freifunk@k:ita

4 July 2009

Jugend und Politik

“Wir müssen die Jugend wieder mehr für Politik interessieren” hört man immer wieder aus dem Lager der etablierten.

Und sie arbeiten hart daran.

Und sie haben Erfolg, bringen die Jugend auf die Strasse.

Und es ist ein gigantisches Potential da, heise spricht von 20 mio. Spielern.

Dann schaun wir doch einfach mal, wer sich um sie kümmert.

30 June 2009

Paranoid

Filed under: miscellaneous, network, software — Tags: , , — alx @ 12:20

wie warscheinlich der rest der regierung ist auch der epetitionsserver, welcher bei der geringsten abweichung vom vorgegebenen weg laut “Hacker” schreit, wie jetzt ein kollege herausgefunden hat.

Stelt sich nur noch die frage, wie ich damit umgehen soll, einen potentiell schwerkriminellen im umfeld zu haben.

Ausserdem war das verwendete hackertool ein firefox, vielleicht sollte ich  nur noch mit Safari surfen, um mich nicht verdächtig zu machen.

Fragen über fragen …

10 April 2009

ccc hamburg macht xing werbung auf dem easterhegg

Filed under: ccc, freifunk, miscellaneous — Tags: , , , — alx @ 15:35

Gestern auf dem easterhegg angekommen, heute schon die erste überraschung: das hamburger chaos hat sich an xing verkauft, laut mcfly bekommen sie pro xing lanyard ca. 5 euro in die kasse.

Schade, bisher hatten die hamburger das nicht nötig und waren in der lage vernünftig zu wirtschaften.

Ansonsten bisher alles sehr entspannt, die ersten freifunker und OpenWrtler sind angekommen und wir richten uns im freifunk/wireless raum ein.

4 April 2009

epic fail @ re:publica09

Filed under: freifunk, miscellaneous, network — Tags: , , , , — alx @ 23:44

Jetzt, wo wir ausgeschlafen sind, ein bischen was über den epic Fail der letzten Tage:

FAIL!!11!!elf!

Epic fail!

Das Netzwerk war selbst in seinen besten Momenten massiv schlechter als das auf der letzten re:publica. Der für diese Veranstaltung massiv unterdemensionierte 16MBit DSL Anschluss nie ausgelastet.

Die Probleme, welche zu diesem massiven Versagen der Infrastruktur führten, lassen sich grob in 4 bereiche einteilen:

  • management/teamwork/koordination
  • hardware
  • software
  • mangelnde Fähigkeiten einzelner.

Die leckeren Details, was passiert ist, was wirklich passiert ist und vielleicht sogar die Wahrheit werden wir in den nächsten tagen häppchenweise nachreichen.

Unser grösstes Versäumnis war die mangelhafte, bis nicht vorhande Aussenkommunikation.

Weiterhin möchte ich betonen, das das Team der re:publica keine möglichkeit hatte, diese Katastrophe vorherzusehen. Das Netz auf den vorherigen Veranstaltungen lief sehr gut und sie hatten keinen Grund an uns zu zweifeln. Dem re:publica Team gegenüber wurde immer versichert, das es sich um lösbare Probleme handelt, welche gleich gefixed sind.

Mehr die  nächsten tage, gruß, nbd, joti, alx.

14 February 2009

more nodes

Filed under: freifunk, miscellaneous, network, software — Tags: , , , — alx @ 18:36

Recent experiments mit l2gvpn resulted in an olsr-mesh with over 1000 nodes:

13 February 2009

nbd just said …

Filed under: miscellaneous — admin @ 19:18

wenn das internet eine “series of tubes” ist, dann ist ein mesh eine sprinkleranlage.

13 January 2009

Kaffee

Filed under: miscellaneous, outside — Tags: , , , — alx @ 23:37

Drogenmissbrauch kann doch etwas so schönes sein, und so wie andere mit ihren Hanfplantagen posen mach ich mal das gleiche mit meiner neuen Espressomaschine.

Nachdem Ulf es geschafft hat,  den ersten Kaffee zu kochen, der mir geschmeckt hat und mich damit anzufixen, habe ich mich durch einen Fuhrpark von Espressokochern gearbeitet. Darunter die legendäre Bialetti Brikka und mein persönlicher Morgenfavorit, die Bialetti Mukka Express.

Seit 2 Tagen nun erklimme ich den nächsten Level des Kaffeejunkietums und bin stolzer Schüler an einer Expobar Brewtus II. Und ich habe meinen Lehrer gefunden, einen Arbeitskollegen, welcher sich in der Materie auskennt und als einziger bisher die Qualitäten der Maschine auf den ersten blick erkannt hat.

espresso machine and a fridge full of clubmate

espresso machine and a fridge full of clubmate

29 November 2008

rfc2765 part3

Filed under: freifunk, miscellaneous, network, software — Tags: , , , , — alx @ 7:37

Achtung! the right way of doing is ::ffff:<ipv4>, so newer stuff will use that.

Based on the last posting, we are doing it now with an olsr mesh between the translators.

Between this two posts, jow fixed all remaining issues, making the setstuff shellscripts obsolete. He also fixed a HNA6 issue in the olsrd-luci package. Thanks, great work, jow.

Easy setup now, one internet4 gateway, one access node to give internet to the attached ipv4 clients.

I tried to draw it: ipv4-throught-ipv6-mesh.

gate:

  • wan port is dhcp, lan port is 172.23.1.1/24
  • siit0 gets a dummy address: 169.254.42.42
  • wl0 gets an ipv6 address, in this case the fdca:ffee:babe::1:1/64
  • we do a ::ffff:ffff:0/96 route into siit0, so everything from 6mesh goes into translation.
  • an HNA6 of ::ffff:ffff:0:0/96 announces the mapped 0.0.0.0/0 ipv4 space.
  • MTU on WAN, LAN down to 1400, ipv6 headers are slighly larger.

access1 has

  • 172.23.2.1/24 on its lan, fdca:ffee:babe::1:2 on wl0 and the usual dummy address on siit0.
  • we do a ::ffff:ffff:172.13.2.0/120 to siit0, because in this case, only traffic directed to clients needs to go into translation.
  • same route as HNA6 announcement to catch the traffic out of the mesh.
  • Also, MTU on LAN reduced to 1400.

To reproduce the setup, you need 2 broadcom based OpenWrt boxes, as the siit kernel module has not been ported to kernel 2.6.

its based on OpenWrt 8.09RC1 plus  some patches, which add siit, enable ipv6 forwarding and fix ipv6 static routes. plus a config file.

you can also use ready made firmwareimages. then, there is a config tarball and a uci-dump for gate and a tarball and dump for access1.

for building more accessnodes, you need to alter the lan ipaddress, the ipv6 route into siit0 and the HNA6.

and, as it is just a proof of concept, telnet is open, firewall is open and the wanport of access1 is configured for my local LAN, so i can access telnet and webif from my notebook.

configuration of olsr nameservice plugin to get proper DNS automagically is left as an exercise to the reader. ;)

for questions, you can also join #freifunk on IRCNet or write to the wlanware mailinglist.

i would be happy to hear about any success.

26 November 2008

rfc2765 part2

Filed under: freifunk, miscellaneous, network, software — Tags: , , , — alx @ 23:01

After getting it running today after some sleep, just missing the backroute, now the next step: a setup with 2 translators, establishing connectivity between 2 v4 systems over a ipv6 network.

src:

  • 192.168.11.1/24 connected to trans1, defaultgateway to trans1

trans1:

  • interface test: 192.168.11.2
  • interface lan: 192.168.12.1/24, not used in this test
  • interface lan:fdca:ffee:babe:46::1/64 an ULA address.
  • interface lan: route to ::ffff:ffff:192.168.15.0/120 via trans2 (linklayer address)
  • interface siit0: 169.254.42.42/16 (dummy ipv4 address)
  • interface siit0: “route add default dev siit0″ all ipv4 trash goes into translation, if not getting better route to any interface.
  • “route add -A inet6 ::ffff:ffff:0:0/96 dev siit0″ to push any to be translated traffic into the translator.

trans2:

  • interface test: 192.168.12.2/24 (not used in this test)
  • interface test: fdca:ffee:babe:46::2/64
  • interface test: route to ::ffff:ffff:192.168.11.0/120 via trans1 (linklayer address)
  • interface lan: 192.168.15.1/24
  • interface siit0: 169.254.42.42/16 (also dummy)
  • interface siit0: “route add default dev siit0″ again
  • “route add -A inet6 ::ffff:ffff:0:0/96 dev siit0″ again.

dest:

  • 192.168.15.2/24, connected to interface lan of trans2

/etc/init.d/firewall disable on trans1 and trans2

i left the wanports attached to my normal lan at home to be able to telnet onto the boxes, but i removed the default gateway for the wan port.

i had to change the ::ffff:ffff -> ::ffff:0000 translating behavior to plain ::ffff:ffff -> ffff:ffff by changing TRANSLATED_PREFIX into 0xffffffff in siit.h, otherwise the way back into the v4 world would not work.

setup:

src and target are easy, configuration is left to the reader.

trans1 and trans2 are using firmware image with the siit kernel package in packages and this as .config. luci and packages are enabled in feeds.conf, x-wrt not.

trans1 uses following tarball as configuration, files go into /etc/config and set_stuff_trans1.sh to configure things luci cannot configure right now (or i am too dumb to figure it out).

trans2 the same: tarball and setstuff.

important: the linklayer address in set_stuff_* has to be changed to reflect the linklayeraddress of the neighbour, as they are lladdr dependent.

when done right, src should be able to ping target, tcpdump on the ipv6 network should show translated ip packets.

root@target:/# ping 192.168.15.169
PING 192.168.15.169 (192.168.15.169): 56 data bytes
64 bytes from 192.168.15.169: seq=0 ttl=60 time=4.165 ms
64 bytes from 192.168.15.169: seq=1 ttl=60 time=3.113 ms

--- 192.168.15.169 ping statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max = 3.113/3.639/4.165 ms

and

root@trans1:~# tcpdump -n -i eth0.0 not port 698
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0.0, link-type EN10MB (Ethernet), capture size 96 bytes
00:54:51.064695 IP6 ::ffff:ffff:c0a8:b01 > ::ffff:ffff:c0a8:fa9: ICMP6, echo request, seq 0, length 64
00:54:51.067329 IP6 ::ffff:ffff:c0a8:fa9 > ::ffff:ffff:c0a8:b01: frag (0|64) ICMP6, echo reply, seq 0, length 64
00:54:52.061440 IP6 ::ffff:ffff:c0a8:b01 > ::ffff:ffff:c0a8:fa9: ICMP6, echo request, seq 1, length 64
00:54:52.063117 IP6 ::ffff:ffff:c0a8:fa9 > ::ffff:ffff:c0a8:b01: frag (0|64) ICMP6, echo reply, seq 1, length 64
00:54:56.059208 IP6 fe80::216:1ff:feaf:c520 > fdca:ffee:babe:46::1: ICMP6, neighbor solicitation, who has fdca:ffee:babe:46::1, length 32
00:54:56.059376 IP6 fdca:ffee:babe:46::1 > fe80::216:1ff:feaf:c520: ICMP6, neighbor advertisement, tgt is fdca:ffee:babe:46::1, length 32
00:54:56.060094 IP6 fe80::216:1ff:feaf:a6d4 > fdca:ffee:babe:46::2: ICMP6, neighbor solicitation, who has fdca:ffee:babe:46::2, length 32
00:54:56.060427 IP6 fdca:ffee:babe:46::2 > fe80::216:1ff:feaf:a6d4: ICMP6, neighbor advertisement, tgt is fdca:ffee:babe:46::2, length 32

8 packets captured
8 packets received by filter
0 packets dropped by kernel
root@trans1:~#

1 November 2008

overtoyed

Filed under: freifunk, hardware, miscellaneous, network — admin @ 0:39

Getting a fonera 2.0 and an arduino board at the same day left me with the choice, which toy to play first. As i already have a lot of devices running OpenWrt, just flashing a OpenWrt kamikaze on it was not so interesting.

While sitting together with Steph, we got the idea of connecting an LCD to it and to use the arduino for it.

Getting ssh access was easy, but the firmware was said to be totally outdated, it did not even finds its packet repository. Got new firmware, tried to flash it via the webinterface, it failed. I don’t believe in webinterfaces anyway, so i did it with mtd, which worked and took an endless amount of time, this serial flash really sucks when it comes to speed as the firmwareimage is bigger than 4MB.

As the fonera firmware does not contain a kernelmodule to support the FTDI USB serial chip on the arduino, i compiled the source, copied the kernelmodule over, loaded it and after connecting the arduino to the usb hub, i got an ttyUSB0.

Meanwhile, Steph put the hardware together, so a very simple oneliner did the job of displaying the number of associated clients per network:

echo "Fon: "`grep macaddr /proc/net/madwifi/ath0/associated_sta|wc -l `" Priv: "`grep macaddr /proc/net/madwifi/ath1/associated_sta|wc -l `>/dev/ttyUSB0

Picture of Arduino, LCD and a Fonera 2.0

Picture of Arduino, LCD and a Fonera 2.0

Sure, using a communication protocoll to the arduino for displaying several things is the way to go, and an arduino board ist totally oversized for this task, but it was fun anyway to hack it together quickly .

Could also be used to display neighbour metrics and protocoll information in a freifunk mesh, or whatever.

Firmware image with stty and FTDI driver and packages are on bastel.

Older Posts »

Powered by WordPress