Re: [Cerowrt-devel] Available MACs in dropbear

2014-10-24 Thread Michael Richardson
Maciej Soltysiak wrote: >> The reason why it hurts me is that I have servers configured >> according to bettercrypto.org and I can't connect from cero (rare >> occasions, but >> >> 1) MD5 != HMAC-MD5. > That I didn't know, thanks Michael. For some reason bettercrypto.org

Re: [Cerowrt-devel] Available MACs in dropbear

2014-10-24 Thread Maciej Soltysiak
On Fri, Oct 24, 2014 at 7:52 PM, Michael Richardson wrote: > > The reason why it hurts me is that I have servers configured according > > to bettercrypto.org and I can't connect from cero (rare occasions, but > > 1) MD5 != HMAC-MD5. That I didn't know, thanks Michael. For some reason bette

Re: [Cerowrt-devel] Available MACs in dropbear

2014-10-24 Thread Michael Richardson
Maciej Soltysiak wrote: > For some reason dropbear doesn't have modern MACs for SSH. On cero > 3.10.36 I've got Dropbear SSH client v2013.59: Just to make sure you are clear: hmac-md5 is not subject to any of the preimage attacks that md5 is subject to. It's not the same thing. > T

[Cerowrt-devel] Available MACs in dropbear

2014-10-24 Thread Maciej Soltysiak
Hi list, For some reason dropbear doesn't have modern MACs for SSH. On cero 3.10.36 I've got Dropbear SSH client v2013.59: root@cerowrt:/etc# ssh -m help ssh: Available MACs: hmac-sha1-96,hmac-sha1,hmac-md5 (MD5 BTW...) However, dropbear since v2013.56 has support for sha2 (https://matt.ucc.asn.

Re: [Cerowrt-devel] routing

2014-10-24 Thread Dave Taht
What I typically do (after renumbering each device to be on a unique range, as you did), is: http://www.bufferbloat.net/projects/cerowrt/wiki/Setting_up_an_interior_gateway_router There is no need to setup static routes at all, babel takes care of it. You do have to tell your exterior router to

[Cerowrt-devel] routing

2014-10-24 Thread Dane Medic
Hi, question: if I use 3 cerowrt routers and connect them together from lan port to wan port in chain, is it correct way to set a static IP on the last two routers WAN ports and add routes from first one like so? route add -net 172.20.21.0 netmask 255.255.255.224 dev se00 gateway 172.20.21.5 rou

Re: [Cerowrt-devel] Routing limit question

2014-10-24 Thread Sebastian Moeller
Hi Ernesto, it seems that I forgot to mention that you need to change into the buffer bloat/netperf-wrapper directory first: so please try: cd ~/bufferbloat/netperf-wrapper followed by: date ; ping -c 10 netperf-eu.bufferbloat.net ; ./netperf-wrapper --ipv4 -L 300 -H netperf-eu.bufferbloat.net