Right after receiving my free La Fonera social router, I plugged it into my local home network, and registred it, as explained in the provided guide. The problem (I knew it later), is that when the Fonera boots, it connects to Fon and upgrades itself (and reconfigures itself also).
So, as I plugged my Fonera to Internet, it upgraded to the latest firmware revision, for which there is no known hack to get ssh shell access.
Today I searched for a way to succesfully downgrade my Fonera to it’s original firmware.
After trying several ways (found on the Internet) with no success, this is the way that finally worked for me:
* Configure your PC with ip 169.254.255.2/24
* Connect your PC and the Fonera with a direct cable (straight or crossover ethernet, doesn’t matter, the Fonera is smart enough)
* Press the reset button (down the fonera) for 20 seconds
* Release the button
* From the PC, ping 169.254.255.1 (As it cannot get any DHCP IP, the Fonera autoconfigure it’s eth0:1 with this zeroconf IP).
* Wait till it’s reachable (approx 2mn)
When the IP is reacheable (when the Fonera answers the ping requests), you can now apply the following hack:
Create on your PC 2 html files, with the following content:
step1.html:
step2.html
Now, open step1.html with your favorite browser and click the submit button (if your are asked for login/passwd, unless you changed it, try admin/admin). Once done, do the same with step2, and submit.
The dropbear ssh deamon should now be open on your Fonera! You can get a shell inside your Fonera: connect by ssh to 169.254.255.1 (port 22): user root and password admin, unless you changed it (the same passwd as the web UI).
Final steps are:
* Activate ssh permanently :
root@OpenWrt:~# mv /etc/init.d/dropbear /etc/init.d/S50dropbear
* Unlock firewalling rules :
root@OpenWrt:~# vi /etc/firewall.user
* Uncomment the following :
iptables -t nat -A prerouting_rule -i $WAN -p tcp --dport 22 -j ACCEPT
iptables -A input_rule -i $WAN -p tcp --dport 22 -j ACCEPT
* Deactivate automatic Fonera updates :
root@OpenWrt:~# vi /bin/thinclient
* Comment the following line (last one) :
#. /tmp/.thinclient.sh
At this point I had some troubles with the Fonera not catching IP by DHCP. By advice of another fonero-geek and friend (Ivan!), I set up the Fonera to use a static IP (using the MyPlace web UI), and everything worked fine. Eventually this morning I changed back the Fonera to get it’s IP by DHCP and it actually worked too.
Some sources that inspired me a lot (and more):
http://imil.net/docs/fonera-ssh.txt
http://blog.blase16.de/2006/11/28/Hacking-Fonera
0 Response to “Shell access (ssh) on your Fonera”