-
Notifications
You must be signed in to change notification settings - Fork 16
Description
Thank you for the great work that made possible to use Debian/Ubuntu on BPI-R4.
While using Ubuntu image I've found some issues in bpi-r4_noble_6.12.6-main.img.gz image.
There are some router-specific configs in the repository(conf/bpi-r4/etc folder). It seems at least some of these configs are not applied or works not as expected..
- Configs from
conf/bpi-r4/etc/systemd/networkfolder doesn't appear in the final image. There are no such files at all. - Configs from
conf/bpi-r4/etc/hostapdfolder exists in the final image but seems not applied. - It seems only
conf/generic/etc/hostapd/hostapd_wlan0.confconfig is active in the final image. Evenconf/generic/etc/hostapd/hostapd_wlan1.confisn't applied. It seems not supposed to be like this.
I assume the expected Access Point config is next:
- Have active configs from
conf/bpi-r4/etc/hostapdfolder - Disregard configs from
conf/generic/etc/hostapdfolder
Also i found that none of the clients (wired and wireless) have the access to the internet while router itself has access.
It's not a DNS issue - I tested it with ping 1.1.1.1.
There is also unsafe sshd config that allows SSH access through WAN interface. Which actually means that the router is exposed to the entire internet if you have a public IP address.
This is easy to be fixed by adding ListenAddress 192.168.1.1 to /etc/ssh/sshd_config but the problem is that nowadays it takes just a few seconds to be hacked if you have exposed SSH access with default password to the entire internet.