From FON Wiki Beta

Changes and instructions described in this page are meant to be done by developers only. Applying these changes to your La Fonera might irremediably damage it. FON will not be held responsible for their consequences. Read instructions carefully!

This page intends to document advanced usage of La Fonera 2.0

Mark La Fonera 2.0 icon as registered

• launch a SSH session to 192.168.10.1

uci set registered.fonreg.registered=1
uci commit registered

• (refresh) your webbrowser for 192.168.10.1 :-)

FreeWLAN skin for La Fonera 2

wget http://www.fonera.be/extras/freewlan/fonera_20-logo.gif -O /www/images/table/logo.gif
wget http://www.fonera.be/extras/freewlan/register_alert.gif -O /www/images/register_alert.gif
wget http://www.fonera.be/extras/freewlan/register_ok.gif -O /www/images/register_ok.gif

Firewall

How to enable ssh access on the WAN interface

Run the following:

iptables -A input_daemon -p tcp --dport 22 -j zone_wan_ACCEPT 

If you want to make it more permanent edit

• /etc/fonstated/FWALLDaemon (beta2) -> Will become a Queueing daemon
• or /etc/firewall.daemon (beta)
• to reload the firewall with the new settings:

/etc/init.d/firewall restart

Remark : you can do thesame for port 80 (Managment Website) Remark2 : it's not necessary to do this for the following ports 139/445/tcp for fileshares, 21/20/tcp for FTP ... hence when enabling these "services" you are asked if they should be opened up from the WAN as well... a "netstat -an | grep "LISTEN" will tell you the other interesting ports that you might want to open up towards the WAN

allow access from WAN to LAN/Myplace

• edit /etc/config/firewall
• find : config zone option name wan option input REJECT option output ACCEPT option forward REJECT option masq 1
• replace Option input REJECT should be replaced with option input ACCEPT
• Add make forward ACCEPT and add option masq 1

firewall.user

• By default there is only a /etc/firewall.fon which is active/restarted very often when the FONhotspot is restarted
• You can create a firewall.user which is used without this issues:

uci add firewall include; uci set firewall.@include[-1].path=/etc/firewall.user; uci commit firewall

• then just create /etc/firewall.user with iptables rules

Forward port 80 to another server

echo "iptables -t nat -I PREROUTING -p tcp -i eth0.1 --dport 80 -j DNAT --to serverip:80" >> /etc/firewall.user
echo "iptables -I FORWARD -p tcp -i eth0.1 -d serverip --dport 80 -j ACCEPT" >> /etc/firewall.user

QOS

• if you are doing VOIP you might add your SIP & RTP ports to the "express" section (currently reserved for 5190 port)
• The hotspot speed section can be maintained centrally in www.fon.com -> MyFon
• The WAN section needs to be configured using SSH access at the moment. If you are connected at a 15mbit speed (most cable docsis 2.0 users) you will have to augment the 6144 limitation to get the full speed again of your isp
• config can be found here  : /etc/config/qos

config 'interface' 'hotspot'
option 'classgroup' 'Default'
option 'enabled' '0'
option 'overhead' '1'
option 'upload' '512'
option 'download' '128'

config 'interface' 'wan'
option 'classgroup' 'Default'
option 'enabled' '0'
option 'overhead' '1'
option 'upload' '6144'
option 'download' '1024'

• Command line configuration :

uci set qos.wan.upload=192            # Upload speed in KB
uci set qos.wan.download=2048         # Download speed in KB
uci commit qos

• Start QoS and enable on next boot

/etc/init.d/qos start
/etc/init.d/qos enable

SAMBA

• GUI
  • enable samba
  • enter a password for the user "fonero"
• using linux :

smbclient //192.168.10.1/usb-disc/ -U fonero

• using windows :

ssh to 192.168.10.1
vi /etc/config/samba

add (normally it's added automatically if you connect an usb stick)
config 'sambashare' 'sambashare1'
       option 'name' 'myshare'
       option 'path' '/tmp'
       option 'read_only' 'no'
       option 'guest_ok' 'yes'
       option 'create_mask' '0700'
       option 'dir_mask' '0700'
by default "fonero" has no password; you can enter it by GUI or ....
smbpasswd fonero fonero

let's see that the changes are found&executed?
 cd /etc/init.d
./samba stop
./samba start

now let's try to connect from Windows XP SP2:
net use * //192.168.10.1/myshare /user:fonero
give password : fonero
Y: has been shared successfully
dir y:
...... nice we see the contents of the /tmp of the La Fonera 2
beware that you can only create files/folders in /tmp/mounts ; the rest is ro
I believe the above can be done with "UCI" commands as well

FTP

• I can't seem to be able to connect

Did you surf to 192.168.10.1 , check services -> ftp, enable the FTP service?
Don't forget to give him a password!

• I can only change the password; which user should I use? root nor admin works?

Try the user "fonero"

• Only 1 user can connect?

Yes. SSH to your La Fonera 2.0. vi /etc/config/pureftpd
Edit "maxclientsperip" and "maxclientsnumber" and augment the numer 1 into something higher to your likings

• I'm connected but when i do a "ls" i notice there is nothing there

You probably didn't connect any usb harddisk or memory stick to the fonera2. It's showing the contents of /tmp/mounts
This folder is empty if you didn't add a memory stick

• I try to upload a file to it but I get 553 Disk Full - please upload later

Yes you are not allowed to upload something directly in /tmp/mounts

• I try to create a subfolder but I get a 550 Quota exceeded: %s won't be saved

Create a test folder using a SSH session. Beware that /tmp/mounts is deleted after a powerrecycle
ssh towards 192.168.10.1 
cd /tmp/mounts
mkdir test
ftp towards 192.168.10.1 and connect with user fonero
ls
you should see a folder test
cd test
put test.txt
this should succeed now

opkg

By default there is no ipkg/opkg installed to install .ipk packages

• A solution is:

cd /tmp
wget http:// ...madplay_0.15.2b-1_mips.ipk
tar xzvf madplay_0.15.2b-1_mips.ipk
tar xzvf data.tar.gz -C /

• Another solution is to install OPKG

ssh to your fonera 2
wget -q http://www.fonera.be/rep/FON2202/data.tar.gz -O /tmp/data.tar.gz
cd /
tar xzvf /tmp/data.tar.gz
echo src fon2202 http://www.fonera.be/rep/FON2202 >>/etc/opkg.conf
opkg update
expected errors : 
 some GPG error on fon2202
 some opkg_Download error on openwrt
 

• Another installation method is :

cd /;wget -O- http://downloads.openwrt.org/snapshots/atheros/packages/opkg_4564-1_mips.ipk|tar -xzvf- |tar -xzvf ./data.tar.gz;rm control.tar.gz data.tar.gz debian-binary

• Not installing in F2 memory but on an usb memory stick, harddisk or sd card?

Make sure the destination has EXT2/EXT3 filesystem in place. We need support for linux Symbolic Links which is not possible on eg NTFS/FAT filesystems.

echo dest usb /tmp/mounts/stick >> /etc/opkg.config

• When trying to install to a non-root destination:

opkg -dest usb install kmod-fs-cifs

• Let's try to install "cifs" support

opkg install kmod-fs-cifs

• Let's try to mount a Cifs share on the remote pc 192.168.10.2 with sharename "terrabyte-share"

mkdir /mnt/cifs
mount -t cifs //192.168.10.2/terrabyte-share /mnt/cifs -o user=fonero,password=fonero
ls /mnt/cifs

Fonstated

/etc/init.d

• /etc/init.d/ is gone mostly in the new firmware
• we use /etc/fonstated/ now
• much easier and nicer
• faster, smaller
• and you can write the handlers in lua
• reference : lua is used in world of warcraft and many other games

/etc/crontab/root

• fonstated basically takes events as an input
• to queue and event do fs -l <EVENT>
• fonstated processes 1 event at a time
• event map directly to /etc/fonstated/
• currently use a shell script, but it will support lua in the final version
• next, look in /usr/lib/fonstate/*.so these are all plugins running inside or forked by fonstated (hence several processes)
• a fonstated plugin is written in c and can
  • use the internal timer apis
  • queue evente
  • register events
  • the watchdog is controlled via "fs -l" without the need for a script in /etc/fonstated
• there are 2 special events Online and Offline
• these are triggered by fonstate_online.so
• so the idea is that do write a plugin, you need
  • a uci file (the confgi files used by openwrt, really simple)
  • a uvl file (optional) (validation scheme for uci file)
  • luci pages - to configure your daemon, app, ...
  • fonstated script, that handles how, when, where, ... the plugin does something or not

that was the very quick howto :) more to come when i am ready (c) Blogic

HELP my DISK IS FULL

• Please verify with : df -k
• You can use du -h / to check which folders are taking so much ram
• please perform "rm -R /jffs/*" which should help without the need to reflash

Transmitting Power

ath0 = Public ath1 = Private

• Display current transmitting power:

iwconfig ath0 | grep Tx-Power

• List available transmit-powers:

iwlist ath0 tx

• Change the transmitting power for example to 10dbm (10mw):

iwconfig ath0 txpower 10
iwconfig ath1 txpower 10

Usb stick operations

Formatting usb stick to ext2 to install software on

Help my usb stick is corrupt

• dmesg reports that an e2fsck is required due to possible corruption of my disc

root@Fonera:~# dmesg
EXT3-fs: Unrecognized mount option "uid=1000" or missing value
EXT2-fs warning: mounting unchecked fs, running e2fsck is recommended

• Execute :

cd /tmp
wget http://ipkg.nslu2-linux.org/feeds/openwrt/fon-ng/mips/e2fsprogs_1.40.11-1_mips.ipk
wget http://ipkg.nslu2-linux.org/feeds/openwrt/fon-ng/mips/libblkid_1.40.11-1_mips.ipk
wget http://ipkg.nslu2-linux.org/feeds/openwrt/fon-ng/mips/libuuid_1.40.11-1_mips.ipk
opkg install libuuid_1.40.11-1_mips.ipk  libblkid_1.40.11-1_mips.ipk e2fsprogs_1.40.11-1_mips.ipk

• Output (it can take upto 1,5 minutes to install)

Installing libuuid (1.40.11-1) to root...
Installing libblkid (1.40.11-1) to root...
Installing e2fsprogs (1.40.11-1) to root...
Configuring e2fsprogs 
Configuring libblkid
Configuring libuuid

• You can now perform  :

root@Fonera:~# e2fsck /dev/sda1
e2fsck 1.40.11 (17-June-2008)
2GB was not cleanly unmounted, check forced.
Pass 1: Checking inodes, blocks, and sizes
Inode 23529, i_size is 1376256, should be 1384448.  Fix<y>? yes 
Inode 23529, i_blocks is 2696, should be 2712.  Fix<y>? yes 
Inode 54883, i_blocks is 1432832, should be 1432872.  Fix<y>? yes
Pass 2: Checking directory structure
Entry 'amule.conf' in /amule/.aMule (109764) has deleted/unused inode 109785.  Clear<y>? yes
Pass 3: Checking directory connectivity
Pass 4: Checking reference counts
Pass 5: Checking group summary information
Block bitmap differences:  -(276780--276787) -466954 Fix<y>? yes
Free blocks count wrong for group #3 (26568, counted=26578). Fix<y>? yes
Free blocks count wrong for group #8 (3, counted=9). Fix<y>? yes
Free blocks count wrong for group #14 (530, counted=531). Fix<y>? yes
Free blocks count wrong (123940, counted=123957). Fix<y>? yes
Inode bitmap differences:  -109785 Fix<y>? yes
Free inodes count wrong for group #14 (7619, counted=7620). Fix<y>? yes
Free inodes count wrong (124563, counted=124564). Fix<y>? yes
2GB: ***** FILE SYSTEM WAS MODIFIED *****
2GB: 876/125440 files (0.7% non-contiguous), 375980/499937 blocks

• Issue :

-> cd /tmp/mounts/Disc-A1 : -ash: cd: can't cd to Disc-A1
-> mount /dev/sda1 : mount: mounting /dev/sda1 on /home failed: Device or resource busy
-> umount : identical

enable / disable developer mode

the difference between the normal firmware and the developer firmware is a simple setting.

• enable:

to enable the developer mode you may need a serial cable.

uci set registered.fonreg.dev=1
uci commit registered

• disable:

uci set registered.fonreg.dev=0
uci commit registered

Projects

• Use your UMTS/3G stick of your operator to give Free FON Wifi where no broadband connection exists.
• Turn your Fonera 2 into a security webcam using a cheap usb webcam
• Turn your Fonera 2 into a Streaming Internet Radio using a cheap usb audiocard stick available on ebay

<math>Insert formula here</math>

• Adding F2-USB internal USB to your Fonera