Are there som funktion to make back/restore of my config settings in
you'r new custom firmware ?
I need it.
Asus firmware don't have the option on the webinterface.
Maybe you have som tip via telnet to do that.
:)
/fredibau
Printable View
Are there som funktion to make back/restore of my config settings in
you'r new custom firmware ?
I need it.
Asus firmware don't have the option on the webinterface.
Maybe you have som tip via telnet to do that.
:)
/fredibau
Hi Kfurge.
How can we customize this file. Several packages need this (imap, saned, ...)?
Thanks in advance.
Rgds,
jjgg
Hi,Quote:
Originally Posted by fredibau
As Asus did not provide such function, I don't think that KFurge will be able to do that. I know however that the other firmwares as open wrt (kamikaze etc) do have such functionality.
Meanwhile, looking around in /tmp with telnet, I noticed a file 'settings' that I copied to my home directory, and it seems to contain every setting I can see in the web interface. However, this file disappears also irregularly.
I don't think it will serve as a restore possibility, but you can find your settings in it. The /tmp directory contains many more files with settings. For instance, nas.lan.conf has your WPA-password.
regards,
Marc
Use "mount -o bind" to mount another /etc over the top of the existing one. I put making /etc/services a symlink on my todo list for a future release.Quote:
Originally Posted by jjgg
- K.C.
\
Glad CUPS is working for you. I have it working on my router as well. Not sure why you can't connect to it, though. I have no problems connecting to mine (192.168.1.1:631) from the LAN.Quote:
Originally Posted by eznet
- K.C.
I use NFS to connect my Linux box to the router all the time. What's not working for you?Quote:
Originally Posted by mumsoft
- K.C.
No problem.Quote:
Originally Posted by emailpr
- K.C.
NFS works now. please see http://wl500g.info/showthread.php?t=13326Quote:
Originally Posted by kfurge
regards,
Marc
Thank you Kfurge for the work put into your version and the great tutorials on installing it. As I am an experience idiot with Linux I have followed your tutorials and all is good.
One problem though is that i cannot write things to the internal drive when using windows explorer and the network devices windows finds. It says I do not have the right.
I worked out the "cp" command and attached an USB drive to the router and copied files that way, without needing sudo.
So why can I not copy them the old (new) way from a computer and windows networks.
The directory permissions are probably not right. If you are not too concerned with security, go right above the directory that's being shared and type:Quote:
Originally Posted by darbid
chmod -R 777 ./YOUR_DIRECTORY_NAME
This will set wide-open permissions on the primary directory, files, and subdirectories and set all files are readable and writable by anyone.
- K.C.
Yes my linix command crash course has led me to the chmod command. And I have done exactly what you have said only worse: I did it all the way along.
chmod -R ugo=rwx /shares
but still no luck.
OOPPPPS you need to reboot and then the above worked. Ok if anyone would like to give me a little hint about which directory I need to give permissions to and which I can reverse to what it was like before?
How to do that (looking around in /tmp with telnet)Quote:
Originally Posted by mumsoft
i can log in to telnet but nothing else.
Please guide me.
Hmm, this is not the right place for such things I'm afraid. Maybe you could ask DARBID what he did to do the linux crash course?Quote:
Originally Posted by fredibau
Try Google with Linux newbie or Linux commands or so.
I found this for instance:
http://linux-newbie.sunsite.dk/html/lnag.html#6.Linux%20Shortcuts%20and%20Commands|out line
You really can benefit from some basic understanding.
Start with:
ls (= dir)
ls -all
man ls
cd
pwd
Regards,
Marc
Thanks this is what I need to start upQuote:
Originally Posted by mumsoft
I thing it's look like UNIX.
I have work with UNIX many years back
So maybe this I my luck
Hello. My provider gives two protocols type: PPPoE(Internet) and Static IP (Local Resource). What should i do to use both of them together?
Thanks
Brrrr. Ok, the hint. /shares/MYVOLUME1/MYSHARE1/<your choice>Quote:
Originally Posted by darbid
Because you took /shares you have changed the rights for all there is. Apart from starting all over I don't think it's easy to revert your changes.
But maybe someone pops up with a script to do so.
Regards
Marc
Dear KFurge,
Can you tell why the Asus takes so long to reach the point where the ready light blinks? It takes a mere 3 minutes. Is it busy to check the filesystem, or what?
Also, is it possible (in the next relaese) to get rid of the first telnet deamon? It is unsafe, and it confuses many people when 'you' start the safer version. This counts more because it takes so long to boot.
And why is the ready light on, long before it executes my rc.local? What does ready mean here?
Ok, questions you might not know answers for, but I'll appreciate it if you have some. :)
Another question. When I log in as myself (admin), I have KCSHELL as variable, because I made a .profile in /opt/home/marc. I also did this for root, that has /opt/home/root as home dir. Now with sudo bash -l I have KCSHELL as root. But, you guess, after rebooting the home-dir of root is changed to /, no .profile is executed, and hence I don't have KCSHELL after sudo bash -l.
I found that /opt/etc/init.kc/fix_passwd.sh is to blame...
Regards
Marc
I don't know why it wont let me login anymore
when i try to login to root using sudo bash -l
i get
Password:
admin is not in the sudoers file. This incident will be reported.
[admin@WL700gE /]$
??? any reason why this could be happing?
I checked my sudoers file and it seems fine
[admin@WL700gE /]$ vi opt/etc/sudoers
# Host alias specification
# User alias specification
# Cmnd alias specification
# Defaults specification
# Runas alias specification
# User privilege specification
root ALL=(ALL) ALL
# Uncomment to allow people in group wheel to run all commands
# %wheel ALL=(ALL) ALL
# Same thing without a password
# %wheel ALL=(ALL) NOPASSWD: ALL
# Samples
# %users ALL=/sbin/mount /cdrom,/sbin/umount /cdrom
# %users localhost=/sbin/shutdown -h now
_______
I have no clue how one day i can't just login anymore? But if i login as "root" and type my web interface password everything works fine. login as: root
root@76.206.254.162's password:
[root@WL700gE /]$
___
I just can't switch from admin@WL700gE to root. ? any thoughts on this would be cool.
I have this:Quote:
Originally Posted by Fullback
# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the sudoers man page for the details on how to write a sudoers file.
#
# Host alias specification
# User alias specification
# Cmnd alias specification
# Defaults specification
# prevent environment variables from influencing programs in an
# unexpected or harmful way (CVE-2005-2959, CVE-2005-4158,
# CVE-2006-0151)
Defaults always_set_home
Defaults env_reset
# In the default (unconfigured) configuration, sudo asks for the root password.
# This allows use of an ordinary user account for administration of a freshly
# installed system. When configuring sudo, delete the two
# following lines:
Defaults targetpw # ask for the password of the target user i.e. root
ALL ALL=(ALL) ALL # WARNING! Only use this together with 'Defaults targetpw'!
# Runas alias specification
# User privilege specification
root ALL=(ALL) ALL
# Uncomment to allow people in group wheel to run all commands
# %wheel ALL=(ALL) ALL
# Same thing without a password
# %wheel ALL=(ALL) NOPASSWD: ALL
# Samples
# %users ALL=/sbin/mount /cdrom,/sbin/umount /cdrom
# %users localhost=/sbin/shutdown -h now
Not an expert here. But I think you miss the ALL-part (and some defaults).
If you log in as admin (you'd better change this, make it you first name or so, and CHANGE the default password), admin is not listed in the sudoers file, so it can not do this.
Maybe I changed my sudoers file way back:
ls -l /opt/etc/sudoers
-r--r----- 1 root root 1180 Mar 4 2007 /opt/etc/sudoers
Thinking this over, it might be a good idea to replace ALL ALL=(ALL) ALL with something like marc ALL=(ALL) ALL. But I must stress that I'm not an expert. I always use su :eek: in Suse as a (nasty) habit.
Regards
Marc
I have a problem with installing Twonkymediaserver.
I have a Wl700ge Met Kfurge 1.0.7.8 Firmware.
Every time i want to start twonky i get the messages "premission denied"
Also it is not possible for me to delete a directory/file using browse shares.
What am i doing wrong?
How do i get full controle over the Wl700ge ?
Here is a exaple of my telnet session.
[admin@WL700gE /]$ ls
apps foreign_shares proc usr
bin lib sbin var
dev mnt shares www
etc opt tmp
[admin@WL700gE /]$
[admin@WL700gE /]$ cd shares
[admin@WL700gE shares]$
[admin@WL700gE shares]$ cd MYVOLUME1
[admin@WL700gE MYVOLUME1]$
[admin@WL700gE MYVOLUME1]$ cd MYSHARE1
[admin@WL700gE MYSHARE1]$
[admin@WL700gE MYSHARE1]$ cd Twonkyvision
[admin@WL700gE Twonkyvision]$
[admin@WL700gE Twonkyvision]$ ./twonkymediaserver
-bash: ./twonkymediaserver: Permission denied
[admin@WL700gE Twonkyvision]$
[admin@WL700gE Twonkyvision]$ chmod 755 twonkymediaserver
chmod: twonkymediaserver: Operation not permitted
[admin@WL700gE Twonkyvision]$
[admin@WL700gE Twonkyvision]$
greetings.
Rick
First, admin is not root. You should login as root, or sudo bash -l to get root-rightsQuote:
Originally Posted by Rick
Second, why did you put twonky in the standard share directory? I have installed mine in /opt/share/TwonkyMedia, so that it is not reachable with smb. That's more save. If I recall, I just unzipped twonkymedia-mss-4.4.4.zip, and in my rc.local I have:
Regard,Code:#Start Twonkymedia, needs original library_path
/opt/share/TwonkyMedia/twonkymedia &
export PATH=/opt/bin:/opt/sbin:/bin:/sbin:/usr/bin:/usr/sbin
export LD_LIBRARY_PATH=/opt/lib:/apps/lib:/apps/usr/gift-nasoc/lib
export KCSHELL=/opt/bin/bash
Marc
I managed to get Twonky working.
but now i want to delete the Directory.
where is placed Twonky, that is
shares/MYVOLUME1/MYSHARE1/Twonkyvision
But i dont have premission to do so by "Browse share" or bij normal acces trough windows. it says Error: Permission denied.
How can i Delete directorys, filles in shares/MYVOLUME1/MYSHARE1/ ??
Greetings Rick
If you mean that you try to do this via SMB sharing, then it has to deal with SMB security of the Asus, of which I don't know anything.:pQuote:
Originally Posted by Rick
Anyway, with SMB I can delete stuff in the standard directories (music, photo etc), but not in others.:confused:
But if you telnet to your asus, login as root or become root (sudo bash -l), it will make all things possible. Remove withI assume you have KFurge custom 1.0.7.8 firmware running.:DCode:rm -R /shares/MYVOLUME1/MYSHARE1/Twonkyvision
Regards,
Marc
I manged to delete the directory the way u said...
by using "rm -R" command.
thnx.
and on the asus its for mee also possible to delete filles in the photos, music, video dir.... but when i am in MYSHARE1 not possible only with, telnet. ?
Quote:
Originally Posted by Fullback
Fullback,
All you need to do is add the information in red to your sudoers file and it will work. login as root and then change the file.
Rgs
I seem to be having a recurring problem with the passwd file on the new firmware.
I cannot seem to get the opt/home/username to work with pbsa access?
My question is it possible to have the system running on password based access and to be able to use dropbear for logging in through putty?
If i use pbsa the system overwrites the passwd file and I cannot log in.
I have noted from previous threads that there is no __pdc file either which looks odd.
I have been able to set up system as either psba or usba but I wonder is it possible to have a bit of both??
Hi, I figured it out, seems to be with the firmware, had it downloaded for a while reflashed a new one and all is well
I made a mistake last night, and now i am not able to loging using telnet
(none) login: admin
Password:
Login incorrect
(none) login: admin
Password:
Login incorrect
(none) login:
this is what happens when i use putty.....
hoe do i recover from this problem , i tried to install the fimware again , with no luck......
also tried to flash to 2.0.0.7 firmware and back again, but no luck either..
is there anyway to login and maybe change/delete the password list/file ?
Hi, did you read this post:Quote:
Originally Posted by Gizmo1007
http://wl500g.info/showpost.php?p=88249&postcount=142
so you might have to edit /opt/etc/init.kc/fix_passwd.sh
Marc
What mistake?Quote:
Originally Posted by Rick
The (none) part should be the name of your asus, default WL700ge or so. But it is only set after a long while after start (> 3mins)
If I were you, I should try to switch from PBSA to UBSA or vice versa, maybe that helps.
Regard,
Marc
Thx for replying so quickly but unfortunatly it did not help....................
I have read some where that u can press the copy button to select a diffrent start up script but i did not get lucky to do this.......
But when i instal firmware 2.0.0.7 i am able to telnet to the router.
but when i go back to kfurge 1.0.7.8 i still have the same problem.
any other good ideas ?
Groeten :confused::mad::eek::)
Ok other good ideas?Quote:
Originally Posted by Rick
With Kfurge 1.0.7.8 (the latest) you have to wait for about 3 minutes after booting the Asus before the ready lights starts to blink. It will shine all the time before that moment. When it blinks, press the copy button and hold it until the ready light stops blinking.
Then the default rc.local will be executed, your /shares/MYVOLUME1/opt will not be placed over /opt, and well, this should lead to a state that telnet is possible.
Second idea: if you can telnet with firmware 2.0.0.7 (this is an extremely dangerous firmware, and if I were you, I would remove the WAN-cable before installing 2.0.0.7), you should be able to do something about /shares/MYVOLUME1/opt/etc/rc.local. Maybe rename it or so (mv rc.local rc.vocal)
Good luck
en de groeten terug
Marc :)
i am conntected to the router...
i want to go to shares/MYVOLUME1/opt/etc/rc.local
but there is no data in this directory....... is that strange ?
No, that is, shares/MYVOLUME1/opt/etc/rc.local is no directory, but a file :o. To get there, type:Quote:
Originally Posted by Rick
Cat is similar to type in DOSCode:cd /shares/MYVOLUME1/opt/etc
cat rc.local
thenor something you like better to rename this stuff :rolleyes:.Code:mv rc.local rc.vocal
Good luck,
Marc
Yesterday i installed WinSCP, made a new connection withe the "SCP" protocol and was able to move, copy filles much easier...
so now i have twonky in the opt/share/twonkymedia directory
also found out that when a failure occured, for example i screwd up my rc.local and i wanted to login using putty i could not loging any more under the user admin.
(none) login: admin
Password:
Login incorrect
but with the user root i was able to loging in and changed back the rc.local
to original
(none) login: root
now the only thing left to do is to start twonky, automatic.
i have read some threads and changed rc.local
but with no luck.
when is start twonky manually.
i get this :
WL700gE login: root
Password:
[root@WL700gE /]$ cd opt/share/twonkymedia
[root@WL700gE twonkymedia]$
[root@WL700gE twonkymedia]$ ./twonkymedia
./twonkymedia: /opt/lib/libpthread.so.0: no version information available (required by ./twonkymedia)
Segmentation fault
[root@WL700gE twonkymedia]$
[root@WL700gE twonkymedia]$
but now when i first type in this line -> export LD_LIBRARY_PATH=/lib:/opt/lib
i am able to start the server.
with "ps"commando i can see what programmas are running and twonky is one of them.
[root@WL700gE twonkymedia]$ export LD_LIBRARY_PATH=/lib:/opt/lib
[root@WL700gE twonkymedia]$
[root@WL700gE twonkymedia]$ ./twonkymedia
[root@WL700gE twonkymedia]$
[root@WL700gE twonkymedia]$ TwonkyMedia Version 4.4.4
ps
PID Uid VSZ Stat Command
1 root 9116 S init
2 root SW< [keventd]
3 root SW [events/0]
4 root SWN [ksoftirqd_CPU0]
5 root SW [kswapd]
6 root SW [bdflush]
7 root SW [kupdated]
8 root SW [mtdblockd]
9 root SW [khubd]
14 root SW< [mdrecoveryd]
74 root SW< [ksed]
75 root SW [ksechanged]
77 root SW [gpio_out_pulse]
78 root SW [button_notify_u]
106 root SW< [raid1d]
111 root SW< [raid1d]
114 root SW [kreiserfsd]
173 root 3600 S syslogd -R 255.255.255.255
175 root 3552 S klogd
177 root 11020 S httpd 80 y
179 root 11020 S httpd 8080 share_browsing
185 root 4880 S upnp -D -L br0 -W eth0
195 root 1880 S udhcpd /tmp/udhcpd_lan.conf
199 root 2188 S dnsmasq -i br0 -r /tmp/resolv.conf
209 root 8520 S /usr/local/samba/sbin/smbd
219 root 1856 S udhcpc -i eth0 -p /var/run/udhcpc.pid -s /tmp/udhcpc
224 root 6792 S /usr/local/samba/sbin/nmbd
228 root 5072 S vsftpd /etc/vsftpd.conf
244 root 8520 S /usr/local/samba/sbin/smbd
259 root 5824 S waveservermain
261 root 5824 S rcamdmain
262 root 4808 S infosvr br0
263 root 5832 S watchdog
275 root 5824 S usbcopymain
490 root 3172 S thttpd -d /shares/MYVOLUME1/MYSHARE1/web -c ** -p 808
492 root 6748 S dms /shares/DMSRoot WL700gE 00:1B:FC:22:43:FA
500 root 6748 S dms /shares/DMSRoot WL700gE 00:1B:FC:22:43:FA
504 root 6748 S dms /shares/DMSRoot WL700gE 00:1B:FC:22:43:FA
506 root 6748 S dms /shares/DMSRoot WL700gE 00:1B:FC:22:43:FA
515 root 3468 S ./dmathined /shares/MYVOLUME1/MYSHARE1 2
518 root 3076 S mt-daapd -c /tmp/mt-daapd.conf -s WL700gE
519 root 8044 S mt-daapd -c /tmp/mt-daapd.conf -s WL700gE
521 root 8044 S mt-daapd -c /tmp/mt-daapd.conf -s WL700gE
522 root 8044 S mt-daapd -c /tmp/mt-daapd.conf -s WL700gE
525 root 5732 S giftd --home-dir=/shares/MYVOLUME1/MYSHARE1/Download
534 root 8044 S mt-daapd -c /tmp/mt-daapd.conf -s WL700gE
543 guest 9128 S < /usr/local/samba/sbin/smbd
575 root 2164 S utelnetd -d -i br0
582 root 1364 S /opt/sbin/dropbear
612 root 1444 S /opt/sbin/dropbear
613 root 2024 S -bash
625 root 2132 S -bash
628 root 1876 S ./twonkymedia
629 root 23472 S ./twonkymediaserver
630 root 23472 S ./twonkymediaserver
631 root 23472 S ./twonkymediaserver
632 root 23472 S ./twonkymediaserver
633 root 23472 S ./twonkymediaserver
634 root 23472 S ./twonkymediaserver
635 root 23472 S ./twonkymediaserver
636 root 23472 S ./twonkymediaserver
637 root 23472 S ./twonkymediaserver
638 root 23472 S ./twonkymediaserver
640 root 23472 R ./twonkymediaserver
648 root 23472 S ./twonkymediaserver
649 root 1792 R ps
[root@WL700gE twonkymedia]$
[root@WL700gE twonkymedia]$
so how do i modify te rc.local the correct way i tried, the code what was posted but with no luck.....
Gegroet Rick. :):):)
Hi Rick,
To start Twonky automatically, you must start it before changing libraries in rc.local. So here is the first part of my rc.local
This works for me, you must adjust the directory for Twonky to your setup, Linux is case sensitive. :cool:Code:#!/opt/bin/bash
#############
# Get nvram variables
#############
pool=`nvram get apps_pool`
share=`nvram get apps_share`
kc_spin_down_hdd=`nvram get kc_spin_down_hdd`
#############
# Misc defines
#############
internal_hdd=/dev/ide/host2/bus0/target0/lun0/disc
#############
# These items only run once at power up
#############
if [ ! -f /tmp/rc.local.done ]; then
#Start Twonkymedia, werkt met originele library_path
/opt/share/TwonkyMedia/twonkymedia &
export PATH=/opt/bin:/opt/sbin:/bin:/sbin:/usr/bin:/usr/sbin
export LD_LIBRARY_PATH=/opt/lib:/apps/lib:/apps/usr/gift-nasoc/lib
export KCSHELL=/opt/bin/bash
Good luck,
Marc
oke thx..
i`ll give this a try but for now i will leave it as its is am happy the router is finally working correct , with twonky.
so the next challenge i am facing is installing SABnzb.
Hope everything goes as told on :
http://wl700g.homelinux.net/portal/content/view/44/30/
Greetings. Rick
I have set my router to WAN Acces.
but to day i saw in my log file :
Apr 10 06:02:05 dropbear[1172]: exit before auth: Disconnect received
Apr 10 06:02:06 dropbear[1173]: login attempt for nonexistent user from 194.169.227.233:41438
Apr 10 06:02:07 dropbear[1173]: exit before auth: Disconnect received
Apr 10 06:02:08 dropbear[1174]: login attempt for nonexistent user from 194.169.227.233:41649
etc. etc etc.
does this means some is trying to login in to my router, at random port numbers ????
because there are several attemps with diffrent port numbers.
greetings Rick
This is what i get. Can someone please tell me what it means?
Apr 13 06:34:20 dropbear[9718]: Child connection from 202.100.82.230:57558
Apr 13 06:34:30 dropbear[9718]: exit before auth: Failed to get remote version
Apr 13 06:40:59 dropbear[9731]: Child connection from 202.100.82.230:60421
Apr 13 06:41:02 dropbear[9732]: Child connection from 202.100.82.230:60514
Apr 13 06:41:05 dropbear[9733]: Child connection from 202.100.82.230:60663
Apr 13 06:41:05 dropbear[9731]: bad password attempt for 'root' from 202.100.82.230:60421
Apr 13 06:41:07 dropbear[9731]: exit before auth (user 'root', 1 fails): Disconnect received
Apr 13 06:41:07 dropbear[9734]: Child connection from 202.100.82.230:60803
Apr 13 06:41:08 dropbear[9735]: Child connection from 202.100.82.230:60837
Apr 13 06:41:11 dropbear[9738]: Child connection from 202.100.82.230:32840
Apr 13 06:41:12 dropbear[9732]: exit before auth: Exited normally
Apr 13 06:41:13 dropbear[9735]: bad password attempt for 'root' from 202.100.82.230:60837
Apr 13 06:41:13 dropbear[9735]: exit before auth (user 'root', 1 fails): Disconnect received
Apr 13 06:41:14 dropbear[9739]: Child connection from 202.100.82.230:33101
Apr 13 06:41:15 dropbear[9734]: bad password attempt for 'root' from 202.100.82.230:60803
Apr 13 06:41:16 dropbear[9733]: exit before auth: Failed to get remote version
Apr 13 06:41:16 dropbear[9734]: exit before auth (user 'root', 1 fails): Disconnect received
Apr 13 06:41:17 dropbear[9740]: Child connection from 202.100.82.230:33370
Apr 13 06:41:17 dropbear[9741]: Child connection from 202.100.82.230:33402
Apr 13 06:41:18 dropbear[9742]: Child connection from 202.100.82.230:33093
Apr 13 06:41:19 dropbear[9739]: bad password attempt for 'root' from 202.100.82.230:33101
Apr 13 06:41:20 dropbear[9739]: exit before auth (user 'root', 1 fails): Disconnect received
Apr 13 06:41:20 dropbear[9743]: Child connection from 202.100.82.230:33708
Apr 13 06:41:22 dropbear[9738]: exit before auth: Failed to get remote version
Apr 13 06:41:22 dropbear[9741]: login attempt for nonexistent user from 202.100.82.230:33402
Apr 13 06:41:23 dropbear[9741]: exit before auth: Disconnect received
Apr 13 06:41:23 dropbear[9744]: Child connection from 202.100.82.230:34076
Apr 13 06:41:25 dropbear[9740]: bad password attempt for 'root' from 202.100.82.230:33370
Apr 13 06:41:26 dropbear[9745]: Child connection from 202.100.82.230:34422
Apr 13 06:41:27 dropbear[9740]: exit before auth (user 'root', 1 fails): Exited normally
Apr 13 06:41:28 dropbear[9746]: Child connection from 202.100.82.230:34183
Apr 13 06:41:29 dropbear[9743]: login attempt for nonexistent user from 202.100.82.230:33708
Apr 13 06:41:30 dropbear[9743]: exit before auth: Exited normally
Apr 13 06:41:32 dropbear[9747]: Child connection from 202.100.82.230:35189
Apr 13 06:41:33 dropbear[9746]: login attempt for nonexistent user from 202.100.82.230:34183
Apr 13 06:41:34 dropbear[9744]: exit before auth: Failed to get remote version
Apr 13 06:41:34 dropbear[9746]: exit before auth: Exited normally
Apr 13 06:41:35 dropbear[9748]: Child connection from 202.100.82.230:35582
Apr 13 06:41:37 dropbear[9745]: exit before auth: Failed to get remote version
Apr 13 06:41:39 dropbear[9749]: Child connection from 202.100.82.230:35970
Apr 13 06:41:39 dropbear[9742]: exit before auth: Failed to get remote version
Apr 13 06:41:42 dropbear[9748]: login attempt for nonexistent user from 202.100.82.230:35582
Apr 13 06:41:43 dropbear[9747]: exit before auth: Failed to get remote version
Apr 13 06:41:43 dropbear[9748]: exit before auth: Disconnect received
Apr 13 06:41:44 dropbear[9749]: login attempt for nonexistent user from 202.100.82.230:35970
Apr 13 06:41:44 dropbear[9752]: Child connection from 202.100.82.230:36634
Apr 13 06:41:45 dropbear[9753]: Child connection from 202.100.82.230:36358
Apr 13 06:41:45 dropbear[9749]: exit before auth: Disconnect received
Apr 13 06:41:45 dropbear[9754]: Child connection from 202.100.82.230:36768
Apr 13 06:41:45 dropbear[9755]: Child connection from 202.100.82.230:36888
Apr 13 06:41:48 dropbear[9756]: Child connection from 202.100.82.230:37160
Apr 13 06:41:49 dropbear[9752]: login attempt for nonexistent user from 202.100.82.230:36634
Apr 13 06:41:50 dropbear[9752]: exit before auth: Disconnect received
Apr 13 06:41:51 dropbear[9758]: Child connection from 202.100.82.230:37511
Apr 13 06:41:51 dropbear[9754]: login attempt for nonexistent user from 202.100.82.230:36768
Apr 13 06:41:52 dropbear[9754]: exit before auth: Disconnect received
Apr 13 06:41:53 dropbear[9759]: Child connection from 202.100.82.230:37805
Apr 13 06:41:53 dropbear[9753]: exit before auth: Exited normally
Apr 13 06:41:54 dropbear[9760]: Child connection from 202.100.82.230:37928
Apr 13 06:41:58 dropbear[9759]: login attempt for nonexistent user from 202.100.82.230:37805
Apr 13 06:41:59 dropbear[9759]: exit before auth: Disconnect received
Apr 13 06:42:00 dropbear[9761]: Child connection from 202.100.82.230:38663
Apr 13 06:42:06 dropbear[9755]: exit before auth: Failed to get remote version
Apr 13 06:42:08 dropbear[9756]: exit before auth: Failed to get remote version
Apr 13 06:42:10 dropbear[9762]: Child connection from 202.100.82.230:39878
Apr 13 06:42:10 dropbear[9763]: Child connection from 202.100.82.230:39485
Apr 13 06:42:11 dropbear[9758]: exit before auth: Failed to get remote version
Apr 13 06:42:13 dropbear[9764]: Child connection from 202.100.82.230:40255
Apr 13 06:42:16 dropbear[9760]: exit before auth: Failed to get remote version
Apr 13 06:42:16 dropbear[9762]: login attempt for nonexistent user from 202.100.82.230:39878
Apr 13 06:42:17 dropbear[9762]: exit before auth: Disconnect received
Apr 13 06:42:17 dropbear[9763]: exit before auth: Exited normally
Apr 13 06:42:19 dropbear[9766]: Child connection from 202.100.82.230:41018
Apr 13 06:42:20 dropbear[9767]: Child connection from 202.100.82.230:40915
Apr 13 06:42:21 dropbear[9761]: exit before auth: Failed to get remote version
Apr 13 06:42:22 dropbear[9768]: Child connection from 202.100.82.230:41428
Apr 13 06:42:28 dropbear[9769]: Child connection from 202.100.82.230:41796
Apr 13 06:42:28 dropbear[9767]: exit before auth: Exited normally
Apr 13 06:42:31 dropbear[9770]: Child connection from 202.100.82.230:42568
Apr 13 06:42:32 dropbear[9768]: exit before auth: Failed to get remote version
Apr 13 06:42:33 dropbear[9764]: exit before auth: Failed to get remote version
Apr 13 06:42:34 dropbear[9771]: Child connection from 202.100.82.230:42962
Apr 13 06:42:37 dropbear[9772]: Child connection from 202.100.82.230:43336
Apr 13 06:42:39 dropbear[9769]: exit before auth: Failed to get remote version
Apr 13 06:42:39 dropbear[9771]: login attempt for nonexistent user from 202.100.82.230:42962
Apr 13 06:42:40 dropbear[9771]: exit before auth: Disconnect received
Apr 13 06:42:40 dropbear[9773]: Child connection from 202.100.82.230:43719
Apr 13 06:42:40 dropbear[9774]: Child connection from 202.100.82.230:43798
Apr 13 06:42:41 dropbear[9770]: exit before auth: Exited normally
Apr 13 06:42:43 dropbear[9775]: Child connection from 202.100.82.230:44109
Apr 13 06:42:44 dropbear[9772]: login attempt for nonexistent user from 202.100.82.230:43336
Apr 13 06:42:45 dropbear[9772]: exit before auth: Disconnect received
Apr 13 06:42:46 dropbear[9776]: Child connection from 202.100.82.230:44434
Apr 13 06:42:49 dropbear[9766]: exit before auth: Failed to get remote version
Apr 13 06:42:49 dropbear[9777]: Child connection from 202.100.82.230:44874
Apr 13 06:42:50 dropbear[9773]: exit before auth: Failed to get remote version
Apr 13 06:42:51 dropbear[9774]: exit before auth: Failed to get remote version
Apr 13 06:42:52 dropbear[9778]: Child connection from 202.100.82.230:45255
Apr 13 06:42:54 dropbear[9775]: exit before auth: Failed to get remote version
Apr 13 06:42:56 dropbear[9779]: Child connection from 202.100.82.230:45637
Apr 13 06:42:57 dropbear[9776]: exit before auth: Failed to get remote version
Apr 13 06:42:59 dropbear[9780]: Child connection from 202.100.82.230:45992
Apr 13 06:43:02 dropbear[9781]: Child connection from 202.100.82.230:46380
Apr 13 06:43:04 dropbear[9778]: exit before auth: Exited normally
Apr 13 06:43:05 dropbear[9783]: Child connection from 202.100.82.230:46757
Apr 13 06:43:10 dropbear[9780]: exit before auth: Exited normally
Apr 13 06:43:14 dropbear[9784]: Child connection from 202.100.82.230:47544
Apr 13 06:43:16 dropbear[9779]: exit before auth: Failed to get remote version
Apr 13 06:43:17 dropbear[9785]: Child connection from 202.100.82.230:48299
Apr 13 06:43:20 dropbear[9777]: exit before auth: Failed to get remote version
Apr 13 06:43:20 dropbear[9786]: Child connection from 202.100.82.230:48653
Apr 13 06:43:22 dropbear[9781]: exit before auth: Failed to get remote version
Apr 13 06:43:23 dropbear[9787]: Child connection from 202.100.82.230:49069
Apr 13 06:43:25 dropbear[9784]: exit before auth: Failed to get remote version
Apr 13 06:43:29 dropbear[9787]: bad password attempt for 'root' from 202.100.82.230:49069
Apr 13 06:43:29 dropbear[9788]: Child connection from 202.100.82.230:49445
Apr 13 06:43:30 dropbear[9787]: exit before auth (user 'root', 1 fails): Disconnect received
Apr 13 06:43:31 dropbear[9786]: exit before auth: Failed to get remote version
Apr 13 06:43:33 dropbear[9789]: Child connection from 202.100.82.230:50240
Apr 13 06:43:34 dropbear[9790]: Child connection from 202.100.82.230:50029
Apr 13 06:43:36 dropbear[9783]: exit before auth: Failed to get remote version
Apr 13 06:43:38 dropbear[9785]: exit before auth: Failed to get remote version
Apr 13 06:43:39 dropbear[9791]: Child connection from 202.100.82.230:50633
Apr 13 06:43:41 dropbear[9790]: exit before auth: Exited normally
Thanks in advance.
Could you do some investigation yourself?
Maybe login with ssh and try a random password for root, what does the log then say? :p
Maybe you could conclude then that someone evil is trying to get in!
Maybe you could edit your loooooooong quote a bit and make it shrtr.
Marc
gingishan1
Your being Hacked.
Happens a lot.
Ensure you keep dropbear with password on and look at settings for your VSFTPD sometimes they will try to get in that way as well.
If your additionally worried install fail2ban as an additional measure.