Du verwendest einen veralteten Browser. Es ist möglich, dass diese oder andere Websites nicht korrekt angezeigt werden. Du solltest ein Upgrade durchführen oder ein alternativer Browser verwenden.
make sure your authorized_keys file doesn't contain any unknown entries
I did
disable the password based authentication and use the public key based one instead
I know I should, but it makes it so easy to use whenever the key is not available. I should consider this as a wake-up call
use...
It turns out that I was under the wrong assumption that "passwd" changes the password permanently.
I need to give a "modsave" after that to make sure the changes are written into flash.
On hindsight this is quite logical as "passwd" is a standard busybox command that is only supposed to handle...
I have a Freetz router that has been hacked into using SSH.
After that, the router gets used to attack sites and/or imap accounts.
I kill all the dropbear processes with a foreign IP and hacking stops momentarily, but soon it resumes.
If I change the password it stops.
However.... After a reboot...
Oh, I know...
I already did a git clone and will be adapting that environment so I'm at the same point I was when I was using svn
I always thought so, but was always afraid it would take me a complete afternoon and when I need to create a new firmware that part has already taken up most of the...
I started to use Freetz some 8 years ago. Before I used DD-WRT.
I'm not following the development closely and after I noticed that the SVN update stopped working I went to this forum and noticed there was a fork.
This led me to believe that the development stopped and I was now forced to use...
As merely an end user it is not really clear to me why there is a fork at all.
The only reason why I downloaded this freetz-ng is to be able to keep up with newer firmwares and newer models (7590).
Am I mistaken that switching to freetz-ng is my only route ?
I have around 70 boxes that I need...
It isn't clear to me if you now also have provided a fix.
If so, I do not know how to properly implement it.
I had a private message ( @opto ) as well and the suggestion for a quick fix was to disable the verification of the signature.
That's an expert option when you run "make menuconfig"...
Thanks...
I even removed the .config (saved it as well) and did a new make menuconfig and only did the necessary changes (7590) and it behaved exactly the same:
https://justpaste.it/3sp2g
The process was still running this morning. I left it running to make sure it had ample time to complete...
What is it doing here?
freetz@freetz:~/trunk$ make
STEP 1: UNPACK
checking signature:
17191 freetz 20 0 15916 716 580 R 99.9 0.1 13:15.86 tar-gnu
lsof -p17191
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
tar-gnu 17191 freetz cwd DIR 8,17 4096 540676...
Unnötiges Vollzitat entfernt - HabNeFritzbox
Maybe you should read my post again.
I don't need to ask for FW-images. I have them as I'm building Freetz for more than 5 years and I have those in my old trunk.
I'm merely saying that a virgin Freetz-ng is incapable of getting the images by itself...
I tried to compile an International 6.8.x and it failed on downloading images from the AVM-site.
Because I had these already downloaded in my old environment I was able to copy these files to the freetz-ng and was able to continue.
Thanks Mrs. ice bear.
I will do this for future firmwares....
All 66 now have it set to only notify....
### Zusammenführung Doppelpost by stoney ###
Mrs. ice bear....
I can't find the settings you are talking about...
Not where I can set the options with "make menuconfig" nor in the Freetz...
Es stimmt das ich ohne Problemen Deutsch lesen kann, aber beim schreiben muss ich immer ein bisschen suchen. Ohne Fehler schreiben in Englisch ist auch einfacher für mich...
...
I just updated the settings of all the Fritzboxes under my control and my only worry now is this one box.
I think I...
I just logged into Linux NAS I can still reach in that network
I guess that works only when the FB has just started and has not yet loaded the firmware?
That means I can't do it remotely (interactively) because I can't reach that NAS during that stage....
What I could do is write a script...
I have a pool of 66 Fritzboxes that are converted to Freetz which I'm monitoring with Zabbix.
Most of them are 7490's and 7390's, but also some 7360. 3270, 7270...
I'm heavily monitoring these for some 6 years and for that they depend on Freetz as they are running a Zabbix agent.
Those Zabbix...
Mit ein Cronjob rufe ich jede 4 Stunden dieses commando und das funktioniert.
Es funktioniert jedoch nicht mit Gastnetz.
25 * * * * /usr/bin/ctlmgr_ctl w landevice command/cleanup_landevices 1
Aha...
So the trick is to use voip_forwardrules instead of internet_forwardrules ??
The Freetz developers think they are safer there.
But this means that Freetz can do this as well.
Are there any plans to create this?
The whole reason I'm using Freetz instead of the standard firmware is having remote access to its console and the ability to run the Zabbix agent.
For both I need port forwardings to itself.
Without this I have no reason to use Freetz.
Is it a solution to patch the AVM-firewall so it accepts...