The Site > Old Forums > MSN > Post progress on msn dsl 1000 here!

Post progress on msn dsl 1000 here!

yay i have gotten a small step further in making msn decent!
i made a hyperterminal connection into 192.168.1.1:22368 and it gave me a message: "access denyed" well it is a small step...

reply to RandomMan8
Best wishes on your quest and welcome to BBR, RandomMan!

--
Team Helix Forum - Join Us?

im thinking of running a hyperterminal bruteforcer, any suggestions?

reply to RandomMan8
go ahead, the last thing that could happen is itll get fried... then msn will send you a new one

reply to RandomMan8
Ok - If you bring up a web browser and go to:
»192.168.1.1:5000
You receive and XML page describing the functions available on the modem.
There are
Layer 3 Forwarding: »192.168.1.1:5000/images/wanl3f.xml
WAN Common Interface Config
»192.168.1.1:5000/images/wancomm.xml
WAN PPP Connection (NAT Stuff is in here)
»192.168.1.1:5000/images/wanppp.xml
WAN DSL Link Config
»192.168.1.1:5000/images/dsllink.xml

The modem is a uPnP device.
I took a look at the info on www.upnp.org and developed
a small app to look at the config and even change some things. I am able to add a NAT port mapping entry to the modem, but I am still missing something. It's not forwarding the requests to the internal pc.

Here are the fields available:

I ran a sniffer on the modem and was able to capture the system trying to add a port mapping for msmsgs (whatever that is). I duplicated the values in the fields, but changed the ports. No luck.
I can add a port mapping with these entries, and when I query the modem, I see the mapping.

Let me know if anyone wants to see the source to the program I wrote. It's a little rough right now, but maybe someone can see what I am missing. (it's VB)

-Justin

reply to RandomMan8
where did you start?
[text was edited by author 2003-04-14 16:49:34]

Well, it's a long story....
I've been poking around on this modem for a while. I decided to setup a sniffer and see what happened when I used to DSLConnection tool to 'Repair' the modem. There was some interesting traffic after the modem reset. This is where I found that it appears to be a web/xml interface. I saw some references to uPnP in the packets and started researching uPnP. The whole spec, including how to talk to the devices is spelled out on the »www.upnp.org website.
With a little more poking around, I pulled the modem up on a web page on port 5000. That's were I found all this interesting stuff.

-Justin

reply to RandomMan8
Hey, keep up that work. Maybe you can get some kind of NAT disabling. =)

reply to RandomMan8
so you have been able to write to the modem? well thats a great start at least.

open source

reply to RandomMan8

msn1000.zip 4,681 bytes

reply to RandomMan8
Ok, I read in someone else's post that you cannot connect to your own external IP. Seems wierd, but I ran an online port scanner. I opened up port 90 as a web server. I guess I'll open up port 80 as well.
So...
Can someone verify for me that it is working?
»63.229.79.168:90/msn1000.htm
-or-
»63.229.79.168/msn1000.htm

Please post and let me know.

Thanks,
Justin

First link works for me. Second does not.

--
Team Helix Forum - Join Us?

reply to RandomMan8
Hmmm.
Ok, so it appears that port 80 is somehow 'reserved'.
I can open port 21, 23 (at least according to the port scan). See if you can get an ftp connection:
»ftp://63.229.79.168

reply to RandomMan8
sweet, this works.. so i assume that i will have to update the ports whenever my modem is reset though?

reply to RandomMan8
you just did in a few days what msn couldnt/wouldnt do in about a year.

just hope they dont block this method out in the next firmware

reply to RandomMan8
connect to your modem thru a proxy and you should get it. it worked for me (besides the fact that proxies are slow)

»www.publicproxyservers.com

reply to justinc10196
How do I run the source code?
[text was edited by author 2003-04-16 12:07:58]

reply to RandomMan8
How exactly do I use this?
I opened the source up in Visual Basic and compiled it.

It's really rough right now. I need to polish it up and make it a little more friendly.
But, If you open it up in VB and run it, there is an option to add a port entry. Fill in the information requested (External Port, Internal Host, Internal Port) and click the button.
You will see some information come back in the textbox. Look for any errors.
Then select the view port mapping entries. The index should be 0 for the first entry. Mine usually has 2 that seem to get automatically configured. So, just increment the index and repeat the reqest until you find your mapping. If you see it - then you are all set.

I'm going to keep working on it to make it a little more usable.

-Justin