packet:xrpi:manpages:section1
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
packet:xrpi:manpages:section1 [2025/04/19 09:24] – m0mzf | packet:xrpi:manpages:section1 [2025/04/19 17:59] (current) – removed m0mzf | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | =======Section 1 - General Commands======= | ||
- | =====ACL.MAN===== | ||
- | < | ||
- | </ | ||
- | ACL -- IP Access Control List commands | ||
- | </ | ||
- | AC[l] D[eny] < | ||
- | AC[l] L[og] [0-3] | ||
- | AC[l] M[ove] <rule number> <U[p] | D[own]> | ||
- | AC[l] P[ermit] < | ||
- | AC[l] R[emove] <rule number> | ||
- | AC[l] V[iew] | ||
- | | ||
- | </ | ||
- | The ACL command allows XRouter' | ||
- | be viewed and edited on the fly without having to edit and | ||
- | reload IPROUTE.SYS. | ||
- | |||
- | The Access Control List specifies which IP addresses are | ||
- | allowed to send datagrams to, receive datagrams from, and | ||
- | route datagrams through XRouter' | ||
- | " | ||
- | |||
- | A DENY rule denies access to a specified destination from a | ||
- | specified source, whilst a PERMIT rule allows access. Both | ||
- | types of rule can work on single addresses or whole subnets. | ||
- | |||
- | Rules can be added using the ACL commands, either at the | ||
- | command line or in IPROUTE.SYS. | ||
- | |||
- | If the Access Control List contains no rules, the default | ||
- | action is " | ||
- | unsatisfatory, | ||
- | compatability. | ||
- | |||
- | If one or more rules are present, the default action is | ||
- | " | ||
- | " | ||
- | |||
- | Rules are applied in the order in which they appear in the | ||
- | table. | ||
- | |||
- | There is currently no mechanism to save a modified ACL back | ||
- | to the IPROUTE.SYS file, as the ACL command is intended only | ||
- | for on-the-fly changes. | ||
- | |||
- | The syntax for each sub-command can be revealed by | ||
- | typing that sub-command without any arguments. | ||
- | |||
- | </ | ||
- | Typing ACL without any arguments reveals the subcommands as | ||
- | follows: | ||
- | |||
- | D[eny] | ||
- | P[ermit] | ||
- | M[ove] | ||
- | R[emove] | ||
- | V[iew] | ||
- | L[og] | ||
- | |||
- | The PERMIT and DENY sub-commands APPEND filter rules to the | ||
- | IP Access Control List. The < | ||
- | arguments each have the form: | ||
- | |||
- | < | ||
- | |||
- | < | ||
- | |||
- | [mask] | ||
- | the number of bits (0-32) of the IP address to | ||
- | match from left to right, OR as a dotted quad. | ||
- | |||
- | [port] | ||
- | this or setting it to 0 implies "any port". | ||
- | |||
- | [protocol] | ||
- | | ||
- | | ||
- | TCP is 6 and UDP is 17. Omitting this field, or | ||
- | | ||
- | |||
- | The combination 0.0.0.0/32 is a special case matching any of | ||
- | XRouter' | ||
- | |||
- | The VIEW subcommand displays all the rules. Each rule has a | ||
- | number, which can be used by the REMOVE subcommand. | ||
- | |||
- | The REMOVE subcommand removes a rule. After removal, the | ||
- | remaining rules are renumbered. | ||
- | |||
- | The LOG subcommand displays or sets the ACL logging level. | ||
- | The only levels so far defined are: | ||
- | |||
- | Level | ||
- | ------------------------------------------- | ||
- | 0 No ACL logging | ||
- | 1 Log denial events | ||
- | 2 | ||
- | 3 Log and display denial events | ||
- | |||
- | Typing ACL LOG without any arguments displays the current log | ||
- | level. | ||
- | |||
- | If ACL logging is enabled, ACL events go into the main daily | ||
- | log. Be aware that in some cases this might generate a lot of | ||
- | logging, and in other cases virtually nothing. It depends on | ||
- | how strict your rules are, what your IP routing table is | ||
- | like, how open your system is to the outside world, and how | ||
- | much it is attacked. | ||
- | |||
- | Logging defaults off, but the ACL LOG command may be used in | ||
- | IPROUTE.SYS to set it on at bootup if desired. | ||
- | |||
- | </ | ||
- | Allow LAN sources to access any destination: | ||
- | |||
- | acl permit | ||
- | |||
- | Allow XRouter to access any destination: | ||
- | |||
- | acl permit | ||
- | |||
- | Prevent non-LAN sources from accessing our TCP port 513: | ||
- | |||
- | acl deny 0.0.0.0/ | ||
- | |||
- | </ | ||
- | The ACL command is only available to sysops. | ||
- | |||
- | </ | ||
- | IPROUTE.SYS(8) -- IP Routing File. | ||
- | IDS(9) | ||
- | ACCESS.SYS(8) | ||
- | AXSCTRL(9) | ||
- | |||
- | </ | ||
- | </ | ||
- | =====AMSG.MAN===== | ||
- | < | ||
- | < | ||
- | </ | ||
- | AMSG -- Enter APRS Messaging mode. | ||
- | |||
- | </ | ||
- | AM[sg] < | ||
- | |||
- | </ | ||
- | The AMSG command switches the user's session into APRS | ||
- | messaging mode, enabling him to exchange messages and | ||
- | bulletins with APRS and UI-View users. | ||
- | |||
- | The < | ||
- | traffic will be sent and received. e.g. "AM 13" will use port | ||
- | 13. | ||
- | |||
- | Within messaging mode, all commands begin with a forward | ||
- | slash (/), and anything else is treated as message text for | ||
- | transmission. | ||
- | |||
- | / | ||
- | / | ||
- | /C[ancel] [#] List / cancel unacked message(s) | ||
- | / | ||
- | /H[elp] [cmd] | ||
- | /Monitor [on|off] | ||
- | / | ||
- | /T[arget] [call] | ||
- | /U[iview] [on|off] | ||
- | /V[ia] [digis] | ||
- | /X Exit | ||
- | |||
- | Only the first letter of each command needs to be supplied. | ||
- | A few are worthy of further explanation.... | ||
- | |||
- | The /D command shows a list of all the stations heard | ||
- | directly, i.e. not via digipeaters or 3rd party networks. | ||
- | |||
- | Before any type of message or query can be sent, the user | ||
- | must specify a " | ||
- | messages, the target is a callsign. | ||
- | should be BLN#*, where "#" | ||
- | represents the bulletin category of up to 5 characters. | ||
- | Announcements use the same format as bulletins, except that | ||
- | "#" | ||
- | without first defining a target will result in an error | ||
- | response. | ||
- | specified. | ||
- | "/ | ||
- | "/T .". | ||
- | |||
- | Outgoing messages and bulletins are re-transmitted at | ||
- | intervals until either an acknowledgement is received, or too | ||
- | many retries have taken place. | ||
- | every 20 minutes for 4 hours, whilst announcements are re- | ||
- | transmitted every hour for 4 days. Messages are initially re- | ||
- | transmitted after 10 seconds, then the interval doubles with | ||
- | each re-send. | ||
- | hours, the message is expired and re-transmission ceases. | ||
- | The " | ||
- | messages and bulletins to be cancelled at any time before | ||
- | expiry. | ||
- | |||
- | The /M (Monitor) command allows other APRS and UI-View | ||
- | message traffic on the channel to be watched. | ||
- | is " | ||
- | |||
- | The /U (Ui-View mode) command sets the type of outgoing | ||
- | message to be used. The default is " | ||
- | all outgoing messages will be in APRS format. If turned " | ||
- | outgoing messages will be in " | ||
- | mode, both types of message can be received. UI-View messages | ||
- | will display with a tilde (~) between the message and its ID, | ||
- | whereas APRS-format messages will display with a curly | ||
- | opening bracket ({) if a message ID was supplied. | ||
- | mode, " | ||
- | portion | ||
- | " | ||
- | |||
- | /Q (quit) and /X (exit) are identical in function, exiting | ||
- | message mode and returning the user to XRouter' | ||
- | prompt. | ||
- | |||
- | The /V (via) command sets the digipeater path for outgoing | ||
- | messages, or if used by itself displays the currently set | ||
- | path. The path defaults to the port APRSPATH specified in | ||
- | XROUTER.CFG. | ||
- | APZ###, where ### is the 3 digit Xrouter version number, | ||
- | whereas in UI-View mode the destination call is set by the | ||
- | /Target command. | ||
- | |||
- | The /H (help) command is used to display help for the | ||
- | messaging commands. | ||
- | (low bandwidth) command resume is displayed. | ||
- | files are installed, "/H *" will list the help available, and | ||
- | "/H < | ||
- | < | ||
- | argument is ignored, so "/H V" is equally valid. | ||
- | |||
- | </ | ||
- | If Xrouter receives an APRS message whose target address is a | ||
- | user currently logged into the APRS messaging shell, the | ||
- | message is delivered to the user and, if there was a message | ||
- | ID, an acknowledgement is sent. Each re-send of the message | ||
- | is acknowledged, | ||
- | the sender didn't receive the previous ack. | ||
- | |||
- | If the same message is received twice within 30 seconds, the | ||
- | second copy is ignored. | ||
- | received via different digipeater routes. | ||
- | |||
- | Expired messages are retained for 1 day before being deleted. | ||
- | During this interval they will be reactivated if a "? | ||
- | query is received from the target station. | ||
- | bulletins and announcements are not retained after expiry. | ||
- | Incoming | ||
- | received, and incoming announcements are retained for 4 days | ||
- | after last received. | ||
- | |||
- | The APRS spec limits the maximum message length to 67 | ||
- | characters. Because a message ID of up to 6 characters is | ||
- | appended to the message, XRouter splits messages longer than | ||
- | 61 characters into separate messages no longer than 61 | ||
- | characters (excluding ID) each. | ||
- | |||
- | All APRS facilities are an ongoing experiment and may be | ||
- | liable to change as development continues. | ||
- | "APRS Protocol Reference" | ||
- | |||
- | </ | ||
- | All users, but guests can't send messages. | ||
- | |||
- | </ | ||
- | </ |
packet/xrpi/manpages/section1.1745054641.txt.gz · Last modified: 2025/04/19 09:24 by m0mzf