Re: [Cerowrt-devel] cerowrt-3.10.32-9 released

[Dave Taht <dave.taht@gmail.com>]

Valdis:

1) enable upnp and play some games?

2) what is the output of:

cat /sys/kernel/debug/mips/unaligned_instructions

3) It does look like miniupnpd IS correctly rejecting connection
attempts from the outside world, but I think I'd prefer to firewall it
off completely.

# logread

Sat Jan 17 03:30:04 1970 daemon.warn miniupnpd[21982]: HTTP peer
[::ffff:186.215.61.169]:41839 is not from a LAN, closing the
connection
Sat Jan 17 03:30:04 1970 daemon.warn miniupnpd[21982]: HTTP peer
[::ffff:59.90.193.38]:54571 is not from a LAN, closing the connection

And I'd love to improve the defensive sensor facility one day, to log
and forward external cracker attempts to something like a rbl blocklist.

Sat Jan 17 03:30:04 1970 daemon.crit xinetd[1416]: 1416
{process_sensor} Adding 103.26.122.210 to the global_no_access list
for 120 minutes

Still I sleep better knowing these limited protections are working.


On Sun, Mar 16, 2014 at 2:27 PM,  <Valdis.Kletnieks@vt.edu> wrote:
> On Sun, 16 Mar 2014 12:58:28 -0700, Dave Taht said:
>> Get it at:
>>
>> http://snapon.lab.bufferbloat.net/~cero2/cerowrt/wndr/3.10.32-9/
>
>> - untested with ipv6 as yet
>
> Running it on my 3800, IPv6 from my laptop to Google and work and
> other places seems to be working just fine in my corner of Comcast land.
> My laptop gets a DHCPv6 address, a SLAAC address, and generates itself
> a privacy address, and they all are reachable from the outside, and my
> Rasberry Pi is happily SLAAC'ing away as well.  As far as I can tell,
> my TV and my PS3 are IPv4-only, so that's as much as I can test.
>
> If I catch it misbehaving, or there's something in particular you want
> poked, yell...
>
>



-- 
Dave Täht

Fixing bufferbloat with cerowrt: http://www.teklibre.com/cerowrt/subscribe.html