August 2019 - PSDR - mailman.hamwan.org

Re: [HamWAN PSDR] North Dakota HamWan questions
by Jason Linz 29 Aug '19

29 Aug '19

Thanks for your reply. I have big plans like building a state wide Wan however knowing there are a lot of things I don't know like propagation for such a flat country and networking to that scale I figure best to start somewhere and build from there. I do have a tower site that needs internet for IRLP that is 30 miles away. This may be the answer I need if I can make the path work. I also in learning more would like to better connect to the other 44 net devices like weather cams and such. The state wide thing if possible would be more of a 10 year goal at best. I will be very happy if I can work something out in my neighborhood. I have noticed a couple different model numbers of the RB2011. Is there a difference between them or just a newer model? Jason KC0GCJ > > Date: Wed, 28 Aug 2019 14:56:06 -0700 > From: "Rob Salsgiver" <rob(a)nr3o.com> > To: "'Puget Sound Data Ring'" <psdr(a)hamwan.org> > Subject: Re: [HamWAN PSDR] North Dakota HamWan questions > Message-ID: <00c301d55deb$662dc130$32894390$(a)nr3o.com> > Content-Type: text/plain; charset="utf-8" > > Jason, > > > > The short version is yes – the RB2011 is a good place to start to get > familiar with the Mikrotik equipment. > > > > That said, the RB2011 is only one small part of the puzzle. What are you > looking to start with and what are your goals? Do you have a network > size/purpose in mind that would give you a starting guess on how much of an > AMPRNet allocation you would want/need? > > > > If you are just looking to get a small address allocation for personal > “hammy” use, you can easily do that with an RB2011. If you are looking to > setup a larger geographical area for repeater support, EMCOMM, or other > networking use, the scope and allocation needs would be larger. > > > > Give us a little more info on the overall picture and we can likely be of > better help. > > > > Cheers, > > Rob > > > > From: PSDR [mailto:psdr-bounces@hamwan.org] On Behalf Of Jason Linz > Sent: Wednesday, August 28, 2019 9:15 AM > To: psdr(a)hamwan.org > Subject: [HamWAN PSDR] North Dakota HamWan questions > > > > I have been interested in the HamWan system for a couple of years now. As > I understand there isn't anyone in North Dakota doing anything with HamWan > or AMPRNet. I would like to start working to build a network in my area. > Will need to build this in stages as there isn't much or a budget started > for this. I am thinking to start buying a RB2011UAS-RM. Does this make > sense to connect to the AMPRNet or is there a better place to build from? > > > > I have a HHUS number 4592 and can connect to a DMR WG or fusion reflector > if someone can talk more about this idea/ question. Any help would be > appreciated. > > > > Thanks > > Jason Linz KC0GCJ > >

1 0

North Dakota HamWan questions
by Jason Linz 28 Aug '19

28 Aug '19

I have been interested in the HamWan system for a couple of years now. As I understand there isn't anyone in North Dakota doing anything with HamWan or AMPRNet. I would like to start working to build a network in my area. Will need to build this in stages as there isn't much or a budget started for this. I am thinking to start buying a RB2011UAS-RM. Does this make sense to connect to the AMPRNet or is there a better place to build from? I have a HHUS number 4592 and can connect to a DMR WG or fusion reflector if someone can talk more about this idea/ question. Any help would be appreciated. Thanks Jason Linz KC0GCJ

2 1

RB912 Ethernet jack
by Bryan Fields 28 Aug '19

28 Aug '19

Does anyone have a digikey/mouser part number for the shielded jack Mikrotik uses on the RB912? We have a couple which the PoE pins have been burnt away, but which still work fine with external power. I'm sure I can find one but was hoping to save some time cross referencing it. 73's -- Bryan Fields 727-409-1194 - Voice http://bryanfields.net

1 1

Mikrotik DynaDish 5 + Beacon Hill
by Jake Visser 23 Aug '19

23 Aug '19

Hi all, So I just moved into a new place on Beacon Hill and looking setup a link to Hamwan. I have clear LOS to Beacon Hill apartments from my radio tower, where it looks like there might be some sectors… so 2 questions: 1. Are the sectors on Beacon Hill live? – the website indicates they might be under construction? 2. Mikrotik DynaDish 5 – its on the recommended hardware list (and would be my preference), but the spec sheet says it tops out at 5875MHz; while the config on the website shows use up to 5920 (with the lowest being 5880). So… datasheet wrong by chance? Or should I just be looking at using something else. I have a hytera rd622i here that will probably be my next project.. so hoping to get it up online and use HamWAN as a backup link to PNW Digital’s servers [also have my own peering and a few other things here that I am happy to contribute to the cause if its wanted/needed - https://bgp.he.net/AS396388] Thanks in advance, Jake KJ7IKM

4 8

Questions on 44-net ip block allocation
by John C. Miller 17 Aug '19

17 Aug '19

Our club station has a HamWAN client connection, and we have several servers and devices to which I would like to assign 44-net addresses. These addresses would need to be routable from the internet and 44-net. Any networked devices that don't need to be reachable through the internet or 44-net would of course have private nat'ed addresses. As has been ably expressed on this list, HamWAN supports far more than just web traffic. :) A /29 block with 6 usable addresses would probably be too small. A /28 subnet with 14 usable IP addresses would be a good fit. Anything bigger would be a waste of 44-net ip space. From reading the HamWAN docs and the wiki.ampr.org web site, any net blocks smaller than /24 should be obtained from a regional coordinator that has one or more multi-user /24 blocks set aside for allocating smaller ip blocks. Assuming a /28 ip block on 44-net is allocated: I expect I would need to configure OSPF on the HamWAN modem to advertise routes to the /28 ip block over the wlan1 interface. Presumably an OSPF password would be needed. And of course static IPs from the /28 block would need to be assigned to the servers in question. First: Am I on the right track? Second: Is HamWAN such a "regional coordinator" (as mentioned on http://wiki.ampr.org/) that can allocate a /28 block for this purpose? Thanks very much - John kx7jm

2 2

Idea for addressing HTTPS on HamWAN
by John C. Miller 17 Aug '19

17 Aug '19

All, Apologies for the lengthy post. I've been mulling over potential solutions for the HTTPS over HamWAN dilemmna: Practically universal use of HTTPS web sites + Part 97 makes accessing nearly all web content over HamWAN illegal, and severely limits the utility of HamWAN. I'm aware of discussions about HamWAN ceasing to be completely P97. But for as long as HamWAN is even partially subject to P97, I think it's worth looking for solutions or at least work-arounds to P97 limitations. Thus the subject of this post. (I also very much hope that sectors are not abandoned in favor of PtP links only!) >From wearing a network security (white) hat I've used certain tools and techniques for network penetration testing that may be helpful to us in this case. I've just begun testing a methodology for a specialized type of transparent proxy server that should enable some or much of the encrypted content on the web (i.e. https:// sites) to be legally accessed over HamWAN with http. The goal is for this to be essentially transparent to the user, or nearly so. The short version is that we would deploy a specialized type of transparent web proxy server that splits off the SSL layer from web requests and allows the transaction to flow non-encrypted over HamWAN using http protocol (non-encrypted) which would be Part 97 compliant. This same server would also circumvent a number of tactics in wide use today that attempt to force web sessions to always use encryption (https). Implementing such an approach is non-trivial, but I think there is a reasonable chance that it can be done. There will almost surely be some web sites that won't work well with this strategy, but those will hopefully be relatively few. A key piece of this strategy uses a network penetration testing tool created in 2009, aptly called SSL-Split. This program was initially a fairly simple but powerful tool that intercepted secure web sessions (https:) by executing what's known as a man-in-the-middle attack. Using an attack vector, a server running SSL-Split would insert itself between the person's web browser, and the web server they were accessing. The attacking SSL-Split server would then strip off the SSL layer, making the payload of "secret" data no longer secret. At this point the web session would continue un-encrypteed, and user data could simply be captured, or manipulated. SSL-Split could then re-assemble the SSL layer back onto the data stream on its way to the server. Neither the web user, nor the web site being visited need be aware of the chicanery going on. I say that SSL-Split *was* initially fairly simple, because in the 10 years since its creation a variety varied steps have been taken by browser developers and web engineers to force encryption to be used for all web traffic. But the developers of SSL-Split have evolved the program considerably and have kept pace to a large extent with current technology. The latest version of SSL-Split is much more powerful than early versions, with the capability of (among other things) essentially creating x.509 security certificates on the fly when needed, refusing certificate revocation status requests, bypassing HSTS, and other tactics that can neutralize the "forced https/encrypted" policies in wide use. The power of SSL-Split to convert web data streams from http to https and back is a central piece of the strategy that I'm examining. In the use case for HamWAN, we are using tools like SSL-Split not as an attack weapon, but rather as a data conversion utility. We insert our "conversion server" running SSL-Split and other tools into the appropriate place on the network, and let it do data stream conversion for us. I've glossed over some of the arcane details of this approach, but this is the basic gist of it. I'm testing on a private network at home, and packet sniffing the network to confirm that the data stream is indeed un-encrypted where it needs to be. I'll keep the list apprised of progress. John Miller, KX7JM mailto:kx7jm@jmit.com (530)873-9005

9 12

Which tower on Gold?
by Steve 15 Aug '19

15 Aug '19

Hi, I’m thinking about setting up a system and was wondering which tower on Gold are you? Anyone know the light configuration? I can see the mountain from my house. Steve N0FPF -- Pardon the brevity, sent from a mobile device. So there.

2 1

Kickstarter for video recording of 2019 ARRL and TAPR DCC
by Steve Stroh 13 Aug '19

13 Aug '19

All: I recommend this as an effort worthy of contributing to for Amateur Radio posterity - https://www.kickstarter.com/projects/hamradio2/2019-tapr-dcc-videos The ARRL and TAPR Digital Communications Conference (DCC) is not a hamfest, nor a social event. It's an International, TECHNICAL conference for digital communications in Amateur Radio. It's a great conference and I highly recommend attending it even if you have to travel at some expense. You'll meet a lot of interesting people, you'll have fascinating conversations that you probably wouldn't ever have at any other event, and you'll hear it first about interesting new developments in Amateur Radio digital communications. The 2019 DCC (https://tapr.org/dcc) will be the 38th consecutive DCC. This year it will be held in Detroit, Michigan. If you are interested in attending, Detroit (DTW) is one of the cities with a direct Alaska Airlines flight from Seattle. I think it's important that the presentations at the DCC be video recorded - this is really, really good information, and I've observed that there's a lot more information conveyed during the presentation than what's in the formal paper proceedings. Video recordings of the DCC are not done, nor funded by ARRL, TAPR, or the conference. The video recordings of the DCC have been an independent effort, funded independently. In 2018, and again in 2019, Jason Johnson KC5HW of the Ham Radio 2.0 YouTube channel (https://www.youtube.com/user/kc5hwb/featured) will be recording the DCC. In 2018, Jason proved that he was up to the task of recording, editing, and posting the videos of the DCC (https://www.youtube.com/playlist?list=PLs_Ab58w9LI-p-j9C3uN8TjKh2SeKlIvp) I think Jason did a great job despite never having done a video recording project that large before. So, I'm in on Jason's Kickstarter for the 2019 DCC - https://www.kickstarter.com/projects/hamradio2/2019-tapr-dcc-videos - for $100. Jason's Kickstarter goal is to raise $2200 ($716 to date), which I think is quite reasonable. It takes a LOT of equipment, and a lot of time to edit this much video. Jason's Kickstarter ends on September 6, 2019. Please consider contributing to make the valuable presentations at the DCC widely available within Amateur Radio. Please share this, especially with your own endorsement, to other groups / lists that are relevant to the Digital Communications Conference. Thanks, Steve Stroh N8GNJ -- Steve Stroh (personal / general): stevestroh(a)gmail.com

1 0

Link to Metro Vancouver/BC
by Tyler Martin 13 Aug '19

13 Aug '19

Hi All, Since the installation at Lookout Mtn is underway (or complete?) Could we look at establishing a PtP link to one of our sites in Metro Vancouver? We have a brand new Firehall nearing construction completion in the next month or so and the Fire Department is offering us space on the roof. The site will have direct LoS to Lookout Mtn. We also have the funding at this very moment to purchase the equipment needed for both ends of the connection. VECTOR Radio is currently working on deploying our own network similar to the PSDR, but will be using our own configuration, so we could drop in a HamWAN configured radio to link up to PSDR, and a router to be the gateway between our networks. The site address is 3090 Kerr Street, Vancouver BC. It's about a 45 Mile link. Cheers, -- Tyler Martin _____________ VECTOR Radio VA7TPM

2 1

wiki?
by Steve Stroh 13 Aug '19

13 Aug '19

>From the HamWAN page: Where is the Wiki? Thanks, Steve N8GNJ Volunteer If you would like to volunteer for any of the work required (see the wiki table of contents for areas that need attention), please send an email to the mailing list to let us know. We'll set you up with the right access to make changes to the website and keep track of progress. -- Steve Stroh (personal / general): stevestroh(a)gmail.com

6 13