magicJack and magicJack Plus Support, Reviews, FAQs and Tricks

Posted: **Mon Mar 07, 2016 6:30 am**

I did this

opkg update
opkg install openvpn-openssl wget unzip

from
https://www.loganmarchione.com/2015/02/ ... -mr3020-3/ (also the one that I looked at when deleting the bridged network)

which was linked on the second link https://forum.openwrt.org/viewtopic.php?id=57090

once I did the above i installed and configured stuff and threw kmod-tun missing
so I did opkg install kmod-tun
it said couldn't be found maybe try opkg update
so I did opkg update
and saw /user/bin/gzclose not found (and two other locations)
and wget exception 127 not found

tried opkg install openvpn-openssl again and same sting of messages

loged into LuCi and tried removing unzip (still the same)

Guess best not follow everything step for step

so that reset has defaulted the ip by the looks of it and now I cant get onto it :/
gate way missmatch I think (but because I'm remotly connecting to a lappy at home I can't change IP addresses cause I'll get kicked out :/

So I'll have to plug router into network port to get a dhcp address - ssh into it - set the IP address back to 192.168.0.222, set the gateway and DNS, copy the distfeeds.conf over (I made a local copy

)

at least all that will be quick and easy since I've done it already
and hey I know not to install unzip now... (or maybe it was wget) maybe it'll stay away from both :p

I Shall next move onto https://forum.openwrt.org/viewtopic.php?id=35021

yes all was working fine friday - It was just this morning when I started playing again- hey ho

Posted: **Mon Mar 07, 2016 7:12 am**

Wow..!
Good to know not to follow these 'tutorials' step for step, and better to just try to pick-out what's relevant to our own specs for the setup.

Maybe simply starting from the wiki tutorial at ...
https://wiki.openwrt.org/doc/howto/vpn.openvpn

Then adjusting what's needed to fix sections that's not working for our own unique usage, may be the best at setting it ...

But all this always twisted my brain, because I don't really know what's going to work, or screw-up anything.

It may be better to try and understand what each one config does, separately,
then with fully understanding each setting, and what it does, it won't be like 'trial-&-error'.

Problem is, all this stuff isn't easy to fully understand.

My brain starts to shrivel up and dry-out with all this.

Posted: **Mon Mar 07, 2016 7:19 am**

Could it be that the reset also put the paths of the packages back to its default too?
Maybe that's why it's not finding anything now.

Are the original OpenWRT servers back up, and in the same paths they were before...? ... Or has the mirror paths been lost by the LuCI reset command?

Posted: **Mon Mar 07, 2016 7:44 am**

momo wrote:Could it be that the reset also put the paths of the packages back to its default too?
Maybe that's why it's not finding anything now.

Are the original OpenWRT servers back up, and in the same paths they were before...? ... Or has the mirror paths been lost by the LuCI reset command?

they could be - its reset the IP config So I can't currently log onto the device until i get home later and plug it into my lappy..
I can only hope that LuCi still exists on it at the moment.

Anyway, I'll sort the ip config out tonight and maybe I'll take a back up and reflash to that back up when things go wrong instead on a reset (if thats possible) the I don't have to physically be there to plug the device into a network port and reconfigure

in the ideal world some one would have done this and done a write up.. I guess that someone could end up being us xD

Though I've never done a write up.. I'll have to start making notes of what I'm doing

Posted: **Mon Mar 07, 2016 3:54 pm**

I don't know what the LuCI 'Reset' command does as far as how much it *Resets* everything, but any time I've had an issue with a setting 'getting to far away' from me, I used the serial console to give a 'Firstboot' command.

I don't know if LuCI sends the same command, or if it actually does more than what's wanted, but the 'Firstboot' using the serial console always only affected the configs, and never wiped-out the packages added to the flashROM.

I always get worried when I use any type of reset, for this very reason...
but FirstBoot always worked to restore config defaults.

Maybe I was just lucky

There's also ways to reset separate aspects of each config using the serial console. The BusyBox command set has specific commands for this.

Depending on what got screwed-up, it may still not be too late to fix it with the serial console...assuming you have one of those USB to Serial cables, that is..

Posted: **Tue Mar 08, 2016 4:34 am**

LuCi looks like she's still installed (its a girls name after all :p ) but seemingly not configured proerly :/

I get a "LuCi - Lua Configuration Interface" which then attempts to go to "192.168.0.222/cgi-bin/luci" which gives the message unable to connect

anyway - updated the distfeeds.conf via WinSCP and notepad. Goodnews looks like the OpenWRT servers are running again (just changed rt305x to generic)

Ahhhhh next time I'll try Firstboot then :p but I've also got this "inital" config backup which could also work I guess.. its all a learning curve d:D

If only there was a way to keep the ipaddress set as desired upon emergancy reset

Kmod-tun dependancy for openvpn-openssl -.- (I'm sure i didn't get this the first time around)

it doesn't exist in the snapshot repo but does in the chaos calmer 15.05 repo so attempting to install from there and I get more dependancies kmod-lib-crc16 and kmod-crypto-hash

maybe I should flash up to the final version (but then that'll end up resetting my ipconfig again) ARGHGHG - I guess it's entierly possibly that Wingspinners inital image had a special built package (?) hummmz

it's starting too look like these aren't the packages that I'm looking for due to incompatabilities... i think my safest bet will be to run the upgrade and hopefully it'll at least keep my IP config

Posted: **Tue Mar 08, 2016 5:26 am**

985ach wrote:LuCi looks like she's still installed (its a girls name after all :p ) but seemingly not configured proerly :/

I get a "LuCi - Lua Configuration Interface" which then attempts to go to "192.168.0.222/cgi-bin/luci" which gives the message unable to connect

anyway - updated the distfeeds.conf via WinSCP and notepad. Goodnews looks like the OpenWRT servers are running again (just changed rt305x to generic)

Ahhhhh next time I'll try Firstboot then :p but I've also got this "inital" config backup which could also work I guess.. its all a learning curve d:D

If only there was a way to keep the ipaddress set as desired upon emergancy reset

Kmod-tun dependancy for openvpn-openssl -.- (I'm sure i didn't get this the first time around)

maybe I should flash up to the final version (but then that'll end up resetting my ipconfig again) ARGHGHG

yeah...I'd say keep your current flash version until you can get it working, (unless the older version is what's giving the problems) but if the older version finally works, you'll at least get familiar with the settings to understand them better if you do want to flash to Chaos Calmer 15.05 later on.

Ahhh...so now the Kmod-Tun is associated properly with the VPN-SSL ...
this didn't show as such before?

I think there IS a way to set the new IP config as it's default, even when using the firstboot command, ...with one of the BusyBox commands that actually write it to the default config file. I don't know if you're using that console though, not using the serial interface to communicate with the nano board.

It certainly seems like you've gotten a real 'workout' with this project.
When it's finally settled I hope you know what worked so you can easily re-create it if needed, without needing to start from scratch as a trial-and-error basis.

Are you at least having some fun with it, or has it become a second job?

I guess it's entierly possibly that Wingspinners inital image had a special built package (?) hummmz

The original Wingspinner file wasn't fully stable, but Chaos Calmer 15.05 is supposed to be final, and working perfectly.

it's starting too look like these aren't the packages that I'm looking for due to incompatabilities... i think my safest bet will be to run the upgrade and hopefully it'll at least keep my IP config

Yeah...the daily builds (the snapshots in the trunk) have different kernel versions that aren't compatible with some of the older packages.

Posted: **Tue Mar 08, 2016 6:00 am**

momo wrote:
Are you at least having some fun with it, or has it become a second job?

Its deffinatly giving me something to do during quieter periods - no one wants to be sat thumb twiddling

I guess it's entierly possibly that Wingspinners inital image had a special built package (?) hummmz

The original Wingspinner file wasn't fully stable, but Chaos Calmer 15.05 is supposed to be final, and working perfectly.

it's starting too look like these aren't the packages that I'm looking for due to incompatabilities... i think my safest bet will be to run the upgrade and hopefully it'll at least keep my IP config

Yeah...the daily builds (the snapshots in the trunk) have different kernel versions that aren't compatible with some of the older packages.[/quote]

getting packages from different places could turn out to be a nightmare and doing so I'm seeing a kernel version wrong
I'm going to take the bull by the horn and load the "final" chaos calmer - good luck everybody! D:

Posted: **Tue Mar 08, 2016 6:13 am**

985ach wrote:
MoMo wrote:Yeah...the daily builds (the snapshots in the trunk) have different kernel versions that aren't compatible with some of the older packages.
getting packages from different places could turn out to be a nightmare and doing so I'm seeing a kernel version wrong
I'm going to take the bull by the horn and load the "final" chaos calmer - good luck everybody!

There's the old British 'stiff upper-lip' ... Have a go at it then...!

That actually may be your best option, since it's known to be stable, and the separate packages added later should be compatible with it.

I hope so...anyway..!

Posted: **Tue Mar 08, 2016 6:15 am**

Flashed with keep current configuration ticked.

I saw this though in web browser almost instantly after clicking flash:

Code: Select all

/usr/lib/lua/luci/dispatcher.lua.460: Failed to execute function dispatcher target for entry '/'.
The called action terminated with an excpetion:
/usr/lib/lua/luci/util.lua:610: Unable to establish ubus connection
stack traceback:
   [C]: in function 'assert'
   /usr/lib/lua/luci/dispatcher.lua:460: in function 'dispatch'
   /usr/lib/lua/luci/dispatcher.lua:141: in function </usr/lib/lua/luci/dispatcher.lua:140>

anyway few minutes i was able to reload LuCi web page and log in and via SSH my version states CHAOS CALMER (15.05 r46767)
flash success?

Posted: **Tue Mar 08, 2016 6:24 am**

985ach wrote:Flashed with keep current configuration ticked.

I saw this though in web browser almost instantly after clicking flash:
Code: Select all
/usr/lib/lua/luci/dispatcher.lua.460: Failed to execute function dispatcher target for entry '/'.
The called action terminated with an excpetion:
/usr/lib/lua/luci/util.lua:610: Unable to establish ubus connection
stack traceback:
   [C]: in function 'assert'
   /usr/lib/lua/luci/dispatcher.lua:460: in function 'dispatch'
   /usr/lib/lua/luci/dispatcher.lua:141: in function </usr/lib/lua/luci/dispatcher.lua:140>
anyway few minutes i was able to reload LuCi web page and log in and via SSH my version states CHAOS CALMER (15.05 r46767)
flash success?

Ummmmm...

I hate to say this, but ...I saw a mention of needing un-ticking of the 'keep current config' option when flashing to a new file, or it will screw-up something...!

I don't fully remember where to look, to find it again...but it was mentioned in the original Wingspinner's thread, somewhere.

Maybe under different conditions from yours though, so it may not effect your device.

Posted: **Tue Mar 08, 2016 6:29 am**

momo wrote:
985ach wrote:Flashed with keep current configuration ticked.

I saw this though in web browser almost instantly after clicking flash:
Code: Select all
/usr/lib/lua/luci/dispatcher.lua.460: Failed to execute function dispatcher target for entry '/'.
The called action terminated with an excpetion:
/usr/lib/lua/luci/util.lua:610: Unable to establish ubus connection
stack traceback:
   [C]: in function 'assert'
   /usr/lib/lua/luci/dispatcher.lua:460: in function 'dispatch'
   /usr/lib/lua/luci/dispatcher.lua:141: in function </usr/lib/lua/luci/dispatcher.lua:140>
anyway few minutes i was able to reload LuCi web page and log in and via SSH my version states CHAOS CALMER (15.05 r46767)
flash success?
Ummmmm... I hate to say this, but ...I saw a mention of needing un-ticking of the 'keep current config' option when flashing to a new file, or it will screw-up something...!

I don't fully remember where to look, to find it again...but it was mentioned in the original Wingspinner's thread, somewhere.

ahhhhh bol***ks now that you mention it I recall seeing it too- oh well lets rebel! :p I guess the worst I'll have to do is reset it again and start afresh (mainly did keep settings for IP reasons.)

anyway upgrading removed all the repo source confs.. readded openwrt sources (failed to get data from there) now added a mirror (ftp://ftp.stw-bonn.de as per openwrt wiki) that has been successfull

just going to start trying to install openvpn-openssl and openvpn-easy-rsa

Success - and kmod-tun install and configured correctly

Posted: **Tue Mar 08, 2016 6:38 am**

985ach wrote:
momo wrote:
985ach wrote:Flashed with keep current configuration ticked.

I saw this though in web browser almost instantly after clicking flash:
Code: Select all
/usr/lib/lua/luci/dispatcher.lua.460: Failed to execute function dispatcher target for entry '/'.
The called action terminated with an excpetion:
/usr/lib/lua/luci/util.lua:610: Unable to establish ubus connection
stack traceback:
   [C]: in function 'assert'
   /usr/lib/lua/luci/dispatcher.lua:460: in function 'dispatch'
   /usr/lib/lua/luci/dispatcher.lua:141: in function </usr/lib/lua/luci/dispatcher.lua:140>
anyway few minutes i was able to reload LuCi web page and log in and via SSH my version states CHAOS CALMER (15.05 r46767)
flash success?
Ummmmm... I hate to say this, but ...I saw a mention of needing un-ticking of the 'keep current config' option when flashing to a new file, or it will screw-up something...!

I don't fully remember where to look, to find it again...but it was mentioned in the original Wingspinner's thread, somewhere.
ahhhhh bol***ks now that you mention it I recall seeing it too- oh well lets rebel! :p I guess the worst I'll have to do is reset it again and start afresh (mainly did keep settings for IP reasons.)

anyway upgrading removed all the repo source confs.. readded openwrt sources (failed to get data from there) now added a mirror (ftp://ftp.stw-bonn.de as per openwrt wiki) that has been successfull

just going to start trying to install openvpn-openssl and openvpn-easy-rsa

Success - and kmod-tun install and configured correctly

I have a feeling it will work this time

I just feel it in me bones mon, ja know..?

By the way...you have the patience of a Saint...

Posted: **Tue Mar 08, 2016 6:57 am**

momo wrote:
I have a feeling it will work this time
I just feel it in me bones mon, ja know..?

By the way...you have the patience of a Saint...

well onto lan interfaces now so thi'll be the bit to add the virtual interface - though may wait until the end and do the main config first...

more insanity and more thinking.. if you panic things will only get worse so stay calm except when you get your finger stuck in something when in a shop, then panic like mad trying to pull it outta there xD

tbh I'll probably do something wrong then will have to start over - this'll all be committed to memory soon :p

Posted: **Tue Mar 08, 2016 7:39 am**

985ach wrote:
momo wrote:
I have a feeling it will work this time
I just feel it in me bones mon, ja know..?

By the way...you have the patience of a Saint...
well onto lan interfaces now so thi'll be the bit to add the virtual interface - though may wait until the end and do the main config first...

more insanity and more thinking.. if you panic things will only get worse so stay calm except when you get your finger stuck in something when in a shop, then panic like mad trying to pull it outta there xD

tbh I'll probably do something wrong then will have to start over - this'll all be committed to memory soon :p

Too bad what was already done and works can't be easily 'backed-up' somehow, and have easy restoring abilities, too.

This is where lots of time is used...to get things back to where they were before the wrong setting that destroys everything was added...

Posted: **Tue Mar 08, 2016 7:56 am**

looking at LuCi GUI ang going to System/Backup flash Firmware
Backup / restore sort of suggests you could do that.. though whoes going to be going there constantly to do a bock up :p
anyway
in other news this from openVPN client on Window based PC

Code: Select all

Tue Mar 08 11:47:37 2016 OpenVPN 2.3.10 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Feb  1 2016
Tue Mar 08 11:47:37 2016 Windows version 6.2 (Windows 8 or greater)
Tue Mar 08 11:47:37 2016 library versions: OpenSSL 1.0.1r  28 Jan 2016, LZO 2.09
Tue Mar 08 11:47:37 2016 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Mar 08 11:47:38 2016 UDPv4 link local (bound): [undef]
Tue Mar 08 11:47:38 2016 UDPv4 link remote: [AF_INET]RemoteIP:[port]
Tue Mar 08 11:54:41 2016 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Mar 08 11:54:41 2016 TLS Error: TLS handshake failed
Tue Mar 08 11:54:41 2016 SIGUSR1[soft,tls-error] received, process restarting
Tue Mar 08 11:54:41 2016 Restart pause, 2 second(s)

thing is.. how do i know if its 'handshaking' :S also same result in log file when attempting to do a 'local' connection @ 192.168.0.222:[port] ahh scrub that

now to find the virtual network config I guess

Posted: **Tue Mar 08, 2016 8:08 am**

985ach wrote:looking at LuCi GUI and going to System/Backup flash Firmware
Backup / restore sort of suggests you could do that.. though whoes going to be going there constantly to do a bock up :p

I'm speaking about the entire flash backed-up, the LuCI backup is just the configs, not all the packages added later.

985ach wrote:anyway
in other news this from openVPN client on Window based PC

Code: Select all

Tue Mar 08 11:47:37 2016 OpenVPN 2.3.10 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Feb  1 2016
Tue Mar 08 11:47:37 2016 Windows version 6.2 (Windows 8 or greater)
Tue Mar 08 11:47:37 2016 library versions: OpenSSL 1.0.1r  28 Jan 2016, LZO 2.09
Tue Mar 08 11:47:37 2016 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Mar 08 11:47:38 2016 UDPv4 link local (bound): [undef]
Tue Mar 08 11:47:38 2016 UDPv4 link remote: [AF_INET]RemoteIP:[port]
Tue Mar 08 11:54:41 2016 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Mar 08 11:54:41 2016 TLS Error: TLS handshake failed
Tue Mar 08 11:54:41 2016 SIGUSR1[soft,tls-error] received, process restarting
Tue Mar 08 11:54:41 2016 Restart pause, 2 second(s)

thing is.. how do i know if its 'handshaking' :S also same result in log file when attempting to do a 'local' connection @ 192.168.0.222:[port] ahh scrub that

now to find the virtual network config I guess

It looks like it's doing more than it ever did with the older flash file.
Oh...I remember seeing some difference to make in the config of VPN when using the Chaos Calmer 15.05... Let me look for it...

Code: Select all

 You may have the same or similar issue to what I have.  Following this guide worked perfectly fine in Barrier Breaker, but in Chaos Calmer, the DNS lookup is not working, making access to Internet and local LAN devices inaccessible using device names or URL.

To resolve this issue, in /etc/config/openvpn, any route or DHCP options you're pushing to the vpn client, make sure to remove the "list" wordings, like:
push "route 192.168.1.0 255.255.255.0"    #this should MATCH your current LAN info
push "dhcp-option DNS 192.168.1.1"      #this should MATCH your current LAN info
push "dhcp-option DOMAIN LOCALDOMAIN.LAN"       #this should MATCH your current LAN info
push redirect-gateway lan def1

This seems to resolve the issue for me in Chaos Calmer.

Maybe before actually using the code change above, first see if you actually experience the condition he mentioned in that code (DNS not working)

But at least if you need it, you now know how to fix it.

Posted: **Tue Mar 08, 2016 8:39 am**

yeah theres some of that pushing stuff in one of the two link you gave me earlier https://forum.openwrt.org/viewtopic.php?id=35021

if all failed I can mod some configs and replace with whats there..

Though I feel I should have a WAN interface or something that has the ipaddress of 10.8.0.x but i don't see anything I may leave that for another day though

time to rest the noggin and let it think about something else for a little while:p

Posted: **Tue Mar 08, 2016 8:54 am**

985ach wrote:yeah theres some of that pushing stuff in one of the two link you gave me earlier https://forum.openwrt.org/viewtopic.php?id=35021

if all failed I can mod some configs and replace with whats there..

Though I feel I should have a WAN interface or something that has the ipaddress of 10.8.0.x but i don't see anything I may leave that for another day though

time to rest the noggin and let it think about something else for a little while:p

Yes grasshopper...you've done well..

Your rest is well deserved.

Oh... Did you remember to create a bridge across eth0.1 & VPN

I don't know if it's needed, but all the links were mentioning that single NIC routers needed the virtual Ethernet (eth0.1) to bridge with the VPN or WAN
(if I remember correctly)

Posted: **Tue Mar 08, 2016 9:02 am**

momo wrote:
985ach wrote:yeah theres some of that pushing stuff in one of the two link you gave me earlier https://forum.openwrt.org/viewtopic.php?id=35021

if all failed I can mod some configs and replace with whats there..

Though I feel I should have a WAN interface or something that has the ipaddress of 10.8.0.x but i don't see anything I may leave that for another day though

time to rest the noggin and let it think about something else for a little while:p
Yes grasshopper...you've done well..
Your rest is well deserved.

Oh... Did you remember to create a bridge across eth0.1 & VPN

no, nothing beyond 'testing the tunnel' from this: https://wiki.openwrt.org/doc/howto/vpn.openvpno so its completely possible that nothing can see anything..

looking into the GUI > Network > Interfaces [edit] br-lan > physical settings

I can see that the following interfaces at Ticked:
Ethernet Switch "eth0" (Lan
Ethernet Adapter "tap_myvpn" (Lan)
Wireless Network Master "default" (Lan)

one would would assume that ticking VLAN interface "eth0.1" would add it's self?

there in also Ethernet adapter "tun0" (vpn0) which isn't part of the bridge

I guess I could tick them worst case I'll have to start over (again xD )
or theres bridging VPN0 to eth0.1?

Posted: **Tue Mar 08, 2016 9:08 am**

985ach wrote:
momo wrote:
985ach wrote:yeah theres some of that pushing stuff in one of the two link you gave me earlier https://forum.openwrt.org/viewtopic.php?id=35021

if all failed I can mod some configs and replace with whats there..

Though I feel I should have a WAN interface or something that has the ipaddress of 10.8.0.x but i don't see anything I may leave that for another day though

time to rest the noggin and let it think about something else for a little while:p
Yes grasshopper...you've done well..
Your rest is well deserved.

Oh... Did you remember to create a bridge across eth0.1 & VPN
no, nothing beyond 'testing the tunnel' from this: https://wiki.openwrt.org/doc/howto/vpn.openvpno so its completely possible that nothing can see anything..

looking into the GUI > Network > Interfaces [edit] br-lan > physical settings

I can see that the following interfaces at Ticked:
Ethernet Switch "eth0" (Lan
Ethernet Adapter "tap_myvpn" (Lan)
Wireless Network Master "default" (Lan)

one would would assume that ticking VLAN interface "eth0.1" would add it's self?

there in also Ethernet adapter "tun0" (vpn0) which isn't part of the bridge

I guess I could tick them worst case I'll have to start over (again xD )
or theres bridging VPN0 to eth0.1?

Yeah... Sounds like bridging VPN0 to eth0.1 may work, but this is where everything gets wiped out if a screwup occurs.

Maybe rest-up first, then read the other links, after you're rested, about the usage of eth0.1 and how they solved using it correctly.

I'd really hate to see you need to start from point 1 again.

At this point it wouldn't hurt to make a simple config backup using the LuCI interface.
Too bad it's not coping the entire flash with all the directories too, but a flashROM programmer would be needed for that, so...be careful with what you do from this point on...

Posted: **Tue Mar 08, 2016 9:16 am**

momo wrote: Yeah... Sounds like bridging VPN0 to eth0.1 may work, but this is where everything gets wiped out if a screwup occurs.

Maybe rest-up first, then read the other links, after you're rested, about the usage of eth0.1 and how they solved using it correctly.

I'd really hate to see you need to start from point 1 again.

Close your eyes and type "Go home you are drunk"

*ahem*

go hine you are ftunk*

right I think that means I should take a risk and go for it

In theory that bridge should be removeable as long as the original lan remains..

did it!

it has the same MAC address as the br-lan now

*disclaimer - I'm not drunk

Posted: **Tue Mar 08, 2016 9:22 am**

985ach wrote:
momo wrote: Yeah... Sounds like bridging VPN0 to eth0.1 may work, but this is where everything gets wiped out if a screwup occurs.

Maybe rest-up first, then read the other links, after you're rested, about the usage of eth0.1 and how they solved using it correctly.

I'd really hate to see you need to start from point 1 again.
Close your eyes and type "Go home you are drunk"

*ahem*

go hine you are ftunk*

right I think that means I should take a risk and go for it

In theory that bridge should be removeable as long as the original lan remains..

did it!

it has the same MAC address as the br-lan now

*disclaimer - I'm not drunk

I know you're not drunk with liquor...just power...

So...are you saying it worked well?...or is the MAC not supposed to be the same?

Posted: **Tue Mar 08, 2016 9:31 am**

momo wrote:
985ach wrote:
momo wrote: Yeah... Sounds like bridging VPN0 to eth0.1 may work, but this is where everything gets wiped out if a screwup occurs.

Maybe rest-up first, then read the other links, after you're rested, about the usage of eth0.1 and how they solved using it correctly.

I'd really hate to see you need to start from point 1 again.
Close your eyes and type "Go home you are drunk"

*ahem*

go hine you are ftunk*

right I think that means I should take a risk and go for it

In theory that bridge should be removeable as long as the original lan remains..

did it!

it has the same MAC address as the br-lan now

*disclaimer - I'm not drunk
I know you're not drunk with liquor...just power...

So...are you saying it worked well?...or is the MAC not supposed to be the same?

only a small amount of power

I'd guess they're meant to be the same with just the one network port - Its just they're meant to have different IP addresses - but if it works anyway with one IP address then that is also acceptable in my eyes..

I have just realised that I missed all of this out since I've done a bridge...

Configure the OpenVPN server (ethernet bridge)

new and untested, !!!! doesn't work, the interface is created, but not added to bridge

Code: Select all

echo > /etc/config/openvpn # clear the openvpn uci config
uci set openvpn.myvpn=openvpn
uci set openvpn.myvpn.enabled=1
uci set openvpn.myvpn.verb=3
uci set openvpn.myvpn.port=1194<- Im using a custom port here
uci set openvpn.myvpn.proto=udp
uci set openvpn.myvpn.dev=tap_mypvn
uci set openvpn.myvpn.mode=server
uci set openvpn.myvpn.tls_server=1
uci set openvpn.myvpn.persist_tun=1
uci set openvpn.myvpn.push='route-gateway dhcp'
uci set openvpn.myvpn.ca=/etc/openvpn/ca.crt
uci set openvpn.myvpn.cert=/etc/openvpn/my-server.crt
uci set openvpn.myvpn.key=/etc/openvpn/my-server.key
uci set openvpn.myvpn.dh=/etc/openvpn/dh2048.pem
uci commit openvpn
/etc/init.d/openvpn enable
/etc/init.d/openvpn start

Posted: **Tue Mar 08, 2016 9:36 am**

Are you saying you didn't need the bridge if you added the code?
Or it's untested and you're going to take the chance?

I'm sooooo confused...!

Maybe making the bridge a different IP address is how it stops conflicting with each other, and keeps it separate from data colliding ...I don't know...

Rest-up ...eat something...have some coffee, *or tea* <...(British, I forgot)
Then read the other links maybe even tomorrow...
You're starting to tempt Murphy's Law..!

Posted: **Tue Mar 08, 2016 9:52 am**

momo wrote:Are you saying you didn't need the bridge if you added the code?
Or it's untested and you're going to take the chance?

I'm sooooo confused...!

Maybe making the bridge a different IP address is how it stops conflicting with each other, and keeps it separate from data colliding ...I don't know...

Rest-up ...eat something...have some coffee, *or tea* <...(British, I forgot)
Then read the other links maybe even tomorrow...
You're starting to tempt Murphy's Law..!

I've no idea, It just going to be play around with the config and network interfaces now until it works

in the openvpn beginners guis it say the interface is crated but not added to the bridge so it doesn't work.. but then I just bridged the interfaces...

Murphey's Law?

Dead or alive you are coming with me? https://youtu.be/h4pIPXX2bYs xD

Posted: **Tue Mar 08, 2016 9:59 am**

985ach wrote:
momo wrote:Are you saying you didn't need the bridge if you added the code?
Or it's untested and you're going to take the chance?

I'm sooooo confused...!

Maybe making the bridge a different IP address is how it stops conflicting with each other, and keeps it separate from data colliding ...I don't know...

Rest-up ...eat something...have some coffee, *or tea* <...(British, I forgot)
Then read the other links maybe even tomorrow...
You're starting to tempt Murphy's Law..!
I've no idea, It just going to be play around with the config and network interfaces now until it works

in the openvpn beginners guis it say the interface is crated but not added to the bridge so it doesn't work.. but then I just bridged the interfaces...

Murphey's Law?

Dead or alive you are coming with me? https://youtu.be/h4pIPXX2bYs xD

Murphy's Law. .."Anything that can go wrong ...will go wrong..."

Soooooo......does it work..

Posted: **Tue Mar 08, 2016 10:10 am**

not at the moment, its not responding to my chosen port
http://www.yougetsignal.com/tools/open-ports/

which tells me either the service isn't running of the config is still wrong at the moment and I'd side to the config not being right

Posted: **Tue Mar 08, 2016 10:14 am**

985ach wrote:not at the moment, its not responding to my chosen port
http://www.yougetsignal.com/tools/open-ports/

which tells me either the service isn't running of the config is still wrong at the moment and I'd side to the config not being right

Did you bring it to work with you, or are you still entering into it remotely, with it being at home?

Posted: **Tue Mar 08, 2016 10:30 am**

momo wrote:
985ach wrote:not at the moment, its not responding to my chosen port
http://www.yougetsignal.com/tools/open-ports/

which tells me either the service isn't running of the config is still wrong at the moment and I'd side to the config not being right
Did you bring it to work with you, or are you still entering into it remotely, with it being at home?

it's sat at home at the moment and I'm "teamviewering" home doing the config there

I use http://www.noip.com/ to mask my home ip with a friendly web address like mask.hopto.org you get a few options) and you can use their "DUC" (dynamic Update Client) which tells the noip service what your current IP address is (mine changes from time to time) fyi this mask is understood by the open vpn client though the logs show that it converts it to an ip address

Posted: **Tue Mar 08, 2016 10:39 am**

985ach wrote:
momo wrote:
985ach wrote:not at the moment, its not responding to my chosen port
http://www.yougetsignal.com/tools/open-ports/

which tells me either the service isn't running of the config is still wrong at the moment and I'd side to the config not being right
Did you bring it to work with you, or are you still entering into it remotely, with it being at home?
it's sat at home at the moment and I'm "teamviewering" home doing the config there

I use http://www.noip.com/ to mask my home ip with a friendly web address like mask.hopto.org you get a few options) and you can use their "DUC" (dynamic Update Client) which tells the noip service what your current IP address is (mine changes from time to time) fyi this mask is understood by the open vpn client though the logs show that it converts it to an ip address

That's truly amazing..

May as well rest now, or you'll get *cranky* and yell at someone at work

No need to over-tax your good-luck and acquired skills ...
I'm sure your job must be wondering what you're doing so intently..

I wouldn't want you to get in trouble with them.

Was this how far you got with the other older firmware?
Or did this CC 15.05 so far work better?

I just thought of something...
Could this noip.com be messing up the tunnel connection some how, by blocking a secure connection like SSL?
Maybe they don't allow encrypted data to go thru.

Posted: **Tue Mar 08, 2016 11:06 am**

momo wrote: That's truly amazing..

May as well rest now, or you'll get *cranky* and yell at someone at work
No need to over-tax your good-luck and acquired skills ...
I'm sure your job must be wondering what you're doing so intently..
I wouldn't want you to get in trouble with them.

Was this how far you got with the other older firmware?
Or did this CC 15.05 so far work better?

I just thought of something...
Could this noip.com be messing up the tunnel connection some how, by blocking a secure connection like SSL?
Maybe they don't allow encrypted data to go thru.

I've been flicking between things - sometimes the worl of IT requires a bit of waiting

I think I got to this place before (this was where I deleted the bridge) which we don't want to do this time D:

it shouldn't do, I had an IP camera running via the service and a nother port

Posted: **Wed Mar 09, 2016 6:27 am**

985ach wrote:
momo wrote: That's truly amazing..

May as well rest now, or you'll get *cranky* and yell at someone at work
No need to over-tax your good-luck and acquired skills ...
I'm sure your job must be wondering what you're doing so intently..
I wouldn't want you to get in trouble with them.

Was this how far you got with the other older firmware?
Or did this CC 15.05 so far work better?

I just thought of something...
Could this noip.com be messing up the tunnel connection some how, by blocking a secure connection like SSL?
Maybe they don't allow encrypted data to go thru.
I've been flicking between things - sometimes the worl of IT requires a bit of waiting

I think I got to this place before (this was where I deleted the bridge) which we don't want to do this time D:

it shouldn't do, I had an IP camera running via the service and a nother port

Please do tell when any progress is made...
...I'm with baited breath... (Maybe I'll catch a fish)

O.K. ...I know it's spelt 'bated' ...but the above way is just funnier

Posted: **Wed Mar 09, 2016 7:27 am**

will do - having to run on some actual work related stuff today so it's looking like today will be a non-tinkering day from a VPN direction anyway..

I've not checked back with the Mrs LuCi HooToo today but I assume she's still working as she should be...

Posted: **Thu Mar 10, 2016 5:05 am**

Checking in for the day - another busy one (makes a change! :p )

oh and LuCi is talking back

Posted: **Thu Mar 10, 2016 5:37 am**

985ach wrote:Checking in for the day - another busy one (makes a change! :p )

oh and LuCi is talking back

OK...good to hear...and let work be first...this is just play time.

Don't want you being sacked for playing with the nano...(router -that is

)

Did the reset command change much?

I'm considering to flash my third TM02 and try this too, but it's my last nano with the factory Firmware. The other 2 have OpenWRT Apps already.

I always kept the last TM02 as factory FW, to keep testing their video player DLNA server with their App...but I've since found an iPad FTP Client that supports SMB file sharing servers, documents now, and photos/videos soon, and works well so far.

The developer is adding full player function off the server, soon.
It's called Easy FTP Pro, in the iOS AppStore.

HooToo made a .040 release from the .026 so I was wondering what was such a big change, but once I change it to OpenWRT ... it's not as easy to go back to factory, although still do-able --it's not a simple one step process.

Maybe I'll first have a look at the .040 latest HooToo FW then if it's nothing really new, put the Chaos Calmer 15.05 in instead, and add the other packages.

Anywho...you may have an assistant tester trying this out too, from across the pond.

Posted: **Thu Mar 10, 2016 6:21 am**

especialy if i'm refering to it a mrs luci hootoo...

The reset button threw everything to a blank OpenWRT image as did the LuCi GUI reset..

so IP went to the default 192.168.1.1 and as a DHCP server

So I had to change the IP / Gateway and DNS to my desired via SSH (using puTTy) after connecting directly to the nano via ethernet (Ethernet adapter set up to get an IP via DHCP)

then I had used WinSCP to "SCP" to copy the "distfeeds.conf" from "/etc/opkg/distfeeds.conf"

I found the OpenWRT repo failed to update and download (i guess they're down) so i used a mirror (from the openwrt wiki)

Code: Select all

src/gz designated_driver_base ftp://ftp.stw-bonn.de/pub/openwrt/chaos_calmer/15.05/ramips/rt305x/packages/base
src/gz designated_driver_luci ftp://ftp.stw-bonn.de/pub/openwrt/chaos_calmer/15.05/ramips/rt305x/packages/luci
src/gz designated_driver_management ftp://ftp.stw-bonn.de/pub/openwrt/chaos_calmer/15.05/ramips/rt305x/packages/management
src/gz designated_driver_packages ftp://ftp.stw-bonn.de/pub/openwrt/chaos_calmer/15.05/ramips/rt305x/packages/packages
src/gz designated_driver_routing ftp://ftp.stw-bonn.de/pub/openwrt/chaos_calmer/15.05/ramips/rt305x/packages/routing
src/gz designated_driver_telephony ftp://ftp.stw-bonn.de/pub/openwrt/chaos_calmer/15.05/ramips/rt305x/packages/telephony
# src/gz designated_driver_targets ftp://ftp.stw-bonn.de/pub/openwrt/chaos_calmer/15.05/ramips/rt305x/packages/targets

I made a copy of the original repos too

anyway, installed LuCi after updating#
opkg update
opkg install luci

then went to luci gui via web browser and my chosen ip address set ealier and set a password

so all in all using the actual resets goes back to a stock firmware

sound good - I use AirVideo and AirVideo Server for video playback to iOS devices does what i need it to do and also has an easy option for broadcasting to external iOS devices across the interwebs

I've not looked at the "reversing the process" lets not think about that :p

Posted: **Fri Mar 11, 2016 5:06 am**

985ach wrote:especialy if i'm refering to it as mrs luci hootoo...

............

985ach wrote:The reset button threw everything to a blank OpenWRT image as did the LuCi GUI reset..

Yeah...I'm sure the Firstboot command just resets the config files but DEFINATELY doesn't delete package installations.

I was even able to use LuCI's 'Backup/Restore' command to restore my settings after the firstboot was issued. LuCI BackUp/Restore makes a small compressed file of all configs. It's really helpful at times.

985ach wrote: so IP went to the default 192.168.1.1 and as a DHCP server

So I had to change the IP / Gateway and DNS to my desired via SSH (using puTTy) after connecting directly to the nano via ethernet (Ethernet adapter set up to get an IP via DHCP)

then I had used WinSCP to "SCP" to copy the "distfeeds.conf" from "/etc/opkg/distfeeds.conf"

I found the OpenWRT repo failed to update and download (i guess they're down) so i used a mirror (from the openwrt wiki)
Code: Select all
src/gz designated_driver_base ftp://ftp.stw-bonn.de/pub/openwrt/chaos_calmer/15.05/ramips/rt305x/packages/base
src/gz designated_driver_luci ftp://ftp.stw-bonn.de/pub/openwrt/chaos_calmer/15.05/ramips/rt305x/packages/luci
src/gz designated_driver_management ftp://ftp.stw-bonn.de/pub/openwrt/chaos_calmer/15.05/ramips/rt305x/packages/management
src/gz designated_driver_packages ftp://ftp.stw-bonn.de/pub/openwrt/chaos_calmer/15.05/ramips/rt305x/packages/packages
src/gz designated_driver_routing ftp://ftp.stw-bonn.de/pub/openwrt/chaos_calmer/15.05/ramips/rt305x/packages/routing
src/gz designated_driver_telephony ftp://ftp.stw-bonn.de/pub/openwrt/chaos_calmer/15.05/ramips/rt305x/packages/telephony
# src/gz designated_driver_targets ftp://ftp.stw-bonn.de/pub/openwrt/chaos_calmer/15.05/ramips/rt305x/packages/targets

Thanks for these paths... This will help when I do this...

985ach wrote:I made a copy of the original repos too

anyway, installed LuCi after updating#
opkg update
opkg install luci

then went to luci gui via web browser and my chosen ip address set ealier and set a password

so all in all using the actual resets goes back to a stock firmware

Yeah...I'm thinking about getting one of those small USB FW chip programmers...just to be able to backup/restore the entire flash-chip so total restores can be done, not just the configs.

when setting disasters screw things up.

985ach wrote:sound good - I use AirVideo and AirVideo Server for video playback to iOS devices does what i need it to do and also has an easy option for broadcasting to external iOS devices across the interwebs

Ahhh...but what about moving files around?
The Easy FTP Pro also moves any file from/to the SMB server with your iDevice..also renames, deletes...and soon to be FXP transfers too..!
(When he finishes the coding for the next updates)
It will let the iDevice move files between 2 separate servers or clients, without needing to first put it on your iDevice, then up it to the server.
You could transfer directly from your source to the SMB (DLNA) file server, with the iDevice as the main controller. So the iDevice doesn't need large space on it first.

985ach wrote:I've not looked at the "reversing the process" lets not think about that :p

Yeah

not yet, ...anyway.!

I've got to see the HooToo latest FW update, and what's new in it.
If nothing special...I'm going straight to the Chaos Calmer 15.05

Posted: **Tue Mar 15, 2016 5:30 am**

I'm back... from outta space.
not really - ear / chest infection sapped my concentration and balance

anyway

so Firstboot cmd via SSH or does this https://wiki.openwrt.org/doc/howto/generic.failsafe suggest that it done during a failsafe boot?

with the repos I left an original file in the same location that way its just a case of SCPing in and renameing the files

chip programming is beyond my brain so I'll just nod and smile at this point

I'll just hope I never screwup that bad

nope just encodes videos on the fly to lower bitrates for streaming over wifi / 3g / 4g connections
but direct file trasfers sound good

how does the stock firware act / work as a wifi repeater or as an access point?
one of my daugters bedroom is a little bit of a wireless blackspot and its just occured to me that this could be a decent way of getting a small wireless footprint from a small amount of power

I'm going to end up addicted to these little devices soon :p

EDIT

BAD NEWS EVERYBODY!!!
Price has gone up £5 for us on Amazon UK!

the HooToo TM02 is now £20.99

http://www.amazon.co.uk/gp/product/B00I ... ge_o02_s00

Posted: **Wed Mar 16, 2016 4:03 am**

985ach wrote:I'm back... from outta space.
not really - ear / chest infection sapped my concentration and balance

I know how that ear-dizzy stuff can feel...
Sort-of like you ARE in outta space
Glad you're feeling better

985ach wrote:anyway

so Firstboot cmd via SSH or does this https://wiki.openwrt.org/doc/howto/generic.failsafe suggest that it done during a failsafe boot?

I kept reading posts on the OpenWRT forum about this failsafe stuff.
But hadn't gotten 'into' reading up on it, because I've always used the backup/restore option in LuCI, and my firstboot command

but, if I understand it, it may be a way to write a default settings file that gets loaded when the reset button is pressed.
Maybe I'll read that link you so wisely posted about it...

985ach wrote:with the repos I left an original file in the same location that way its just a case of SCPing in and renameing the files

I must look-up this SPC-ing thing, you mention, sounds interesting.
If it's done remotely, without needing a serial to USB cable to do a standard firstboot type of reset, it could be useful.

985ach wrote:chip programming is beyond my brain so I'll just nod and smile at this point I'll just hope I never screwup that bad

it's actually easier than you think.
Wingspinner posted that he was able to read/reprogram the 8MB FlashROM chip whilst still soldered to the nano board, using the small USB programmer and a special spring-loaded chip clip device, that attached to the chip pins directly.
So no soldering the chip OFF/ON the board was needed.

If this is true, it could give a great way to solve a bad setting that bricks the device, or if it gets bricked by flashing a wrong file to it.
Or even if the nano simply burns out...do you really want to start completely over again with the replacement nano?

985ach wrote:nope just encodes videos on the fly to lower bitrates for streaming over wifi / 3g / 4g connections
but direct file trasfers sound good

Yes...I've tried to find an App that offered both functions, of playing videos/audio files, and also file transfer, so I gave the developer the idea to update his App...and he agreed to do it.
I'm waiting to see how it turns out.
This was also why I never put OpenWRT on the 3rd nano, and kept it factory stock FW...to see if his new App update worked better than the HooToo TripMate App

985ach wrote:how does the stock firmware act / work as a wifi repeater or as an access point?

It works, but it's a bit limited in some uses, that's why I wanted to see what they changed with the latest FW .040 update.
When I wanted to bridge from my ISP's hotspot it didn't support logging in with a name / password ...and just supported password entry.
Plus there were other quirks with their factory FW too.

985ach wrote:one of my daugters bedroom is a little bit of a wireless blackspot and its just occured to me that this could be a decent way of getting a small wireless footprint from a small amount of power I'm going to end up addicted to these little devices soon :p

I'm already addicted to these,

when using OpenWRT it has much more use-ability.

I was able to do exactly as you're needing, by making one nano as a STAtion mode, that picks-up the signal from my home main router, and bridges it thru the built-in Ethernet port, then my 2nd nano is the AP mode that takes the Ethernet from nano 1 into it's nano 2 Ethernet port, and retransmits it thru the 2nd Nano's radio, on a totally different radio channel from the first nano, so no speed loss is made, using the same frequency of the same radio from just using one nano to try to do it.

This was also why I haven't added any other packages to the two Nano's already using OpenWRT.
These two uses are invaluable to me...and I can't take a chance of screwing the configs and setups.
Also why I'd get the programmer...just as a backup so I can test different configs and packages out, easier, and without worry.

I can also change the 1st Nano's STA link, by simply entering the MAC address and network name of the scanned hotspot, when using the OpenWRT LuCI RF-SCAN function to view them, to connect to my ISP's hotspot outside from my window, and have it bridge to another full router's Ethernet input, and distribute it to other computers or devices thru all 4 Ethernet ports on the other full router.

If the signal from your home router is strong enough to pickup the signal at least half-way between the home router and your kids bedroom, then you'd be able to setup the two Nano's to retransmit the signal closer to her bedroom, wirelessly to her room from the second nano, that was bridged to the first nano thru both Ethernet ports.

You could even stretch that range by using a longer Ethernet cable between both Nano's so it would allow a stronger signal to the first nano, closer to your home router, then use a longer Ethernet cable to extend further than normal RF would go, and the 2nd nano would retransmit that strong signal speed from the 1st nano, wirelessly to her bedroom.

I don't know what the distances are from your main router, to your daughters room, so if it's way too far...it depends on how long a cable you want to use between each of the two Nano's, and how they'd be powered ...but it IS do-able.

***Edited... I forgot to tell you...my 2nd nano also supports USB WebCamera streaming video in 1080p, transmitting to my iPad 2 from the network created by the 2nd nano.

using an iOS App called CamViewer on my iPad.

I'm using a LogiTech Camera Model C600. It's an old obsolete USB camera, but it was just $25 USD on special around 5 years ago, and all I had available, to test the MJPEG streaming video package. ...
(Plus other needed packages with it)

The camera works very well at full 30 frames-per-second on a PC, at 1080p, but with the Nano it's a bit slower over wifi.

Whilst not at full 30 FPS, (it's still surprisingly smooth), it's still good to view video remotely, locally, or by forwarding ports allowed by a firewall-rule ... It can be routed to your main home router to be accessible over the public internet, using security settings of course.

985ach wrote:EDIT

BAD NEWS EVERYBODY!!!
Price has gone up £5 for us on Amazon UK!
the HooToo TM02 is now £20.99

http://www.amazon.co.uk/gp/product/B00I ... ge_o02_s00

Yeah, but there's also free shipping, so it's still not that bad.
Other devices similar to these cost almost double.

Posted: **Thu Mar 17, 2016 4:34 am**

WinSCP - Its just an FTP / SFTP / SSH client which is a free thing https://winscp.net/eng/index.php It also my chosen file explorer when looking at an iDevice file system for what ever crazy reason I have for that day xD - you still need to be able to connect via IP with WinSCP though so I'd guess in dire consequence you'll still need the USB / serial mix

it does sound easy

especialy with no soldering needed xD

not bad if it works well (assuming apple allow it through their evil app filters :p ) I guess you can always side load with xcode

I'd be running the nano as a hotspot (even with its own SSID if need be) just for that room on the weekend I manage to do a cat5e run to her room and made up a couple of split cat5e cables to I'm able to run 2x100mb down 1 cat5e run (this makes sense for me since my terrible sky router only supports 100mb ethernet any way they're still in the late 90 early 2000's with their tech -.- )

Hey if you’re willing you should be able to run power and Ethernet down one self made network cable if you’re also willing to cup up USB cabled too :p for 100mb you only need pins 123&6 so you could send power down the cables in 457&8 (blue pair brown pair usually) hey this could just be a useful sort of cable to have anyway

and another great use for the little hootoo - can the camera be set to record to a USB storage device.. oh wait only 1 USB port (unless you can use a USB hub (?) I've got a WIF Trendnet day/night cloud camera but the infrared LED reflected on the glass it was sat behind so I ended up setting up outside - i think It my of succumbed to moisture

its not responding to ping at the moment but then I've not really sat down and looked at it too much

Code: Select all

Thu Mar 17 09:03:54 2016 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Mar 17 09:03:54 2016 TLS Error: TLS handshake failed
Thu Mar 17 09:03:54 2016 SIGUSR1[soft,tls-error] received, process restarting

Still on this TLS key negotiation fialing :/
https://openvpn.net/index.php/open-sour ... ivity.html
it could be windows filrewall stuff or just My HooToo still not listening on my chosen port :p

Posted: **Thu Mar 17, 2016 5:09 am**

985ach wrote:WinSCP - Its just an FTP / SFTP / SSH client which is a free thing https://winscp.net/eng/index.php It also my chosen file explorer when looking at an iDevice file system for what ever crazy reason I have for that day xD - you still need to be able to connect via IP with WinSCP though so I'd guess in dire consequence you'll still need the USB / serial mix

This windows App sounds like the Easy FTP Pro App I have for the iOS
It does much of the same thing with file transfers, and he'll be adding the video/audio player, and photo-viewer functions to it for viewing directly from the DLNA file server.

985ach wrote:it does sound easy especialy with no soldering needed xD

Well...it sounds easy, but I haven't tried it yet to make sure...but wingspinner said it worked for him, but someone else tried it, and said he had trouble making it work...so I'd need to see for myself, to be sure.

985ach wrote:not bad if it works well (assuming apple allow it through their evil app filters :p ) I guess you can always side load with xcode

Are you referring to the Easy FTP Pro App?
Because the developer is mostly finished with completing the direct from SMB (DLNA) video/audio player, and photo viewer, and will add the FXP functions to it soon, ...Apple will allow it, as with all the other functions it already has.

985ach wrote:I'd be running the nano as a hotspot (even with its own SSID if need be) just for that room, on the weekend I manage to do a cat5e run to her room and made up a couple of split cat5e cables to I'm able to run 2x100mb down 1 cat5e run (this makes sense for me since my terrible sky router only supports 100mb ethernet any way they're still in the late 90 early 2000's with their tech -.- )

So if you ran cables to her room, do you still need the repeater function of the HooToo?

985ach wrote:Hey if you’re willing you should be able to run power and Ethernet down one self made network cable if you’re also willing to cup up USB cabled too :p for 100mb you only need pins 123&6 so you could send power down the cables in 457&8 (blue pair brown pair usually) hey this could just be a useful sort of cable to have anyway

Yeah...this power over Ethernet is getting very popular

985ach wrote:and another great use for the little hootoo - can the camera be set to record to a USB storage device.. oh wait only 1 USB port (unless you can use a USB hub (?) I've got a WIF Trendnet day/night cloud camera but the infrared LED reflected on the glass it was sat behind so I ended up setting up outside - i think It my of succumbed to moisture its not responding to ping at the moment but then I've not really sat down and looked at it too much

With the OpenWRT on it, you can install a USB Hub package, so YES, it's possible to use more than one USB device on the HooToo, and the LuCI MJPEG interface already supports saving photos, and I also think videos too, to a hard drive or flash drive file.

Also, any USB camera that works with Linux will work on the HooToo with OpenWRT.

*** EDITED ***
I saw your edited mention of your HooToo VPN not seeing your chosen port.
Did you add the 'fix' that the other OpenWRT post mentioned for the port change other than port 22 ...?

I mentioned it in this post...
http://www.phoneservicesupport.com/post85324.html#85324

Posted: **Thu Mar 17, 2016 6:16 am**

momo wrote: This windows App sounds like the Easy FTP Pro App I have for the iOS
It does much of the same thing with file transfers, and he'll be adding the video/audio player, and photo-viewer functions to it for viewing directly from the DLNA file server.

Yeh I guess it’s just another FTP app but without the audio / video play back

momo wrote: Well...it sounds easy, but I haven't tried it yet to make sure...but wingspinner said it worked for him, but someone else tried it, and said he had trouble making it work...so I'd need to see for myself, to be sure.

Good luck when you go and take the plunge with that one ^__^

momo wrote: Are you referring to the Easy FTP Pro App?
Because the developer is mostly finished with completing the direct from SMB (DLNA) video/audio player, and photo viewer, and will add the FXP functions to it soon, ...Apple will allow it, as with all the other functions it already has.

Yes just sort of mocking Apples “iron curtain” approach to things and being strict and all that – though It’s good to hear they’re still refusing to create a back door to their devices for the FBI to go snooping

momo wrote: So if you ran cables to her room, do you still need the repeater function of the HooToo?

Yeah to cover her wireless devices too – We’ve got her PS3 plugged directly into the network now.
I’m going to take a guess that it my fusebox and a mass of electrical wiring that’s causing interference for the wireless signal in her room cause she’s not even 4 meters away from the wireless router…

momo wrote:
With the OpenWRT on it, you can install a USB Hub package, so YES, it's possible to use more than one USB device on the HooToo, and the LuCI MJPEG interface already supports saving photos, and I also think videos too, to a hard drive or flash drive file.

Also, any USB camera that works with Linux will work on the HooToo with OpenWRT.
[/quote]
There goes £40 very quickly on new hootoo devices :p

momo wrote: *** EDITED ***
I saw your edited mention of your HooToo VPN not seeing your chosen port.
Did you add the 'fix' that the other OpenWRT post mentioned for the port change other than port 22 ...?

I mentioned it in this post...
http://www.phoneservicesupport.com/post85324.html#85324

I’ve not done that but OpenWRT SSH still responds to port 22 as expected so that’s all good – it’s my chosen OpenVPN port so I need to work out and get my OpenVPN to run the service on the right port – I wonder where the config is located on the hootoo for openVPN – off for a hunt!

Posted: **Thu Mar 17, 2016 6:33 am**

wow.. theres not alot to my "opencpn-myvpn.conf"
thats located /var/etc/
no files located in /etc/openvpn/

Code: Select all

persist-tun
tls-server
ca /etc/openvpn/ca.crt
cert /etc/openvpn/my-server.crt
dev tap_myvpn
dh /etc/openvpn/dh2048.pem
key /etc/openvpn/my-server.key
mode server
port <MYPORT>
proto udp
verb 3
push route-gateway dhcp

:S
found another location after re-reading a link from an earlier page:

mine

Code: Select all

config openvpn 'myvpn'
	option enabled '1'
	option verb '3'
	option port 'MYPORT'
	option proto 'udp'
	option dev 'tap_myvpn'
	option mode 'server'
	option tls_server '1'
	option persist_tun '1'
	option puch 'route-gateway dhcp'
	option push 'route-gateway dhcp'
	option ca '/etc/openvpn/ca.crt'
	option cert '/etc/openvpn/my-server.crt'
	option key '/etc/openvpn/my-server.key'
	option dh '/etc/openvpn/dh2048.pem'

this post: https://forum.openwrt.org/viewtopic.php?id=35021

Code: Select all

config 'openvpn' 'samplevpnconfig'
        option 'enable' '1'
        option 'port' '1194'
        option 'proto' 'udp'
        option 'dev' 'tun'

        option 'client_to_client' '1'
        option 'keepalive' '10 120'
        option 'comp_lzo' '1'
        option 'persist_key' '1'
        option 'persist_tun' '1'
        option 'verb' '3'
        option 'mute' '20'
        option 'ifconfig_pool_persist' '/tmp/ipp.txt'
        option 'status' '/tmp/openvpn-status.log'
        option 'ca' '/etc/openvpn/ca.crt'
        option 'cert' '/etc/openvpn/server.crt'
        option 'key' '/etc/openvpn/server.key'
        option 'dh' '/etc/openvpn/dh1024.pem'

        option 'server' '172.16.0.0 255.255.255.0'  #this should be on a completely different subnet than your LAN
        list 'push' 'route 192.168.1.0 255.255.255.0' #this should MATCH your current LAN info
        list 'push' 'dhcp-option DNS 192.168.1.254' #this should MATCH your current LAN info
        list 'push' 'dhcp-option DOMAIN 192.168.1.254' #this should MATCH your current LAN info
        list 'push' 'redirect-gateway'

So I may config mine the same (chaning the appropirate) whilst backing up too xD

I've just upset luci - it's not talking to me any more on 192.168.0.222 :/ and my open vpn port is still closed so it's not going to respond to a connection there.
nuts going to have to plug the hootoo direct into my lappy again later and see if it serving DHCP IPs

still no life from a remote location - I suspect I've messed up the network configuration someway

else
START OVER

Posted: **Thu Mar 17, 2016 10:40 am**

you know what i need to do.. set myself up a router that'll access the internet via a proxy so I can do stuff my my hootoo with out having to remote home to do it

I wonder if my DD-WRT router can do that - I'll have to find the power supply for it at least then when i screw up I can stright away start going back to defaults :p

Posted: **Thu Mar 17, 2016 1:48 pm**

985ach wrote:you know what i need to do.. set myself up a router that'll access the internet via a proxy so I can do stuff my my hootoo with out having to remote home to do it

I wonder if my DD-WRT router can do that - I'll have to find the power supply for it at least then when i screw up I can stright away start going back to defaults :p

I just noticed you may have added the 'list' word in your config, if you followed the sample config you listed in the code sample you quoted in your other post above.

...kelxon10995 in the #20 post of the thread at ... https://forum.openwrt.org/viewtopic.php?id=35021
...mentioned with Chaos Calmer 15.05 found it can't use the word 'list' in the config with CC 15.05 ...it stops the DNS lookup from working...

*** the quote from that threads #20 post ***

You may have the same or similar issue to what I have. Following this guide worked perfectly fine in Barrier Breaker, but in Chaos Calmer, the DNS lookup is not working, making access to Internet and local LAN devices inaccessible using device names or URL.

To resolve this issue, in /etc/config/openvpn, any route or DHCP options you're pushing to the vpn client, make sure to remove the "list" wordings, like:
push "route 192.168.1.0 255.255.255.0" #this should MATCH your current LAN info
push "dhcp-option DNS 192.168.1.1" #this should MATCH your current LAN info
push "dhcp-option DOMAIN LOCALDOMAIN.LAN" #this should MATCH your current LAN info
push redirect-gateway lan def1

This seems to resolve the issue for me in Chaos Calmer.

985ach wrote:
momo wrote: So if you ran cables to her room, do you still need the repeater function of the HooToo?
Yeah to cover her wireless devices too – We’ve got her PS3 plugged directly into the network now.
I’m going to take a guess that it my fusebox and a mass of electrical wiring that’s causing interference for the wireless signal in her room cause she’s not even 4 meters away from the wireless router…

If she's only around 12 feet away and has issues with wireless from the home router, it may still affect her wireless connection from the HooToo as well.
If electrical interference is causing it all.

985ach wrote:
momo wrote:
With the OpenWRT on it, you can install a USB Hub package, so YES, it's possible to use more than one USB device on the HooToo, and the LuCI MJPEG interface already supports saving photos, and I also think videos too, to a hard drive or flash drive file.

Also, any USB camera that works with Linux will work on the HooToo with OpenWRT.
There goes £40 very quickly on new hootoo devices :p

Ha Ha... Welcome to the HooToo addiction club...

Posted: **Fri Mar 18, 2016 5:17 am**

that'll learn me not to read on properly...

GOOD NEWS!
HooToo was still DHCPing but the WAN port setting too presidence over the LAN port so I ended up with 10.x.x.x or 172.16.x.x ips (depending on which config I used) so no reset needed

though I did have to remore the WAN settings from the configs and then log into the LuCI gui to re connect the lan to get my normal 192.168.0.222 ip address

I did change all my configs while I was there back to the "default" ones I had but I have now removed the word 'list' and the surrounding '' marks from the word push
I think introduce configes one by one and work out what needed to be done with the LAN / WAN config

I'd assume they need to be bridged too or maybe a virtual switch needs to be running (?)

if the HooToo is in her room also opposite side of the room and above to where the bulk electrical wiring is it should be okay as a small personal hotspot though?

stop giving me an excuse not to buy another one

:p

Posted: **Fri Mar 18, 2016 6:13 am**

985ach wrote:that'll learn me not to read on properly...

GOOD NEWS!
HooToo was still DHCPing but the WAN port setting too presidence over the LAN port so I ended up with 10.x.x.x or 172.16.x.x ips (depending on which config I used) so no reset needed

though I did have to remore the WAN settings from the configs and then log into the LuCI gui to re connect the lan to get my normal 192.168.0.222 ip address

I did change all my configs while I was there back to the "default" ones I had but I have now removed the word 'list' and the surrounding '' marks from the word push
I think introduce configes one by one and work out what needed to be done with the LAN / WAN config

I'd assume they need to be bridged too or maybe a virtual switch needs to be running (?)

if the HooToo is in her room also opposite side of the room and above to where the bulk electrical wiring is it should be okay as a small personal hotspot though?

stop giving me an excuse not to buy another one :p

I'm so glad I mentioned the 'list' word change...
Good to know it helped.

if the HooToo will be in her room ...yes of course it should work very well.
Of course though the RF radiation will cook her brain.... No No...just joking.

You know, you may even be able to keep the original HooToo firmware for that. This was what it was originally made for.
Especially if you're going to have an Ethernet cable near-by her room, linked to your main router,
...it would be as if she was in a hotel room with just wired access and no WiFi.
So in this case, you may not even need to put OpenWRT on it...unless you want more security and the LuCI firewall control.

Hey...speaking of the firewall... Maybe you're also forgetting to adjust that for your OpenWRT VPN setup, and that's maybe giving you the issues you're having now, if nothing else in the configs are doing it.

I remember reading that the firewall is tricky setting up when using the OpenVPN... I'll see if I can find the post mentioning it, but while I was looking ...

...I found an OpenWRT LuCI Firewall White-List Example at the forum, and put it on my MoMo imgur site for easy viewing, to get an idea how to manipulate the LuCI interface that creates it.

Looking at it, I think I like this White-List idea better, rather than making a Black-List.
This way EVERYTHING is already blocked, except for the bits you want to be allowed IN.

https://i.imgur.com/g4tj7uv.jpg

------
EDIT
------

I found the conversation about the firewall.
Rather than post the link...
...Here's the entire text of it...
Maybe you can find something in that conversation to help your setup.

Hi, thanks for the great write up - followed with ease. I have one issue - when I connect from the internet 3g or another internet line I am authenticated & the openvpn client says its connected, however I cant connect to any of my LAN machines I can ping the address of my router, but not my server and RDP wont connect... I'm thinking it's an issue with the firewall, the file is as you described in your article... any ideas?
config zone
option input 'ACCEPT'
option forward 'REJECT'
option output 'ACCEPT'
option name 'VPN'
option network 'VPN'
config rule
option target 'ACCEPT'
option src 'lan'
option dest 'VPN'
option name 'LAN->VPN'
config rule
option target 'ACCEPT'
option src 'VPN'
option dest 'lan'
option name 'VPN->LAN'
config rule
option target 'ACCEPT'
option src 'wan'
option name 'OpenVPN'
option proto 'udp'
option dest_port '1194'

***UPDATE***
I think this is to do with bridging traffic between the VPN interface and the local LAN one - I enabled a bridge across eth0.1 & VPN, rebooted but still no joy... any ideas?

Try the following, in /etc/firewall.user or luci>firewall>custom rules:
###OPENVPN PASS-THROUGH ENABLE RULES###
iptables -t nat -A prerouting_wan -p udp --dport 11944 -j ACCEPT
iptables -A input_wan -p udp --dport 11944 -j ACCEPT
iptables -I INPUT -i tun+ -j ACCEPT
iptables -I FORWARD -i tun+ -j ACCEPT
iptables -I OUTPUT -o tun+ -j ACCEPT
iptables -I FORWARD -o tun+ -j ACCEPT
----

I can not get open VPN working correctly i followed thes steps but i can still not get it working. it looks like it is setup and the keys created but does not seem like it is getting through the firewall or bridge I have and bridged wireless and vlan eth0.1 and it seems ok just the client will sit on the other end trying to always connect but i get no logs on the router side to say the port was blocked
I am using wndr3700V2 and openwrt 12.09

By the way if i do a port scan it does show it is listening so it leads me to belive the Firewall or Routing is not working. on the firewall logs it never seems to see anyting come over the VPN side and port 1194

Maybe you can post the text of your files that need edited in case there is junk in ours that is blocking something.
----

Thanks for great HowTo... After many days of trying to get it working i finally get it.
I could log in and see routers ip through vpn, but i couldn't get over to the internet (no matter what tutorial did i use).

To all, who can connect, but cant access internet:
after i put these lines to /etc/config/firewall and reboot the router, i could finally get through vpn to internet

config 'forwarding'

option 'src' 'VPN'
option 'dest' 'wan'

Here my config files, if some1 interested:

/etc/config/firewall

config 'forwarding'
option 'src' 'VPN'
option 'dest' 'wan'
config 'zone'
option 'name' 'VPN'
option 'input' 'ACCEPT'
option 'output' 'ACCEPT'
option 'forward' 'REJECT'
config 'rule'
option 'target' 'ACCEPT'
option '_name' 'lantovpn'
option 'src' 'lan'
option 'dest' 'VPN'
config 'rule'
option 'target' 'ACCEPT'
option '_name' 'vpntolan'
option 'src' 'VPN'
option 'dest' 'lan'
config 'rule'
option 'target' 'ACCEPT'
option '_name' 'openVPN'
option 'src' 'wan'
option 'proto' 'udp'
option 'dest_port' '1194'

Posted: **Fri Mar 18, 2016 8:56 am**

ahh awesome - cheers for all that

I'll check out the imgur.com link later (home laptop has been turned off by someone today :/ and the site is filters on my work place internet)

if it is as simple as the firewall I could just let everything through... I am behind another firewall anyway? I know its not the safest and the more firewall the better xD one way or another opening that up would tell me if the firewall is blocking me or not....

mmm wireless radiation - it's cool everytime we use out iDevices we're steping closer to a medium rare brain :p

Posted: **Wed Mar 23, 2016 4:25 am**

howdy!
not done much recently on the little HooToo, but in other news I fount my "Sky Wireless Booster" (Sky SB601 // Rebranded Airties 4400) (Sky were giving this away free due to how terrible their routers are as standard (or thats what I'm saying anyway))

Anyway it's terrible as it is - it just a wireless repeater taking 50% of your wireless bandwith o wahts that 27mbps remain for other devices (urgh)

but with out reading this fully https://forum.openwrt.org/viewtopic.php?id=48201 maybe I could make it useful

Just finished reading looks like things halted April 2014

It also looks like it could run in access point mode - which would be nice just a shame that Sky have restricted the firmware so much

Invalid signature when attempting to flash stock firmware via the GUI

in other news to do with this little wireless repeater its 5V 1A- so I've changed the 240v adapter for a USB connector runs nicley so I'll be able to pick up power from a devices with a USB socket xD

magicJack and magicJack Plus Support, Reviews, FAQs and Tricks

***New Mods T5730 a Dual-Core 64-bit CPU & PCIe G-card