Tabela de conteúdos
Intelbras ONU R1 v2.0
Informações sobre a Intelbras ONU R1 v2.0 XPON ONT/ONU. Teardown, hacking, unlocking (desbloqueio), firmwares, custom images, recuperação, bridge.
Disclaimer
Todas as informações, métodos, procedimentos, firmwares, aplicativos e material sobre modificações e configurações postadas neste wiki foram criados pelo O3 Labs (salvo menção em contrário) e disponibilizadas GRATUITAMENTE desde o dia de sua elaboração. Denuncie quando possível quaisquer tentativas de venda destes material.
Hardware
SoC | Realtek RTL9601D |
---|---|
RAM | 32 MB (embedded) |
Flash | XM25QH128CHIQ - XMC 128 Mbit SPI Flash |
LAN | 1 Gbit/s |
USB | - |
Wireless 2.4 GHz | - |
Wireless 5 GHz | - |
XPON Laser Driver | Realtek 8290B |
Acoplamento fibra | SC/APC |
FXS | - |
HPNA | - |
Serial | Sim |
JTAG | - |
Alimentação | DC 12 V / 500 mA |
Credenciais padrão | admin / intelbras |
IP LAN padrão | 192.168.1.1 |
Bootlog
9601D PRELOADER Bismarck 3.5 II: PLR:f2dde527, Build_date:21061712, Toolkit:rsdk-1.5.6-5281-EB-2.6.30-0.9.30.3-131105 II: Disable OCP Timeout Monitor II: Disable LX Timeout Monitor II: Enable Triple Synchronizer II:cg_cpu_clk_init doneII:cg_spif_clk_init doneII: CPU 300MHz (600/2/0), MEM 325MHz, LX 200MHz, SPIF 25MHz II: NOR SPI-F... 204018/MMIO16-1/ModeC done AK: DRAM AUTO CALIBRATION(20210202) AK: ZQ Calibration PassedAK: ZQ Calibration PassedAK: ZQ Calibration PassedAK: ZQ Calibration PassedAK: MR0: 0x00100952 AK: MR1: 0x00110040 AK: MR2: 0x00120000 AK: MR3: 0x00130000 AK: clear dwdqor AK: Bit/max_r_s/max_r_l/max_w_s/max_w_l Bit/max_r_s/max_r_l/max_w_s/max_w_l(Hex) [ 0] 0 1f 0 17 [16] 0 1f 0 17 [ 1] 0 1f 0 17 [17] 0 1f 0 17 [ 2] 0 1f 0 15 [18] 0 1f 0 17 [ 3] 0 1f 0 17 [19] 0 1f 0 17 [ 4] 0 1f 0 17 [20] 0 1f 0 17 [ 5] 0 1f 0 17 [21] 0 1f 0 17 [ 6] 0 1f 0 17 [22] 0 1f 0 19 [ 7] 0 1f 0 17 [23] 0 1f 0 19 [ 8] 0 1f 0 19 [24] 0 1f 0 19 [ 9] 0 1f 0 19 [25] 0 1f 0 19 [10] 0 1f 0 17 [26] 0 1f 0 17 [11] 0 1f 0 19 [27] 0 1f 0 19 [12] 0 1f 0 19 [28] 0 1f 0 19 [13] 0 1f 0 19 [29] 0 1f 0 19 [14] 0 1f 0 19 [30] 0 1f 0 1b [15] 0 1f 0 17 [31] 0 1f 0 19 AK: DQ enable delay sync with DQ delay tap. 0xb80015D0=0x07070707, 0xb80015D4=0x07070707, 0xb80015D8=0x08070808, 0xb80015DC=0x07080808 AK: DRAM size = 0x2000000 AK: Disable read after write function AK: Support tREFI divided by 4 AK: dram auto calibrtaion is done II: MEM_PROBE_OK II: MEM_XLAT_OK II: MEM_TO_REG_OK II: MEM_CAL_OK II: Change Stack from 0x9f007ff8 to 0x80efffe0 II: Decompressing U-Boot (0x81c00000 <- 0x9fc179c0)... (184 KB <- 70 KB) OK II: Starting U-boot... U-Boot 2011.12.NA (Jun 17 2021 - 12:49:20) Board: RTL9601D, CPU:300MHz, LX:200MHx, MEM:325MHz, Type:DDR2 DRAM: 32 MB SPI-F: 204018/MMIO16-1/ModeC 1x16 MB (plr_flash_info @ 81c2cb9c) Loading 8192B env. variables from offset 0x40000 Loading 8192B env. variables from offset 0x42000 Loaded 8192B env. variables from offset 0x40000 Net: LUNA GMAC Warning: eth device name has a space! Hit any key to stop autoboot: 0 ## Booting kernel from Legacy Image at 94840000 ... Image Name: Linux Kernel Image Created: 2021-08-24 21:17:19 UTC Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 1388318 Bytes = 1.3 MB Load Address: 80000000 Entry Point: 80000000 Verifying Checksum ... OK Uncompressing Kernel Image ... OK Starting kernel ... Linux version 2.6.30.9 (root@fac35782359c) (gcc version 4.4.6 (Realtek RSDK-1.5.6p2) ) #40 Tue Aug 24 21:04:52 UTC 2021 [luna SDK V1.9.0] RTL9602C PLL CPU revision is: 0000dc02 Determined physical RAM map: memory: 016ff000 @ 00000000 (usable) memory: 006ff000 @ 01800000 (usable) II: Kernel command line modified: mtdparts=rtk_spi_nor_mtd -> mtdparts=physmap-flash Zone PFN ranges: Normal 0x00000000 -> 0x00001eff Movable zone start PFN for each node early_node_map[2] active PFN ranges 0: 0x00000000 -> 0x000016ff 0: 0x00001800 -> 0x00001eff Built 1 zonelists in Zone order, mobility grouping on. Total pages: 7616 Kernel command line: console=ttyS0,115200 mtdparts=physmap-flash:256K(boot),8K(env),8K(env2),240K(config),3M(k0),4864K(r0),3M(k1)ro,4864K(r1)ro,4K@0ro,4K@0ro,4K@0ro,4K@0ro,3M@8448K(linux),4864K@11520K(rootfs) root=31:7 root_dev_setup line 180 root: 31:7 icache: 64kB/32B, dcache: 32kB/32B, scache: 0kB/0B NR_IRQS:128 PID hash table entries: 128 (order: 7, 512 bytes) console [ttyS0] enabled Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) Memory: 20472k/30712k available (8608k kernel code, 10240k reserved, 1041k data, 112k init, 0k highmem) Calibrating delay loop... 299.00 BogoMIPS (lpj=1495040) Mount-cache hash table entries: 512 IMEM section size = 0xf80 net_namespace: 788 bytes NET: Registered protocol family 16 ================================= rtk_ldo_init ================================= 0xbb000044=0x00000002 0xbb000130=0x00ec0005 bio: create slab <bio-0> at 0 Sangoma WANPIPE Router v1.1 (c) 1995-2000 Sangoma Technologies Inc. NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 1024 (order: 1, 8192 bytes) TCP bind hash table entries: 1024 (order: 0, 4096 bytes) TCP: Hash tables configured (established 1024 bind 1024) TCP reno registered NET: Registered protocol family 1 ================================= CONFIG_LUNA_SOC_GPIO: gpio_init() ================================= ================================= luna_capabilities_init ================================= ************ Watchdog Setting **************** WDT_E=0, (1-enable, 0-disable) LX(MHz)=200 WDT_CLK_SC=0 PH1_TO=0 PH2_TO=0 WDT_RESET_MODE=0 ********************************************** netlog: listening on port 4660 squashfs: version 4.0 (2009/01/31) Phillip Lougher JFFS2 version 2.2. (NAND) Â 2001-2006 Red Hat, Inc. msgmni has been set to 39 io scheduler noop registered (default) Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled serial8250: ttyS0 at MMIO 0x0 (irq = 49) is a 16550A PPP generic driver version 2.4.2 NET: Registered protocol family 24 8686 Ethernet driver v0.0.1 (Feb 17, 2012)[Dual Band Disable] TX[1024,64,64,64,64] , RX[256,32,32,32,64,32] eth0 (): not using net_device_ops yet eth0: RTL-8686 at 0xb8012000, 00:00:00:01:00:02, IRQ 26 eth0.2 (): not using net_device_ops yet eth0.2: RTL-8686 at 0xb8012000, 00:00:00:01:00:02, IRQ 26 eth0.3 (): not using net_device_ops yet eth0.3: RTL-8686 at 0xb8012000, 00:00:00:01:00:02, IRQ 26 nas0 (): not using net_device_ops yet nas0: RTL-8686 at 0xb8012000, 00:00:00:01:00:02, IRQ 26 >>>> Set nas0 carrier off !!! pon0 (): not using net_device_ops yet pon0: RTL-8686 at 0xb8012000, 00:00:00:01:00:02, IRQ 26 RTL8686 GMAC Probing.. first entry: 0, portmask 127, rx: 80352ecc eth0.2 -> 0x1 eth0.3 -> 0x2 nas0 -> 0x4 Init RTK Driver Module....OK Init RTK Core Dev Module....OK rtdrv_init !!! for netfilter pkt_redirect_init complete interrupt broadcaster init ok! u32 classifier nf_conntrack version 0.5.0 (479 buckets, 1916 max) nf_conntrack_rtsp v0.6.21 loading nf_conntrack_ipsec loaded nf_conntrack_l2tp version 3.1 loaded nf_nat_rtsp v0.6.21 loading ip_tables: (C) 2000-2006 Netfilter Core Team TCP cubic registered NET: Registered protocol family 10 lo: Disabled Privacy Extensions ip6_tables: (C) 2000-2006 Netfilter Core Team NET: Registered protocol family 17 Bridge firewalling registered Ebtables v2.0 registered 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> Realtek GPIO Driver for Flash Reload Default ================================= rtk_ims_init ================================= priority: 0, portmask 127, rx: 80352ecc insert here, priority: 1, portmask 127, rx: 8022ba48 physmap platform flash device: 0b000000 at 14000000 Luna SPI NOR FLASH G3 driver-XMC/204018/MMIO16-1 <5>master->name physmap-flash cmd: cmdlinepart 14 cmdlinepart partitions found on MTD device physmap-flash Creating 14 MTD partitions on "physmap-flash": 0x000000000000-0x000000040000 : "boot" 0x000000040000-0x000000042000 : "env" 0x000000042000-0x000000044000 : "env2" 0x000000044000-0x000000080000 : "config" 0x000000080000-0x000000380000 : "k0" 0x000000380000-0x000000840000 : "r0" 0x000000840000-0x000000b40000 : "k1" 0x000000b40000-0x000001000000 : "r1" 0x000000000000-0x000000001000 : "Partition_008" 0x000000000000-0x000000001000 : "Partition_009" 0x000000000000-0x000000001000 : "Partition_010" 0x000000000000-0x000000001000 : "Partition_011" 0x000000840000-0x000000b40000 : "linux" 0x000000b40000-0x000001000000 : "rootfs" VFS: Mounted root (squashfs filesystem) readonly on device 31:7. Freeing unused kernel memory: 112k freed init started: BusyBox v1.12.4 (2021-08-24 21:06:20 UTC) starting pid 150, tty '': '/etc/init.d/rcS' === Start to run rc0 / rc63 === ----- do_rc [/etc/init.d/rc2] ----- Mounting /dev/mtdblock3 onto /var/config as the configuration data storage re8670_open 3338 ADDRCONF(NETDEV_UP): nas0: link is not ready ----- do_rc [/etc/init.d/rc10] ----- ----- do_rc [/etc/init.d/rc14] ----- ----- do_rc [/etc/init.d/rc18] ----- no need to do reset to default ----- do_rc [/etc/init.d/rc20] ----- ------ [-b]Bootup_config ------ Wait for configd initialize 'MsgQ' and 'Shm'... set_msgqueue_max_size:180> set msgqidds.msg_qbytes=20600 OK set_msgqueue_max_size:180> set msgqidds.msg_qbytes=20600 OK Fetch mib data (type 8) from program code. Fetch mib data (type 2) from program code. Pre-fetch mib data from program default done. Checking input file [/var/config/lastgood_hs.xml]. [OK] Valid config file! ***** config_parser(): dfname=[/etc/config_default_hs.xml](0) loaded ***** ***** config_parser(): fname=[/var/config/lastgood_hs.xml](0) loaded ***** [xml_INFO]: Load HS configuration success. Checking input file [/var/config/lastgood.xml]. [OK] Valid config file! ***** config_parser(): dfname=[/etc/config_default.xml](0) loaded ***** ***** config_parser(): fname=[/var/config/lastgood.xml](0) loaded ***** [xml_INFO]: Load CS configuration success. ----- do_rc [/etc/init.d/rc21] ----- omci platform attached! register_gpon_evt_state: register gpon event state Successfully ! Loading TR-142 Module... Realtek TR-142 Module initialized. err = 0, max_ponq_id=65 ----- do_rc [/etc/init.d/rc22] ----- /etc/runomci.sh: line 212: /etc/runigmp.sh: not found running GPON mode ... insmod: rldp_drv.ko: module not found ----- do_rc [/etc/init.d/rc32] ----- MIB chain descriptors checking (total 32) ok ! <utility.c 488 setup_mac_addr> macAddr[5]+1 = 16 xml_mib_update():... xml_mib_update():... CMD: /bin/ifconfig eth0.2 hw ether d8778ba3cc15 CMD: /bin/brctl addbr br0 ------ [-u cs]Update cs setting ------ ------ [-u hs]Update hs setting ------ [rtkbosa Tool] i2c dev 0x55, reg 0x90: 0x82 i2c dev 0x55, reg 0x91: 0x90 i2c dev 0x55, reg 0x94: 0x01 RTL8290B is Found CMD: /bin/ifconfig br0 hw ether d8778ba3cc15 CMD: /bin/brctl stp br0 off CMD: /bin/brctl setfd br0 1 CMD: /bin/brctl setageing br0 7200 CMD: /bin/brctl addif br0 eth0.2 device eth0.2 entered promiscuous mode system(): /bin/echo 1 eth0.2 > /proc/rtl8686gmac/dev_port_mapping port 1 assign to eth0.2 eth0.2 -> 0x2 init mac based tag des Turn on. ===============================CAUTION=============================== This functionality should configure BEFORE romeDriver initialization. Otherwise may cause unpredictable problem. Init RG with GPON mode. =============Init_rg_api SUCESAlways Trap. S!!======[WARNING] INGRESS_L4_POROTCAL_VALUE_BIT must set with INGRESS_IPV4_TAGIF_BIT or INGRESS_IPV6_TAGIF_BIT @ _rtk_rg_aclSWEntry_to_asic_add(2105) [WARNING] Return Error (0x10007:RT_ERR_RG_INVALID_PARAM) at line:2106 @ return_err_mapping(9627) [_rtk_rg_aclSWEntry_to_asic_add+0xb8/0x50c8][_rtk_rg_apollo_aclFilterAndQos_add+0x1c8/0x3fc][rtk_rg_aclFilterAndQos_add+0xcc/0x1ac][do_rtdrv_rg_get_ctl+0xc98/0x2bb0][do_rtdrv_get_ctl+0xb918/0xb94c][nf_sockopt+0x80/0xb4][nf_getsockopt+0x20/0x2c][ip_getsockopt+0x98/0xd0][sys_getsockopt+0x84/0xc0][stack_done+0x20/0x40] ============ RG_add_2000 12000 icmpv6_trap_rule QoS rule failed! (ret = 655300 (default: 20 secs) 43) /proc/sys/net/ipv4/ip_local_port_range open failed portA=32768 portB = 61000 CMD: /bin/ifconfig br0 192.168.1.1 netmask 255.255.255.0 mtu 1500 CMD: /bin/ifconfig br0 add fe80::xxxx:xxxx:xxxx:xxxx ifconfig: SIOCSIFADDR: File exists CMD: /bin/boa drivers/net/rtl86900/sdk/src/rtk/pon_led.c:1118 led sw blink init complete! rtk_pon_led_SpecType_set 0 [xml_INFO]: Update hs configuration success. RG_reset_static_route-1431 DONE ! xml_mib_update():... netIfIdx 1 vid 7 pri -1 type 1 service 0 isBinding 0 bAdd 1 Disable DMAC to CVID !! Disable dmac2cvid of wan portmask=0x4 CMD: /bin/ifconfig nas0 up pEntry->vid: 7 pEntry->vprio: 0 vlantag: 0x7 TRACE: /bin/ethctl addsmux ipoe nas0 nas0_0 vlan 7 nas0_0 (): not using net_device_ops yet CMD: /bin/ifconfig nas0_0 hw ether d8778ba3cc16 system(): /bin/echo 2 nas0 > /proc/rtl8686gmac/dev_port_mapping port 2 assign to nas0 nas0 -> 0x4 GPON mode. /var/config/europa.data existed, do nothing. /var/config/rtl8290b.data existed, do nothing. [xml_INFO]: Update cs configuration success. ------ [-u cs]Update cs setting ------ europa_drv: module license 'Proprietary' taints kernel. Disabling lock debugging due to kernel taint RTL8290 series driver version [0.3.16] Parameter: I2C_PORT=1 INTR_PIN=29 TXDIS_PIN=13 TXPWR_PIN=43 PON_MODE=1 Init I2C for Europa. rtl8290b_i2c_init: use RTK_API, i2cPort = 1 rtl8290b_i2c_init enable = 1 width=0 clock = 1008 RTL NUM = 0x8290 RTL VID = 0x0001 Open file: rtl8290b.data. Read flash config data... Get current segment descriptor.... Set segment descriptor associated to kernel space.... Read the file.... CMD: /bin/ifconfig nas0_0 txqueuelen 10 CMD: /bin/ifconfig nas0_0 up ADDRCONF(NETDEV_UP): nas0_0: link is not ready 1483 MER CMD: /bin/ifconfig nas0_0 mtu 1500 CMD: /bin/iptables -A INPUT -i nas0_0 -p UDP --dport 69 -d 255.255.255.255 -m state --state NEW -j ACCEPT Restore segment descriptor.... Loaded data from rtl8290b.data Europa Chip Type = 0x0001 rtl8290b_pon_mode = 0! Init RTL8290B module... config TX_DIS = 13 pin... Config GPIO 13 to OUTPUT mode, value = 0 config TxPwr = 43 pin... Config GPIO 43 to OUTPUT mode, value = 0 rtl8290b_parameter_init... Update DDMI A0...., flash_update = 1, addr = 0xc0172ae0 Update DDMI A2...., flash_update = 1, addr = 0xc0172be0 Update RTL8290B A4...., flash_update = 1, length =0x85, addr = 0xc0172ce1 APC Init.... rtl8290b_fsuEnable_set = 1, flag = 1 Config FSU, fsu_flag = 0x1 Calibrating IMPD by internal 50u current...[startIP_v4:3947][pon_mode:1][device_mode:0] CMD: /bin/ifconfig nas0_0 up CMD: /bin/udhcpc -i nas0_0 -p CMD: /var/run/udhcpc.pid.nas0_0 -s /etc/scripts/udhcpc.sh ERROR! No such file or directory CMD: /bin/ethctl conntrack killall ERROR! No such file or directory system(): /bin/echo 1 > /proc/sys/net/ipv4/ip_forward CMD: /bin/iptables -P INPUT ACCEPT CMD: /bin/iptables -P FORWARD ACCEPT CMD: /bin/iptables -A FORWARD -p tcp -o ppp+ --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu CMD: /bin/iptables -A FORWARD -p tcp -i ppp+ --tcp-flags SYN,RST SYN -m tcpmss --mss 1452:1536 -j TCPMSS --set-mss 1452 CMD: /bin/iptables -A INPUT -p udp --dport 520 -j ACCEPT CMD: /bin/iptables -A INPUT ! -i br0 -d 239.255.255.250 -j DROP CMD: /bin/iptables -A INPUT -d 224.0.0.0/4 -j ACCEPT CMD: /bin/iptables -N aclblock CMD: /bin/iptables -t nat -N aclblock CMD: /bin/iptables -t mangle -N aclblock CMD: /bin/iptables -A aclblock -i br0 -s 0.0.0.0/0 -j RETURN CMD: /bin/iptables -t mangle -A aclblock -i nas0_0 -p TCP --dport 23 -j MARK --set-mark 0x1000 [xml_INFO]: Update cs configuration success. CMD: /bin/iptables -t mangle -A aclblock -i nas0_0 -p TCP --dport 80 -j MARK --set-mark 0x1000 udhcp client (v0.9.9-pre) started initialDhcpcOptionTbl: existing rule num:21 CMD: /bin/iptables -t mangle -A aclblock -i nas0_0 -p ICMP --icmp-type echo-request -m limit --limit 10/s -j MARK --set-mark 0x1000 CMD: /bin/iptables -A aclblock -p udp -i br0 --dport 53 -j RETURN CMD: /bin/iptables -A aclblock -p udp -i br0 --dport 67 -j RETURN CMD: /bin/iptables -A aclblock -i lo -j RETURN CMD: /bin/iptables -A aclblock -i nas0_0 -m mark --mark 0x1000 -j ACCEPT size of linux : 3145728 size of linux : 8126464 init_global_parm891::size of g_max_upload_size : 8126464 CMD: /bin/iptables -A aclblock -i nas0_1 -m mark --mark 0x2000<0> TX enable.... -j ACCEPT ~~~BOSA Type=PIN, power down booster... <0> RX enable.... ~~~Config LOS, W36= 0xBA, Flash 71 = 0x1 <0>~~~Config LOS, W40= 0x63, Flash 68 = 0x1 <0>~~~BOSA Type = PIN [ Enable up ] init RTL8290B user parameters ... europa_param.rssi_v0 = 0x89c77 europa_param.gnd_v0 = 0x1a2d36 europa_param.vdd_v0 = 0xe73274 europa_param.half_v0 = 0x7fed2c europa_param.rssi_k = -8041 europa_param.mpd1 = 576000 RX A = 0, RX B = 9812, RX C = -5130, TX A = 863 rssi_r1= 33000 rssi_r2= 6800 Iavg1 = 0x8e temp_0 = 310 temp_0_offset = 20 Update DDMI A0...., addr = 0xc0172ae0 <0>FSU TXSD_DIS: loop_mon_time = 100 europa_param.mpd0 = 0x9d9 CMD: /bin/iptables -A aclblock -i nas0_2 -m mark --mark 0x3000 -j ACCEPT CMD: /bin/iptables -A aclblock -i nas0_3 -m mark --mark 0x4000 -j ACCEPT CMD: /bin/iptables -A aclblock -i nas0_4 -m mark --mark 0x5000 -j ACCEPT CMD: /bin/iptables -A aclblock -i nas0_5 -m mark --mark 0x6000 -j ACCEPT CMD: /bin/iptables -A aclblock -i ppp0 -m mark --mark 0x7000 -j ACCEPT CMD: /bin/iptables -A aclblock -i ppp1 -m mark --mark 0x8000 -j ACCEPT CMD: /bin/iptables -A aclblock ! -i br0 -p ICMP --icmp-type echo-request -m limit --limit 1/s -j DROP CMD: /bin/iptables -A aclblock -m state --state ESTABLISHED,RELATED -j ACCEPT CMD: /bin/iptables -A aclblock -j DROP CMD: /bin/iptables -A INPUT -j aclblock CMD: /bin/iptables -t nat -A PRRun rtl8290b_ldd_mapper EReuropa_intrInit, pin = 29 OUTI DDMI Polling Task Add Success. NG - LoopMon Task Add Success. j Init Europa Finish. aclblock initialDhcpcOptionTbl: add 0 rule to interface 0x1ff00 CMD: /bin/iptables -t mangle -A PREROUTING -j aclblock CMD: /bin/ebtables -N br_wan $ /bin/sh /etc/scripts/insert_europa.sh----- do_rc [/etc/init.d/rc34] ----- write watchdog_flag to 0x00000001 [Kthread : watchdog ] init complete! ************ Watchdog Setting **************** WDT_E=1, (1-enable, 0-disable) LX(MHz)=200 WDT_CLK_SC=3 PH1_TO=31 PH2_TO=0 WDT_RESET_MODE=0 ********************************************** CMD: /bin/ebtables -P br_wan RETURN CMD: /bin/ebtables -N br_wan_out CMD: /bin/ebtables -P br_wan_out RETURN CMD: /bin/ebtables -A INPUT -j br_wan CMD: /bin/ebtables -A OUTPUT -j br_wan_out CMD: /bin/iptables -N domainblk CMD: /bin/iptables -A INPUT -j domainblk ----- do_rc [/etc/init.d/rc35] ----- CMD: /bin/iptables -A FORWARD -j domainblk CMD: /bin/iptables -A OUTPUT -j domainblk CMD: /bin/iptables -N portmapping_dhcp CMD: /bin/iptables -A INPUT -j portmapping_dhcp CMD: /bin/ebtables -N portmapping_igmp CMD: /bin/ebtables -P portmapping_igmp RETURN CMD: /bin/ebtables -A INPUT -j portmapping_igmp CMD: /bin/iptables -N dhcp_port_filter CMD: /bin/iptables -A INPUT -j dhcp_port_filter CMD: /bin/iptables -N urlblock CMD: /bin/iptables -A FORWARD -j urlblock UPNP=0 Turn on phy power... CMD: /bin/iptables -N portfw CMD: /bin/iptables -A FORWARD -j portfw CMD: /bin/iptables -t nat -N portfw CMD: /bin/iptables -t nat -A PREROUTING -j portfw CMD: /bin/iptables -t nat -N portfwPreNatLB CMD: /bin/iptables -t nat -A PREROUTING -j portfwPreNatLB CMD: /bin/iptables -t nat -N portfwPostNatLB [ERR] Warning, unknown dir name: OMCI_WAN_QOS_QUEUE_NUM <fMgmtInit:420> is the so is not a regular file. <fMgmtInit:420> is the so is not a regular file. <fMgmtInit:420> is the so is not a regular file. Module libtr142.so is loaded and inited Module /lib/features/internal/bdp_00000008.so is inited Module /liport 2 bassign to pon0 /pon0 -> 0x4 features/internal/bdp_00000080.so is inited omci_wrapper_msgHandler: devMode 0,receiveState 1,logLevel 0,sn ITBSxxxxxxxx iphost's mac xxxxxxxxxxxx iphost's mac XX XX XX XX XX XX iphost's mac XX XX XX XX XX XX iphost's mac xxxxxxxxxxxx iphost's mac XX XX XX XX XX XX iphost's mac XX XX XX XX XX XX iphost's mac xxxxxxxxxxxx iphost's mac XX XX XX XX XX XX iphost's mac XX XX XX XX XX XX private MEs were initialized. [libtr142] omci_cfg_get_extwan is called OpIdx(6) [libtr142] omci_cfg_get_extwan is called OpIdx(6) [libtr142] omci_cfg_get_extwan is called OpIdx(6) [libtr142] omci_cfg_get_extwan is called OpIdx(6) [libtr142] omci_cfg_get_extwan is called OpIdx(6) [libtr142] omci_cfg_get_extwan is called OpIdx(6) priority: 1, portmask 127, rx: 8022ba48 insert here, priority: 4, portmask 4, rx: 80180ec8 CMD: /bin/iptables -t nat -A POSTROUTING -j portfwPostNatLB CMD: /bin/iptables -F portfw CMD: /bin/iptables -t nat -F portfw CMD: /bin/iptables -t nat -F portfwPreNatLB CMD: /bin/iptables -t nat -F portfwPostNatLB CMD: /bin/iptables -N ipfilter CMD: /bin/iptables -F ipfilter CMD: /bin/iptables -A ipfilter -m state --state ESTABLISHED,RELATED -j RETURN CMD: /bin/iptables -A ipfilter -d 224.0.0.0/4 -j RETURN CMD: /bin/ethctl conntrack killall CMD: /bin/iptables -A FORWARD -j ipfilter CMD: /bin/iptables -t nat -N dmzPreNatLB CMD: /bin/iptables -t nat -A PREROUTING -j dmzPreNatLB CMD: /bin/iptables -t nat -N dmzPostNatLB CMD: /bin/iptables -t nat -A POSTROUTING -j dmzPostNatLB CMD: /bin/iptables -N dmz CMD: /bin/iptables -t nat -N dmz CMD: /bin/iptables -F dmz CMD: /bin/iptables -t nat -F dmz CMD: /bin/iptables -t nat -F dmzPreNatLB CMD: /bin/iptables -t nat -F dmzPostNatLB CMD: /bin/iptables -A ipfilter -j dmz CMD: /bin/iptables -t nat -A PREROUTING -j dmz CMD: /bin/iptables -A ipfilter ! -i br0 -j DROP CMD: /bin/iptables -t nat -N macfilter CMD: /bin/iptables -t nat -I PREROUTING -j macfilter CMD: /bin/ebtables -N macfilter CMD: /bin/ebtables -F macfilter CMD: /bin/iptables -t nat -F macfilter /bin/ebtables -P macfilter RETURN CMD: /bin/ebtables -A FORWARD -j macfilter CMD: /bin/ebtables -P FORWARD DROP CMD: /bin/ebtables -N disBCMC CMD: /bin/ebtables -A disBCMC -d Broadcast -j DROP CMD: /bin/ebtables -A disBCMC -d Multicast -j DROP CMD: /bin/ebtables -I FORWARD -j disBCMC CMD: /bin/ebtables -P disBCMC DROP CMD: /bin/ip6tables -P INPUT DROP CMD: /bin/ip6tables -A INPUT -p icmpv6 --icmpv6-type router-advertisement -j ACCEPT CMD: /bin/ip6tables -A INPUT -p icmpv6 --icmpv6-type neighbour-solicitation -j ACCEPT CMD: /bin/ip6tables -A INPUT -p icmpv6 --icmpv6-type neighbour-advertisement -j ACCEPT CMD: /bin/ip6tables -A INPUT -p icmpv6 -i br0 -j ACCEPT CMD: /bin/ip6tables -A INPUT -m state --state NEW -i br0 -j ACCEPT CMD: /bin/ip6tables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT CMD: /bin/ip6tables -A INPUT -p udp --dport 546 -j ACCEPT CMD: /bin/ip6tables -A INPUT -i br0 -p udp --dport 547 -j ACCEPT CMD: /bin/ip6tables -N aclblock CMD: /bin/ip6tables -A aclblock ! -i br0 -s ::/0 -p ICMPV6 -m limit --limit 1/s -j ACCEPT port set phy-force-power-down port all state disable CMD: /bin/ip6tables -A aclblock -p udp -i br0 --dport 53 -j RETURN CMD: /bin/ip6tables -A aclblock -p udp -i br0 --dport 67 -j RETURN CMD: /bin/ip6tables -A aclblock -i lo -j RETURN CMD: /bin/ip6tables -A aclblock -m state --state ESTABLISHED,RELATED -j ACCEPT CMD: /bin/ip6tables -A aclblock -j DROP CMD: /bin/ip6tables -A INPUT -j aclblock CMD: /bin/ip6tables -N ipv6filter CMD: /bin/ip6tables -A FORWARD -j ipv6filter RTK.0> command:starting pid 908, tty '/dev/ttyS0': '/bin/login -p' starting pid 910, tty '': '/bin/systemd' starting pid 909, tty '': '/bin/inetd' Restart IPv6 Filter! CMD: /bin/ip6tables -F ipv6filter CMD: /bin/ip6tables -A ipv6filter -m state --state ESTABLISHED,RELATED -j RETURN Update Firewall rule set by user. Open file /var/prefix_info fail ! Error! Note Got prefix yet! CMD: /bin/ethctl conntrack killall login: CMD: /bin/ip6tables -N reject_list CMD: /bin/ip6tables -A FORWARD -j reject_list CMD: /bin/ip6tables -N reject_list_no_router TRC_PG(setupOtherWan:9406): [cmd:iptables -D INPUT -i eth0.2 -p udp --dport 67 -j DROP] iptables: Bad rule (does a matching rule exist in that chain?) TRC_PG(setupOtherWan:9410): ****Enable ftp ALG function!***** 0m[itfgroup:0] *****Enable h323 ALG function!***** sh: can't create /proc/algonoff_irc: nonexistent directory *****Enable rtsp ALG function!***** *****Enable sip ALG function!***** *****Enable pptp ALG function!***** CMD: /bin/ifconfig eth0.2 up [SYSTEMD] free memory is too small (1176 kB), drop caches !!! ADDRCONF(NETDEV_UP): eth0.2: link is not ready CMD: /bin/iptables -t mangle -A PREROUTING ! -i br0 -p TCP --dport 7547 -j MARK --set-mark 0x1000 IGMP Snooping: enabled CMD: /bin/ebtables -D FORWARD -j vlanmapping Illegal target name 'vlanmapping'. CMD: /bin/ebtables -N vlanmapping CMD: /bin/ebtables -P vlanmapping DROP CMD: /bin/ebtables -F vlanmapping CMD: /bin/ebtables -A FORWARD -j vlanmapping CMD: /bin/ebtables -t broute -D BROUTING -j broute_vlanmapping Illegal target name 'broute_vlanmapping'. CMD: /bin/ebtables -t broute -N broute_vlanmapping CMD: /bin/ebtables -t broute -D BROUTING -j vlanbinding Illegal target name 'vlanbinding'. CMD: /bin/ebtables -t broute -N vlanbinding CMD: /bin/ebtables -t broute -P vlanbinding RETURN CMD: /bin/ebtables -t broute -F vlanbinding CMD: /bin/ebtables -t broute -I BROUTING -j vlanbinding CMD: /bin/ebtables -t broute -P broute_vlanmapping RETURN CMD: /bin/ebtables -t broute -F broute_vlanmapping CMD: /bin/ebtables -t broute -I BROUTING -j broute_vlanmapping CMD: /bin/ebtables -t broute -N broute_chain_eth0.2 -P RETURN CMD: /bin/ebtables -t broute -F broute_chain_eth0.2 CMD: /bin/ebtables -t broute -F vlanbinding CMD: /bin/iptables -t mangle -D PREROUTING -i br0 -j lan_mark iptables v1.2.7a: Couldn't find target `lan_mark' Try `iptables -h' or 'iptables --help' for more information. CMD: /bin/iptables -t mangle -N lan_mark CMD: /bin/iptables -t mangle -F lan_mark CMD: /bin/iptables -t mangle -A PREROUTING -i br0 -j lan_mark CMD: /bin/ebtables -F portmapping_igmp CMD: /bin/ebtables -D FORWARD -j portmapping Illegal target name 'portmapping'. CMD: /bin/ebtables -N portmapping CMD: /bin/ebtables -A FORWARD -j portmapping CMD: /bin/ip rule del fwmark 0x00008000/0x000f8080 RTNETLINK answers: No such file or directory CMD: /bin/ip rule del fwmark 0x00010000/0x000f8080 RTNETLINK answers: No such file or directory CMD: /bin/ip rule del fwmark 0x00018000/0x000f8080 RTNETLINK answers: No such file or directory CMD: /bin/ip rule del fwmark 0x00020000/0x000f8080 RTNETLINK answers: No such file or directory CMD: /bin/ip rule del fwmark 0x00028000/0x000f8080 RTNETLINK answers: No such file or directory CMD: /bin/ip rule del fwmark 0x00030000/0x000f8080 RTNETLINK answers: No such file or directory CMD: /bin/ip rule del fwmark 0x00038000/0x000f8080 RTNETLINK answers: No such file or directory CMD: /bin/ip rule del fwmark 0x00040000/0x000f8080 RTNETLINK answers: No such file or directory CMD: /bin/ip rule del fwmark 0x00048000/0x000f8080 RTNETLINK answers: No such file or directory CMD: /bin/ip rule del fwmark 0x00050000/0x000f8080 RTNETLINK answers: No such file or directory CMD: /bin/ip rule del fwmark 0x00058000/0x000f8080 RTNETLINK answers: No such file or directory CMD: /bin/ip rule del fwmark 0x00060000/0x000f8080 RTNETLINK answers: No such file or directory CMD: /bin/ip rule del fwmark 0x00068000/0x000f8080 RTNETLINK answers: No such file or directory CMD: /bin/ip rule del fwmark 0x00070000/0x000f8080 RTNETLINK answers: No such file or directory CMD: /bin/ip rule del prohibit RTNETLINK answers: No such file or directory CMD: /bin/ip rule del prohibit RTNETLINK answers: No such file or directory CMD: /bin/ip rule del prohibit RTNETLINK answers: No such file or directory CMD: /bin/ip rule del prohibit RTNETLINK answers: No such file or directory CMD: /bin/ip rule del prohibit RTNETLINK answers: No such file or directory CMD: /bin/ip rule del prohibit RTNETLINK answers: No such filenetIfIdx 1 vid 0 opri 0 rtype 0 service 0 disBinding 0 ibAdd 0 rectory CMD: /bin/ip rule del prohibit RTNnetIfIdx 1 ETvid 7 Lpri -1 Itype 1 Nservice 0 KisBinding 0 bAdd 1 answers: No such file or directory CMD: /bin/ip rule del prohibit RTNETLINK answers: No such file or directory CMD: /bin/ip rule del prohibit RTNETLINK answers: No such file or directory CMD: /bin/ip rule del prohibit RTNETLINK answers: No such file or directory rtk fast bridge is enabled CMD: /bin/ip rule del prohibit RTNETLINK answers: No such file or directory CMD: /bin/ip rule del prohibit RTNETLINK answers: No such file or directory CMD: /bin/ip rule del prohibit RTNETLINK answers: No such file or directory CMD: /bin/ip rule del prohibit RTNETLINK answers: No such file or directory CMD: /bin/iptables -F portmapping_dhcp CMD: /bin/ebtables -I vlanmapping -i eth0.2 -j RETURN CMD: /bin/iptables -t mangle -A lan_mark -i eth0.2 -unlearned SA rate limit disabled. j MARK --set-mark 0x00008000/0x000f8080 CMD: /bin/ip route add default dev nas0_0 table 32 subr_qos_3.c: setupIPQ 2561 sh: can't create /proc/FastPath: nonexistent directory Init System OK for IPV6 CMD: /bin/ebtables -t broute -D BROUTING -j untag_pvid_2cpu Illegal target name 'untag_pvid_2cpu'. CMD: /bin/ebtables -t broute -N untag_pvid_2cpu CMD: /bin/ebtables -t broute -P untag_pvid_2cpu RETURN CMD: /bin/ebtables -t broute -F untag_pvid_2cpu CMD: /bin/ebtables -t broute -I BROUTING -j untag_pvid_2cpu No lease, wait 30 second to retry.
Firmwares
Stock
Versões oficiais e não modificadas para o aparelho. São de propriedade do fabricante - que detém todos os direitos sobre elas - e mantidas aqui apenas em caráter de arquivamento e espelhamento, podendo ser removidas caso solicitado pelos representantes oficiais da empresa.
Para versões mais recentes ou não listadas aqui, consultar o site oficial: Intelbras
1.3-220719
ONU_R1_1-3-220719.zip ( SHA256: 6594a6af390069cee417bb02116b0aebd37db9d2b949eab2f74e3b11614fdf57 )
Custom
Exceto pelas alterações realizadas, as imagens de firmware continuam de propriedade das marcas/fabricantes do aparelho. Não solicite suporte ou assistência para dispositivos utilizando uma imagem custom.
Estas imagens são testadas localmente ao máximo possível porém seu uso e possíveis implicações são de total responsabilidade do proprietário do aparelho.
Versões modificadas com correções e/ou melhorias, baseadas em releases oficiais/stock.
As versões são cumulativas, ou seja, a mais recente sempre contém também todas as modificações das versões anteriores.
É possível atualizar entre versões custom ou stock sem nenhum problema. Note que saltos na versão base podem incluir ou remover parâmetros de configuração, portanto é aconselhável um factory reset após realizar tais atualizações. Adicionalmente, efetue estes procedimentos com a fibra desconectada do aparelho.
Caso a versão base continue a mesma de uma versão custom para a outra, não é necessário o factory reset, salvo se solicitado explicitamente na descrição.
1.9-220719
- Baseada no release oficial V1.3-220719
- Adicionado utilitário setcons.
- Vários comandos executados via telnet no aparelho tem sua saída configurada para o console (apontado para a porta serial/UART), sendo necessário desmontar e usar um adaptador/cabo/conversor serial para vê-las. A ferramenta setcons permite redirecionar a saída do console para o terminal atual - provavelmente sua sessão telnet -, permitindo ver as saídas diretamente. Após conectar-se via telnet no aparelho, execute o comando setcons para instruções de uso; ou, resumindo:
setcons -s omcicli get tables omcicli mib get 84 setcons -r
- Os comandos entre o setcons são apenas exemplos, execute os comandos que desejar. O redirecionamento não é permanente, sendo válido apenas para a mesma sessão. Mesmo que não retorne para a saída padrão depois, tudo retorna ao normal após um reboot ou se desconectar do telnet.
1.9-220719.tar ( SHA256: 4f6a7b06ca390460c727f43a739476ffd5439dd843d8aeb63c65be830635e92e )
Agradecimentos
Pessoas envolvidas em arquivos, discussões, dicas ou bate papo em geral. Lista em ordem alfabética.