Re: [WISPA] Crude dictionary attack via ssh

2009-05-02 Thread Tom Sharples
It's a flavor of Slack Linux. Don't have Python on these boxes so am writing a bash script to do essentially the same thing as DenyHosts. Tom S. - Original Message - From: Rogelio scubac...@gmail.com To: Tom Sharples tsharp...@qorvus.com; WISPA General List wireless@wispa.org Sent:

Re: [WISPA] marine interference problem on 2.4 GHz

2009-05-02 Thread Rogelio
Jack Unger wrote: I respectfully suggest you hire an expert to address this problem. That's the most polite way I've been told that my idea for a solution sucks! I suppose that until I find an expert, Google is my friend. :)

Re: [WISPA] Crude dictionary attack via ssh

2009-05-02 Thread Rogelio
Tom Sharples wrote: It's a flavor of Slack Linux. Don't have Python on these boxes so am writing a bash script to do essentially the same thing as DenyHosts. You run iptables on this box? You might have some options there, as well.

Re: [WISPA] Crude dictionary attack via ssh

2009-05-02 Thread Rogelio
Tom Sharples wrote: It's a flavor of Slack Linux. Don't have Python on these boxes so am writing a bash script to do essentially the same thing as DenyHosts. Here's an idea that might work too, assuming you have iptables on that box http://www.e18.physik.tu-muenchen.de/~tnagel/ipt_recent/

[WISPA] Sector separation/isolation

2009-05-02 Thread Michael Baird
We are still experimenting with aligning sector's on our towers. We are attempting to use 3 120 degree/13db/6.5 vb/7 degree downtilt, antennas to cover 360 degrees. I just inspected the towers myself, and noticed they are setup at 30 degrees/150 degrees/290 degrees (so they aren't right

Re: [WISPA] FTP Problems

2009-05-02 Thread Scott Reed
On all routers, just the border, or something else? Mike Hammett wrote: I think I had to disable the helper to get it to work. - Mike Hammett Intelligent Computing Solutions http://www.ics-il.com -- From: Scott Reed

Re: [WISPA] Sector separation/isolation

2009-05-02 Thread Kurt Fankhauser
Use 10mhz channels instead of 20mhz. Kurt Fankhauser WAVELINC P.O. Box 126 Bucyrus, OH 44820 419-562-6405 www.wavelinc.com -Original Message- From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Michael Baird Sent: Saturday, May 02, 2009 6:54 AM To: WISPA

Re: [WISPA] marine interference problem on 2.4 GHz

2009-05-02 Thread Scottie Arnett
If the docks have AC power all along them, have you considered using BPL of some sort? I have many docks in my area asking about internet service, and many times 2.4 ghz across water is a fun experience. I know some companies such as Tendnet make a wireless 2.4 AP that derives it's Internet

Re: [WISPA] FTP Problems

2009-05-02 Thread Mike Hammett
The NAT router. The helpers don't have any affect otherwise. - Mike Hammett Intelligent Computing Solutions http://www.ics-il.com -- From: Scott Reed scottr...@onlyinternet.net Sent: Saturday, May 02, 2009 6:22 AM To: WISPA General List

Re: [WISPA] FTP Problems

2009-05-02 Thread Josh Luthman
If you know what iptables is realize that /ip firewall = iptables Masquerade rules, filters, chains, etc is all the work of a beautiful OSS, iptables. Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 When you have eliminated the impossible, that

Re: [WISPA] Sector separation/isolation

2009-05-02 Thread Michael Baird
I can try that, can you tell me why that would make a difference though with the AP's seeing each other at such signal levels? Will changing to 10mhz channel width's cause the AP's to see each other at a lower RSSI? Regards Michael Baird Use 10mhz channels instead of 20mhz. Kurt Fankhauser

Re: [WISPA] Sector separation/isolation

2009-05-02 Thread Scott Reed
Right now channel 1 uses channel 1, 2 and 3. Channel 6 uses 4-8. When you go to 10MHz channels 1 will use 1 and 2. 6 will use 5, 6 and 7. Therefore, you are no longer on adjacent channels, there is a gap of channels 3 and 4 between. Also, you will cut down on the amount of other noise you

Re: [WISPA] Sector separation/isolation

2009-05-02 Thread eje
Keep in mind that this is not necessary true depending what chip set the card is using. For example the SR2 cards will always listen to 20Mhz even if they only transmit on 10MHz or even 5MHz. While for example a XR2 set in 10MHz mode will only listen to 10MHz. /Eje CTO WISP-Router, Inc. Sent

Re: [WISPA] Sector separation/isolation

2009-05-02 Thread Jayson Baker
How do you make this determination? What about an R52, or R5H? What about integrated units like NS2, NS2L? Jayson On Sat, May 2, 2009 at 10:00 AM, e...@wisp-router.com wrote: Keep in mind that this is not necessary true depending what chip set the card is using. For example the SR2 cards

Re: [WISPA] Free Radius Servers

2009-05-02 Thread Rogelio
3-dB Networks wrote: Anyone have any recommendations for a free Radius server? Specifically interested in credit card processing for a hotspot application. Which OS? Is this a pay for internet access thing? e.g. People are authenticated after they pay for access?

Re: [WISPA] Free Radius Servers

2009-05-02 Thread 3-dB Networks
Right... OS agnostic (i.e. whatever will work the best, but I'd assume Linux since I'm looking for free) Daniel White 3-dB Networks http://www.3dbnetworks.com -Original Message- From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Rogelio Sent: Saturday, May

Re: [WISPA] Sector separation/isolation

2009-05-02 Thread Tom Sharples
If you can, use vertical as well as horizontal separation. Just a few feet can make a huge difference. Tom S. - Original Message - From: Michael Baird m...@tc3net.com To: WISPA General List wireless@wispa.org Sent: Saturday, May 02, 2009 3:53 AM Subject: [WISPA] Sector

Re: [WISPA] Crude dictionary attack via ssh

2009-05-02 Thread Butch Evans
On Fri, 2009-05-01 at 18:36 -0700, Tom Sharples wrote: This works too :-) iptables -A INPUT -s 213.165.154.53/24 -j DROP It does for sure. The only problem is that this one host is not the only one to be concerned about. If you have a router at the border of the network that has the

Re: [WISPA] Crude dictionary attack via ssh

2009-05-02 Thread Patrick Shoemaker
There's another linux program out there called BFD that does the same thing: parses logs and creates IPTABLES rules, but it doesn't use python. Google it and see if it will work for your application. Also, this might go without saying, but I'd recommend against applying any router-based rules

Re: [WISPA] Crude dictionary attack via ssh

2009-05-02 Thread Butch Evans
On Sat, 2009-05-02 at 17:51 -0400, Patrick Shoemaker wrote: There's another linux program out there called BFD that does the same thing: parses logs and creates IPTABLES rules, but it doesn't use python. Google it and see if it will work for your application. Again, this is a good approach,