What's new
  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

Status
Not open for further replies.
I am strongly against email notification as long as the smtp password is stored in plain text. Plain text, for crying out loud. For the rest: I really like AB-Solution ;-)
OK, I get your concern.
But realistically, this is your router the pw is stored on, the connection to the smtp server is encrypted just as in your desktop mail client (hopefully).

The email config file has admin user rw rights only (the only account that makes sense on the router).
It is in plain text as even if I would encrypt it, I would have to place the ent-decryption code on the very same router.
Given that you are concerned about someone stealing that info, the intruder would have to have either physical access to the USB device or have your router credentials and be able to connect to it over SSH or Telnet. I presume these services are not accessible from WAN on your router.

Given that access, however gained, a dump of the nvram content also gives plaintext passwords of your router's admin account as well as other credentials.
Just my 2 cents.
 
OK, I get your concern.
But realistically, this is your router the pw is stored on, the connection to the smtp server is encrypted just as in your desktop mail client (hopefully).

The email config file has admin user rw rights only (the only account that makes sense on the router).
It is in plain text as even if I would encrypt it, I would have to place the ent-decryption code on the very same router.
Given that you are concerned about someone stealing that info, the intruder would have to have either physical access to the USB device or have your router credentials and be able to connect to it over SSH or Telnet. I presume these services are not accessible from WAN on your router.

Given that access, however gained, a dump of the nvram content also gives plaintext passwords of your router's admin account as well as other credentials.
Just my 2 cents.
OK, I get your arguments, but since this is a security device, it is the last place I would expect to find plaintext passwords.
I do not expose SSH or telnet to the WAN.
I understand that the game is over when root level access has been acquired.
On the internet, plaintext passwords is a difficult and ongoing discussion:
https://security.stackexchange.com/...ware-to-store-passwords-locally-in-plain-text
In the history of Asus routers, unauthorized access to usb sticks from WAN has been an issue.
Granted, my email account is not my most critical account.
As a workaround, I use a secondary mail account for this kind of notification email.
So I would use your update notification email if you choose to build it in.
 
OK, I get your arguments, but since this is a security device, it is the last place I would expect to find plaintext passwords.
I do not expose SSH or telnet to the WAN.
I understand that the game is over when root level access has been acquired.
On the internet, plaintext passwords is a difficult and ongoing discussion:
https://security.stackexchange.com/...ware-to-store-passwords-locally-in-plain-text
In the history of Asus routers, unauthorized access to usb sticks from WAN has been an issue.
Granted, my email account is not my most critical account.
As a workaround, I use a secondary mail account for this kind of notification email.
So I would use your update notification email if you choose to build it in.
I use an unimportant gmail account too.

Other email scripts floating around here have the credentials right in the file, in /jffs/scripts/.
AB stores them in a more or less obscure location on the USB device.

The upcoming backup function includes the email config file, but I strip the password from it before it leaves the router, leaving a 'Put your password here' instead.

And to repeat again: Despite this being a security device, your router's password is stored in a well known location, in plain text, coded by Asus themselves. I don't see your point of pointing that out.

Glad I was able to save another soul and bring it into the AB fold...
 
Last edited:
I use an unimportant gmail account too.

Other email scripts floating around here have the credentials right in the file, in /jffs/scripts/.
AB stores them in a more or less obscure location on the USB device.

The upcoming backup function includes the email config file, but I strip the password from it before it leaves the router, leaving a 'Put your password here' instead.

And to repeat again: Despite this being a security device, your router's password is stored in a well known location, in plain text, coded by Asus themselves. I don't see your point of pointing that out.

Glad I was able to save another soul and bring it into the AB fold...
"Despite this being a security device, your router's password is stored in a well known location, in plain text, coded by Asus themselves."
Wtf seriously? Ok now I don't see my point either.
Rest assured it takes far more than this to make me leave AB. Very happy with it ;-)
 
"Despite this being a security device, your router's password is stored in a well known location, in plain text, coded by Asus themselves."
Wtf seriously? Ok now I don't see my point either.
Rest assured it takes far more than this to make me leave AB. Very happy with it ;-)
Here's a security warning I just received from "Apple". I will alert my in-house "control department" and temporarily disable WLAN access for all connected devices:
Dear Member,
Due to an anomaly on your Apple ID, our control department has temporarily blocked your account as a security measure.
All of your contact, payment and security details that you will use in our services will be partially limited until you submit a confirmation of your details.
Start verification process now >
Sender is the trustworthy server.lbwhosting.biz, sent through Leaf PHPMailer 2.7 (leafmailer.pw).
Yeah.
 
Hi,

I've run ab-solution for a while and it's been working flawlessly, great work! However, today when I logged into my router (through PuTTY) I was unable to start ab-solution from shell!!! The script is running, because ads are beeing blocked, but I am not allowed to start/run it from shell (in order to check for updates etc). I get

Code:
-sh: ./ab-solution.sh: Permission denied

When doing a "ls -l" I get the following:

Code:
?rwsrwsrwt 65535 42949672 42949672 4294967295 Jan  1  1970 ab-solution.sh

So, it seems I don't own the file anymore! I can't run it, rename it or delete it! I've tried to chmod and chown but to no avail. What's going on here? Any advice?
 
Hi,

I've run ab-solution for a while and it's been working flawlessly, great work! However, today when I logged into my router (through PuTTY) I was unable to start ab-solution from shell!!! The script is running, because ads are beeing blocked, but I am not allowed to start/run it from shell (in order to check for updates etc). I get

Code:
-sh: ./ab-solution.sh: Permission denied

When doing a "ls -l" I get the following:

Code:
?rwsrwsrwt 65535 42949672 42949672 4294967295 Jan  1  1970 ab-solution.sh

So, it seems I don't own the file anymore! I can't run it, rename it or delete it! I've tried to chmod and chown but to no avail. What's going on here? Any advice?
Try the outside of home directory way:
http://ab-solution.info/use/starting-ab-solution.html
 
No luck. But when using the "sh"-command, I don't get any response, just a new line. Tried these commands:
  • sh ./ab-solution.sh
  • sh ab-solution.sh
  • sh /mnt/USB/ab-solution.sh
All of them just gives me a new command line, without any feedback :confused:
Copy and paste the full install command from the install section on the website and run it.
 
Copy and paste the full install command from the install section on the website and run it.
Code:
 curl -O ab-solution.info/releases/latest/ab-solution.sh && sh ab-solution.sh
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0Warning: Failed to create the file ab-solution.sh: Permission denied
  0  143k    0  1228    0     0   2330      0  0:01:03 --:--:--  0:01:03 12158
curl: (23) Failed writing body (0 != 1228)
 
Code:
 curl -O ab-solution.info/releases/latest/ab-solution.sh && sh ab-solution.sh
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0Warning: Failed to create the file ab-solution.sh: Permission denied
  0  143k    0  1228    0     0   2330      0  0:01:03 --:--:--  0:01:03 12158
curl: (23) Failed writing body (0 != 1228)
What directory are you in?
Enter cd to get to the /tmp/home/root directory. Then try pasting again.
 
I am in "/tmp/home/root"...
Can you create a directory in there?
mkdir test
then ls and see if it's there.
then
rm -r test
 
Can you create a directory in there?
mkdir test
then ls and see if it's there.
then
rm -r test
I can create and remove a directory both in "/tmp/home/root" and in "/tmp/mnt/USB".

Somehow I don't really think my problem is related to your script but your script was affected by something else causing my problems. But beeing a non-Linux guru, I really don't know what's going on here...
 
I can create and remove a directory both in "/tmp/home/root" and in "/tmp/mnt/USB".

Somehow I don't really think my problem is related to your script but your script was affected by something else causing my problems. But beeing a non-Linux guru, I really don't know what's going on here...
Try that:
rm -rf /tmp/home/root/ab-solution.sh
Then run the install code from the website.
 
Try that:
rm -rf /tmp/home/root/ab-solution.sh
Then run the install code from the website.
The "rm" command worked and the file/link was removed. However, when running the install command:

Code:
XXXX@RT-AC68U:/tmp/home/root# curl -O ab-solution.info/releases/latest/ab-solution.sh && sh ab-solution.sh
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  143k  100  143k    0     0   269k      0 --:--:-- --:--:-- --:--:--  361k
    _   ___     ___      _      _   _
   /_\ | _ )___/ __| ___| |_  _| |_(_)___ _ _
  / _ \| _ \___\__ \/ _ \ | || |  _| / _ \ ' \
 /_/ \_\___/   |___/\___/_|\_,_|\__|_\___/_||_|

 Welcome
 This is AB-Solution 3.8 [3.8.1]

 looking for an installation
mv: can't remove '/tmp/mnt/USB/ab-solution.sh': Operation not permitted
ln: /root/ab-solution.sh: File exists
chmod: /tmp/mnt/USB/adblocking/backup/ab-solution-3.8.sh_2017-04-27_17: Operation not permitted
chmod: /tmp/mnt/USB/adblocking/addon/functions.add: Operation not permitted
chmod: /tmp/mnt/USB/adblocking/addon/functions.add: Operation not permitted
 getting latest addon files

 getting update-hosts.add from
 ab-solution.info/releases/addon/3.8
 download successful, preparing file
 update-hosts.add integrated into AB-Solution
chmod: /tmp/mnt/USB/adblocking/backup/ab-solution-3.8.sh_2017-04-27_17: Operation not permitted
chmod: /tmp/mnt/USB/adblocking/addon/functions.add: Operation not permitted
chmod: /tmp/mnt/USB/adblocking/addon/functions.add: Operation not permitted

 getting rotate-logs.add from
 ab-solution.info/releases/addon/3.8
 download successful, preparing file
 rotate-logs.add integrated into AB-Solution
chmod: /tmp/mnt/USB/adblocking/backup/ab-solution-3.8.sh_2017-04-27_17: Operation not permitted
chmod: /tmp/mnt/USB/adblocking/addon/functions.add: Operation not permitted
chmod: /tmp/mnt/USB/adblocking/addon/functions.add: Operation not permitted

 getting functions.add from
 ab-solution.info/releases/addon/3.8
/tmp/mnt/USB/adblocking/addon/functions.add: Permission denied
rm: can't remove '/tmp/mnt/USB/adblocking/addon/functions.add': Operation not permitted
 download failed: no file found

 getting pixelserv-tls.add from
 ab-solution.info/releases/addon/3.8
 download successful, preparing file
 pixelserv-tls.add integrated into AB-Solution
chmod: /tmp/mnt/USB/adblocking/backup/ab-solution-3.8.sh_2017-04-27_17: Operation not permitted
chmod: /tmp/mnt/USB/adblocking/addon/functions.add: Operation not permitted
chmod: /tmp/mnt/USB/adblocking/addon/functions.add: Operation not permitted

 reloading AB-Solution

XXXX@RT-AC68U:/tmp/home/root#
Thanks for taking the time to try to resolve this btw...
 
The "rm" command worked and the file/link was removed. However, when running the install command:

Code:
XXXX@RT-AC68U:/tmp/home/root# curl -O ab-solution.info/releases/latest/ab-solution.sh && sh ab-solution.sh
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  143k  100  143k    0     0   269k      0 --:--:-- --:--:-- --:--:--  361k
    _   ___     ___      _      _   _
   /_\ | _ )___/ __| ___| |_  _| |_(_)___ _ _
  / _ \| _ \___\__ \/ _ \ | || |  _| / _ \ ' \
 /_/ \_\___/   |___/\___/_|\_,_|\__|_\___/_||_|

 Welcome
 This is AB-Solution 3.8 [3.8.1]

 looking for an installation
mv: can't remove '/tmp/mnt/USB/ab-solution.sh': Operation not permitted
ln: /root/ab-solution.sh: File exists
chmod: /tmp/mnt/USB/adblocking/backup/ab-solution-3.8.sh_2017-04-27_17: Operation not permitted
chmod: /tmp/mnt/USB/adblocking/addon/functions.add: Operation not permitted
chmod: /tmp/mnt/USB/adblocking/addon/functions.add: Operation not permitted
 getting latest addon files

 getting update-hosts.add from
 ab-solution.info/releases/addon/3.8
 download successful, preparing file
 update-hosts.add integrated into AB-Solution
chmod: /tmp/mnt/USB/adblocking/backup/ab-solution-3.8.sh_2017-04-27_17: Operation not permitted
chmod: /tmp/mnt/USB/adblocking/addon/functions.add: Operation not permitted
chmod: /tmp/mnt/USB/adblocking/addon/functions.add: Operation not permitted

 getting rotate-logs.add from
 ab-solution.info/releases/addon/3.8
 download successful, preparing file
 rotate-logs.add integrated into AB-Solution
chmod: /tmp/mnt/USB/adblocking/backup/ab-solution-3.8.sh_2017-04-27_17: Operation not permitted
chmod: /tmp/mnt/USB/adblocking/addon/functions.add: Operation not permitted
chmod: /tmp/mnt/USB/adblocking/addon/functions.add: Operation not permitted

 getting functions.add from
 ab-solution.info/releases/addon/3.8
/tmp/mnt/USB/adblocking/addon/functions.add: Permission denied
rm: can't remove '/tmp/mnt/USB/adblocking/addon/functions.add': Operation not permitted
 download failed: no file found

 getting pixelserv-tls.add from
 ab-solution.info/releases/addon/3.8
 download successful, preparing file
 pixelserv-tls.add integrated into AB-Solution
chmod: /tmp/mnt/USB/adblocking/backup/ab-solution-3.8.sh_2017-04-27_17: Operation not permitted
chmod: /tmp/mnt/USB/adblocking/addon/functions.add: Operation not permitted
chmod: /tmp/mnt/USB/adblocking/addon/functions.add: Operation not permitted

 reloading AB-Solution

XXXX@RT-AC68U:/tmp/home/root#
Thanks for taking the time to try to resolve this btw...
You seem to have a problem with your attached USB device.
Try to run the Health Scanner on the Web UI startpage by clicking on the device on the bottom right.
Also, the syslog would have a bunch of errors reported for that device.
 
You seem to have a problem with your attached USB device.
Try to run the Health Scanner on the Web UI startpage by clicking on the device on the bottom right.
Also, the syslog would have a bunch of errors reported for that device.
Well, the "Health Scanner" didn't report anything in the GUI, but when checking the syslog I get a lot of:

Code:
syslog: USB partition unmounted from /tmp/mnt/USB fail. (return -1, Bad file descriptor)

So, what is your suggestion? Reformat the USB-drive? Throw it away and use another one?
 
Well, the "Health Scanner" didn't report anything in the GUI, but when checking the syslog I get a lot of:

Code:
syslog: USB partition unmounted from /tmp/mnt/USB fail. (return -1, Bad file descriptor)

So, what is your suggestion? Reformat the USB-drive? Throw it away and use another one?
No, not yet.
Unmount the device through the WebUI, unplug it when its unmounted, wait a bit and reinsert it.
If it does not unmount, unplug the router, remove usb device(s), boot up the router and plug device back in.
Then look at the syslog again for errors.
Try to run AB with that outside of home way.
 
No, not yet.
Unmount the device through the WebUI, unplug it when its unmounted, wait a bit and reinsert it.
If it does not unmount, unplug the router, remove usb device(s), boot up the router and plug device back in.
Then look at the syslog again for errors.
Try to run AB with that outside of home way.
I still cannot run the script as per earlier. Got these messasges (amongst others) in the syslog:
Code:
kernel: EXT2-fs (sda1): previous I/O error to superblock detected

kernel: EXT2-fs (sda1): error: ext2_free_branches: Read failure, inode=7725, block=36855
 
Status
Not open for further replies.

Similar threads

Latest threads

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top