GentooForum.de

Quellcode

2.6.26-gentoo-r3

Quellcode

Bus options (PCI etc.) 
 eigentlich alles..

Quellcode

Dec  4 19:39:44 cole scsi6 : SCSI emulation for USB Mass Storage devices
Dec  4 19:39:44 cole usb-storage: device found at 3
Dec  4 19:39:44 cole usb-storage: waiting for device to settle before scanning
Dec  4 19:39:49 cole isa bounce pool size: 16 pages
Dec  4 19:39:49 cole scsi 6:0:0:0: CD-ROM            HUAWEI   Mass Storage     2.31 PQ: 0 ANSI: 2
Dec  4 19:39:49 cole sr0: scsi-1 drive
Dec  4 19:39:49 cole sr 6:0:0:0: Attached scsi CD-ROM sr0
Dec  4 19:39:49 cole sr 6:0:0:0: Attached scsi generic sg1 type 5
Dec  4 19:39:49 cole usb-storage: device scan complete

Quellcode

lspci
00:00.0 Host bridge: Intel Corporation Mobile Memory Controller Hub (rev 0c)
00:01.0 PCI bridge: Intel Corporation Mobile PCI Express Root Port (rev 0c)
00:19.0 Ethernet controller: Intel Corporation 82566MM Gigabit Network Connection (rev 03)
00:1a.0 USB Controller: Intel Corporation 82801H (ICH8 Family) USB UHCI Contoller #4 (rev 03)
00:1a.1 USB Controller: Intel Corporation 82801H (ICH8 Family) USB UHCI Controller #5 (rev 03)
00:1a.7 USB Controller: Intel Corporation 82801H (ICH8 Family) USB2 EHCI Controller #2 (rev 03)
00:1b.0 Audio device: Intel Corporation 82801H (ICH8 Family) HD Audio Controller (rev 03)
00:1c.0 PCI bridge: Intel Corporation 82801H (ICH8 Family) PCI Express Port 1 (rev 03)
00:1c.1 PCI bridge: Intel Corporation 82801H (ICH8 Family) PCI Express Port 2 (rev 03)
00:1c.2 PCI bridge: Intel Corporation 82801H (ICH8 Family) PCI Express Port 3 (rev 03)
00:1c.3 PCI bridge: Intel Corporation 82801H (ICH8 Family) PCI Express Port 4 (rev 03)
00:1c.4 PCI bridge: Intel Corporation 82801H (ICH8 Family) PCI Express Port 5 (rev 03)
00:1d.0 USB Controller: Intel Corporation 82801H (ICH8 Family) USB UHCI Controller #1 (rev 03)
00:1d.1 USB Controller: Intel Corporation 82801H (ICH8 Family) USB UHCI Controller #2 (rev 03)
00:1d.2 USB Controller: Intel Corporation 82801H (ICH8 Family) USB UHCI Controller #3 (rev 03)
00:1d.7 USB Controller: Intel Corporation 82801H (ICH8 Family) USB2 EHCI Controller #1 (rev 03)
00:1e.0 PCI bridge: Intel Corporation 82801 Mobile PCI Bridge (rev f3)
00:1f.0 ISA bridge: Intel Corporation Mobile LPC Interface Controller (rev 03)
00:1f.1 IDE interface: Intel Corporation Mobile IDE Controller (rev 03)
00:1f.2 SATA controller: Intel Corporation Mobile SATA AHCI Controller (rev 03)
00:1f.3 SMBus: Intel Corporation 82801H (ICH8 Family) SMBus Controller (rev 03)
01:00.0 VGA compatible controller: nVidia Corporation Device 0429 (rev a1)
03:00.0 Network controller: Intel Corporation Device 4230 (rev 61)
15:00.0 CardBus bridge: Ricoh Co Ltd RL5c476 II (rev ba)
15:00.1 FireWire (IEEE 1394): Ricoh Co Ltd R5C832 IEEE 1394 Controller (rev 04)
15:00.2 SD Host controller: Ricoh Co Ltd R5C822 SD/SDIO/MMC/MS/MSPro Host Adapter (rev 21)
15:00.3 System peripheral: Ricoh Co Ltd Device 0843 (rev 11)
15:00.4 System peripheral: Ricoh Co Ltd R5C592 Memory Stick Bus Host Adapter (rev 11)
15:00.5 System peripheral: Ricoh Co Ltd xD-Picture Card Controller (rev 11)

Quellcode

= UMTS/HSUPA - Karten =

== Installation ==
* Chipsatz finden. <br>In diesem Fall habe ich folgendes gegoogelt:
 T-Mobile Express Card IV +"chipsatz"
* Howtos suchen:
 +linux HUAWEI E870 installation howto

=== T-Mobile web'n'walk ExpressCard IV ===
* Der Chipsatz: '''HUAWEI E870'''
* Vorgeganger nach dem [[http://www.xs4all.nl/~ernstagn/GPRS-HOWTO/GPRS-HOWTO.html#toc3|Linux GPRS HOWTO]]

==== Kernelkonfiguration ====
* '''PPP support'''
 Networking  --->
  Networking options  --->
   <*> Unix domain sockets
   [*] TCP/IP networking
 Device Drivers  --->
  Network device support  --->
   [*] Network device support
   <*> PPP (point-to-point protocol) support
   <*>   PPP support for async serial ports
   <*>   PPP support for sync tty ports
   <*>   PPP Deflate compression
   <*>   PPP BSD-Compress compression

* '''PCI-Express card configuration'''
 Device Drivers  --->
  USB support  --->
   <*> Support for Host-side USB
   <*>   UHCI HCD (most Intel and VIA) support
   USB Serial Converter support  --->
    <*> USB Serial Converter support
    <*>   USB driver for GSM and CDMA modems

'''The first serial port can be used to create a GPRS connection.'''

Quellcode

= UMTS/HSUPA - Karten =

== Installation ==
* Chipsatz finden. <br>
In diesem Fall habe ich folgendes ergoogelt:
 T-Mobile Express Card IV +"chipsatz"
* Howtos suchen:
 +linux HUAWEI E870 installation howto

=== T-Mobile web'n'walk ExpressCard IV ===
* Der Chipsatz: '''HUAWEI E870'''
* Vorgegangen nach dem [[http://www.xs4all.nl/~ernstagn/GPRS-HOWTO/GPRS-HOWTO.html#toc3|Linux GPRS HOWTO]]

==== Kernelkonfiguration ====
* '''PPP support'''
 Networking  --->
  Networking options  --->
   <*> Unix domain sockets
   [*] TCP/IP networking
 Device Drivers  --->
  Network device support  --->
   [*] Network device support
   <*> PPP (point-to-point protocol) support
   <*>   PPP support for async serial ports
   <*>   PPP support for sync tty ports
   <*>   PPP Deflate compression
   <*>   PPP BSD-Compress compression

* '''PCI-Express card configuration'''
 Device Drivers  --->
  USB support  --->
   <*> Support for Host-side USB
   <*>   UHCI HCD (most Intel and VIA) support
   USB Serial Converter support  --->
    <*> USB Serial Converter support
    <*>   USB driver for GSM and CDMA modems

'''The first serial port can be used to create a GPRS connection.'''

== Testen ==
=== Karte testen ===

* ''/var/log/messages'' gibt beim Einstecken folgendes aus:
<pre>
Dec  5 12:01:30 cole usb 6-2: new full speed USB device using uhci_hcd and address 2
Dec  5 12:01:30 cole usb 6-2: configuration #1 chosen from 1 choice
Dec  5 12:01:30 cole scsi3 : SCSI emulation for USB Mass Storage devices
Dec  5 12:01:30 cole usb-storage: device found at 2
Dec  5 12:01:30 cole usb-storage: waiting for device to settle before scanning
Dec  5 12:01:30 cole usb 6-2: USB disconnect, address 2
Dec  5 12:01:32 cole usb 6-2: new full speed USB device using uhci_hcd and address 3
Dec  5 12:01:32 cole usb 6-2: configuration #1 chosen from 1 choice
Dec  5 12:01:32 cole usb-storage: probe of 6-2:1.0 failed with error -5
Dec  5 12:01:32 cole option 6-2:1.0: GSM modem (1-port) converter detected
Dec  5 12:01:32 cole usb 6-2: GSM modem (1-port) converter now attached to ttyUSB0
Dec  5 12:01:32 cole usb-storage: probe of 6-2:1.1 failed with error -5
Dec  5 12:01:32 cole option 6-2:1.1: GSM modem (1-port) converter detected
Dec  5 12:01:32 cole usb 6-2: GSM modem (1-port) converter now attached to ttyUSB1
Dec  5 12:01:32 cole scsi6 : SCSI emulation for USB Mass Storage devices
Dec  5 12:01:32 cole usb-storage: device found at 3
Dec  5 12:01:32 cole usb-storage: waiting for device to settle before scanning
Dec  5 12:01:37 cole isa bounce pool size: 16 pages
Dec  5 12:01:37 cole scsi 6:0:0:0: CD-ROM            HUAWEI   Mass Storage     2.31 PQ: 0 ANSI: 2
Dec  5 12:01:37 cole sr0: scsi-1 drive
Dec  5 12:01:37 cole sr 6:0:0:0: Attached scsi CD-ROM sr0
Dec  5 12:01:37 cole sr 6:0:0:0: Attached scsi generic sg1 type 5
Dec  5 12:01:37 cole usb-storage: device scan complete
</pre>
* Folgender Port wird wohl verwendet werden: '''ttyUSB0'''
<pre>
...
Dec  5 12:01:32 cole option 6-2:1.0: GSM modem (1-port) converter detected
Dec  5 12:01:32 cole usb 6-2: GSM modem (1-port) converter now attached to ttyUSB0
...
</pre>

=== Verbindung testen mittels ''minicom'' ===
* siehe auch [[Minicom]]
* Minicom konfigurieren:
<pre>
cat /etc/minicom/minirc.tmobileCard
# Machine-generated file - use "minicom -s" to change parameters.
pu port             /dev/ttyUSB0
</pre>
'''kleine Test-Session:'''
* Aufruf:
<pre>
 minicom tmobileCard
</pre>
* Testen, ob eine Verbindung zum Modem existiert
<pre>
AT
OK
</pre>
* Testen, ob Pin aktiviert ist:
<pre>
AT+CPIN?
+CPIN: READY

OK
</pre>
* Testen, ob am Netzwerk eingehängt
AT+CGATT?
+CGATT: 1

OK
</pre>
** Das genügt soweit..

== Einwählen ==
Das DialUp konfiguriere ich mittels PPP.<br>
'''Folgende Schritte sind zu erledigen:'''
# Die Konfiguration des PPP-Devices erstellen (in Gentoo über ''/etc/conf.d/net'').
# Ein Init-Script zum autom. Verbindungsaufbau.
# Eine Firewall aufbauen
* '''Meine ''/etc/conf.d/net''-Konfiguration sieht folgender massen aus:'''
<pre>
## UMTS

dns_servers_ppp0="145.253.2.11"
pppd_ppp0="defaultroute"

config_ppp0=( "ppp" )
# link_ppp0="/dev/ttyS0"                    ## Merlin U530
# link_ppp0="/dev/ttyS1"
 link_ppp0="/dev/ttyUSB0"
 username_ppp0='internet'
 password_ppp0='tm'
 pppd_ppp0=(
         "maxfail 25"
#        "noauth"
         "debug"
         "defaultroute"
         "usepeerdns"
         #"noipdefault"
         "ipcp-accept-remote"
         "ipcp-accept-local"
         "lcp-echo-interval 5"
         "lcp-echo-failure  3"
         "mtu 1500"
         "mru 1500"
         "novj"
 #        "nobsdcomp"
         "nodeflate"
         "novjccomp"
         "nopredictor1"
         "nomagic"
         "persist"
         "lock"
         "115200"
         "modem crtscts"
 )
 phone_number_ppp0=( "ATDT*99***1#" )

 chat_ppp0=(
         'ABORT' 'BUSY'
         'ABORT' 'ERROR'
         'ABORT' 'NO ANSWER'
         'ABORT' 'NO CARRIER'
         'ABORT' 'NO DIALTONE'
         'REPORT' 'CONNECT'
         '' 'ATZ'
         'OK' 'AT&F'
         'OK' 'ATE1'
         'OK' 'AT+COPS?'
         'OK' 'AT+CSQ'
         'OK' 'AT+CGDCONT=1,"IP","internet.t-mobile"'
         'OK' 'ATDT*99***1#'
         'CONNECT' 'c'
 )
</pre>
* '''Mein Init-Script:'''
* Ein bisschen gehacke, aber bei mir funtzts
<pre>
cole tuner # cat /etc/init.d/connect                             
#!/sbin/runscript                                                
# Copyright 1999-2008 Gentoo Foundation                          
# Distributed under the terms of the GNU General Public License v2
# $Header: $                                                      
#set -x                                                           
...

start() {
  CONNECTED=false

  while [ $CONNECTED != true ] ; do                    ## Die Merlin-PCMCIA-Karte hatte manchmal Startprobleme^^
  {
    if [ -z `cat /proc/net/dev | grep ppp0 | awk '{ print $1 }'` ] ; then
    {
      /etc/init.d/net.ppp0 restart
      sleep 3
    }
    else
    {
    /usr/local/bin/meine_firewall
    route add default gw `ifconfig | grep -A 1 ppp0 | grep "Adresse" | awk  '{ print $2 }' | sed 's\Adresse:\\\ '`
 #   /sbin/brick

      CONNECTED=true
    }
    fi
  }
  done
}

stop()
{
  /etc/init.d/net.ppp0 stop
  sleep 2
}

restart() {
  echo restart
}
</pre>
* '''Die Firewall'''
<pre>

# cat /usr/local/bin/firewall
#!/bin/bash                  
##                           

IPTABLES='/sbin/iptables'
## Devices               
EXTDEV="eth0"            
PPPDEV="ppp0"            

# Alte Regeln loeschen
$IPTABLES -F          
$IPTABLES -F -t nat   
$IPTABLES -X          

# Default Policy DROP
$IPTABLES -P INPUT DROP
$IPTABLES -P FORWARD DROP
$IPTABLES -P OUTPUT ACCEPT

# Ein paar Sicherheits vorkehrungen (aktuell eintl. nicht noetig)
$IPTABLES -N bad_packets                                         
# kaputte Pakete droppen                                         
$IPTABLES -A bad_packets -p ALL -m state --state INVALID -j DROP 
# Antispoofing                                                   
#$IPTABLES -A bad_packets -p tcp -s $LAN -j REJECT --reject-with tcp-reset
# Ping Of Death                                                           
#$IPTABLES -A bad_packets -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT
# gibt Kontrolle zurueck                                                                 
$IPTABLES -A bad_packets -p ALL -j RETURN                                                

$IPTABLES -N service_sec
# SYN-Flood Attacken    
#$IPTABLES -A service_sec -p tcp --syn -m limit --limit 1/s -j ACCEPT
# TCP-SYN-Pakete ohne Status NEW droppen                             
$IPTABLES -A service_sec -p tcp ! --syn -m state --state NEW -j DROP 
# Portscanner ausschalten                                            
#$IPTABLES -A service_sec -p tcp --tcp-flags ALL NONE -m limit --limit 1/h -j ACCEPT
#$IPTABLES -A service_sec -p tcp --tcp-flags ALL ALL -m limit --limit 1/h -j ACCEPT 
# gibt Kontrolle zurueck                                                            
$IPTABLES -A service_sec -p ALL -j RETURN                                           

#################
### localhost ###
#################
$IPTABLES -A INPUT -i lo -p all -j ACCEPT
$IPTABLES -A OUTPUT -o lo -p all -j ACCEPT

##########################################
### Verschiedene Directions blockieren ###
##########################################
$IPTABLES -A INPUT -p all -s localhost  -i $PPPDEV -j DROP
$IPTABLES -A INPUT -p all -s 192.168.0.0/16 -i $PPPDEV -j DROP
$IPTABLES -A INPUT -p all -s 10.0.0.0/8 -i $PPPDEV -j DROP
#$IPTABLES -A OUTPUT -p all -d localhost -o $PPPDEV -j DROP
$IPTABLES -A OUTPUT -p all -d 192.168.0.0/16 -o $PPPDEV -j DROP
$IPTABLES -A OUTPUT -p all -d 10.0.0.0/8 -o $PPPDEV -j DROP

##########################
### Post-Konfiguration ###
##########################i
## allow established packages
$IPTABLES -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
# Masquerade
$IPTABLES -t nat -A POSTROUTING -o $PPPDEV -j MASQUERADE
# Logging
$IPTABLES -A INPUT -m state --state NEW -j LOG

</pre>