Comments (2)
Hi Yngwie,
Thank you for your interesting findings..
The way it actually works, is that peer/client detection is not callsign based, but protocol (UDP port) based.
So, once ircddbgateway client connected successfully on Dextra socket using a XLXooo callsign, the following keepalive are failing
as the XLX server sends it’s Dextra identity (ie XRFooo) is the keepalive packet which irccddbgateway don’t
like as it’s expecting the XLXooo it thought it connected with.
So, from the security point of view, this behavior should be safe.
One extra level of protocol-checking could however be added, as the XLX should have not accepted in a first instance a Dextra
connection with a XLXooo callsign parameter.
73
Jean-Luc
Le 17 juil. 2016 à 05:05, yngwiechou [email protected] a écrit :
Here's scenario:
For DExtra Protocol, clients are usually using callsign XRFooo for reflector connection.
However, iif a G4KLX client is using XLXooo callsign instead of XRFooo in DExtra_Hosts.txt and connecting to XLX reflector, then client will be dropped due to lack of keepalive.Here's the log when a client is using XLXooo callsign in DExtra_Hosts.txt for reflector connection.
/opt/XLX# tail -f /var/log/messages
Jul 17 10:50:21 localhost xlxd: DExtra client BV5OO C keepalive timeout
Jul 17 10:50:21 localhost xlxd: Client BV5OO C at 10.100.1.100 removed
Jul 17 10:51:10 localhost xlxd: DExtra connect packet for module C from BV5OO C at 10.100.1.100 rev 0
Jul 17 10:51:10 localhost xlxd: New client BV5OO C at 10.100.1.100 added with protocol 1
Jul 17 10:51:10 localhost xlxd: DExtra connect packet for module C from BV5OO C at 10.100.1.100 rev 0
Jul 17 10:55:04 localhost xlxd: DExtra client BV5OO C keepalive timeout
Jul 17 10:55:04 localhost xlxd: Client BV5OO C at 10.100.1.100 removed
Jul 17 10:55:57 localhost xlxd: DExtra connect packet for module C from BV5OO C at 10.100.1.100 rev 0
Jul 17 10:55:57 localhost xlxd: New client BV5OO C at 10.100.1.100 added with protocol 1
Jul 17 10:55:57 localhost xlxd: DExtra connect packet for module C from BV5OO C at 10.100.1.100 rev 0
Jul 17 10:56:58 localhost xlxd: DExtra connect packet for module C from BV5OO C at 10.100.1.100 rev 0
Jul 17 10:56:58 localhost xlxd: DExtra connect packet for module C from BV5OO C at 10.100.1.100 rev 0
Jul 17 10:57:58 localhost xlxd: DExtra connect packet for module C from BV5OO C at 10.100.1.100 rev 0
Jul 17 10:57:58 localhost xlxd: DExtra connect packet for module C from BV5OO C at 10.100.1.100 rev 0
Jul 17 10:58:58 localhost xlxd: DExtra connect packet for module C from BV5OO C at 10.100.1.100 rev 0
Jul 17 10:58:58 localhost xlxd: DExtra connect packet for module C from BV5OO C at 10.100.1.100 rev 0
Jul 17 10:59:58 localhost xlxd: DExtra connect packet for module C from BV5OO C at 10.100.1.100 rev 0
Jul 17 10:59:58 localhost xlxd: DExtra connect packet for module C from BV5OO C at 10.100.1.100 rev 0
Jul 17 11:00:58 localhost xlxd: DExtra connect packet for module C from BV5OO C at 10.100.1.100 rev 0
Jul 17 11:00:58 localhost xlxd: DExtra connect packet for module C from BV5OO C at 10.100.1.100 rev 0
Jul 17 11:01:58 localhost xlxd: DExtra connect packet for module C from BV5OO C at 10.100.1.100 rev 0
Jul 17 11:01:58 localhost xlxd: DExtra connect packet for module C from BV5OO C at 10.100.1.100 rev 0
To me, it seems the xlxd is using callsign to tell if the incoming connection is a peer or a client.
Not sure if this will be a security concern.73,
Hi YngwieBX2AFC
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub #8, or mute the thread https://github.com/notifications/unsubscribe-auth/AOfZMIgo6kvpxr_bBVHyMyUoJ_rqzzLAks5qWZwOgaJpZM4JOJDp.
from xlxd.
Understood, Luc.
Much appreciated for your kindly explanation!
Cheers,
Yngwie
from xlxd.
Related Issues (20)
- YSF Default HOT 1
- Horizontal links (XLX230 B ---- XLX019 B ) seems to terminate talking session if one side drops even for fraction of second
- XLX Interlink HOT 1
- no YSF-stream with PiStar-Hotspot which is connected to XLX HOT 3
- Move config options in main.h to a config file HOT 4
- Default MMDVM port should be set to 62031
- Leveling Ambed
- I have PI and AMBE3000 on /dev/ttyAMA0 - NWDX -
- cip.h: use htons/ntosh for SetPort()/GetPort()
- Unexpected transcoded packet received from ambed HOT 1
- DVSWITCH unable to TX using native XLXD YSF mode (version 2.5.0 / 2.5.1) HOT 2
- DMR Stream ID Unchanged Between Transmissions (YSF and DMR) HOT 2
- XLX to HBlink issues. HOT 3
- Documentation on the XLX Interlink protocol? HOT 1
- xlxd never sends NAK packets to xlx peers if xlxd.interlink is empty
- ysf gps info HOT 3
- Nodes notification and XML linkedto sometimes blank HOT 2
- Live view does not work if the connection to the web interface is done via HTTPS HOT 1
- Header is not written correctly
- ambed not working with DVMega 3003
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from xlxd.