DSM-G600, DNS-3xx and NSA-220 Hack Forum

thehecklerj · 2008-01-12 19:25:41

Hello,

I am looking to connect my DNS-323 to two seperate networks and am not able to come up with a good way of doing this. I have tried assigning a secondary IP to the DNS-323, but I am still unable to connect to my 2 seperate networks without creating a bridge and this defeats the purpose.

Currently I am running dlink fw version 1.04b83 with funplug from http://www.inreto.de/dns323/fun-plug/0.3/.

I would like to possibly pickup a USB to Ethernet adapter, but before purchasing this, I wanted to see if anyone has ever attempted this and if so, what results they had. Will i need to move to a debian chroot'ed environment, are additional modules required?

Any help that can be provided would be appreciated.

Thanks...
THJ

kennedy101 · 2008-09-23 18:40:51

I'd like to know if this is possible too. I see that optware has a dansguardian package. I got an 11 year old boy that got caught looking up "i want to see boobs" at grandma's house. A hacked DNS-323 seems like a good place to put a content filter --- if it had another NIC.

kennedy101 · 2008-09-23 19:21:03

This might be helpful.

NetBSD project is bundled up in DNS-323, See link. Not sure how, but it looks like it's in there.
http://ftp.netbsd.org/pub/NetBSD/misc/k … /ORION_NAS

This project specifies support for these adatpters and modules.

# USB Ethernet adapters
aue* at uhub? port ? # ADMtek AN986 Pegasus based adapters
axe* at uhub? port ? # ASIX AX88172 based adapters
cdce* at uhub? port ? # CDC, Ethernet Networking Control Model
cue* at uhub? port ? # CATC USB-EL1201A based adapters
kue* at uhub? port ? # Kawasaki LSI KL5KUSB101B based adapters
udav* at uhub? port ? # Davicom DM9601 based adapters
url* at uhub? port ? # Realtek RTL8150L based adapters

# USB 802.11 adapters
atu* at uhub? port ? # Atmel AT76C50XX based adapters
ral* at uhub? port ? # Ralink Technology RT25x0 802.11a/b/g
rum* at uhub? port ? # Ralink Technology RT2501/RT2601 802.11a/b/g
zyd* at uhub? port ? # Zydas ZD1211

Anyone had any luck getting any of the USB Ethernet adapters to load?

This is probably a stupid question, but if the USB NIC is v 1.1 and I have a USB 2.0 HUB - Will all the devices on th hub downgrade to v 1.1? Reason for asking is I'd like to add one or more USB 2 IDE/SATA cases for expansion.

mig · 2008-09-23 20:08:34

kennedy101 wrote:
A hacked DNS-323 seems like a good place to put a content filter --- if it had another NIC.

I don't think you *need* another NIC to do web filtering. I have a Buffalo Tech Link Station Pro
(single drive, single NIC, NAS) running Debian. I setup SquidGuard http://www.squidguard.org/
as the web proxy/filter for my (9 yr old) kids computers. It's just a simple white list filter, but it works for
us now.

Last edited by mig (2008-09-23 20:10:09)

fordem · 2008-09-23 23:09:25

If you don't double home your proxy server - it becomes a very simple task to bypass it.

kennedy101 · 2008-09-23 23:12:16

Agree, that's my concern. Want to sleep well at night knowing my son, who if anything like me, would be looking at some stuff I'd rather him not see for another 7 years. He's pretty sharp and simply looking at arp cache might point him to another unrestricted default gateway.

jdoering · 2008-09-25 09:42:43

Isn't your router an easier place to do this? Takes a hackable router; but that's a must for me...

BTW I'd be pretty impressed if Mig had bypass problems due to hacking by his 9 year old; pre-teens would be a different threat altogether

kennedy101 · 2008-09-25 15:09:19

If dansguardian (or other proxy) was installed I could restrict traffic based on MAC. Odds are I wont see my kids (15 and 11 year old) swapping out NICs to circumvent security. Geeks.com has a RTL based USB NIC for labout $10. Guess I'll give that a try and see if it works.

Anyone know if one v1.1 device on a v2.0 hub dumbs down all devices on the hub or root?

fordem · 2008-09-25 16:38:25

Kennedy101 - ever heard of MAC spoofing?

Takes about 30 seconds (or less) to do on a Windows system.

If you're blocking access based on MAC address, all that needs to be done is change the MAC - if you're allowing access based on MAC address, it's just a little more difficult, you need to change the MAC address to a white listed one, and a white listed address to change it to.

And a word of warning - do NOT underestimate the ingenuity of teens and preteens with access to google - you might be in for an unpleasant surprise, I certainly was - I have a boy who had his own barrel of tricks, MAC spoofing, arp poisoning, WEP cracking - the whole kit & kaboodle. Fortunately as he has grown, he has matured and is now more likely to use those skills in a responsible manner.

As far as I can tell you have two options - proxy software on the system or content based access control at a choke point, such as the firewall - take a look at D-Link's secure spot, it might do what you want - BUT - if he has wireless capability and any of your neighbours has unsecured (or improperly secured) wireless, he'll find a way out.

mig · 2008-09-25 19:28:58

Would something like a transparent proxy http://tldp.org/HOWTO/TransparentProxy.html
work for you in your situation?

bq041 · 2008-09-26 01:01:08

As for the USB question, only the 1 device will run at 1.1, the others will continue at 2.0.

DSM-G600, DNS-3xx and NSA-220 Hack Forum

Announcement

#1 2008-01-12 19:25:41

USB network adapter possible?

#2 2008-09-23 18:40:51

Re: USB network adapter possible?

#3 2008-09-23 19:21:03

Re: USB network adapter possible?

#4 2008-09-23 20:08:34

Re: USB network adapter possible?

kennedy101 wrote:

#5 2008-09-23 23:09:25

Re: USB network adapter possible?

#6 2008-09-23 23:12:16

Re: USB network adapter possible?

#7 2008-09-25 09:42:43

Re: USB network adapter possible?

#8 2008-09-25 15:09:19

Re: USB network adapter possible?

#9 2008-09-25 16:38:25

Re: USB network adapter possible?

#10 2008-09-25 19:28:58

Re: USB network adapter possible?

#11 2008-09-26 01:01:08

Re: USB network adapter possible?

Board footer