Iamm NTD36HD by Novatron - Page 2

1 i never say with what i open this firmware :-) its my secret :-)

2 i fix the bug with play list temporary (workaround) !! in next firmware from me is it fixed :-)

3 telnetd service is IN box ! i open only port and start the service...

4 i update the iamm with Tftp method. its easy .. manual comes today or tomorrow

5 firmware from novatronis very bad. i fix next days all bugs..

6 samba run NOT under fat/fat32/ntfs .!! but ext3 is in iamm :-) see under cubee:~# cat /proc/filesystems

regards

p.s

here all services in your Iamm.you can see this in :root --> \\etc\\services

# /etc/services:
# $Id: services,v 1.1 2003/10/02 01:32:56 michael Exp $
#
# Network services, Internet style
#
# Note that it is presently the policy of IANA to assign a single well-known
# port number for both TCP and UDP; hence, most entries here have two entries
# even if the protocol doesn't support UDP operations.
# Updated from RFC 1700, ``Assigned Numbers'' (October 1994). Not all ports
# are included, only the more common ones.

tcpmux 1/tcp # TCP port service multiplexer
echo 7/tcp
echo 7/udp
discard 9/tcp sink null
discard 9/udp sink null
systat 11/tcp users
daytime 13/tcp
daytime 13/udp
netstat 15/tcp
qotd 17/tcp quote
msp 18/tcp # message send protocol
msp 18/udp # message send protocol
chargen 19/tcp ttytst source
chargen 19/udp ttytst source
ftp-data 20/tcp
ftp 21/tcp
fsp 21/udp fspd
ssh 22/tcp # SSH Remote Login Protocol
ssh 22/udp # SSH Remote Login Protocol
telnet 23/tcp
# 24 - private
smtp 25/tcp mail
# 26 - unassigned
time 37/tcp timserver
time 37/udp timserver
rlp 39/udp resource # resource location
nameserver 42/tcp name # IEN 116
whois 43/tcp nicname
re-mail-ck 50/tcp # Remote Mail Checking Protocol
re-mail-ck 50/udp # Remote Mail Checking Protocol
domain 53/tcp nameserver # name-domain server
domain 53/udp nameserver
mtp 57/tcp # deprecated
bootps 67/tcp # BOOTP server
bootps 67/udp
bootpc 68/tcp # BOOTP client
bootpc 68/udp
tftp 69/udp
gopher 70/tcp # Internet Gopher
gopher 70/udp
rje 77/tcp netrjs
finger 79/tcp
www 80/tcp http # WorldWideWeb HTTP
www 80/udp # HyperText Transfer Protocol
link 87/tcp ttylink
kerberos 88/tcp kerberos5 krb5 # Kerberos v5
kerberos 88/udp kerberos5 krb5 # Kerberos v5
supdup 95/tcp
# 100 - reserved
hostnames 101/tcp hostname # usually from sri-nic
iso-tsap 102/tcp tsap # part of ISODE.
csnet-ns 105/tcp cso-ns # also used by CSO name server
csnet-ns 105/udp cso-ns
# unfortunately the poppassd (Eudora) uses a port which has already
# been assigned to a different service. We list the poppassd as an
# alias here. This should work for programs asking for this service.
# (due to a bug in inetd the 3com-tsmux line is disabled)
#3com-tsmux 106/tcp poppassd
#3com-tsmux 106/udp poppassd
rtelnet 107/tcp # Remote Telnet
rtelnet 107/udp
pop-2 109/tcp postoffice # POP version 2
pop-2 109/udp
pop-3 110/tcp # POP version 3
pop-3 110/udp
sunrpc 111/tcp portmapper # RPC 4.0 portmapper TCP
sunrpc 111/udp portmapper # RPC 4.0 portmapper UDP
auth 113/tcp authentication tap ident
sftp 115/tcp
uucp-path 117/tcp
nntp 119/tcp readnews untp # USENET News Transfer Protocol
ntp 123/tcp
ntp 123/udp # Network Time Protocol
netbios-ns 137/tcp # NETBIOS Name Service
netbios-ns 137/udp
netbios-dgm 138/tcp # NETBIOS Datagram Service
netbios-dgm 138/udp
netbios-ssn 139/tcp # NETBIOS session service
netbios-ssn 139/udp
imap2 143/tcp # Interim Mail Access Proto v2
imap2 143/udp
snmp 161/udp # Simple Net Mgmt Proto
snmp-trap 162/udp snmptrap # Traps for SNMP
cmip-man 163/tcp # ISO mgmt over IP (CMOT)
cmip-man 163/udp
cmip-agent 164/tcp
cmip-agent 164/udp
xdmcp 177/tcp # X Display Mgr. Control Proto
xdmcp 177/udp
nextstep 178/tcp NeXTStep NextStep # NeXTStep window
nextstep 178/udp NeXTStep NextStep # server
bgp 179/tcp # Border Gateway Proto.
bgp 179/udp
prospero 191/tcp # Cliff Neuman's Prospero
prospero 191/udp
irc 194/tcp # Internet Relay Chat
irc 194/udp
smux 199/tcp # SNMP Unix Multiplexer
smux 199/udp
at-rtmp 201/tcp # AppleTalk routing
at-rtmp 201/udp
at-nbp 202/tcp # AppleTalk name binding
at-nbp 202/udp
at-echo 204/tcp # AppleTalk echo
at-echo 204/udp
at-zis 206/tcp # AppleTalk zone information
at-zis 206/udp
qmtp 209/tcp # The Quick Mail Transfer Protocol
qmtp 209/udp # The Quick Mail Transfer Protocol
z3950 210/tcp wais # NISO Z39.50 database
z3950 210/udp wais
ipx 213/tcp # IPX
ipx 213/udp
imap3 220/tcp # Interactive Mail Access
imap3 220/udp # Protocol v3
ulistserv 372/tcp # UNIX Listserv
ulistserv 372/udp
https 443/tcp # MCom
https 443/udp # MCom
snpp 444/tcp # Simple Network Paging Protocol
snpp 444/udp # Simple Network Paging Protocol
saft 487/tcp # Simple Asynchronous File Transfer
saft 487/udp # Simple Asynchronous File Transfer
npmp-local 610/tcp dqs313_qmaster # npmp-local / DQS
npmp-local 610/udp dqs313_qmaster # npmp-local / DQS
npmp-gui 611/tcp dqs313_execd # npmp-gui / DQS
npmp-gui 611/udp dqs313_execd # npmp-gui / DQS
hmmp-ind 612/tcp dqs313_intercell# HMMP Indication / DQS
hmmp-ind 612/udp dqs313_intercell# HMMP Indication / DQS
#
# UNIX specific services
#
exec 512/tcp
biff 512/udp comsat
login 513/tcp
who 513/udp whod
shell 514/tcp cmd # no passwords used
syslog 514/udp
printer 515/tcp spooler # line printer spooler
talk 517/udp
ntalk 518/udp
route 520/udp router routed # RIP
timed 525/udp timeserver
tempo 526/tcp newdate
courier 530/tcp rpc
conference 531/tcp chat
netnews 532/tcp readnews
netwall 533/udp # -for emergency broadcasts
uucp 540/tcp uucpd # uucp daemon
afpovertcp 548/tcp # AFP over TCP
afpovertcp 548/udp # AFP over TCP
remotefs 556/tcp rfs_server rfs # Brunhoff remote filesystem
klogin 543/tcp # Kerberized `rlogin' (v5)
kshell 544/tcp krcmd # Kerberized `rsh' (v5)
kerberos-adm 749/tcp # Kerberos `kadmin' (v5)
#
webster 765/tcp # Network dictionary
webster 765/udp
#
# From ``Assigned Numbers'':
#
#> The Registered Ports are not controlled by the IANA and on most systems
#> can be used by ordinary user processes or programs executed by ordinary
#> users.
#
#> Ports are used in the TCP [45,106] to name the ends of logical
#> connections which carry long term conversations. For the purpose of
#> providing services to unknown callers, a service contact port is
#> defined. This list specifies the port used by the server process as its
#> contact port. While the IANA can not control uses of these ports it
#> does register or list uses of these ports as a convienence to the
#> community.
#
nfsdstatus 1110/tcp
nfsd-keepalive 1110/udp

ingreslock 1524/tcp
ingreslock 1524/udp
prospero-np 1525/tcp # Prospero non-privileged
prospero-np 1525/udp
datametrics 1645/tcp old-radius # datametrics / old radius entry
datametrics 1645/udp old-radius # datametrics / old radius entry
sa-msg-port 1646/tcp old-radacct # sa-msg-port / old radacct entry
sa-msg-port 1646/udp old-radacct # sa-msg-port / old radacct entry
radius 1812/tcp # Radius
radius 1812/udp # Radius
radacct 1813/tcp # Radius Accounting
radacct 1813/udp # Radius Accounting
nfsd 2049/tcp nfs
nfsd 2049/udp nfs
cvspserver 2401/tcp # CVS client/server operations
cvspserver 2401/udp # CVS client/server operations
mysql 3306/tcp # MySQL
mysql 3306/udp # MySQL
rfe 5002/tcp # Radio Free Ethernet
rfe 5002/udp # Actually uses UDP only
cfengine 5308/tcp # CFengine
cfengine 5308/udp # CFengine
bbs 7000/tcp # BBS service
#
#
# Kerberos (Project Athena/MIT) services
# Note that these are for Kerberos v4, and are unofficial. Sites running
# v4 should uncomment these and comment out the v5 entries above.
#
kerberos4 750/udp kerberos-iv kdc # Kerberos (server) udp
kerberos4 750/tcp kerberos-iv kdc # Kerberos (server) tcp
kerberos_master 751/udp # Kerberos authentication
kerberos_master 751/tcp # Kerberos authentication
passwd_server 752/udp # Kerberos passwd server
krb_prop 754/tcp # Kerberos slave propagation
krbupdate 760/tcp kreg # Kerberos registration
kpasswd 761/tcp kpwd # Kerberos "passwd"
kpop 1109/tcp # Pop with Kerberos
knetd 2053/tcp # Kerberos de-multiplexor
zephyr-srv 2102/udp # Zephyr server
zephyr-clt 2103/udp # Zephyr serv-hm connection
zephyr-hm 2104/udp # Zephyr hostmanager
eklogin 2105/tcp # Kerberos encrypted rlogin
#
# Unofficial but necessary (for NetBSD) services
#
supfilesrv 871/tcp # SUP server
supfiledbg 1127/tcp # SUP debugging
#
# Datagram Delivery Protocol services
#
rtmp 1/ddp # Routing Table Maintenance Protocol
nbp 2/ddp # Name Binding Protocol
echo 4/ddp # AppleTalk Echo Protocol
zip 6/ddp # Zone Information Protocol
#
# Services added for the Debian GNU/Linux distribution
poppassd 106/tcp # Eudora
poppassd 106/udp # Eudora
mailq 174/tcp # Mailer transport queue for Zmailer
mailq 174/tcp # Mailer transport queue for Zmailer
omirr 808/tcp omirrd # online mirror
omirr 808/udp omirrd # online mirror
rmtcfg 1236/tcp # Gracilis Packeten remote config server
xtel 1313/tcp # french minitel
coda_opcons 1355/udp # Coda opcons (Coda fs)
coda_venus 1363/udp # Coda venus (Coda fs)
coda_auth 1357/udp # Coda auth (Coda fs)
coda_udpsrv 1359/udp # Coda udpsrv (Coda fs)
coda_filesrv 1361/udp # Coda filesrv (Coda fs)
codacon 1423/tcp venus.cmu # Coda Console (Coda fs)
coda_aux1 1431/tcp # coda auxiliary service (Coda fs)
coda_aux1 1431/udp # coda auxiliary service (Coda fs)
coda_aux2 1433/tcp # coda auxiliary service (Coda fs)
coda_aux2 1433/udp # coda auxiliary service (Coda fs)
coda_aux3 1435/tcp # coda auxiliary service (Coda fs)
coda_aux3 1435/udp # coda auxiliary service (Coda fs)
cfinger 2003/tcp # GNU Finger
afbackup 2988/tcp # Afbackup system
afbackup 2988/udp # Afbackup system
icp 3130/tcp # Internet Cache Protocol (Squid)
icp 3130/udp # Internet Cache Protocol (Squid)
postgres 5432/tcp # POSTGRES
postgres 5432/udp # POSTGRES
fax 4557/tcp # FAX transmission service (old)
hylafax 4559/tcp # HylaFAX client-server protocol (new)
noclog 5354/tcp # noclogd with TCP (nocol)
noclog 5354/udp # noclogd with UDP (nocol)
hostmon 5355/tcp # hostmon uses TCP (nocol)
hostmon 5355/udp # hostmon uses TCP (nocol)
ircd 6667/tcp # Internet Relay Chat
ircd 6667/udp # Internet Relay Chat
webcache 8080/tcp # WWW caching service
webcache 8080/udp # WWW caching service
tproxy 8081/tcp # Transparent Proxy
tproxy 8081/udp # Transparent Proxy
mandelspawn 9359/udp mandelbrot # network mandelbrot
amanda 10080/udp # amanda backup services
amandaidx 10082/tcp # amanda backup services
amidxtape 10083/tcp # amanda backup services
isdnlog 20011/tcp # isdn logging system
isdnlog 20011/udp # isdn logging system
vboxd 20012/tcp # voice box system
vboxd 20012/udp # voice box system
binkp 24554/tcp # Binkley
binkp 24554/udp # Binkley
asp 27374/tcp # Address Search Protocol
asp 27374/udp # Address Search Protocol
tfido 60177/tcp # Ifmail
tfido 60177/udp # Ifmail
fido 60179/tcp # Ifmail
fido 60179/udp # Ifmail

# Local services


------------

here you see my first firmware for iamm ( 141) 142 is coming in short time :-)
this have now telnet axxess and no playlist bug...

all what you need for iamm flash you see here :-)
with my patched firmware for telnet access ( all in english and german)


http://amd.co.at/anti/hd-player/ilam...CHED_FIRMWARE/

regards

p.s

tomorrow i am back :-)

Hi Antivirus,

Nice work

Like Konsti, I'm not a linux programmer either but I played a little with the firmware, managing to decompress it and get it mounted in a version of Linux running on my XP box allowing me to at least view it.

I also opened up the rompkg & the curacoa executables in a disassembler with the following:
ARM (little endian)
Load Offset: 0x00
File offset: 0x40

With the above settings the text offsets appear to be in the correct positions.
i.e. in the rompkg executable:
000007F4 84 6E 09 00 off_7F4 DCD aFlash_write ; "flash_write"
000007F8 90 6E 09 00 off_7F8 DCD aFlash_update ; "flash_update"
000007FC A0 6E 09 00 off_7FC DCD aIwconfig ; "iwconfig"

I'm not sure if there would be anything useful that could be modified in either of these programs that would be of any use though!

...later,
phew.

here the english how to ...


for fonts i dont need a convert tool. its easy to change it :-)

in usr/curacao/osd.font .....

new link :-)

here you find all http://amd.co.at/anti/hd-player/ilam...OMFS_BIN_TFTP/

or doc file

http://amd.co.at/anti/hd-player/ilam...amm_How_to.doc


next 142 is coming soon next days..

contact in skype --> ( i am "antidark" )


regards

Antivirus,

Given size restrictions of 8meg to hold the OS; would it be possible to use a memory stick inserted into one of the USB sockets that would hold a modified version of the OS?

So that:
When you boot the unit inbuilt OS partly loads

It then tests for an OS on the USB memory stick

If it finds one
...it boots from the memory stick
if it does not find one
...it does a normal boot from the inbuilt OS.

I seem to remember that the guys that altered the Linksys NSLU2 done something similar.

...later,
phew.

Good idea phew but you on a usb stick why not simply have a folder on the root of the internal drive?

boot from usb stick is a funny idea. and simply..

but first i do gftp in ..then samba. then usb boot...

my prio list is long :-)

prew:

repack on 0x6C beginning with "-rom1fs-" :-)



regards

great work antivirus, what kind of speeds can we expect from ftp and samba

you can change password in telnet then with "passwd" :-) if all IN !NOT in 141 patched firmware, running at the moment on my alpha firmware :-)



BusyBox v1.01 (2006.01.26-22:11+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

~ > passwd
Changing password for root
Enter the new password (minimum of 5, maximum of 8 characters)
Please use a combination of upper and lower case letters and numbers.
Enter new password:
Bad password: too simple.

Warning: weak password (continuing).
Re-enter new password:
Password changed.
~ >
~ > help

Built-in commands:
-------------------
. : alias bg break cd chdir command continue eval exec exit export
false fg getopts hash help jobs kill let local pwd read readonly
return set shift times trap true type ulimit umask unalias unset
wait

~ >



regards

why carefull? if iamm stop, i can come every time on it with tftp or serial port :-)


regards

antivirus

is ip tv and ip radio possible with the iaam?

if image on usb stick or on hd then you can let run this :-)


built in sigma 8621L is fast enough


regards

new 142 patched firmware with built in telnet is avaible...

http://amd.co.at/anti/hd-player/ilam...iamm_patch.zip


regards

I had to alter the root password in the 'shadow' file to a known crypted pw to allow me access as root under Telnet.

You can get access if you use 'default' as the login name; it throws up an error about being unable to set directory, but lets you in anyway -and it's probably safer not being root-.

Hi to you all,

I am impressed, Antivirus actually did a great job . But since I am not either actually an expert in Linux nor in Networks, I do understand the basics of what he did (thank you Konsti for re-stating Antivirus hacking tips...)
Just a few questions left (excuse me if I appear to be a neophyt...):
What are the actual benefits of replacing NDAS by TFTP ? (Higher transmit rate ? TFTP is described as a very light and simple protocol on Wikipedia therefore perhaps much easier to implement as a software solution).
One other key point for me, what is the impact of the patch on the Wireless functionality ?
and finally (same concern as others might have ...) Is the GUI modified somehow and is it still possible to roll back to a previous firmware just in case

>replacing NDAS by TFTP ?
TFTP is not a replacement for NDAS, it is just a means of transferring a newer rom image over to and installing onto the NTD36HD.

Currently the only modifications made on the FW by Antivirus are those he listed in one of his .docs:


cat /dev/null > /tmp/config/playlists/shortcut/JUKEBOX.list
cat /dev/null > /tmp/config/playlists/shortcut/MYVIDEO.list

/usr/sbin/telnetd &


Solving a problem with crashes -seemingly because one of these .list files grew large enough to disrupt the normal operation of the unit-, and opening up the possibility of using telnet to get 'into' the unit...this is of little use to the normal user however.

More interesting to the user will be the implementation of Samba and Ftp which Antivirus is trying to get running on the unit. Wheter the actual file transfer speed improves by using either of those over NDAS remains to be seen.

samba run now readable...

iamm --> PC

now i work for write in fat32/ntfs and ext3 ..

ftp too (yesterday night )

NcFTP 3.2.0 (Aug 05, 2006) by Mike Gleason (http://www.NcFTP.com/contact/)

[21:13:54] Connecting to 192.168.1.140...

[21:13:57] Welcome to Stupid-FTPd server.



here some tools :-)

http://amd.co.at/anti/hd-player/uClinux-2.4-sigma.tar

regards

Thank you Phew for this quick explanation. Basically just a way to download new unofficial (but improved) firmwares by bypassing the normal novatron update scheme.

I managed to get 'pure-ftpd' working on the NTD36HD, allowing me to ftp to/from the unit but cannot get my ext3 drive to be recognized on the NTD36HD ...maybe Antivirus has had better luck.


Built a version of the FW that autoloads telnetd and installed.

Formatted a 120Gig drive to ext3 in linux and replaced the drive I have installed.

Made the folders MOVIE, PHOTO and MUSIC on the ext3 drive.

Booted the NTD36HD with new FW, new 120g HDD and a memory stick with some test files on it.
...There was no HDD1 showing on the GUI

telnet'd into the unit and checked what had been mounted

cubee:~# mount
/dev/root on / type romfs (ro)
none on /dev type devfs (rw)
proc on /proc type proc (rw)
ramfs on /tmp type ramfs (rw)
usbfs on /proc/bus/usb type usbfs (rw)
/dev/scsi/host0/bus0/target0/lun0/part1 on /tmp/usb/disc0/lun0/part1 type vfat (ro,nosuid)

...the /dev/scsi.... is my memory stick.
so, the new 120g ext3 drive did not load automatically.
I forced it to mount to the same location as the ntfs drive loaded with


/dev/ide/host0/bus0/target0/lun0/part1 on /tmp/ide/part1 type ntfs (ro,noatime,n
odiratime,nosuid,uid=0,gid=0,fmask=0177,dmask=077,nls=utf8,e rrors=continue,mft_z
one_multiplier=1)


I mounted with:
cubee:~# mount /dev/ide/host0/bus0/target0/lun0/part1 /tmp/ide/part1
...this mounted OK as an ext3 drive (rw) and I could browse the folders in /tmp/ide/part1

Unfortunatly the GUI still could not see the HDD1, I assume that the 'caracoa' executable tries to load an 'ntfs' drive at startup and if it does not find one flags it as not being there? (maybe needs a slight hex edit to the executable here)

ANYWAY:
The purpose was to test pure-ftpd (I just assumed that the ext3 drive would work as a replacement so we can deal with that later).

From my memory-stick I copied a version of 'pure-ftpd' (borrowed from the MG 35 thread) into the /tmp/ folder:
cp tmp/usb/disc0/lun0/part1/pure-ftpd /tmp/pure-ftpd

and ran the program from the /tmp/ide/part1 folder

/tmp/pure-ftpd -H -D -M -z &

I could then use a WinXP ftp program to connect as 'anonymous' and see the folders MOVIE, PHOTO and MUSIC on the ext3 drive. Copying to/from these from my desktop (not super-fast but worked)

Anyone with some linux knowledge with any thoughts?

How are you getting on Antivirus?

phew,

your right about flag for the 'ntfs' drive at startup:

"I assume that the 'caracoa' executable tries to load an 'ntfs' drive at startup and if it does not find one flags it as not being there"

I have a irrating bug with my IAAM, where my 500gb drive is not always picked up, and i have to restart the IAAM and ony then is the drive picked up.

Can this irratating BUG be fixed or will i have to live with it?

K