Intelbras ONU 110 B (Modelo 1)

Informações sobre a Intelbras ONU 110 B (Modelo 1) ONT/ONU. Teardown, hacking, unlocking (desbloqueio), firmwares, custom images, recuperação, bridge.

Disclaimer

Todas as informações, métodos, procedimentos, firmwares, aplicativos e material sobre modificações e configurações postadas neste wiki foram criados pelo O3 Labs (salvo menção em contrário) e disponibilizadas GRATUITAMENTE desde o dia de sua elaboração. Denuncie quando possível quaisquer tentativas de venda destes material.

Hardware

SoC	Realtek RTL9601B
RAM	32 MB (embedded)
Flash	8 MB - 25L64XX SPI NOR Flash
LAN	1 x 1 Gbit/s
USB	-
Wireless 2.4 GHz	-
Wireless 5 GHz	-
Laser Driver/Transceiver	UX3320
Acoplamento fibra	SC/APC
SLIC	-
HPNA	-
Serial	Sim
JTAG	-
Alimentação	DC 12 V / 500 mA
Credenciais padrão	admin / intelbras
IP LAN padrão	192.168.1.254

GPON

Tipo	SFU (Ethernet UNI: 1 \ VEIP: 0)
Vendor ID	ZNTS
Version	21500093-v1.1
Equipment ID	IGD
OMCC Version	128 (0x80)
Software Version (Main, example)	1.1-230512
Software Version (Standby, example)	1.0-190520

Bootlog

Clique aqui para visualizar

bbbb => 0xbce0... done
DD: efuse6: di: a1; sds_num: 1; gphy_num: 0
DD: efuse gphy: done
DD: efuse sds: [0000fd2b => 00000421] done
DD: efuse lxb: break
II: OCP 100MHz(400/P1/C1), MEM 325MHz(650/(2*1)), LX 200MHz, SPIF 25MHz(1000/(5*8))
II: NOR SPI-F... MXIC/C22017/MMIO16-1/ModeC done

DRAM AUTO CALIBRATION
AutoK: ZQ Calibration Passed
AutoK: MR0: 0x00100b62
AutoK: MR1: 0x00110040
AutoK: MR2: 0x00120000
AutoK: MR3: 0x00130000
bit:00, max_w_s(00), max_w_len(21), max_r_s(00), max_r_len(31): (0xb8001510) = 0x1e1000
bit:01, max_w_s(00), max_w_len(21), max_r_s(02), max_r_len(29): (0xb8001514) = 0x1e1102
bit:02, max_w_s(00), max_w_len(21), max_r_s(02), max_r_len(29): (0xb8001518) = 0x1e1102
bit:03, max_w_s(00), max_w_len(21), max_r_s(00), max_r_len(31): (0xb800151c) = 0x1e1000
bit:04, max_w_s(00), max_w_len(21), max_r_s(02), max_r_len(29): (0xb8001520) = 0x1e1102
bit:05, max_w_s(00), max_w_len(21), max_r_s(00), max_r_len(31): (0xb8001524) = 0x1e1000
bit:06, max_w_s(00), max_w_len(23), max_r_s(00), max_r_len(31): (0xb8001528) = 0x1e1000
bit:07, max_w_s(00), max_w_len(21), max_r_s(00), max_r_len(31): (0xb800152c) = 0x1e1000
bit:08, max_w_s(00), max_w_len(21), max_r_s(02), max_r_len(29): (0xb8001530) = 0x1e1102
bit:09, max_w_s(00), max_w_len(23), max_r_s(00), max_r_len(31): (0xb8001534) = 0x1e1000
bit:10, max_w_s(00), max_w_len(19), max_r_s(00), max_r_len(31): (0xb8001538) = 0x1e1000
bit:11, max_w_s(00), max_w_len(21), max_r_s(02), max_r_len(29): (0xb800153c) = 0x1e1102
bit:12, max_w_s(00), max_w_len(23), max_r_s(00), max_r_len(31): (0xb8001540) = 0x1e1000
bit:13, max_w_s(00), max_w_len(19), max_r_s(02), max_r_len(29): (0xb8001544) = 0x1e1102
bit:14, max_w_s(00), max_w_len(23), max_r_s(02), max_r_len(29): (0xb8001548) = 0x1e1102
bit:15, max_w_s(00), max_w_len(21), max_r_s(00), max_r_len(31): (0xb800154c) = 0x1e1000
bit:16, max_w_s(00), max_w_len(21), max_r_s(00), max_r_len(31): (0xb8001550) = 0x1e1000
bit:17, max_w_s(00), max_w_len(21), max_r_s(02), max_r_len(29): (0xb8001554) = 0x1e1102
bit:18, max_w_s(00), max_w_len(19), max_r_s(02), max_r_len(29): (0xb8001558) = 0x1e1102
bit:19, max_w_s(00), max_w_len(21), max_r_s(00), max_r_len(31): (0xb800155c) = 0x1e1000
bit:20, max_w_s(00), max_w_len(21), max_r_s(02), max_r_len(29): (0xb8001560) = 0x1e1102
bit:21, max_w_s(00), max_w_len(21), max_r_s(00), max_r_len(31): (0xb8001564) = 0x1e1000
bit:22, max_w_s(00), max_w_len(21), max_r_s(00), max_r_len(31): (0xb8001568) = 0x1e1000
bit:23, max_w_s(00), max_w_len(21), max_r_s(00), max_r_len(31): (0xb800156c) = 0x1e1000
bit:24, max_w_s(00), max_w_len(21), max_r_s(04), max_r_len(27): (0xb8001570) = 0x1e1204
bit:25, max_w_s(00), max_w_len(21), max_r_s(00), max_r_len(31): (0xb8001574) = 0x1e1000
bit:26, max_w_s(00), max_w_len(19), max_r_s(02), max_r_len(29): (0xb8001578) = 0x1e1102
bit:27, max_w_s(00), max_w_len(21), max_r_s(02), max_r_len(29): (0xb800157c) = 0x1e1102
bit:28, max_w_s(00), max_w_len(21), max_r_s(02), max_r_len(29): (0xb8001580) = 0x1e1102
bit:29, max_w_s(00), max_w_len(19), max_r_s(02), max_r_len(29): (0xb8001584) = 0x1e1102
bit:30, max_w_s(00), max_w_len(21), max_r_s(04), max_r_len(27): (0xb8001588) = 0x1e1204
bit:31, max_w_s(00), max_w_len(21), max_r_s(00), max_r_len(31): (0xb800158c) = 0x1e1000
AutoK: dram auto calibrtaion is done

II: MEM_PROBE_OK
II: MEM_XLAT_OK
II: MEM_TO_REG_OK
II: MEM_CNTLR_ZQ_STRICT_OK
II: MEM_CAL_OK
II: cntlr zq result: 0018e975
II: dcr result: 11210000
II: Decompressing U-Boot (0x81c00000 <- 0x9fc1b510)... (182 KB <- 70 KB) OK
II: Starting U-boot...


U-Boot 2011.12.NA (May 06 2019 - 18:16:34)

Board: RTL9601B CPU:100MHz LX:200MHz DDR2:325MHz..
SPI-F: MXIC/C22017/MMIO16-1/ModeC 1x8 MB (plr_flash_info @ 81c2c7a4)
Loading 8192B env. variables from offset 0x40000
Loading 8192B env. variables from offset 0x42000
Loaded 8192B env. variables from offset 0x40000
Net:   LUNA GMAC
Warning: eth device name has a space!

Hit any key to stop autoboot:  0
swcore_init
multicast_start Using LUNA GMAC  device
mcast upgrade timeout.
## Booting kernel from Legacy Image at 9d080000 ...
   Image Name:   Linux Kernel Image
   Created:      2018-12-20   8:36:50 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1176584 Bytes = 1.1 MB
   Load Address: 80000000
   Entry Point:  80000000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK

Starting kernel ...

Linux version 2.6.30.9 (dongqifan@software-server) (gcc version 4.4.6 (Realtek RSDK-1.5.6p2) ) #25 Thu Dec 20 16:35:19 CST 2018 [luna SDK V1.9.0]
CPU revision is: 0000dc02
Determined physical RAM map:
 memory: 01f00000 @ 00000000 (usable)
Zone PFN ranges:
  Normal   0x00000000 -> 0x00001f00
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00001f00
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 7874
Kernel command line: console=ttyS0,115200 mtdparts=rtk_spi_nor_mtd:256K(boot),8K(env),8K(env2),240K(config),1408K(k0)ro,2432K(r0)ro,1408K(k1),2432K(r1),4K@0ro,4K@0ro,4K@0ro,4K@0ro,1408K@512K(linux),2432K@1920K(rootfs) root=31:5
root_dev_setup line 180 root: 31:5
icache: 64kB/32B, dcache: 32kB/32B, scache: 0kB/0B
NR_IRQS:128
PID hash table entries: 128 (order: 7, 512 bytes)
console [ttyS0] enabled
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 22828k/31744k available (2784k kernel code, 8916k reserved, 825k data, 108k init, 0k highmem)
Calibrating delay loop... 99.73 BogoMIPS (lpj=498688)
Mount-cache hash table entries: 512
IMEM section size = 0x2e78
net_namespace: 532 bytes
NET: Registered protocol family 16
bio: create slab <bio-0> at 0
SCSI subsystem initialized
Sangoma WANPIPE Router v1.1 (c) 1995-2000 Sangoma Technologies Inc.
NET: Registered protocol family 8
NET: Registered protocol family 20
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
NET: Registered protocol family 1
=================================
luna_capabilities_init
=================================
=================================
luna_wdt_init
=================================
netlog: listening on port 4660
squashfs: version 4.0 (2009/01/31) Phillip Lougher
NTFS driver 2.1.29 [Flags: R/W].
JFFS2 version 2.2. (NAND) Â 2001-2006 Red Hat, Inc.
msgmni has been set to 44
alg: No test for stdrng (krng)
io scheduler noop registered
io scheduler deadline registered
io scheduler cfq registered (default)
Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x0 (irq = 49) is a 16550A
Driver 'sd' needs updating - please use bus_type methods
8686 Ethernet driver v0.0.1 (Feb 17, 2012)[Dual Band Disable]
TX[256,64,64,64,64] , RX[256,256,256,64,64,128]
eth0 (): not using net_device_ops yet
eth0: RTL-8686 at 0xb8012000, 00:00:00:01:00:02, IRQ 26
eth0.2 (): not using net_device_ops yet
eth0.2: RTL-8686 at 0xb8012000, 00:00:00:01:00:02, IRQ 26
nas0 (): not using net_device_ops yet
nas0: RTL-8686 at 0xb8012000, 00:00:00:01:00:02, IRQ 26
pon0 (): not using net_device_ops yet
pon0: RTL-8686 at 0xb8012000, 00:00:00:01:00:02, IRQ 26
RTL8686 GMAC Probing..
first entry: 0, portmask 127, rx: 802b1a18
Init RTK Driver Module....OK
Init RTK Core Dev Module....OK

 rtdrv_init !!! for netfilter
pkt_redirect_init complete
interrupt broadcaster init ok!
u32 classifier
nf_conntrack version 0.5.0 (496 buckets, 1984 max)
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 17
Bridge firewalling registered
Ebtables v2.0 registered
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
Realtek GPIO Driver for Flash Reload Default
===============================================================================
init_luna_nor_spi_map: flash map at 0xbd000000
luna spi probe...
luna SPI FLASH G2 driver version 1.00-II: NOR SPI-F... Generic 3B NOR SPI-F detected... done
master->name rtk_spi_nor_mtd
cmd: cmdlinepart
14 cmdlinepart partitions found on MTD device rtk_spi_nor_mtd
add luna nor spi partition
MTD partitions obtained from kernel command line
Creating 14 MTD partitions on "rtk_spi_nor_mtd":
0x000000000000-0x000000040000 : "boot"
0x000000040000-0x000000042000 : "env"
0x000000042000-0x000000044000 : "env2"
0x000000044000-0x000000080000 : "config"
0x000000080000-0x0000001e0000 : "k0"
0x0000001e0000-0x000000440000 : "r0"
0x000000440000-0x0000005a0000 : "k1"
0x0000005a0000-0x000000800000 : "r1"
0x000000000000-0x000000001000 : "Partition_008"
0x000000000000-0x000000001000 : "Partition_009"
0x000000000000-0x000000001000 : "Partition_010"
0x000000000000-0x000000001000 : "Partition_011"
0x000000080000-0x0000001e0000 : "linux"
0x0000001e0000-0x000000440000 : "rootfs"
===============================================================================
VFS: Mounted root (squashfs filesystem) readonly on device 31:5.
Freeing unused kernel memory: 108k freed
init started: BusyBox v1.12.4 (2018-12-20 16:35:22 CST)
starting pid 149, tty '': '/etc/init.d/rcS'
=== Start to run rc0 / rc63 ===
----- do_rc [/etc/init.d/rc2] -----
Mounting /dev/mtdblock3 onto /var/config as the configuration data storage
----- do_rc [/etc/init.d/rc10] -----
----- do_rc [/etc/init.d/rc18] -----
no need to do reset to default
----- do_rc [/etc/init.d/rc20] -----
------ [-b]Bootup_config ------
Wait for configd initialize 'MsgQ' and 'Shm'...
Wait for configd initialize 'MsgQ' and 'Shm'...
set_msgqueue_max_size:180> set msgqidds.msg_qbytes=20600 OK
set_msgqueue_max_size:180> set msgqidds.msg_qbytes=20600 OK
Fetch mib data (type 8) from program code.
Fetch mib data (type 2) from program code.
Pre-fetch mib data from program default done.
Checking input file [/var/config/lastgood_hs.xml].
[OK] Valid config file!

***** config_parser(): dfname=[/etc/config_default_hs.xml](0) loaded *****

***** config_parser(): fname=[/var/config/lastgood_hs.xml](0) loaded *****

[xml_INFO]: Load HS configuration success.
Checking input file [/var/config/lastgood.xml].
[OK] Valid config file!

***** config_parser(): dfname=[/etc/config_default.xml](0) loaded *****

***** config_parser(): fname=[/var/config/lastgood.xml](0) loaded *****

[xml_INFO]: Load CS configuration success.
----- do_rc [/etc/init.d/rc21] -----
omci platform attached!
register_gpon_evt_state: register gpon event state Successfully !
----- do_rc [/etc/init.d/rc22] -----
priority: 0, portmask 127, rx: 802b1a18
insert here, priority: 7, portmask 255, rx: c00ab34c
running GPON mode ...
priority: 7, portmask 255, rx: c00ab34c
priority: 0, portmask 127, rx: 802b1a18
insert here, priority: 0, portmask 1, rx: c00b7288
RLDP: TX thread is created!!!

RLDP: rldp_detect init ok!
RLDP: Recovery thread is created!!!
----- do_rc [/etc/init.d/rc32] -----
----- do_rc [/etc/init.d/rc34] -----
MIB chain descriptors checking (total 8) ok !
----- do_rc [/etc/init.d/rc35] -----
starting pid 396, tty '/dev/ttyS0': '/bin/login -p'
starting pid 397, tty '': '/bin/inetd'
xml_mib_update():...
login: xml_mib_update():...
  TRC_PG(main:1873):	delete l2 table entry for intelbras arp issue
------ [-u cs]Update cs setting ------
------ [-u hs]Update hs setting ------
onucomm send ponmode info to peer
[xml_INFO]: Update cs configuration success.
[xml_INFO]: Update hs configuration success.
igmpd is running:  sys_max_port_num =3 .....
listening
l2-table set limit-learning port all count 0
[ERR] Warning, unknown dir name: OMCI_WAN_QOS_QUEUE_NUM
<fMgmtInit:420> is the so is not a regular file.
<fMgmtInit:420> is the so is not a regular file.
<fMgmtInit:420> is the so is not a regular file.
Module libigmpipc.so is loaded and inited
stat failed: /lib/features/internal/bdp_00000002.so
Module /lib/features/internal/bdp_00000008.so is inited
Module /lib/features/internal/bdp_00000080.so is inited
####################### voice_rtk_init_voip_cfg() #######################
voip flash get VOICE_OP_GET_SHM failed.
port 1 assign to pon0
pon0 -> 0x2
re8670_open 3136
omci_wrapper_msgHandler: devMode 0,receiveState 1,logLevel 0,sn 544DBB
RTK.0> command:iphost's mac 00e04c867001
iphost's mac 00 E0 4C 86 70 0A
iphost's mac 00 E0 4C 86 70 0A
iphost's mac 00e04c867001
iphost's mac 00 E0 4C 86 70 0A
iphost's mac 00 E0 4C 86 70 0A
iphost's mac 00e04c867001
iphost's mac 00 E0 4C 86 70 0A
iphost's mac 00 E0 4C 86 70 0A
l2-table clear l2-table
RTK.0> command:   CMD: /bin/ifconfig eth0 hw ether 00e04c867001
priority: 0, portmask 1, rx: c00b7288
insert here, priority: 4, portmask 2, rx: 801dbb0c
   CMD: /bin/brctl addbr br0
   CMD: /bin/ifconfig br0 hw ether 00e04c867001
   CMD: /bin/brctl stp br0 off
   CMD: /bin/brctl setfd br0 1
   CMD: /bin/brctl setageing br0 7200
   CMD: /bin/brctl addif br0 eth0
device eth0 entered promiscuous mode
sh: can't create /proc/sys/net/ipv6/conf/br0/dad_transmits: nonexistent directory
   CMD: /bin/ifconfig br0 192.168.1.254 netmask 255.255.255.0 mtu 1500
   CMD: /bin/boa
   CMD: /bin/ifconfig eth0 up
br0: port 1(eth0) entering learning state
drivers/net/rtl86900/sdk/src/rtk/pon_led.c:1118 led sw blink init complete!
rtk_pon_led_SpecType_set 0
   CMD: /bin/ifconfig nas0 up
TRACE: /bin/ethctl addsmux bridge nas0 nas0_0 napt brpppoe
nas0_0 (): not using net_device_ops yet
sh: can't create /proc/sys/net/ipv6/conf/nas0_0/use_tempaddr: nonexistent directory
   CMD: /bin/ifconfig nas0_0 hw ether 00e04c867004
   CMD: /bin/ifconfig nas0_0 txqueuelen 10
   CMD: /bin/ifconfig nas0_0 up
1483 bridged
   CMD: /bin/brctl addif br0 nas0_0
device nas0_0 entered promiscuous mode
br0: port 2(nas0_0) entering learning state
   CMD: /bin/iptables -P INPUT ACCEPT
flow_id=128
br0: port 1(eth0) entering forwarding state
   CMD: /bin/iptables -P FORWARD ACCEPT
   CMD: /bin/iptables -A FORWARD -p tcp -o ppp+ --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
   CMD: /bin/iptables -A FORWARD -p tcp -i ppp+ --tcp-flags SYN,RST SYN -m tcpmss --mss 1452:1536 -j TCPMSS --set-mss 1452
   CMD: /bin/iptables -A INPUT -p udp --dport 520 -j ACCEPT
   CMD: /bin/iptables -A INPUT ! -i br0 -d 239.255.255.250 -j DROP
   CMD: /bin/iptables -A INPUT -d 224.0.0.0/4 -j ACCEPT
   CMD: /bin/ebtables -N br_wan
br0: port 2(nas0_0) entering forwarding state
size of linux : 1441792
size of linux : 3932160
init_global_parm834::size of g_max_upload_size : 3932160
   CMD: /bin/ebtables -P br_wan RETURN
   CMD: /bin/ebtables -N br_wan_out
   CMD: /bin/ebtables -P br_wan_out RETURN
   CMD: /bin/ebtables -A br_wan -i nas0_0 -j DROP
   CMD: /bin/ebtables -A br_wan_out -o nas0_0 -j DROP
   CMD: /bin/ebtables -A INPUT -j br_wan
   CMD: /bin/ebtables -A OUTPUT -j br_wan_out
   CMD: /bin/iptables -N dhcp_port_filter
   CMD: /bin/iptables -A INPUT -j dhcp_port_filter
*****Enable ftp ALG function!*****
*****Enable h323 ALG function!*****
*****Enable sip ALG function!*****
*****Enable pptp ALG function!*****
   CMD: /bin/ifconfig eth0 up
sh: can't create /proc/sys/net/ipv6/conf/br0/dad_transmits: nonexistent directory
sh: can't create /proc/br_igmpsnoop: nonexistent directory
IGMP Snooping: enabled
   CMD: /bin/iptables -t mangle -D PREROUTING -i br0 -j lan_mark
iptables v1.2.7a: Couldn't find target `lan_mark'

Try `iptables -h' or 'iptables --help' for more information.
   CMD: /bin/iptables -t mangle -N lan_mark
   CMD: /bin/iptables -t mangle -F lan_mark
   CMD: /bin/iptables -t mangle -A PREROUTING -i br0 -j lan_mark
   CMD: /bin/ebtables -D FORWARD -j portmapping
Illegal target name 'portmapping'.
   CMD: /bin/ebtables -N portmapping
   CMD: /bin/ebtables -A FORWARD -j portmapping
   CMD: /bin/ip rule del fwmark 0x00008000/0x000f8080
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00010000/0x000f8080
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00018000/0x000f8080
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00020000/0x000f8080
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00028000/0x000f8080
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00030000/0x000f8080
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00038000/0x000f8080
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00040000/0x000f8080
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00048000/0x000f8080
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00050000/0x000f8080
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00058000/0x000f8080
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00060000/0x000f8080
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00068000/0x000f8080
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00070000/0x000f8080
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del prohibit
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del prohibit
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del prohibit
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del prohibit
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del prohibit
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del prohibit
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del prohibit
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del prohibit
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del prohibit
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del prohibit
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del prohibit
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del prohibit
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del prohibit
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del prohibit
RTNETLINK answers: No such file or directory
   CMD: /bin/ebtables -A portmapping -i eth+ -o eth+ -j RETURN
   CMD: /bin/ebtables -A portmapping -i eth+ -o wlan+ -j RETURN
   CMD: /bin/ebtables -A portmapping -i wlan+ -o eth+ -j RETURN
   CMD: /bin/ebtables -A portmapping -i wlan+ -o wlan+ -j RETURN
   CMD: /bin/ebtables -A portmapping -i eth0+ -j DROP
   CMD: /bin/ebtables -A portmapping -i wlan+ -j DROP
   CMD: /bin/ebtables -I portmapping 1 -i eth0.2 -o nas0_0 -j RETURN
   CMD: /bin/ebtables -I portmapping 1 -i nas0_0 -o eth0.2 -j RETURN
   CMD: /bin/ebtables -A portmapping -i nas0_0 -j DROP

Configurações

É de sua total responsabilidade o uso e implicações que utilizar equipamentos não fornecidos ou homologados pelo ISP podem causar.

Bugs, dicas e notas

Firmwares

Stock

Versões oficiais e não modificadas para o aparelho podem ser encontrados no site oficial da Intelbras.

Intelbras

Custom

Exceto pelas alterações realizadas, as imagens de firmware continuam de propriedade das marcas/fabricantes do aparelho. Não solicite suporte ou assistência para dispositivos utilizando uma imagem custom.

Estas imagens são testadas localmente ao máximo possível porém seu uso e possíveis implicações são de total responsabilidade do proprietário do aparelho.

Os arquivos produzidos pelo O3 Labs são assinados para garantir sua integridade e procedência. Para instruções de como validar as assinaturas, acesse aqui.

Versões modificadas com correções e/ou melhorias, baseadas em releases oficiais/stock. As versões são cumulativas, ou seja, a mais recente sempre contém também todas as modificações das versões anteriores.

1.9-230512

Baseada no release oficial V1.1-230512
Adicionado utilitário setcons.
- Vários comandos executados via telnet no aparelho tem sua saída configurada para o console (apontado para a porta serial/UART), sendo necessário desmontar e usar um adaptador/cabo/conversor serial para vê-las. A ferramenta setcons permite redirecionar a saída do console para o terminal atual - provavelmente sua sessão telnet -, permitindo ver as saídas diretamente. Após conectar-se via telnet no aparelho, execute o comando setcons para instruções de uso; ou, resumindo:

setcons -s
omcicli get tables
omcicli mib get 84
setcons -r

Os comandos entre o setcons são apenas exemplos, execute os comandos que desejar. O redirecionamento não é permanente, sendo válido apenas para a mesma sessão. Mesmo que não retorne para a saída padrão depois, tudo retorna ao normal após um reboot ou se desconectar do telnet.

1.9-230512.tar
1.9-230512.tar.minisig

Agradecimentos

Pessoas envolvidas em arquivos, discussões, dicas, doações ou bate papo em geral. Lista em ordem alfabética.

skullao