Subject: Worldnet.att.net via Linux PPP Connection

From: Jim Worthington <[email-masked]>
Date: Mon, 09 Sep 1996 14:56:09 -0400

My ISP is worldnet.att.net.  They use a PPP connection protocol
developed by Shiva.  I'm not sure whether it uses PAP or CHAP.  I
normally access using the windows 95 dialer by
filling in the Username and Password fields.  There is no logon /
dialing script.

Is anybody successfully connecting to Worldnet with Linux?
How do I configure pppd to emulate the Windows 95 dialer protocol?

Jim

---

From: Ron Welch <[email-masked]>
Date: Tue, 10 Sep 1996 09:52:23 -0400

The following message was posted to the Caldera mailing list a while back.

-- 
------------=-=-=-=-=-=-=-=-=======================-=-=-=-=-=-=-=-=------------
Ron Welch     [email-masked]     Phone: (607) 770-3701   Fax: (607) 770-2056
Lockheed Martin Control Systems     600 Main Street Johnson City, NY 13790-1888
------------=-=-=-=-=-=-=-=-=======================-=-=-=-=-=-=-=-=------------

----------------------------------------------------------------------------

Connecting Linux and AT&T Worldnet Services

AT&T's Worldnet Service uses standard PPP (Point-to-Point Protocol) with
CHAP (Challage Handshake Authentication Protocol). While Windows 3.1x or
Windows 95 is required to register a new account, other operating systems
that support PPP with CHAP can be used once an account is registered.

Unless you have already configured your Linux system to use PPP to another
Internet Service Provider, connecting to Worldnet from Linux will take a
little bit of work (recompiling the Linux kernel). I list here a few reasons
why one might want to do this bit of work.

If you have used PPP to connect to other ISP's from Linux, and pretty much
know what you are doing try reading the Expert Notes below.

The Instructions

  1. If you have not already done so, activate your Worldnet account using
     the installation disks.
  2. If you have already successfully installed and used PPP with other
     ISP's, skip to step
  3. Get a copy of ppp-2.1.2d.tar if your kernel is version 1.2.x, or
     ppp-2.2.0e.tar for kernels >= 1.3.x.
  4. Follow the directions contained within the ppp package for rebuilding
     your kernel with PPP support and for installing pppd and chat.
  5. Get a copy of the file WORLDNET\DIALER\REG.INI and use the settings in
     the scripts below.
  6. Add the following line to the file /etc/ppp/chap-secrets
  7. [email-masked] * "password" *

     where 9999999999 has been replace by number on the "Name" line of
     REG.INI and password is replaced the value on the "Password" line. The
     quotation marks around the password are important to protect special
     character that might appear in the password.

  8. Create, the following script. I have given mine the name
     /usr/sbin/ppp-on.
  9. #!/usr/bin/perl
     #
     # Script to establish connection to WorldNet via PPP.
     #
     # Look at WORLDNET\DIALER\REG.INI and ATT.SR to get the following settings
     #
     $DOMAIN="worldnet.att.net";          # DomainName from ATT.SR
     $SEARCH=$DOMAIN;
     $NAMESERVER1="204.127.129.1";        # DNS_ADDR from REG.INI
     $NAMESERVER2="204.127.129.2";        # DNS_ADDR_2
     $NAME="999999999\@worldnet.att.net"; # LOGIN
     $PHONE="6213400"; # Cambridge, MA    # Phone from ATT.SR
     $MODEM="/dev/modem";

     $resolv = '>/etc/resolv.conf';

     open(CONF,$resolv)|| die "Cannot open file: $resolv.\n  $! \n";

     print CONF "\#resolv.conf - created automatically by ".$ARGV[0]."\n";
     print CONF "domain ".$DOMAIN."\n";
     print CONF "search ".$SEARCH."\n";
     print CONF "nameserver ".$NAMESERVER1."\n";
     print CONF "nameserver ".$NAMESERVER2."\n";

     $command="/usr/sbin/pppd name \"".$NAME."\"".
         " -d connect \'/usr/sbin/chat -t 45 -v ABORT BUSY \"\" ATDT".
         $PHONE." CONNECT \"\"\' ".$MODEM.
         " 57600 noipdefault modem defaultroute crtscts";
     #print $command."\n";
     $ENV{'PATH'} = ''; # Make $ENV{'PATH'} untainted
     system($command);

     Executing this script should then startup up a connection to worldnet.
     Give the script a permission of 4755 (chmod 4755 /usr/sbin/ppp-on) if
     you want to be able to startup the Internet connection from accounts
     other than root.

     This script is a bit fancy in that it writes to the file
     /etc/resolv.conf the domain name and the nameserver numbers. This can
     be handy if you have several similar scripts for different ISP's, each
     of which has it's own domain name and nameservers. If perl is not
     available, or you want a simpler script, edit /etc/resolv.conf to
     contain

     domain worldnet.att.net
     nameserver 204.127.129.1
     nameserver 204.127.129.2

     and use the following the following script startup PPP (replacing the
     login name and phone number with appropriate values.)

     /usr/sbin/pppd name "[email-masked]" -d connect \
             '/usr/sbin/chat -t 45 -v ABORT BUSY "" ATDT1111111 CONNECT ""' \
             /dev/modem 57600 noipdefault modem defaultroute crtscts

 10. Optionally, one may optionally add a script to disconnect ppp. The
     following is an example of /usr/sbin/ppp-off
 11. #!/bin/sh
     # ppp-down - simply kills the ppp-daemon
     kill `ps -a | grep pppd | grep -v grep | cut -b 1-6`

Mail and News

The values of NNTP_HOST, SMTP_HOST, POP_SERVER, POP_PASSWORD, and EMAIL_ADDR
can be extracted from WORLDNET\DIALER\REG.INI and used in whatever pop-mail
and news software you choose. The Linux version Netscape 2.0 handles both
mail and news fine.

Ed Kelley's Visual Guide to setting up Netscape 2.0 under Windows 95 may
provide some guidance towards setting up Netscape 2.0 under Linux.

PPP utilities

A number of PPP utilities are available to enhance the use of PPP on Linux.
For example, I use tkppp to give a convenient GUI to start and stop my
Worldnet connection as well as to keep track of hours of usage.

Expert notes

If you are already using PPP to other ISP's there are essentially just two
possibly new things that need to be done. First, since Worldnet uses CHAP,
you must put your username and password (as found in REG.INI) into the file
/etc/ppp/chap-secrets like so: [email-masked] * "password" *

Secondly, the chat script should only go as far as getting the phone dialed
in. CHAP will take care of passing username and password. For example:

usr/sbin/pppd name "[email-masked]" -d connect
'/usr/sbin/chat -t 45 -v ABORT BUSY "" ATDTthephonenumber CONNECT ""' \
/dev/modem 57600 noipdefault debug modem defaultroute crtscts

----------------------------------------------------------------------------
Last Update 5 April 1996

---

From: "David L. Craig" <[email-masked]>
Date: Tue, 10 Sep 1996 12:35:16 -0400 (EDT)

As Ron Welch wrote:

> Message-Id: <[email-masked]>
> Date: Tue, 10 Sep 1996 09:52:23 -0400
> From: Ron Welch <[email-masked]>
> Organization: Lockheed Martin Control Systems
> To: [email-masked]
> Cc: [email-masked]
> Subject: Re: Worldnet.att.net via Linux PPP Connection
> 
[ Excellent material elided -- dlc ]

I was very unhappy to see this nice explanation ignore the
perils of IP routing between the ISP and internal networks.
Does anyone suppose its original source could be located so
at least a paragraph could be inserted warning of the danger
and recommending the user hook up with his network
administrator to ensure he doesn't inadvertantly create a
backdoor into his organization?

---

From: Boris Beletsky <[email-masked]>
Date: Tue, 10 Sep 1996 22:52:25 +0300 (IDT)

-----BEGIN PGP SIGNED MESSAGE-----

On Mon, 9 Sep 1996, Jim Worthington wrote:

jworthington>My ISP is worldnet.att.net.  They use a PPP connection protocol
jworthington>developed by Shiva.  I'm not sure whether it uses PAP or CHAP.  I
jworthington>normally access using the windows 95 dialer by
jworthington>filling in the Username and Password fields.  There is no logon /
jworthington>dialing script.

u will have to try and dial into u're ISP via some terminal prog. like minicom
and check how can u fix the connection via chat script

jworthington>Is anybody successfully connecting to Worldnet with Linux?
jworthington>How do I configure pppd to emulate the Windows 95 dialer protocol?

TO EMULATE?!
ppp deamon is not win95 emulator!

___
Boris Beletsky <[email-masked]>
For pgp public key, e-mail me 
with subject "get pgp-key."
___
In Linux veritas

---

From: [email-masked] (Christoph Lameter)
Date: 10 Sep 1996 18:12:22 -0700

David L. Craig ([email-masked]) wrote:
: I was very unhappy to see this nice explanation ignore the
: perils of IP routing between the ISP and internal networks.
: Does anyone suppose its original source could be located so
: at least a paragraph could be inserted warning of the danger
: and recommending the user hook up with his network
: administrator to ensure he doesn't inadvertantly create a
: backdoor into his organization?

I am not aware that this could happen. There is no IP routing going on at all.
Most ISPs (like us) block all routing information sent from the PPP link.

---

From: "David L. Craig" <[email-masked]>
Date: Fri, 13 Sep 1996 10:23:21 -0400 (EDT)

As Christoph Lameter wrote:

> To: [email-masked]
> From: [email-masked] (Christoph Lameter)
> Date: 10 Sep 1996 18:12:22 -0700
> Organization: Fuller Theological Seminary, Pasadena, CA 91182
> Message-Id: <[email-masked]>
> Resent-From: [email-masked]
> 
> I am not aware that this could happen. There is no IP
> routing going on at all.  Most ISPs (like us) block all
> routing information sent from the PPP link.

I guess I wasn't clear.  I wasn't refering to routing
protocols as much as the ability of packets to be
source-routed through the system.  My point was this type of
document should include enough information, probably one
paragraph including a pointer to detailed info, that alerts
the reader to these security issues.  It is not the job of
the ISPs to educate their customers about risks of being an
Internet host, and the network admin on the LAN side of this
path may not be aware the node is running a SLIP or PPP link
to an ISP.

---

From: Christoph Lameter <[email-masked]>
Date: Fri, 13 Sep 1996 08:19:46 -0700 (PDT)

On Fri, 13 Sep 1996, David L. Craig wrote:

dlc>> I am not aware that this could happen. There is no IP
dlc>> routing going on at all.  Most ISPs (like us) block all
dlc>> routing information sent from the PPP link.
dlc>
dlc>I guess I wasn't clear.  I wasn't refering to routing
dlc>protocols as much as the ability of packets to be
dlc>source-routed through the system.  My point was this type of
Per default source routing under Linux is disabled. I still dont
know what the security issue is you are referring to?

dlc>document should include enough information, probably one
dlc>paragraph including a pointer to detailed info, that alerts
dlc>the reader to these security issues.  It is not the job of
dlc>the ISPs to educate their customers about risks of being an
dlc>Internet host, and the network admin on the LAN side of this
dlc>path may not be aware the node is running a SLIP or PPP link
dlc>to an ISP.
dlc>

{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}
{}    Snail Mail:   FTS Box 466, 135 N.Oakland Ave, Pasadena, CA 91182        {}
{}    FISH Internet System Administrator at Fuller Theological Seminary       {}
{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}{}
PGP Public Key  =  FB 9B 31 21 04 1E 3A 33  C7 62 2F C0 CD 81 CA B5

---

From: "David L. Craig" <[email-masked]>
Date: Fri, 13 Sep 1996 11:57:23 -0400 (EDT)

As Christoph Lameter wrote:

> Date: Fri, 13 Sep 1996 08:19:46 -0700 (PDT)
> From: Christoph Lameter <[email-masked]>
> To: "David L. Craig" <[email-masked]>
> cc: [email-masked]
> Message-ID: <[email-masked]>
> 
> dlc> I guess I wasn't clear.  I wasn't refering to routing
> dlc> protocols as much as the ability of packets to be
> dlc> source-routed through the system.

> Per default source routing under Linux is disabled. I
> still dont know what the security issue is you are
> referring to?

Are you certain all distributions, past and present,
disable source routing by default?  I was under the
impression that some of the earlier ones did not.