FROSTY
Premium,MVM
join:2000-08-10
Leeds, AL
clubs: 
 ·Windstream
·AT&T Southeast
|  reply to poostyx
A FIX to revert back to STH/Pro!!
Ok, just to let you all know, I'm not a newb. 
I have been running a 'G' STH hacked to Pro using it's PPPoA to DHCP Spoofing feature with an external router. The ability to hack a STH to a 510 rather intrigued me and I was curious to find out if the 510 hack improved the DHCP Spoofing functionality. So, last night I did the STH to 510 hack on my spare 'G' STH/Pro.
IMHO, the 510 hack did not impress me. Not only is the menu structure lacking features, like the true phonebook setup page found in the STH/Pro, but in fact rather disappointed.
When I got ready to switch back to the G.281 firmware, I experienced the same problem of not being able to revert the STH hacked to 510 back to a STH/Pro.
Poostyx is correct, the hack write-protects the /active/active.flg file and prevents the passive firmware from being switched to active.
I found the solution and it does work!!!!
It was on a site called www.forpage.com.
»www.forpage.com/forum/viewtopic.···um=19&33
Use Google's Translator to convert the text to English, it does a good job.
Basically, here's the steps:
Telnet into the modem and enter EXPERT mode. Type softwa (enter), then deletepassive (enter), and then cleanup (enter). Leaving the telnet session running, open a FTP connection to the modem. Goto the dl directory and delete anything else remaining in it. Now, upload the GV8BAA3.281 into the dl folder. Once that has completed, switch back to the telnet window (leaving the FTP session running) and type setpassive file=GV8BAA3.281 (enter). If you cannot set the passive firmware, then the problem is the UPPER / lower case spelling of the firmware (prior to uploading the firmware ensure the file name is in ALL CAPS to avoid this issue). Type version (enter) to ensure the GV8BAA3.281 is in the passive slot. Now, go back to the FTP session and upload the zero-byte active.flg (all lower case) into the dl folder. Can download the active.flg from the active directory, then upload it to the dl directory. 
Now, the tricky part!!!
Type exit (enter) to back out of the softwa menu and type dbg (enter) to enter the debug menu. After reading the above link, you'll notice they make reference that the debug address shifts around after rebooting the modem and several users had to spend 30 minutes or longer checking 400 chunks of memory at a time. With my modem, no matter how many times I rebooted it, the addresses I found the active and dl text we are looking for started around dm 44c0.
To fix my modem, this is what I had to do after I found the specific hex address..
In telnet at the dbg prompt:
pm 44d1 02
pm 44e1 00
Also, from the link above, you'll notice they say the hex numbers to transpose in front of the A in active and D in dl will not be the same. They kept referring to 0b and 05, while mine was 00 and 02.
Go back to the FTP session after issuing the appropriate pm commands. Be sure to 'refresh' the FTP contents. If done correctly, you'll notice the active directory now contains the GV8BAA3.281 firmware and the dl directory now contains the GV8BAA3.721 firmware.
Very Important
Once you've confirmed the FTP directory structure has switched, go back to the open telnet session and type exit (enter), then softwa (enter), then version (enter). Should report GV8BAA3.281 in active and GV8BAA3.721 in passive. Type deletepassive (enter), then cleanup (enter), and finally version (enter). Should show GV8BAA3.281 as active and nothing as passive. Type exit (enter), then system (enter), and reboot.
The modem should reboot, then before the power LED turns green, all lights on the modem will go off. This is normal, do not do anything!!!. After a moment or 2, the power LED will turn Green. Log into modem »10.0.0.138. You should see the good ol STH/Pro webpages, and visiting the Upgrade page will reveal .281 firmware is loaded into the active and passive slot.
I will say, be careful, doing the slightest thing wrong could completely toast the modem for good. Which to me, my spare was already useless the moment I loaded the 510 hack into it.
Good luck to those stuck in 510 mode!!!
--
"When you set yourself on fire and aim for the sky, you hope to leave behind some sparks of heat and light ... Like a vapor trail." - Neil Peart 2002 |
