DSM-G600, DNS-3xx and NSA-220 Hack Forum

You sure your ip address didnt change?

I am just tossing ideas out but my next step would be to portscan it. I would want to verify what services are actually running on the system.

That is very odd. Did you try reseting to factory defaults from the web interface?

well, I just did restore to factory default. no change. except port 21 is now closed

Port Scanning host: 192.168.2.10
     Open TCP Port:     80             http
     Open TCP Port:     139            netbios-ssn
     Open TCP Port:     443            https
     Open TCP Port:     445            microsoft-ds
     Open TCP Port:     515            printer

telnet 192.168.2.10
Trying 192.168.2.10...
telnet: connect to address 192.168.2.10: Connection refused
telnet: Unable to connect to remote host

ssh root@192.168.2.10
ssh: connect to host 192.168.2.10 port 22: Connection refused


thanks for your help!

* OK
* Running /ffp/etc/fun_plug.init ...
* Running /ffp/etc/rc ...
* /ffp/start/syslogd.sh inactive
* /ffp/start/SERVERS.sh inactive
* /ffp/start/portmap.sh inactive
* /ffp/start/unfsd.sh inactive
* /ffp/start/nfsd.sh inactive
* /ffp/start/ntpd.sh inactive
* /ffp/start/LOGIN.sh inactive
* /ffp/start/telnetd.sh ...
Starting /ffp/sbin/telnetd -l /ffp/bin/sh
* /ffp/start/sshd.sh inactive
* /ffp/start/rsyncd.sh inactive
* /ffp/start/mediatomb.sh inactive
* /ffp/start/kickwebs.sh inactive
* /ffp/start/lighttpd.sh inactive
* /ffp/start/inetd.sh inactive
*  OK

thierry wrote:

Also... at the top...

**** fun_plug script for DNS-323 (2008-08-11 tp@fonz.de) ****
Fri May 29 09:07:59 DST 2009
ln -snf /mnt/HD_a2/ffp /ffp
* Installing /mnt/HD_a2/fun_plug.tgz ...
tar: WARNING: Converting hard link to symlink
(last line repeated MANY times)

That is normal.

thierry wrote:

Starting /ffp/sbin/telnetd -l /ffp/bin/sh
* /ffp/start/sshd.sh inactive

This tells me that telnet is started but sshd hasn't.

Did you a+x the ssh start script?

1 - The date is right on my device, it seems Volume_1/ffp.log does not get updated when I restart the unit. the file mod date is still dated may 29th... no modification. So it seems that your presumption that telnet is started is comes from an OLD log status value.

-rwx------  1 thierry  staff  47549 29 May 09:08 ffp.log


2- I don't have a /mnt/ directory
cd /Volumes/Volume_1/
ls -l
drwx------  1 thierry  staff  16384 28 May 10:10 dropbear-0.52
drwx------  1 thierry  staff  16384 22 May  2008 ffp
-rwx------  1 thierry  staff  47549 29 May 09:08 ffp.log
-rwx------@ 1 thierry  staff   1778 29 May 09:05 fun_plug

cd ffp
ls -l
drwx------  1 thierry  staff  16384 29 May 09:08 bin
drwx------  1 thierry  staff  16384 29 May 09:08 etc
drwx------  1 thierry  staff  16384 29 May 09:08 lib
drwx------  1 thierry  staff  16384 29 May 09:08 libexec
drwx------  1 thierry  staff  16384 29 May 09:08 sbin
drwx------  1 thierry  staff  16384 29 May 09:08 share
drwx------  1 thierry  staff  16384  1 Jun 15:10 start
drwx------  1 thierry  staff  16384 19 May 19:00 tmp
drwx------  1 thierry  staff  16384 19 May 18:35 var


3- Did you a+x the ssh start script?
do you mean Volume_1/ffp/start/sshd.sh ?

I just did: chmod 777 /Volumes/Volume_1/ffp/start/sshd.sh
and restarted the unit.


cd start
ls -l
total 30
-rwx------  1 thierry  staff    52 25 Oct  2008 LOGIN.sh
-rwx------  1 thierry  staff    35 25 Oct  2008 SERVERS.sh
-rwx------  1 thierry  staff   203 29 Sep  2008 inetd.sh
-rwx------  1 thierry  staff   229 13 Apr 08:30 kickwebs.sh
-rwx------  1 thierry  staff   223 13 Apr 08:30 lighttpd.sh
-rwx------  1 thierry  staff   267 15 Apr  2008 mediatomb.sh
-rwx------  1 thierry  staff  1468 15 Apr  2008 nfsd.sh
-rwx------  1 thierry  staff   526  2 Mar 07:35 ntpd.sh
-rwx------  1 thierry  staff   160 15 Apr  2008 portmap.sh
-rwx------  1 thierry  staff   224  3 Mar 03:11 rsyncd.sh
-rwx------  1 thierry  staff   971 19 May 18:35 sshd.sh
-rwx------  1 thierry  staff   383 29 Sep  2008 syslogd.sh
-rwx------  1 thierry  staff   170  1 Jun 15:10 telnetd.sh
-rwx------  1 thierry  staff   998 26 Feb 11:08 unfsd.sh


Still cannot ssh into the device.
ssh admin@192.168.2.10
ssh: connect to host 192.168.2.10 port 22: Connection refused

thanks again all for your help!

Last edited by thierry (2009-06-08 04:00:43)

#!/bin/sh

# switch to safe working directory on ramdisk
cd /

# write a log, in case sth goes wrong
FFP_LOG=/mnt/HD_a2/ffp.log
#FFP_LOG=/dev/null
exec >>$FFP_LOG 2>&1

# real path to ffp
FFP_PATH=/mnt/HD_a2/ffp

# where to search for the install tarball
FFP_TARBALL=/mnt/HD_a2/fun_plug.tgz

# setup script (used for ffp on USB disk)
FFP_SETUP_SCRIPT=/mnt/HD_a2/.bootstrap/setup.sh

# rc file path
FFP_RC=/ffp/etc/rc


echo "**** fun_plug script for DNS-323 (2008-08-11 tp@fonz.de) ****"
date


# check for setup script. an example use for this is to load USB
# kernel modules and mount a USB storage device. The script is
# sourced, that means you can change variables, e.g. FFP_PATH to point
# to the USB device.
if [ -x $FFP_SETUP_SCRIPT ]; then
    echo "* Running $FFP_SETUP_SCRIPT ..."
    . $FFP_SETUP_SCRIPT
fi

# create /ffp link
echo "ln -snf $FFP_PATH /ffp"
ln -snf $FFP_PATH /ffp

# install tarball
if [ -r $FFP_TARBALL ]; then
    echo "* Installing $FFP_TARBALL ..."
    mkdir -p $FFP_PATH && tar xzf $FFP_TARBALL -C $FFP_PATH && /ffp/bin/tar xzf $FFP_TARBALL -C $FFP_PATH
    if [ $? -eq 0 ]; then
        echo "* OK"
    fi
    rm $FFP_TARBALL
fi

# suid busybox
if [ -x /ffp/bin/busybox ]; then
    chown root.root /ffp/bin/busybox
    chmod 0755 /ffp/bin/busybox
    chmod u+s /ffp/bin/busybox
fi

# run fun_plug.init, if present
if [ -x /ffp/etc/fun_plug.init ]; then
    echo "* Running /ffp/etc/fun_plug.init ..."
    /ffp/etc/fun_plug.init
fi

# run fun_plug.local, if present
if [ -x /ffp/etc/fun_plug.local ]; then
    echo "* Running /ffp/etc/fun_plug.local ..."
    /ffp/etc/fun_plug.local
fi

# run commands
if [ -x $FFP_RC ]; then
    echo "* Running $FFP_RC ..."
    $FFP_RC
    echo "*  OK"
else
    echo "$FFP_RC: Not found or not executable"
fi

Does anyone have a suggestion for me?
Should I reinstall ffp?
thanks!
--
Thierry

yes! Volume_2

That did it!
Thanks to everyone who assisted in this thread!
THANKS A LOT!