Test fix A250/255/SB5101 010409

[fitz]

yeah i typo'd the date.

Firstly, I can't find a mod to upload it here so i just put it in the downloads section at wizardmods. It's called "VM haxorware 1131 2mb with security v0.1c".

Here's what I think has happened recently:

1) Haxorware released. We've all relied on this FW too much to provide the security levels we could get previously by entering many telnet commands into our Infinite based FW.

I found that 'Disable SNMP after registration' didn't work, so we've all been sitting here like grinning like idiots with SNMP still open.

It's all well and good having a FW that can change the SNMP port to a custom stealthed one, but if we all leave it at 225 and VM find out about it...by reading a forum for example, then we're ****ed.
Remember when all the modems fell over a couple o years back when we all used the same auth info on our infinite 250's...well we've done it again.

2) 50mb configs. Sooooo, with our poorly configured snmp we all decide to start using 50meg configs in areas which have not yet released 50meg.
That allowed VM to see how many of us were using hacked modems and gave them the reason they needed to actually spend money knocking us offline.

TBH I think that may have been the only reason the 50meg config worked in the first place on our modems.

Anyway, crazy theories aside i've ****ed about with the non-vol for haxorware and got it working reliably on 250 configs, with 250 macs in places it wasn't before. It's all wrapped into a 2mb dump, so flash @0 with rs232 and see if it works for you.

Cheers, fitz.

[lee-ds]

Posted a thread to direct a few to it mate

[G77]

flashing it now. penny just dropped on another matter thou.....

i wonder if bridgend was the first to start getting knocked off?

[hantsmale]

Originally Posted by G77

flashing it now. penny just dropped on another matter thou.....

i wonder if bridgend was the first to start getting knocked off?

wonder if you would send me a copy please if it works

[fitz]

i'm happy for it to go in the dl section if you can find a mod to put it there. otherwise pm me your email.

It works for me + toolzkit, thats all I can say.

cheers, fitz

[Migz]

Fitz cant u just dump the nonvol so we can flash via gui or does it have to be the 2mb dump?

[hantsmale]

Originally Posted by fitz

i'm happy for it to go in the dl section if you can find a mod to put it there. otherwise pm me your email.

It works for me + toolzkit, thats all I can say.

cheers, fitz

sent you pm
thanx

[fitz]

Originally Posted by Migz

Fitz cant u just dump the nonvol so we can flash via gui or does it have to be the 2mb dump?

I can do if you like mate, but you won't get the certificate mine uses for the bpi that way...doesn't matter unless your certs are blank...any mad settings in the gui will remain tho

no hang on i'll check if it dumps perm nonvol too or just dyn 2 mins..

[Migz]

ive just done this mate

Disable SNMP post-registration.

I've discovered that the option in the Haxorware stealth section 'Disable SNMP Agent after registration' does not work...it does nothing!

This may go a long way to explaining recent issues. To perform the fix in non-vol, type this in telnet:

cd n/s
diag_disable_post_reg true
write

Once you reboot you will now see the line 'Suspending SNMP Thread' appear during your boot process, and the task status for the SNMP thread will be 'Suspended' after booting...like it should have been!

PS: There's no point setting any of the other SNMP settings, access mode etc, as these get reset by the config file every boot.

cheers, fitz
is that all ineed to do ive checked it in telnet and it works snmp suspended

[fitz]

secure software download is also disabled with
cd n/d
enable bpi23 false
write

to get rid of cvc error

autoserve disabled
tftp bypass on

bpi 1 is enabled, and the certificates from an a200 loaded into perm nonvol on mine