DSM-G600, DNS-3xx and NSA-220 Hack Forum

fonz · 2008-08-14 00:50:49

jrusso wrote:
Worked like a charm thanks a lot... is it a big security risk to leave telnet enabled... or is it not such a big deal??? also one other question i just ordered the new model of popcorn hour and was wondering if you knew whether it will simply pick up the dns 323 shared folders over the network or are there steps to be taken??? thanks again for your help

See http://dns323.kood.org/howto:ffp#the_root_user for information on how you can set a password for telnet. But remember that anyone who know this trick you've just used can reenable password-less telnet... The only way to keep your box safe is to restrict access to your network.

Regarding the popcorn hour, please use the search function. I think there's some discussion about how to get it working (I think people use NFS).

fx · 2009-01-10 22:27:43

bq041, fonz;
Thanks for the tip. My ssh suddenly stop working after I chmod 777 /ffp/var. Luckily manage to get it back working again.

martial69 · 2009-01-11 05:31:23

Trying to figure where I went wrong.

When I try to start Telnet with Putty, the console window opens for a moment, then closes. I can still access SSH through Putty, but there's a different password for Root than the one I entered. Here is the FFP log:

Running /ffp/etc/rc ...
* /ffp/start/syslogd.sh inactive
* /ffp/start/SERVERS.sh inactive
* /ffp/start/portmap.sh inactive
* /ffp/start/unfsd.sh inactive
* /ffp/start/nfsd.sh inactive
* /ffp/start/ntpd.sh inactive
* /ffp/start/LOGIN.sh inactive
* /ffp/start/telnetd.sh ...
Starting /ffp/sbin/telnetd -l /ffp/bin/sh
* /ffp/start/sshd.sh inactive
* /ffp/start/rsyncd.sh inactive
* /ffp/start/mediatomb.sh inactive
* /ffp/start/kickwebs.sh inactive
* /ffp/start/lighttpd.sh inactive
* /ffp/start/inetd.sh inactive
* OK
**** fun_plug script for DNS-323 (2008-08-11 tp@fonz.de) ****
Sat Jan 10 17:33:26 GMT 2009
ln -snf /mnt/HD_a2/ffp /ffp
* Running /ffp/etc/fun_plug.init ...
* Running /ffp/etc/rc ...
* /ffp/start/syslogd.sh inactive
* /ffp/start/SERVERS.sh inactive
* /ffp/start/portmap.sh inactive
* /ffp/start/unfsd.sh inactive
* /ffp/start/nfsd.sh inactive
* /ffp/start/ntpd.sh inactive
* /ffp/start/LOGIN.sh inactive
* /ffp/start/telnetd.sh inactive
* /ffp/start/sshd.sh ...
Starting /ffp/sbin/sshd
* /ffp/start/rsyncd.sh inactive
* /ffp/start/mediatomb.sh inactive
* /ffp/start/kickwebs.sh inactive
* /ffp/start/lighttpd.sh inactive
* /ffp/start/inetd.sh inactive
* OK
**** fun_plug script for DNS-323 (2008-08-11 tp@fonz.de) ****
Sat Jan 10 17:39:41 GMT 2009
ln -snf /mnt/HD_a2/ffp /ffp
* Running /ffp/etc/fun_plug.init ...
* Running /ffp/etc/rc ...
* /ffp/start/syslogd.sh inactive
* /ffp/start/SERVERS.sh inactive
* /ffp/start/portmap.sh inactive
* /ffp/start/unfsd.sh inactive
* /ffp/start/nfsd.sh inactive
* /ffp/start/ntpd.sh inactive
* /ffp/start/LOGIN.sh inactive
* /ffp/start/telnetd.sh inactive
* /ffp/start/sshd.sh ...
Starting /ffp/sbin/sshd
* /ffp/start/rsyncd.sh inactive
* /ffp/start/mediatomb.sh inactive
* /ffp/start/kickwebs.sh inactive
* /ffp/start/lighttpd.sh inactive
* /ffp/start/inetd.sh inactive
* OK
**** fun_plug script for DNS-323 (2008-08-11 tp@fonz.de) ****
Sat Jan 10 17:57:57 GMT 2009
ln -snf /mnt/HD_a2/ffp /ffp
* Running /ffp/etc/fun_plug.init ...
* Running /ffp/etc/rc ...
* /ffp/start/syslogd.sh inactive
* /ffp/start/SERVERS.sh inactive
* /ffp/start/portmap.sh inactive
* /ffp/start/unfsd.sh inactive
* /ffp/start/nfsd.sh inactive
* /ffp/start/ntpd.sh inactive
* /ffp/start/LOGIN.sh inactive
* /ffp/start/telnetd.sh inactive
* /ffp/start/sshd.sh ...
Starting /ffp/sbin/sshd
* /ffp/start/rsyncd.sh inactive
* /ffp/start/mediatomb.sh inactive
* /ffp/start/kickwebs.sh inactive
* /ffp/start/lighttpd.sh inactive
* /ffp/start/inetd.sh inactive
* OK
**** fun_plug script for DNS-323 (2008-08-11 tp@fonz.de) ****
Sat Jan 10 18:44:13 GMT 2009
ln -snf /mnt/HD_a2/ffp /ffp
* Running /ffp/etc/fun_plug.init ...
* Running /ffp/etc/rc ...
* /ffp/start/syslogd.sh inactive
* /ffp/start/SERVERS.sh inactive
* /ffp/start/portmap.sh inactive
* /ffp/start/unfsd.sh inactive
* /ffp/start/nfsd.sh inactive
* /ffp/start/ntpd.sh inactive
* /ffp/start/LOGIN.sh inactive
* /ffp/start/telnetd.sh inactive
* /ffp/start/sshd.sh ...
Starting /ffp/sbin/sshd
* /ffp/start/rsyncd.sh inactive
* /ffp/start/mediatomb.sh inactive
* /ffp/start/kickwebs.sh inactive
* /ffp/start/lighttpd.sh inactive
* /ffp/start/inetd.sh inactive
* OK
**** fun_plug script for DNS-323 (2008-08-11 tp@fonz.de) ****
Sat Jan 10 19:14:02 GMT 2009
ln -snf /mnt/HD_a2/ffp /ffp
* Running /ffp/etc/fun_plug.init ...
* Running /ffp/etc/rc ...
* /ffp/start/syslogd.sh inactive
* /ffp/start/SERVERS.sh inactive
* /ffp/start/portmap.sh inactive
* /ffp/start/unfsd.sh inactive
* /ffp/start/nfsd.sh inactive
* /ffp/start/ntpd.sh inactive
* /ffp/start/LOGIN.sh inactive
* /ffp/start/telnetd.sh inactive
* /ffp/start/sshd.sh ...
Starting /ffp/sbin/sshd
* /ffp/start/rsyncd.sh inactive
* /ffp/start/mediatomb.sh inactive
* /ffp/start/kickwebs.sh inactive
* /ffp/start/lighttpd.sh inactive
* /ffp/start/inetd.sh inactive
* OK

Thanks in advance for any info you can provide.

Marshall

**addendum**

I am guessing, but I reset the 323 to the factory default durring one of my restarts. I had read in another topic that by resetting to default, the 323 might become visible on my 360 (one of my several goals with the 323).

As I said earlier, I can still get a login for SSH, but not for Root. When I enter "admin" and type in the password, I get a message stating my password has expired. I try to enter a new password, but when I restart, I am back to square one with the old one.

So, I flashed the firmware (1.06 U.S. from DL) this morning. I also added fun_plug 0.5. I was preparing to add twonky and some of the fun_plug packages, and ran into this.

Last edited by martial69 (2009-01-11 08:24:52)

MCGlausa · 2009-01-15 21:14:27

martial69 wrote:
As I said earlier, I can still get a login for SSH, but not for Root. When I enter "admin" and type in the password, I get a message stating my password has expired. I try to enter a new password, but when I restart, I am back to square one with the old one.

Did you remember to run

Code:

 #/ store-passwd.sh

to save the password changes?

On another note, thanks to bq041 and fonz for the telnet fix. I'm not quite sure how it happened, but I lost ssh access (after having disabled telnet), and this saved me a lot of time reinstalling ffp.

stevepar · 2009-05-05 05:35:50

Hi,

I just wanted to pass on my thanks to bq041 and fonz for the telnet fix. As I live in the tropics I wanted to install fanctl.sh as my fan was working overtime. I managed to do that successfully by following the helpful tutorial [http://nas-tweaks.net/CH3SNAS:Tutorials/fancontrol#Installing_fanctl] and in the process upgraded the SSH rendering SSH inactive after a reboot. Consequently I could not access either Telnet or SSH. After installing the telnet fix I was able to enable ssh

Last edited by stevepar (2009-05-05 05:37:18)

mrbillions · 2009-09-02 19:27:06

Need HELP!!!

Could I please have a script similar to telnet overwrite as per above but to remove

/ffp/start/upsnut.sh

since i placed this file in start the dns does nothing anymore. It boots to stand dns OS but:

No telnet, no ssh, no transmission etc. "Dead" in terms of fun_plug.

I can only get to the drive via standard dns windows mapping. I can see the upsnut.sh file but due to permission error i can't delete it or chmod it. Perhaps root owns it but I don't have a root password as telnetd.sh won't start. What a nightmare, weeks of funplugging all gone.....

So i figure if it gets deleted upon reboot first thing then this should fix it.

I also reloaded ffp 0.5 again but same effect. Boots but telnet and any other backdoors are closed and i'm sure it's the upsnut.sh I messed around with and it NEEDS TO GO!!! Spent first 4 hours stressing about it and the next 4 trying to fix it but no luck ...

Last edited by mrbillions (2009-09-02 19:31:02)

oxygen · 2009-09-02 19:30:45

can you write to the fun_plug file? then add a line that chmod -x the file.

mrbillions · 2009-09-02 19:40:23

ok great idea and should be easier. i will address is as

chmod -x ffp/start/upsnut.sh or /start/upsnut.sh

due to fonz's comment earlier on in a previous post: "bq041 made a small mistake. fun_plug.tgz must not contain the full path /mnt/HD_a2/..., but only subdirectories of /ffp. "

will try it tomorrow 2:39 am and my head is spinning and will probably get something else wrong if I do it now. thanks for the quick reply.

oxygen · 2009-09-02 19:45:33

to make sure it works, use chmod -x /mnt/HD_a2/ffp/start/upsnut.sh

mrbillions · 2009-09-02 20:04:25

hallelujah !!! I'm back....thanks a billion !!!!

it is definately the upsnut.sh I wrote...removed exec permissions via funplug as you explained and all is back again per normal...thank you!

luke_krieg · 2009-10-10 12:49:24

Hi all, first post here, so please forgive any obvious oversights.

Tried bq041/fonz's rescue remedy for a lost SSH password, but my telnetd.sh is still inactive (FFP log - one boot before and one after adding the fun-plug.tgz to the root directory - posted below).

My guess would be an incompatible tar version, but I have no clue how to find which version I have. I'm using firmware 10.6b62, if that is of any relevance.

Being able to log back in as root would save me a tremendous amount of time, so any help/advice would be greatly appreciated!

== FFP Log ==
...
**** fun_plug script for DNS-323 (2008-08-11 tp@fonz.de) ****
Sat Oct 10 20:45:44 GMT 2009
ln -snf /mnt/HD_a2/ffp /ffp
* Running /ffp/etc/fun_plug.init ...
* Running /ffp/etc/rc ...
* /ffp/start/syslogd.sh inactive
* /ffp/start/SERVERS.sh inactive
* /ffp/start/portmap.sh inactive
* /ffp/start/unfsd.sh inactive
* /ffp/start/transmission.sh ...
Starting transmission-daemon
* /ffp/start/nfsd.sh inactive
* /ffp/start/ntpd.sh inactive
* /ffp/start/LOGIN.sh inactive
* /ffp/start/telnetd.sh inactive
* /ffp/start/sshd.sh ...
Starting /ffp/sbin/sshd
* /ffp/start/rsyncd.sh inactive
* /ffp/start/mount-sdb1.sh inactive
* /ffp/start/mount-lpx.sh ...
* /ffp/start/mount-jpx.sh ...
* /ffp/start/mediatomb12.sh ...
2009-10-10 20:45:46 INFO: Loading configuration from: /mnt/HD_a2/mediatomb12/config/config.xml
2009-10-10 20:45:46 INFO: Checking configuration...
2009-10-10 20:45:46 INFO: Setting filesystem import charset to ASCII
2009-10-10 20:45:46 INFO: Setting metadata import charset to ASCII
2009-10-10 20:45:46 INFO: Setting playlist charset to ASCII
2009-10-10 20:45:46 INFO: Configuration check succeeded.
* /ffp/start/mediatomb.sh inactive
* /ffp/start/kickwebs.sh inactive
* /ffp/start/lighttpd.sh inactive
* /ffp/start/inetd.sh inactive
* OK
**** fun_plug script for DNS-323 (2008-08-11 tp@fonz.de) ****
Sat Oct 10 20:56:35 GMT 2009
ln -snf /mnt/HD_a2/ffp /ffp
* Installing /mnt/HD_a2/fun_plug.tgz ...
tar: Invalid gzip magic
* Running /ffp/etc/fun_plug.init ...
* Running /ffp/etc/rc ...
* /ffp/start/syslogd.sh inactive
* /ffp/start/SERVERS.sh inactive
* /ffp/start/portmap.sh inactive
* /ffp/start/unfsd.sh inactive
* /ffp/start/transmission.sh ...
Starting transmission-daemon
* /ffp/start/nfsd.sh inactive
* /ffp/start/ntpd.sh inactive
* /ffp/start/LOGIN.sh inactive
* /ffp/start/telnetd.sh inactive
* /ffp/start/sshd.sh ...
Starting /ffp/sbin/sshd
* /ffp/start/rsyncd.sh inactive
* /ffp/start/mount-sdb1.sh inactive
* /ffp/start/mount-lpx.sh ...
* /ffp/start/mount-jpx.sh ...
* /ffp/start/mediatomb12.sh ...
2009-10-10 20:56:37 INFO: Loading configuration from: /mnt/HD_a2/mediatomb12/config/config.xml
2009-10-10 20:56:37 INFO: Checking configuration...
2009-10-10 20:56:37 INFO: Setting filesystem import charset to ASCII
2009-10-10 20:56:37 INFO: Setting metadata import charset to ASCII
2009-10-10 20:56:37 INFO: Setting playlist charset to ASCII
2009-10-10 20:56:37 INFO: Configuration check succeeded.
* /ffp/start/mediatomb.sh inactive
* /ffp/start/kickwebs.sh inactive
* /ffp/start/lighttpd.sh inactive
* /ffp/start/inetd.sh inactive
* OK
==

fonz · 2009-10-10 12:59:33

Try a different browser to download the file.

luke_krieg · 2009-10-10 13:16:24

Genius! Not something I would have ever thought of on my own.

Used Google Chrome to download initially (causing the failure), but got it to work after downloading it using IE...

Lesson learned and gratitude extended!

Fonz, thank you so much for picking up on that, and responding so quickly!

kahiro · 2009-12-12 16:05:16

hi, i tried the tarball but unfortunately still unable to login sshd. putty still prompt for user login. below is my ffp.log.

appreciate any help. thanks

**** fun_plug script for DNS-323 (2008-08-11 tp@fonz.de) ****
Sat Dec 12 05:44:04 GMT 2009
ln -snf /mnt/HD_a2/ffp /ffp
* Installing /mnt/HD_a2/fun_plug.tgz ...
tar: Unrecognised file type
chown: unknown user name: root
* Running /ffp/etc/fun_plug.init ...
* Running /ffp/etc/rc ...
* /ffp/start/syslogd.sh inactive
* /ffp/start/SERVERS.sh inactive
* /ffp/start/portmap.sh inactive
* /ffp/start/unfsd.sh inactive
* /ffp/start/nfsd.sh inactive
* /ffp/start/ntpd.sh inactive
* /ffp/start/LOGIN.sh inactive
* /ffp/start/telnetd.sh inactive
* /ffp/start/sshd.sh ...
Starting /ffp/sbin/sshd
* /ffp/start/rsyncd.sh inactive
* /ffp/start/mediatomb.sh inactive
* /ffp/start/kickwebs.sh inactive
* /ffp/start/lighttpd.sh inactive
* /ffp/start/inetd.sh inactive
* OK

Wiggs · 2010-02-14 07:24:29

This is great!!! Used this when I screwed up my SSH account. Could not login with any accounts after changing sshd_confif to PermitRootLogin no.

Thanks,

Wiggs

ismora · 2011-10-12 22:48:43

Just a word to say thanks: power failed here today, and back home I found my DNS323 powered off.
I quickly realized that ssh did not answer and used the ftp trick found here to reactivate telnet.
I then found out that the sshd.sh script was not executable any more (why?...), and was able to repair.

Without this thread I would still be scratching my head trying to find a way to log in :-)

Last edited by ismora (2011-10-12 22:49:07)

Hellsing · 2019-02-08 12:55:04

Hello, Anybody pls send me attach fromthis post to reactivate telnet on fun_plug. Thank you.
http://dns323.kood.org/forum/viewtopic. … 39&p=1

DSM-G600, DNS-3xx and NSA-220 Hack Forum

Announcement

#26 2008-08-14 00:50:49

Re: After installing Twonky can i then disable the fun plug telnet service

jrusso wrote:

#27 2009-01-10 22:27:43

Re: After installing Twonky can i then disable the fun plug telnet service

#28 2009-01-11 05:31:23

Re: After installing Twonky can i then disable the fun plug telnet service

#29 2009-01-15 21:14:27

Re: After installing Twonky can i then disable the fun plug telnet service

martial69 wrote:

Code:

#30 2009-05-05 05:35:50

Re: After installing Twonky can i then disable the fun plug telnet service

#31 2009-09-02 19:27:06

Re: After installing Twonky can i then disable the fun plug telnet service

#32 2009-09-02 19:30:45

Re: After installing Twonky can i then disable the fun plug telnet service

#33 2009-09-02 19:40:23

Re: After installing Twonky can i then disable the fun plug telnet service

#34 2009-09-02 19:45:33

Re: After installing Twonky can i then disable the fun plug telnet service

#35 2009-09-02 20:04:25

Re: After installing Twonky can i then disable the fun plug telnet service

#36 2009-10-10 12:49:24

Re: After installing Twonky can i then disable the fun plug telnet service

#37 2009-10-10 12:59:33

Re: After installing Twonky can i then disable the fun plug telnet service

#38 2009-10-10 13:16:24

Re: After installing Twonky can i then disable the fun plug telnet service

#39 2009-12-12 16:05:16

Re: After installing Twonky can i then disable the fun plug telnet service

#40 2010-02-14 07:24:29

Re: After installing Twonky can i then disable the fun plug telnet service

#41 2011-10-12 22:48:43

Re: After installing Twonky can i then disable the fun plug telnet service

#42 2019-02-08 12:55:04

Re: After installing Twonky can i then disable the fun plug telnet service

Board footer