March 2021 - PSDR - mailman.hamwan.org

vendors?
by David Bliss 31 Mar '21

31 Mar '21

I'd been putting off ordering HamWAN hardware because dealing with Streakwave seemed like a huge hassle. And now I've finally ordered some (over a month ago, and still not here, for various reasons), and yeah, dealing with Streakwave is indeed a huge hassle. I'm glad they're an option, but isn't there any better way to get ROW hardware? Has anybody had any luck ordering from amazon.ca, amazon.de, or any other vendor with an actual functioning e-commerce and fulfilment system? Even eBay, as much as I hate them, would have been better, if I knew how to actually find/specify -ROW versions. 73 -de- n8qg

5 7

Silkie Building at ETiger
by Rob Martin 31 Mar '21

31 Mar '21

Good news. The devices connected to HamWAN in the Silkie Building at ETiger are working again. The UPS had failed, taking out everything that talks to HamWAN. Thanks to Keith KE7GFY for trudging the last mile through the snow, beyond the point where driving became impossible. 73, RobK7QJ

2 1

Re: [HamWAN PSDR] [HamWAN Board] [Vote] Surge protection for Beacon ($225)
by Doug Kingston 21 Mar '21

21 Mar '21

Adding psdr(a)hamwan.org as required for votes on funding - this had originally only be sent to board@. So far there 3 positive votes (Doug, Nigel, and RobS). -Doug- On Sat, Mar 20, 2021 at 9:48 PM Rob Salsgiver <rob(a)nr3o.com> wrote: > My bad. Vote yes all the way… > > > > *From:* Board [mailto:board-bounces@hamwan.org] *On Behalf Of *Doug > Kingston > *Sent:* Saturday, March 20, 2021 6:54 PM > *To:* HamWAN Board > *Subject:* Re: [HamWAN Board] [Vote] Surge protection for Beacon ($225) > > > > Rob, these are surge protectors on the ethernet runs to the roof. Not > surge protection on the power system. These are the devices I normally > stock for a standard cell site. > > > > -Doug- > > > > On Sat, Mar 20, 2021 at 6:00 PM Rob Salsgiver <rob(a)nr3o.com> wrote: > > Given our earlier discussions regarding UPSs, should we be doing surge or > put the $$ toward a UPS instead? I’m good either way, just don’t want to > spend it twice if we don’t need to. > > > > Cheers, > > Rob > > > > *From:* Board [mailto:board-bounces@hamwan.org] *On Behalf Of *Doug > Kingston > *Sent:* Saturday, March 20, 2021 5:41 PM > *To:* HamWAN Board > *Subject:* [HamWAN Board] [Vote] Surge protection for Beacon ($225) > > > > There is currently no surge protection installed at this site. I am > proposing to spend approximately $225 to purchase the protectors and we'll > get them installed in the next few weeks. > > > > -Doug- > > _______________________________________________ > Board mailing list > Board(a)hamwan.org > http://mail.hamwan.net/mailman/listinfo/board > > _______________________________________________ > Board mailing list > Board(a)hamwan.org > http://mail.hamwan.net/mailman/listinfo/board >

2 2

Re: [HamWAN PSDR] Newbie
by Phil Cornell 19 Mar '21

19 Mar '21

This discussion of encryption is all very interesting but I think we got off track here. I was asking for help with setting up a new link. Right now it looks like the Thurston County EOC is questionable due to some trees blocking the view of Capital Peak from the parking lot. We need to see this view from the tower or building roof and that won't be happening anytime soon. My Plan C, ("A" was at my house, "B" was at the EOC) is to install it at Crawford Peak, just outside of the town of Rainier, and connect it to a new Fusion capable UHF repeater(OARS 441.400 pl103.5) and link to Capital Peak from there. That will require a lot of permissions, politics, and persistence. It will require working with TCOMM-911(building/tower owner), DNR(site manager), and Thurston County Sheriff(lease holder), the IT/Radio tech for TCOMM is very interested so this may be easier than expected. More details to follow. Phil Cornell W7PLC SHARES NCS590 Hybrid Gateway W7PLC TCARES VP On Friday, March 19, 2021, 12:00:10 PM PDT, psdr-request(a)hamwan.org <psdr-request(a)hamwan.org> wrote: Send PSDR mailing list submissions to psdr(a)hamwan.org To subscribe or unsubscribe via the World Wide Web, visit http://mail.hamwan.net/mailman/listinfo/psdr or, via email, send a message with subject or body 'help' to psdr-request(a)hamwan.org You can reach the person managing the list at psdr-owner(a)hamwan.org When replying, please edit your Subject line so it is more specific than "Re: Contents of PSDR digest..." Today's Topics: 1. Encryption is (can be) Legal (Donald Rotolo) Hello, To amplify Kevin’s comment below: In a conversation several years ago with Riley Hollingsworth, then the FCC’s enforcement guy, he emphasized to me that “obscuring the meaning” was not allowed, but encryption for other purposes was perfectly acceptable. I even wrote about it (“Encryption is Legal”, August 2006) in CQ Magazine (google it, it’ll come up somewhere). Granted, Riley is no longer with the FCC. But authentication != obscuring meaning, and lawyers focus on the meaning of the words as written. And, if it is not prohibited, it is allowed. So it all comes down to the purpose of the encryption, right? Purpose is obscuring meaning = Not allowed. Purpose is other, allowed. 73, Don N2IRZ From: Kevin Walsh [mailto:w8khw1@gmail.com] Sent: Tuesday, March 16, 2021 6:09 PM To: Puget Sound Data Ring <psdr(a)hamwan.org> Subject: Re: [HamWAN PSDR] Newbie Hello, The word encryption never appears in Part 97 rules, so its definition is irrelevant here. The key words in the rule are “intent” and “obscure”. So for instance, two people speaking pig-Latin with the intent of obscuring their conversation violate the same rule and the conversation is prohibited - even though it’s not encrypted. If I may, another option would be to get any of your associated Public Safety agencies to in part sponsor HamWan. Public Safety was granted access to the “special” Amateur Radio portion of 5.8GHz years ago and they CAN use (and in my state require) secure communication. Then you’re operating under Part 15 and the conversation is moot. https://www.fcc.gov/public-safety/public-safety-and-homeland-security/polic… Just food for thought, I’ll go back to lurking now :-). 73, Kevin W8KHW _______________________________________________ PSDR mailing list PSDR(a)hamwan.org http://mail.hamwan.net/mailman/listinfo/psdr

3 2

Encryption is (can be) Legal
by Donald Rotolo 18 Mar '21

18 Mar '21

Hello, To amplify Kevin’s comment below: In a conversation several years ago with Riley Hollingsworth, then the FCC’s enforcement guy, he emphasized to me that “obscuring the meaning” was not allowed, but encryption for other purposes was perfectly acceptable. I even wrote about it (“Encryption is Legal”, August 2006) in CQ Magazine (google it, it’ll come up somewhere). Granted, Riley is no longer with the FCC. But authentication != obscuring meaning, and lawyers focus on the meaning of the words as written. And, if it is not prohibited, it is allowed. So it all comes down to the purpose of the encryption, right? Purpose is obscuring meaning = Not allowed. Purpose is other, allowed. 73, Don N2IRZ From: Kevin Walsh [mailto:w8khw1@gmail.com] Sent: Tuesday, March 16, 2021 6:09 PM To: Puget Sound Data Ring <psdr(a)hamwan.org> Subject: Re: [HamWAN PSDR] Newbie Hello, The word encryption never appears in Part 97 rules, so its definition is irrelevant here. The key words in the rule are “intent” and “obscure”. So for instance, two people speaking pig-Latin with the intent of obscuring their conversation violate the same rule and the conversation is prohibited - even though it’s not encrypted. If I may, another option would be to get any of your associated Public Safety agencies to in part sponsor HamWan. Public Safety was granted access to the “special” Amateur Radio portion of 5.8GHz years ago and they CAN use (and in my state require) secure communication. Then you’re operating under Part 15 and the conversation is moot. https://www.fcc.gov/public-safety/public-safety-and-homeland-security/polic… Just food for thought, I’ll go back to lurking now :-). 73, Kevin W8KHW

1 0

Re: [HamWAN PSDR] Newbie
by Kevin Walsh 16 Mar '21

16 Mar '21

Hello, The word encryption never appears in Part 97 rules, so its definition is irrelevant here. The key words in the rule are “intent” and “obscure”. So for instance, two people speaking pig-Latin with the intent of obscuring their conversation violate the same rule and the conversation is prohibited - even though it’s not encrypted. If I may, another option would be to get any of your associated Public Safety agencies to in part sponsor HamWan. Public Safety was granted access to the “special” Amateur Radio portion of 5.8GHz years ago and they CAN use (and in my state require) secure communication. Then you’re operating under Part 15 and the conversation is moot. https://www.fcc.gov/public-safety/public-safety-and-homeland-security/polic… Just food for thought, I’ll go back to lurking now :-). 73, Kevin W8KHW > On Mar 16, 2021, at 3:40 PM, Stephen Kangas <stephen(a)kangas.com> wrote: > > John, it’s a good idea to investigate FW filtering to prevent encrypted protocols, and certainly the MikroTik RouterOS is quite capable of that. We should experiment with that to see if it breaks the Winlink Express connection with CMS. Hopefully, as Scott pointed out, it will not by simply forcing the CMS to fall back to pure telnet protocol…but he says that may not remain the case into the future. I’ll give it a try later this week when I have some time, others should, too. > > Stephen W9SK > > > From: PSDR <psdr-bounces(a)hamwan.org> On Behalf Of John D. Hays > Sent: Tuesday, March 16, 2021 11:22 AM > To: Puget Sound Data Ring <psdr(a)hamwan.org> > Subject: Re: [HamWAN PSDR] Newbie > > The HamWAN client is a MikroTik device which has a robust IP tables implementation which could be used for filtering. > > On Tue, Mar 16, 2021 at 10:22 AM Aaron Taggert <aaron.taggert(a)gmail.com> wrote: > I do not know what router you have but you could install squid (on the router or on a raspberry pi) on the ham wan connection and 'splice' the TLS Cipher to NULL: https://wiki.squid-cache.org/Features/SslPeekAndSplice > > Also from HamWan.org: > > https://hamwan.org/Administrative/Internet%20and%20Part%2097.html > > https://hamwan.org/Standards/Network%20Engineering/Authentication/SSL%20wit… > > https://hamwan.org/Standards/Network%20Engineering/Authentication.html > > On Tue, Mar 16, 2021, 8:42 AM Steve - WA7PTM <psdr-list(a)aberle.net> wrote: > Thanks Aaron. I fully understand what SSL/TLS is, but am trying to zero > in on how to avoid it on my HamWAN connection. Unfortunately, the > sneaky protocol translations on the back end will only continue, and we > just need to be know which software to stop using when things are not > obvious on the front end. > > Steve > > > Aaron Taggert wrote on 3/16/21 8:26 AM: > > On the authentication/integrity side... FCC says no encryption so we can > > all hear what you're on about. Ham would not be much fun if all you heard > > was encrypted pseudo noise. SSL/TLS authentication is a bit like me sending > > you a list of 100 words and asking you to tell me word 45. Everything is in > > the clear, but I can authenticate that whomever is at the other end at > > least has the right list. Another SSL/TLS feature is integrity, meaning the > > whole message is received. They would be like saying I sent 3421 characters > > CW 786 of them were vowels. Again everybody can hear what we're saying but > > it would be difficult to impersonate the sender (or receiver) or change the > > message. > > > > On Tue, Mar 16, 2021, 6:32 AM Steve - WA7PTM <psdr-list(a)aberle.net> wrote: > > > >> If we separate Winlink (the system) from Winlink Express (the client > >> program), is a SSL connection also the case with the other six clients > >> listed on the https://winlink.org/ClientSoftware page when used in > >> telnet mode? > >> > >> Steve > >> > >> > >> Scott Currie wrote on 3/15/21 10:06 PM: > >>> Yeah, I discussed this with the WDT, and the issue with using HamWAN or > >>> ARDEN. I had asked if we could force a non-SSL connection to the CMS. > >> They > >>> have been under pressure from AWS to switch to all SSL connections, so > >> they > >>> had to make the change. They did commit to leaving the client or gateway > >>> connection to RMS Relay as non-SSL, so that is why we have suggested > >> having > >>> a regional instance of RMS Relay on HamWAN that the RMS Gateways and > >>> clients could point to. Backend of the RMS Relay would then connect to > >> the > >>> CMS over SSL on a hardened Internet connection (like at a county EOC or > >> the > >>> State EOC), or even HF forwarding if the Internet is down. > >>> > >>> -Scott > >>> > >>> On Mon, Mar 15, 2021 at 9:41 PM Stephen Kangas <stephen(a)kangas.com> > >> wrote: > >>> > >>>> Scott, thanks for that update, interesting. “Telnet” is a misnomer in > >>>> this WinLink instance, as that port 22 protocol is historically and > >>>> normally unencrypted, and widely understood in the industry as such > >>>> (whereas SSH is encrypted). It looks like the email client is > >> connecting > >>>> locally to an RMS Relay in that mode, which then connects to the CMS on > >> the > >>>> internet. > >>>> > >>>> > >>>> > >>>> --Stephen W9SK > >>>> > >>>> > >>>> > >>>> *From:* PSDR <psdr-bounces(a)hamwan.org> *On Behalf Of *Scott Currie > >>>> *Sent:* Monday, March 15, 2021 5:56 PM > >>>> *To:* Puget Sound Data Ring <psdr(a)hamwan.org> > >>>> *Subject:* Re: [HamWAN PSDR] Newbie > >>>> > >>>> > >>>> > >>>> This is not entirely true. Winlink does use TLS/SSL connections for some > >>>> things. The normal telnet connection is now SSL (will fallback to > >> non-SSL > >>>> if the connection fails). Also, RMS Gateway to the CMS is now SSL. > >> Telnet > >>>> P2P and telnet to RMS Relay is not SSL. I believe updates are also SSL > >> now. > >>>> > >>>> > >>>> > >>>> Winlink Express Link Test: > >>>> > >>>> Test started 2021/03/16 00:52 UTC > >>>> > >>>> Testing CMS telnet connection to cms.winlink.org through port 8772... > >>>> Successfully connected to a CMS through port 8772 in 253 Milliseconds > >>>> > >>>> Testing CMS SSL telnet connection to cms.winlink.org through port > >> 8773... > >>>> Successfully connected to a CMS through port 8773 in 311 Milliseconds > >>>> > >>>> Testing API service access through port 443 to api.winlink.org... > >>>> Successfully performed API service to api.winlink.org through port > >> 443 > >>>> in 756 Milliseconds > >>>> > >>>> Testing Autoupdate server access through port 443 to > >>>> autoupdate2.winlink.org... > >>>> Successfully checked autoupdate server through port 443 in 439 > >>>> Milliseconds > >>>> > >>>> Testing connection to web site - www.winlink.org:443 > >>>> Successfully connected to www.winlink.org through port 443 in 47 > >>>> Milliseconds > >>>> > >>>> Testing FTP connection to SFI site - > >>>> ftp://ftp.swpc.noaa.gov/pub/latest/SGAS.txt > >>>> Successfully connected to > >> ftp://ftp.swpc.noaa.gov/pub/latest/SGAS.txt > >>>> through port 20/21 in 1522 Milliseconds > >>>> > >>>> Test completed successfully. > >>>> > >>>> -Scott, NS7C > >>>> > >>>> > >>>> > >>>> On Mon, Mar 15, 2021 at 5:45 PM Stephen Kangas <stephen(a)kangas.com> > >> wrote: > >>>> > >>>> Phil, an example of the ham band traffic that Kenny mentioned is not > >>>> permitted by the FCC is encrypted communications traffic…this means the > >>>> majority of websites your visit today and many email hosters, since > >>>> websites commonly use TLS/SSL encryption (indicated by “https” in front > >> of > >>>> the URL in your browser address bar) or encrypted settings in your email > >>>> hoster & client. Winlink does NOT use encryption, thus is legal, and is > >>>> the primary application for my ARES team using HamWAN. As Kenny points > >>>> out, certain routers (not inexpensive home models) can be used to split > >>>> that traffic appropriately, but it is not an easy setup unless you have > >> a > >>>> background in data networks or cybersecurity…so it’s far easier to > >> either > >>>> use HamWAN just for your dedicated ARES laptop use or switch a cable > >> back > >>>> and forth using one pipe at a time. > >>>> > >>>> > >>>> > >>>> FWIW, Stephen W9SK > >>>> > >>>> > >>>> > >>>> > >>>> > >>>> *From:* PSDR <psdr-bounces(a)hamwan.org> *On Behalf Of *Kenny Richards > >>>> *Sent:* Monday, March 15, 2021 12:49 PM > >>>> *To:* Puget Sound Data Ring <psdr(a)hamwan.org> > >>>> *Subject:* Re: [HamWAN PSDR] Newbie > >>>> > >>>> > >>>> > >>>> Just want to add two things to what Carl said already. > >>>> > >>>> > >>>> > >>>> 1) Line of sight means you can actually 'see' the HamWAN node, or at > >> least > >>>> you can with something like a pair of binoculars. > >>>> > >>>> > >>>> > >>>> 2) Remember that HamWAN is not meant to be a replacement for your home > >>>> internet. Be very conscious of what traffic you are putting over > >> HamWAN. I > >>>> don't recommend connecting it to your home network unless you are > >> familiar > >>>> enough with routing rules to limit what traffic goes out the HamWAN > >> link. > >>>> > >>>> > >>>> > >>>> Good luck, > >>>> > >>>> Kenny, KU7M > >>>> > >>>> > >>>> > >>>> > >>>> > >>>> On Mon, Mar 15, 2021 at 12:40 PM <carl(a)n7kuw.com> wrote: > >>>> > >>>> Hi Phil, > >>>> > >>>> You can do all of the configuration while on the ground, but obviously > >> you > >>>> won’t have any signal. You don’t indicate what specific equipment you > >> have, > >>>> but if you have the mAnt30 dish and separate router/modem, make sure you > >>>> have the antenna connected before powering it up. > >>>> > >>>> > >>>> > >>>> As to trees, they are an absolute show stopper. You must have clear, > >>>> visual, line of sight to the HamWAN site you are shooting to. Hopefully > >> you > >>>> will have that, or can achieve that, from where you plan to mount the > >>>> dish. As to “just over them”, a microwave shot consists of the direct, > >>>> pure line of sight, but also what is referred to as the Fresnel zone – a > >>>> cigar shaped “balloon” around the pure line of sight. Items in the > >> Fresnel > >>>> zone (including trees) can reduce the amount of signal you have, so you > >> may > >>>> not get optimum performance, but some. > >>>> > >>>> > >>>> > >>>> In your initial post you commented about how to balance between your > >>>> regular internet and HamWAN for a Winlink node. My suggestion would be > >> to > >>>> just leave it on one (whichever one) as the norm, and only switch to the > >>>> other if the one goes down. You can also acquire routers that include > >>>> failover capability to automatically make that switch. You can go more > >>>> advanced with load sharing and such between multiple connections, but > >> that > >>>> requires much better understanding of internet routing, and for a > >> winlink > >>>> node basic failover will serve your purpose. > >>>> > >>>> > >>>> > >>>> Good luck, let us know how things turn out. > >>>> > >>>> Carl, N7KUW > >>>> > >>>> > >>>> > >>>> *From:* PSDR <psdr-bounces(a)hamwan.org> *On Behalf Of *Phil Cornell via > >>>> PSDR > >>>> *Sent:* Monday, March 15, 2021 12:11 PM > >>>> *To:* psdr(a)hamwan.org > >>>> *Subject:* [HamWAN PSDR] Newbie > >>>> > >>>> > >>>> > >>>> OK, I figured out my problem and I now have Winbox talking to the radio > >>>> and reporting status. I's not linking to anything since the antenna is > >>>> still on the ground. How much configuration can I do before mounting > >> it on > >>>> my roof. The only question in my sight path may be some trees but I > >> think > >>>> I can aim just over them and get a signal. My friend Bruce/WA7BAM will > >> be > >>>> helping with the antenna installation on Wed afternoon. Making > >> progress... > >>>> > >>>> > >>>> > >>>> *Phil Cornell * > >>>> > >>>> *W7PLC * > >>>> > >>>> *SHARES NCS590* > >>>> > >>>> *Hybrid Gateway W7PLC* > >>>> > >>>> *TCARES VP* > >>>> > >>>> > >>>> > >>>> > >>>> > >>>> > >>>> > >>>> > >>>> > >>>> _______________________________________________ > >>>> PSDR mailing list > >>>> PSDR(a)hamwan.org > >>>> http://mail.hamwan.net/mailman/listinfo/psdr > >>>> > >>>> _______________________________________________ > >>>> PSDR mailing list > >>>> PSDR(a)hamwan.org > >>>> http://mail.hamwan.net/mailman/listinfo/psdr > >>>> > >>>> > >>>> > >>>> > >>>> -- > >>>> > >>>> *-Scott* > >>>> _______________________________________________ > >>>> PSDR mailing list > >>>> PSDR(a)hamwan.org > >>>> http://mail.hamwan.net/mailman/listinfo/psdr > >>>> > >>> > >>> > >>> > >>> _______________________________________________ > >>> PSDR mailing list > >>> PSDR(a)hamwan.org > >>> http://mail.hamwan.net/mailman/listinfo/psdr > >>> > >> _______________________________________________ > >> PSDR mailing list > >> PSDR(a)hamwan.org > >> http://mail.hamwan.net/mailman/listinfo/psdr > >> > > > > > > _______________________________________________ > > PSDR mailing list > > PSDR(a)hamwan.org > > http://mail.hamwan.net/mailman/listinfo/psdr > > > _______________________________________________ > PSDR mailing list > PSDR(a)hamwan.org > http://mail.hamwan.net/mailman/listinfo/psdr > _______________________________________________ > PSDR mailing list > PSDR(a)hamwan.org > http://mail.hamwan.net/mailman/listinfo/psdr > > > -- > John D. Hays > Kingston, WA > K7VE / WRJT-215 > > > > _______________________________________________ > PSDR mailing list > PSDR(a)hamwan.org > http://mail.hamwan.net/mailman/listinfo/psdr

2 1

Re: [HamWAN PSDR] Newbie
by Aaron Taggert 16 Mar '21

16 Mar '21

TLS/SSL for authentication is ok. FTP is not an encrypted protocol, neither is telnet. The internet gateway could serve as an TLS/SSL proxy if the client accepted the non encrypted certificate from the gateway. To actually see what's happening you should use wireshark to see the actual packets. Aaron - KJ7TXR Pictures: What is a SSL Proxy? Definition & Related FAQs | Avi Networks <https://avinetworks.com/glossary/ssl-proxy/>

2 1

Newbie
by Phil Cornell 16 Mar '21

16 Mar '21

OK, I figured out my problem and I now have Winbox talking to the radio and reporting status. I's not linking to anything since the antenna is still on the ground. How much configuration can I do before mounting it on my roof. The only question in my sight path may be some trees but I think I can aim just over them and get a signal. My friend Bruce/WA7BAM will be helping with the antenna installation on Wed afternoon. Making progress... Phil Cornell W7PLC SHARES NCS590 Hybrid Gateway W7PLC TCARES VP

11 31

Lost connection?
by Timothy Wright 15 Mar '21

15 Mar '21

Hello, My name is Tim (@timmyboosters) and I am a mountain biker in the Sound area. I am writing to see what happened to the following link for Tiger summit. It was a way to check conditions on the top of Tiger summit during winter. It is widely used by MTB and I’m sure hiking communities as well. If you check on the link it shows a bad gateway error. Thanks for in advance and for what you do! http://www.hamwan.org/etiger.jpg?fbclid=IwAR32vGTXpOeMexfQWPo7jy1DHFTs0U8AL… Timothy Wright 1SG, USA (retired) Sent from my iPhone

2 1

Beacon is offline
by Bart Kus 15 Mar '21

15 Mar '21

At around 5:25PM today the Beacon site lost connectivity via every path. It looks like a power outage problem. Netops is trying to arrange a service visit to further assess the situation. --Bart

3 2