Thank you for the great work that made possible to use Debian/Ubuntu on BPI-R4.
While using Ubuntu image I've found some issues in bpi-r4_noble_6.12.6-main.img.gz image.
There are some router-specific configs in the repository(conf/bpi-r4/etc folder). It seems at least some of these configs are not applied or works not as expected..
- Configs from
conf/bpi-r4/etc/systemd/network folder doesn't appear in the final image. There are no such files at all.
- Configs from
conf/bpi-r4/etc/hostapd folder exists in the final image but seems not applied.
- It seems only
conf/generic/etc/hostapd/hostapd_wlan0.conf config is active in the final image. Even conf/generic/etc/hostapd/hostapd_wlan1.conf isn't applied. It seems not supposed to be like this.
I assume the expected Access Point config is next:
- Have active configs from
conf/bpi-r4/etc/hostapd folder
- Disregard configs from
conf/generic/etc/hostapd folder
Also i found that none of the clients (wired and wireless) have the access to the internet while router itself has access.
It's not a DNS issue - I tested it with ping 1.1.1.1.
There is also unsafe sshd config that allows SSH access through WAN interface. Which actually means that the router is exposed to the entire internet if you have a public IP address.
This is easy to be fixed by adding ListenAddress 192.168.1.1 to /etc/ssh/sshd_config but the problem is that nowadays it takes just a few seconds to be hacked if you have exposed SSH access with default password to the entire internet.
Thank you for the great work that made possible to use Debian/Ubuntu on BPI-R4.
While using Ubuntu image I've found some issues in
bpi-r4_noble_6.12.6-main.img.gzimage.There are some router-specific configs in the repository(
conf/bpi-r4/etcfolder). It seems at least some of these configs are not applied or works not as expected..conf/bpi-r4/etc/systemd/networkfolder doesn't appear in the final image. There are no such files at all.conf/bpi-r4/etc/hostapdfolder exists in the final image but seems not applied.conf/generic/etc/hostapd/hostapd_wlan0.confconfig is active in the final image. Evenconf/generic/etc/hostapd/hostapd_wlan1.confisn't applied. It seems not supposed to be like this.I assume the expected Access Point config is next:
conf/bpi-r4/etc/hostapdfolderconf/generic/etc/hostapdfolderAlso i found that none of the clients (wired and wireless) have the access to the internet while router itself has access.
It's not a DNS issue - I tested it with
ping 1.1.1.1.There is also unsafe sshd config that allows SSH access through WAN interface. Which actually means that the router is exposed to the entire internet if you have a public IP address.
This is easy to be fixed by adding
ListenAddress 192.168.1.1to/etc/ssh/sshd_configbut the problem is that nowadays it takes just a few seconds to be hacked if you have exposed SSH access with default password to the entire internet.