being SRCNAT'ed to. Does anyone have a dynamic firewall rule handy that would stop this? I can't seem to find the IP address it is coming from because my core router's IP's are the ones showing up in the fire wall connections. Possibly be-ing spoofed I presume. -Kurt Fankhauser WAVELINC P.O. Box 126 Bucyrus, OH 44820 www.wavelinc.com WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- Gustavo Santos Analista de Redes -Tecnólogo em Redes de Computadores -Pós Graduando em Redes de Computadores e Telecomunicações -Cisco Certified Network Associate -Juniper Certified Internet Associate - ER -Mikrotik Certified Consultant WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] port 5060 relaying attack?
I am being sneaky sneaky sir =) You can probably just drop all 5060/tcp input forever as I seriously doubt your Mikrotik is a SIP gateway. Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Mon, Oct 11, 2010 at 4:03 PM, RickG rgunder...@gmail.com wrote: Was hoping you'd chime in Josh :) On Mon, Oct 11, 2010 at 10:37 AM, Josh Luthman j...@imaginenetworksllc.com wrote: ...delays incoming connections for as long as possible. http://en.wikipedia.org/wiki/Tarpit_%28networking%29 Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Mon, Oct 11, 2010 at 10:35 AM, Kurt Fankhauser k...@wavelinc.comwrote: Ok I was just looking at my firewall rules. I have a rule that was instead of “dropping” blacklisted IP’s it was “tarpitting” them. Do you think the tarpit may have been the problem? I changed that rule to drop instead and havn’t had the problem since. Kurt Fankhauser WAVELINC P.O. Box 126 Bucyrus, OH 44820 419-562-6405 -- *From:* wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] *On Behalf Of *RickG *Sent:* Saturday, October 09, 2010 6:13 PM *To:* WISPA General List *Subject:* Re: [WISPA] port 5060 relaying attack? Packet sniffer works better for this. On Sat, Oct 9, 2010 at 5:45 PM, Gustavo Santos gustkil...@gmail.com wrote: Try using mikrotik´s TORCH on your wan interface to see exectly what´s going on. 2010/10/8 Kurt Fankhauser k...@wavelinc.com I think its starting from outsite Kurt Fankhauser WAVELINC P.O. Box 126 Bucyrus, OH 44820 419-562-6405 -- *From:* wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] *On Behalf Of *Cameron Crum *Sent:* Friday, October 08, 2010 3:09 PM *To:* WISPA General List *Subject:* Re: [WISPA] port 5060 relaying attack? Can't you look at the inside of your network to see which ip is generating the traffic? O Ris it originating off your network? On Thu, Oct 7, 2010 at 11:17 PM, RickG rgunder...@gmail.com wrote: I had that same EXACT thing happen to me about a month ago. Sniffed it out (with the help from the list) and blocked the ip. Yes, I'm on TW fiber. -RickG On Thu, Oct 7, 2010 at 4:22 PM, Kurt Fankhauser k...@wavelinc.com wrote: I never have had this happen for 6 years until I got my new fiber line installed form Time Warner. Apparently a few times a day somone starts a relay of SIP connections (or so it appears) through my fiber connection. It maxes out the download and upload of my 30/30 meg fiber and has about 30k-50k packets-per-second coming in and going right back out at the same time it maxes out the RB1000 CPU usage. Most of the time the problem only last for a few minutes but earlier today it lasted for over an hour. I have attached a few screenshots from Winbox during the attack. The 98.102.246.252 address is the address that all my NAT customers are being SRCNAT'ed to. Does anyone have a dynamic firewall rule handy that would stop this? I can't seem to find the IP address it is coming from because my core router's IP's are the ones showing up in the fire wall connections. Possibly be-ing spoofed I presume. -Kurt Fankhauser WAVELINC P.O. Box 126 Bucyrus, OH 44820 www.wavelinc.com WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- Gustavo Santos Analista de Redes -Tecnólogo em Redes de Computadores -Pós Graduando em Redes de Computadores e Telecomunicações -Cisco Certified Network Associate -Juniper Certified Internet Associate - ER -Mikrotik Certified Consultant WISPA Wants You! Join today! http://signup.wispa.org/
Re: [WISPA] port 5060 relaying attack?
Amen on both counts :) On Mon, Oct 11, 2010 at 4:08 PM, Josh Luthman j...@imaginenetworksllc.comwrote: I am being sneaky sneaky sir =) You can probably just drop all 5060/tcp input forever as I seriously doubt your Mikrotik is a SIP gateway. Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Mon, Oct 11, 2010 at 4:03 PM, RickG rgunder...@gmail.com wrote: Was hoping you'd chime in Josh :) On Mon, Oct 11, 2010 at 10:37 AM, Josh Luthman j...@imaginenetworksllc.com wrote: ...delays incoming connections for as long as possible. http://en.wikipedia.org/wiki/Tarpit_%28networking%29 Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Mon, Oct 11, 2010 at 10:35 AM, Kurt Fankhauser k...@wavelinc.comwrote: Ok I was just looking at my firewall rules. I have a rule that was instead of “dropping” blacklisted IP’s it was “tarpitting” them. Do you think the tarpit may have been the problem? I changed that rule to drop instead and havn’t had the problem since. Kurt Fankhauser WAVELINC P.O. Box 126 Bucyrus, OH 44820 419-562-6405 -- *From:* wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] *On Behalf Of *RickG *Sent:* Saturday, October 09, 2010 6:13 PM *To:* WISPA General List *Subject:* Re: [WISPA] port 5060 relaying attack? Packet sniffer works better for this. On Sat, Oct 9, 2010 at 5:45 PM, Gustavo Santos gustkil...@gmail.com wrote: Try using mikrotik´s TORCH on your wan interface to see exectly what´s going on. 2010/10/8 Kurt Fankhauser k...@wavelinc.com I think its starting from outsite Kurt Fankhauser WAVELINC P.O. Box 126 Bucyrus, OH 44820 419-562-6405 -- *From:* wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] *On Behalf Of *Cameron Crum *Sent:* Friday, October 08, 2010 3:09 PM *To:* WISPA General List *Subject:* Re: [WISPA] port 5060 relaying attack? Can't you look at the inside of your network to see which ip is generating the traffic? O Ris it originating off your network? On Thu, Oct 7, 2010 at 11:17 PM, RickG rgunder...@gmail.com wrote: I had that same EXACT thing happen to me about a month ago. Sniffed it out (with the help from the list) and blocked the ip. Yes, I'm on TW fiber. -RickG On Thu, Oct 7, 2010 at 4:22 PM, Kurt Fankhauser k...@wavelinc.com wrote: I never have had this happen for 6 years until I got my new fiber line installed form Time Warner. Apparently a few times a day somone starts a relay of SIP connections (or so it appears) through my fiber connection. It maxes out the download and upload of my 30/30 meg fiber and has about 30k-50k packets-per-second coming in and going right back out at the same time it maxes out the RB1000 CPU usage. Most of the time the problem only last for a few minutes but earlier today it lasted for over an hour. I have attached a few screenshots from Winbox during the attack. The 98.102.246.252 address is the address that all my NAT customers are being SRCNAT'ed to. Does anyone have a dynamic firewall rule handy that would stop this? I can't seem to find the IP address it is coming from because my core router's IP's are the ones showing up in the fire wall connections. Possibly be-ing spoofed I presume. -Kurt Fankhauser WAVELINC P.O. Box 126 Bucyrus, OH 44820 www.wavelinc.com WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- Gustavo Santos Analista de Redes -Tecnólogo em Redes de Computadores -Pós Graduando em Redes de Computadores e Telecomunicações -Cisco Certified Network Associate -Juniper Certified Internet Associate - ER -Mikrotik Certified Consultant
Re: [WISPA] Trango Apex V1.3.0 Stable Yet?
What issues? I've been running it on two links for some time now and have noticed anything yet. Maybe I'm not looking hard enough? Scott Carullo Technical Operations 877-804-3001 x102 From: can...@believewireless.net p...@believewireless.net Sent: Thursday, October 07, 2010 10:10 AM To: wireless@wispa.org Subject: [WISPA] Trango Apex V1.3.0 Stable Yet? I know some people noticed some issues with the Trango Apex V1.3.0 firmware. Have these issues been fixed yet? WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] port 5060 relaying attack?
For now what Ive done is I blocked input port 5060 and on forward if anyone trys to access port 5060 it adds them to a Blacklist for blocked IPs. Kurt Fankhauser WAVELINC P.O. Box 126 Bucyrus, OH 44820 419-562-6405 _ From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Josh Luthman Sent: Monday, October 11, 2010 4:09 PM To: WISPA General List Subject: Re: [WISPA] port 5060 relaying attack? I am being sneaky sneaky sir =) You can probably just drop all 5060/tcp input forever as I seriously doubt your Mikrotik is a SIP gateway. Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Mon, Oct 11, 2010 at 4:03 PM, RickG rgunder...@gmail.com wrote: Was hoping you'd chime in Josh :) On Mon, Oct 11, 2010 at 10:37 AM, Josh Luthman j...@imaginenetworksllc.com wrote: ...delays incoming connections for as long as possible. http://en.wikipedia.org/wiki/Tarpit_%28networking%29 Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Mon, Oct 11, 2010 at 10:35 AM, Kurt Fankhauser k...@wavelinc.com wrote: Ok I was just looking at my firewall rules. I have a rule that was instead of dropping blacklisted IPs it was tarpitting them. Do you think the tarpit may have been the problem? I changed that rule to drop instead and havnt had the problem since. Kurt Fankhauser WAVELINC P.O. Box 126 Bucyrus, OH 44820 419-562-6405 _ From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of RickG Sent: Saturday, October 09, 2010 6:13 PM To: WISPA General List Subject: Re: [WISPA] port 5060 relaying attack? Packet sniffer works better for this. On Sat, Oct 9, 2010 at 5:45 PM, Gustavo Santos gustkil...@gmail.com wrote: Try using mikrotik´s TORCH on your wan interface to see exectly what´s going on. 2010/10/8 Kurt Fankhauser k...@wavelinc.com I think its starting from outsite Kurt Fankhauser WAVELINC P.O. Box 126 Bucyrus, OH 44820 419-562-6405 _ From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Cameron Crum Sent: Friday, October 08, 2010 3:09 PM To: WISPA General List Subject: Re: [WISPA] port 5060 relaying attack? Can't you look at the inside of your network to see which ip is generating the traffic? O Ris it originating off your network? On Thu, Oct 7, 2010 at 11:17 PM, RickG rgunder...@gmail.com wrote: I had that same EXACT thing happen to me about a month ago. Sniffed it out (with the help from the list) and blocked the ip. Yes, I'm on TW fiber. -RickG On Thu, Oct 7, 2010 at 4:22 PM, Kurt Fankhauser k...@wavelinc.com wrote: I never have had this happen for 6 years until I got my new fiber line installed form Time Warner. Apparently a few times a day somone starts a relay of SIP connections (or so it appears) through my fiber connection. It maxes out the download and upload of my 30/30 meg fiber and has about 30k-50k packets-per-second coming in and going right back out at the same time it maxes out the RB1000 CPU usage. Most of the time the problem only last for a few minutes but earlier today it lasted for over an hour. I have attached a few screenshots from Winbox during the attack. The 98.102.246.252 address is the address that all my NAT customers are being SRCNAT'ed to. Does anyone have a dynamic firewall rule handy that would stop this? I can't seem to find the IP address it is coming from because my core router's IP's are the ones showing up in the fire wall connections. Possibly be-ing spoofed I presume. -Kurt Fankhauser WAVELINC P.O. Box 126 Bucyrus, OH 44820 www.wavelinc.com WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- Gustavo Santos Analista de Redes -Tecnólogo em Redes de Computadores -Pós Graduando em Redes de
