[arm-allstar] Address to use SuperMon away from home network

[James Hause]

Understand.  Glad I get the posts, have learned much, and thankful.

On Tue, Jan 30, 2018 at 10:53 AM, "Doug Crompton via arm-allstar" <
arm-allstar at hamvoip.org> wrote:

> James,
>
>   Using it is not the issue. It is the fact that it is there to use! The
> compromise potential is there whether you use it or not. It is just another
> available hacker tool!
>
>
> *73 Doug*
>
> *WA3DSP*
>
> *http://www.crompton.com/hamradio <http://www.crompton.com/hamradio>*
>
>
> On Tue, Jan 30, 2018 at 6:31 AM, "James Hause via arm-allstar" <
> arm-allstar at hamvoip.org> wrote:
>
>> Doug,
>> Thanks for the comment on that post, I was considering trying it, but
>> thought that might be a bad idea, so hoped you would post something.
>>
>> On Mon, Jan 29, 2018 at 10:18 PM, "Doug Crompton via arm-allstar" <
>> arm-allstar at hamvoip.org> wrote:
>>
>>> I might add that the asnode.org method while convenient opens a very
>>> serious security hole for Allstar. Whomever runs this site is not helping
>>> to ensure our security. It is not a hamvoip or Allstar supported site. We
>>> would really like to see it shut down as everything we are doing right now
>>> is aimed at improving security. Any hacker has an immediate list of every
>>> Allstar IP address using this site and could hit every address
>>> specifically. I would also warn that because it is an independently run
>>> site there is no guarantee it will always be there. Our upcoming DNS
>>> rollout will be very secure but it is people like those that run
>>> asnode.org that ruin a good thing. Years ago before the big hacker
>>> craze this might have been a neat thing to do but not today!
>>>
>>>
>>> *73 Doug*
>>>
>>> *WA3DSP*
>>>
>>> *http://www.crompton.com/hamradio <http://www.crompton.com/hamradio>*
>>>
>>>
>>> On Mon, Jan 29, 2018 at 11:11 AM, "Neil Mooney via arm-allstar" <
>>> arm-allstar at hamvoip.org> wrote:
>>>
>>>> Instead of using a dynamic DNS provider you could try using <your node
>>>> number>.asnode.org
>>>>
>>>> If your node is 1001 your address would be 1001.asnode.org
>>>>
>>>> This works as long as your node is registered with allstarlink and
>>>> doesn't need you to install any software to keep the DDNS updated.
>>>>
>>>>
>>>> Regards,
>>>>
>>>> Neil
>>>> ------------------------------
>>>> *From:* arm-allstar <arm-allstar-bounces at hamvoip.org> on behalf of
>>>> "Doug Crompton via arm-allstar" <arm-allstar at hamvoip.org>
>>>> *Sent:* 28 January 2018 18:17:29
>>>> *To:* ARM Allstar
>>>> *Cc:* Doug Crompton
>>>> *Subject:* Re: [arm-allstar] Address to use SuperMon away from home
>>>> network
>>>>
>>>> Maurice,
>>>>
>>>> A few points....
>>>>
>>>>   Supermon and allmon are http  applications and for them  to work
>>>> externally requires that port 80 tcp be forwarded in your router. Some
>>>> providers do not allow outgoing port 80 from their customers although this
>>>> is much less common than it use to be. If that is the case the http port
>>>> can be changed in the apache configuration.
>>>>
>>>> In order to reach your system from a remote location you need to use
>>>> the public IP address assigned to you by your provider. This is most often
>>>> a dynamic address meaning it can change. You could check it using your
>>>> allstar with a command  - dns-query <yournode>  The problem is is could
>>>> change. The answer is to use a free Dyndns so that you address your home
>>>> system by a domain name rather than an IP address. This domain name is then
>>>> converted to an IP address which follows any changes that might happen to
>>>> it.
>>>>
>>>> All that being said be aware that the current allmon and supermon
>>>> programs of any version are extremely insecure. It is very simple for a
>>>> hacker to get into your system and your network if you open up ports to
>>>> either of these programs. We are working on a fix for that and it should be
>>>> out in an update very soon. Until then I would NOT recommend  opening your
>>>> system to remote allmon or supermon.
>>>>
>>>>
>>>> *73 Doug *
>>>>
>>>> *WA3DSP *
>>>>
>>>> *http://www.crompton.com/hamradio <http://www.crompton.com/hamradio> *
>>>>
>>>>
>>>>
>>>> On Sun, Jan 28, 2018 at 12:58 PM, "Maurice Dake via arm-allstar" <
>>>> arm-allstar at hamvoip.org> wrote:
>>>>
>>>> What address do I use to connect to my home node using SuperMon when
>>>> away from my home network?  I’ve tried to use the address listed in the
>>>> Allstar registration but that doesn’t go any where.
>>>>
>>>> _______________________________________________
>>>>
>>>> arm-allstar mailing list
>>>> arm-allstar at hamvoip.org
>>>> http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
>>>>
>>>> Visit the BBB and RPi2/3 web page - http://hamvoip.org
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>>
>>>> arm-allstar mailing list
>>>> arm-allstar at hamvoip.org
>>>> http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
>>>>
>>>> Visit the BBB and RPi2/3 web page - http://hamvoip.org
>>>>
>>>
>>>
>>> _______________________________________________
>>>
>>> arm-allstar mailing list
>>> arm-allstar at hamvoip.org
>>> http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
>>>
>>> Visit the BBB and RPi2/3 web page - http://hamvoip.org
>>>
>>
>>
>> _______________________________________________
>>
>> arm-allstar mailing list
>> arm-allstar at hamvoip.org
>> http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
>>
>> Visit the BBB and RPi2/3 web page - http://hamvoip.org
>>
>
>
> _______________________________________________
>
> arm-allstar mailing list
> arm-allstar at hamvoip.org
> http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
>
> Visit the BBB and RPi2/3 web page - http://hamvoip.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.hamvoip.org/pipermail/arm-allstar/attachments/20180130/2e04ddd8/attachment.html>