This commit is contained in:
gferg 2003-06-09 13:41:45 +00:00
parent a8a995cb9c
commit 184d554301
4 changed files with 68 additions and 7 deletions

View File

@ -2270,7 +2270,7 @@ Discusses methods to recover from Linux system failures. </Para>
Linksys-Blue-Box-Router-HOWTO</ULink>,
<CiteTitle>Linksys Blue Box Router HOWTO</CiteTitle>
</Para><Para>
<CiteTitle>Updated: April 2003</CiteTitle>.
<CiteTitle>Updated: June 2003</CiteTitle>.
Hints and tips for managing Linksys
routers from a Linux system, including the firmware upgrade procedure. </Para>
</ListItem>

View File

@ -1070,7 +1070,7 @@ Helps users get a Winmodem working under Linux. </Para>
Linksys-Blue-Box-Router-HOWTO</ULink>,
<CiteTitle>Linksys Blue Box Router HOWTO</CiteTitle>
</Para><Para>
<CiteTitle>Updated: April 2003</CiteTitle>.
<CiteTitle>Updated: June 2003</CiteTitle>.
Hints and tips for managing Linksys
routers from a Linux system, including the firmware upgrade procedure. </Para>
</ListItem>

View File

@ -950,7 +950,7 @@ How to enable the Linux IP Masquerade feature on a given Linux host. </Para>
Linksys-Blue-Box-Router-HOWTO</ULink>,
<CiteTitle>Linksys Blue Box Router HOWTO</CiteTitle>
</Para><Para>
<CiteTitle>Updated: April 2003</CiteTitle>.
<CiteTitle>Updated: June 2003</CiteTitle>.
Hints and tips for managing Linksys
routers from a Linux system, including the firmware upgrade procedure. </Para>
</ListItem>

View File

@ -20,6 +20,15 @@
</author>
<revhistory>
<revision>
<revnumber>1.3</revnumber>
<date>2003-06-08</date>
<authorinitials>esr</authorinitials>
<revremark>
Added notes about SNMP security problems, casemodding, Linksys
tech support. The Linksys turns out to have Linux inside.
</revremark>
</revision>
<revision>
<revnumber>1.2</revnumber>
<date>2003-04-29</date>
@ -161,6 +170,13 @@ later firmware upgrades might be more capable).</para>
have one with it, never fear. Under the Help tab there are links to the
PDF and to the Linksys corporate website.</para>
<para>Unfortunately, you're in trouble if you have to call Linksys tech
support. On the one occasion that I called them, the first tech
I raised couldn't even speak English, and the second was barely competent
at it. Both were complete and utter idiots whose response to any
nontrivial question was to put me on infinite hold while they went
off to query someone else &mdash; and then garbled the answer.</para>
</sect1>
<sect1 id="confighints"><title>Configuration hints</title>
@ -226,6 +242,47 @@ logs from multiple firewalls. When using extended logging, it can detect
external IP address changes (if you are using either DHCP or PPPOE) and can
call an external program to process the change.</para>
</sect1>
<sect1><title>Modding and reverse-engineering</title>
<para>There is a <ulink
url="http://www.bextreme.net/wap11web/">page</ulink> that tells you how to
casemod the Linksys wireless router (they just call it the WAP11 but it
appears to be one of the BEFW11S4 variants.</para>
<para>The Linksys has Linux inside. Intrepid hacker Erik Andersen
tells us:</para>
<programlisting>
#!/bin/sh
# This is what I did to open up the Linksys rom...
wget ftp://ftp.linksys.com/pub/network/WRT54G_1.02.1_US_code.bin
# I noticed a GZIP signature for a file name "piggy" at offset
# 60 bytes from the start, suggesting we have a compressed Linux
# kernel
dd if=WRT54G_1.02.1_US_code.bin bs=60 skip=1 | zcat > kernel
# Noticed there was a cramfs magic signature (bytes 45 3D CD 28
followed shortly by "Compressed ROMFS") at offset 786464
dd if=WRT54G_1.02.1_US_code.bin of=cramfs.image bs=786464 skip=1
file cramfs.image
sudo mount -o loop,ro -t cramfs ./cramfs.image /mnt
ls -la /mnt/bin
file /mnt/bin/busybox
strings /mnt/bin/busybox | grep BusyBox
# Use uClibc's ldd to get useful answers for non-x86 binaries
/usr/i386-linux-uclibc/bin/i386-uclibc-ldd /mnt/bin/busybox
</programlisting>
<para>As of 8 June Linksys has not met its GPL obligation to supply source
code for the firmware. Pressure is mounting on them to do so. Several
other similar products, including the <ulink
url="http://www.buffalo-technology.com/support/firmware.htm">Buffalo
Technology</ulink> box.</para>
</sect1>
<sect1 id="ts-tips"><title>Troubleshooting tips</title>
@ -254,6 +311,14 @@ the back. You have to hold these down for about thirty seconds to
hard-reset the nonvolatile RAM. This will lose your configuration
settings.</para>
<para>Linksys boxes support MRTG, the <ulink
url="http://people.ee.ethz.ch/~oetiker/webtools/mrtg">Multi Router Traffic
Grapher</ulink>, which queries devices via SNMP. It is not clear what the
extent of the SNMP support is, as it's not documented. <ulink
url="http://www.securiteam.com/securitynews/5AP0G0A61Y.html">This security
advisory</ulink> from January 2002 claims Linkys doesn't distribute a MIB
because their implementation of SNMP is broken.</para>
</sect2>
<sect2 id="mozillaquirks"><title>Mozilla interface quirks under 1.38 and earlier firmware</title>
@ -402,7 +467,3 @@ End:
-->
---------------------------------------------------------------------
To unsubscribe, e-mail: submit-unsubscribe@en.tldp.org
For additional commands, e-mail: submit-help@en.tldp.org