{"id":2150,"date":"2018-10-02T07:32:48","date_gmt":"2018-10-01T22:32:48","guid":{"rendered":"http:\/\/matoken.org\/blog\/?p=2150"},"modified":"2018-10-02T20:45:03","modified_gmt":"2018-10-02T11:45:03","slug":"overflow-of-the-nat-table-of-the-adsl-modem","status":"publish","type":"post","link":"https:\/\/matoken.org\/blog\/2018\/10\/02\/overflow-of-the-nat-table-of-the-adsl-modem\/","title":{"rendered":"ADSL\u30e2\u30c7\u30e0\u306eNAT\u30c6\u30fc\u30d6\u30eb\u6ea2\u308c\u3067\u56f0\u308b"},"content":{"rendered":"
\n

\u53e4\u3044ADSL \u30e2\u30c7\u30e0\u3067\u81ea\u5b85\u30b5\u30fc\u30d0\u3092\u7acb\u3066\u3066\u3044\u308b\u5834\u5408\u306e\u8a71\u306a\u306e\u3067\u73fe\u4ee3\u3067\u306f\u5f79\u306b\u7acb\u305f\u306a\u3044\u3067\u3057\u3087\u3046\u304c\u5065\u5fd8\u9332\u3068\u3057\u3066\u66f8\u3044\u3066\u304a\u304d\u307e\u3059\uff0e(\u5149\u56de\u7dda?\u570f\u5916\u306a\u306e\u3067\u3059orz)<\/p>\n<\/div>\n

\n
\u74b0\u5883<\/div>\n
\n
ADSL\u30e2\u30c7\u30e0-SV3\r\nHardware Revision: 0001\r\nSoftware Version: 03.20 (Tue Jul 27 20:45:13 JST 2010)\r\nBoot ROM Version: 01.00 (Thu Jun 3 17:07:20 JST 2004)\r\nDSP Firmware Version: 42.20\r\nVDSP Firmware Version: 9.1.60.12<\/pre>\n<\/div>\n<\/div>\n
\n
\u6700\u8fd1\u3088\u304f\u5bb6\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3067\u540d\u524d\u89e3\u6c7a\u3067\u304d\u306a\u304f\u306a\u308b\u3053\u3068\u304c\u3042\u308a\u307e\u3059\uff0e
\nDNS\u304c\u591a\u6bb5\u306b\u306a\u3063\u3066\u3044\u3066\u7121\u99c4\u304c\u591a\u3044\u306e\u3067\u305d\u306e\u3078\u3093\u306e\u554f\u984c\u304b\u306a\u3068\u601d\u3063\u305f\u306e\u3067\u3059\u304c\uff0c\u76f4\u63a5ISP \u3084 8.8.8.8 \u3068\u304b 1.1.1.1 \u3068\u304b\u306e PublicDNS \u306b\u554f\u3044\u5408\u308f\u305b\u3066\u3082\u5f15\u3051\u307e\u305b\u3093\uff0e<\/p>\n<\/div>\n
\n
\n
\n
ISP\u2009\u2014\u2009Unbound\u2009\u2014\u2009PiHole\u2009\u2014\u2009PC<\/p>\n<\/div>\n<\/blockquote>\n<\/div>\n
\n
ip \u76f4\u306a\u3089\u7e4b\u304c\u308b\u3060\u308d\u3046\u3068\u8a66\u3059\u3068http\u3082ssh\u3082\u99c4\u76ee\u3067\u3059\uff0e\u30bf\u30a4\u30e0\u30a2\u30a6\u30c8\u306b\u306a\u308a\u307e\u3059\uff0e<\/p>\n<\/div>\n
\n
\u30eb\u30fc\u30bf\u3092\u518d\u8d77\u52d5\u3059\u308b\u3068\u76f4\u308b\u3053\u3068\u3082\u3042\u308c\u3070\uff0c\u76f4\u3063\u3066\u3082\u3059\u3050\u306b\u5143\u306b\u623b\u3063\u3066\u3057\u307e\u3046\u3053\u3068\u3082\u3042\u308a\u307e\u3059\uff0e<\/p>\n<\/div>\n
\n
\u30eb\u30fc\u30bf\u306e\u30ed\u30b0\u307f\u308b\u3068 tcp80 \u306b\u5927\u91cf\u306e\u30a2\u30af\u30bb\u30b9\u304c\u3042\u3063\u3066\u305d\u308c\u3067 NAT table \u304c\u6ea2\u308c\u3066\u3057\u307e\u3063\u3066\u7e4b\u304c\u3089\u306a\u3044\u3068\u3044\u3046\u3053\u3068\u306e\u3088\u3046\u3067\u3059\uff0eNAT table \u306f 1024 \u3057\u304b\u306a\u3044\u306e\u3067\u3059\u304c\uff0c\u4e00\u5ea6\u306b 1 ip\u304b\u3089200\u301c400\u56de\u304f\u3089\u3044\u306e\u30a2\u30af\u30bb\u30b9\u304c\u6765\u3066\u3053\u308c\u304c\u8907\u6570\u56de\u6765\u308b\u3068 NAT table \u304c\u6ea2\u308c\u3066\u3057\u307e\u3044\u901a\u4fe1\u304c\u3067\u304d\u306a\u304f\u306a\u308b\u3088\u3046\u3067\u3059\uff0e
\n\uff03NAT table \u3092\u5897\u3084\u3059\u8a2d\u5b9a\u5909\u66f4\u9805\u76ee\u306f\u898b\u5f53\u305f\u3089\u306a\u3044<\/p>\n<\/div>\n
\n
\"31167785778<\/span><\/a><\/p>\n<\/div>\n
\n
\u3068\u308a\u3042\u3048\u305a\u30eb\u30fc\u30bf\u3092\u518d\u8d77\u52d5\u3057\u306a\u304f\u3066\u3082NAT table \u3092\u30af\u30ea\u30a2\u3059\u308b\u3068\u4e00\u6642\u7684\u306b\u901a\u4fe1\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\uff0e\u3067\u3082\u3069\u3093\u3069\u3093\u3053\u306e\u30a2\u30af\u30bb\u30b9\u304c\u6765\u3066\u3059\u3050\u306b\u5143\u306b\u623b\u308a\u307e\u3059\uff0e\u304a\u307e\u3051\u306b\u3053\u306e\u30a2\u30af\u30bb\u30b9\u306f\u300c\u6709\u52b9\u671f\u9650(\u79d2)\u300d\u304c9000\u3068\u304b\u306b\u306a\u3063\u3066\u3044\u308b\u306e\u3067\u306a\u304b\u306a\u304b\u30af\u30ea\u30a2\u3055\u308c\u307e\u305b\u3093\uff0e(\u307b\u304b\u306f60\u306e\u3088\u3046)
\n\uff03\u6709\u52b9\u671f\u9650\u306e\u8a2d\u5b9a\u5909\u66f4\u9805\u76ee\u306f\u898b\u5f53\u305f\u3089\u306a\u3044<\/p>\n<\/div>\n
\n
ip \u3092\u9006\u5f15\u304d\u3057\u3066\u307f\u308b\u3068\u5927\u62b5\u306f\u4e00\u822c\u306e\u5229\u7528\u8005\u306e\u3088\u3046\u3067\u540d\u524d\u304c\u632f\u3089\u308c\u3066\u3044\u306a\u3044\u30ec\u30f3\u30b8\u3084\uff0cip\u30a2\u30c9\u30ec\u30b9-domain \u307f\u305f\u3044\u306a\u540d\u524d\u3067\u3059\uff0e\u304a\u305d\u3089\u304f\u4f55\u304b\u306e\u30a6\u30a3\u30eb\u30b9\u306b\u611f\u67d3\u3057\u3066\u653b\u6483\u3092\u3057\u3066\u3044\u308b\u306e\u3067\u306f\u306a\u3044\u304b\u3068\u601d\u3044\u307e\u3059\uff0e(Google Cloud \u3068\u304b\u3082\u3042\u3063\u305f\u3051\u3069\u2026\u2026)
\n\u5e78\u3044\u81ea\u5b85\u30b5\u30fc\u30d0\u306etcp80\u306fhttps\u3078\u306e\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3068\u30c6\u30b9\u30c8\u7528\u306a\u306e\u3067\u3053\u308c\u3089\u306e\u30a2\u30af\u30bb\u30b9\u3092\u30d6\u30ed\u30c3\u30af\u3057\u3066\u307f\u307e\u3057\u305f\uff0e
\nwhois \u3067 inetnum \u3092\u78ba\u8a8d\u3057\u3066\uff0cCIDR \u3092\u8a08\u7b97\u3057\u3066\u300c\u30d1\u30b1\u30c3\u30c8\u30d5\u30a3\u30eb\u30bf\u8a2d\u5b9a\u300d\u3067\u3053\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306e tcp80 \u3078\u306e\u30a2\u30af\u30bb\u30b9\u3092 drop \u3059\u308b\u3088\u3046\u306b\u8a2d\u5b9a\u3057\u3066NAT table \u30af\u30ea\u30a2\u3067\u30c9\u30ed\u30c3\u30d7\u3055\u308c\u308b\u3088\u3046\u306b\u3042\u308a\u307e\u3057\u305f\uff0e\u30c9\u30ed\u30c3\u30d7\u306f\u300c\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30ed\u30b0\u300d\u3067\u78ba\u8a8d\u3067\u304d\u307e\u3059\uff0e<\/p>\n<\/div>\n
\n
\"44992821992<\/span><\/a><\/p>\n<\/div>\n
\n
\u3053\u308c\u3092\u7e70\u308a\u8fd4\u3057\u3066\u3044\u305f\u306e\u3067\u3059\u304c\u8a2d\u5b9a\u306f64\u500b\u3057\u304b\u66f8\u3051\u307e\u305b\u3093\uff0e\u3059\u3050\u306b\u6ea2\u308c\u307e\u3057\u305f\u2026\u2026\uff0e<\/p>\n<\/div>\n
\n
\u5225\u306e\u30a2\u30d7\u30ed\u30fc\u30c1\u3092\u8003\u3048\u307e\u3059\uff0e
\n\u3053\u306eADSL\u30e2\u30c7\u30e0\u306eweb\u7ba1\u7406\u753b\u9762\u306f\u30ec\u30ac\u30b7\u30fc\u3067curl\u3067\u30a2\u30af\u30bb\u30b9\u3067\u304d\u307e\u3059\uff0e<\/p>\n<\/div>\n
\n
NAT table \u306e\u767b\u9332\u4ef6\u6570\u3092\u6c42\u3081\u308b<\/div>\n
\n
$ echo $(curl  -s -u 'user:password' 'http:\/\/192.168.1.1\/cgi-bin\/main.cgi?mbg_webname=nattbl'|lynx -stdin -dump -width=256|grep -m1 '\u73fe\u5728\u306e\u767b\u9332\u4ef6\u6570'|sed -e 's\/^.*\uff1a\\(.*\\)\\\/.*$\/\\1\/')\r\n308<\/pre>\n<\/div>\n<\/div>\n
\n
NAT\u30af\u30ea\u30a2\u3082\u540c\u69d8\u306b\u51fa\u6765\u307e\u3059\uff0e<\/p>\n<\/div>\n
\n
NAT\u30c6\u30fc\u30d6\u30eb\u6d88\u53bb<\/div>\n
\n
$ curl  -s -u 'user:password' -F 'mbg_webname=natclear' -F 'nat_clear=\u6d88\u53bb' 'http:\/\/192.168.1.1\/cgi-bin\/main.cgi' | lynx -stdin -dump\r\n   NAT\u30c6\u30fc\u30d6\u30eb\u6d88\u53bb\r\n   [1]\u30d8\u30eb\u30d7 [2]help\r\n   -----\r\n\r\n   NAT\u30c6\u30fc\u30d6\u30eb\u306e\u6d88\u53bb\u3092\u884c\u3044\u307e\u3057\u305f\u3002\r\n\r\n   \u623b\u308b\r\n\r\n\u53c2\u7167\r\n\r\n   1. file:\/\/\/cgi-bin\/main.cgi?mbg_webname=help&mbg_helpname=natclear\r\n   2. file:\/\/\/cgi-bin\/main.cgi?mbg_webname=help&mbg_helpname=natclear<\/pre>\n<\/div>\n<\/div>\n
\n
\u3053\u308c\u3092\u4f7f\u3063\u3066 NAT table \u3092\u78ba\u8a8d\u3057\u3066\uff0c\u6ea2\u308c\u305d\u3046\u3060\u3063\u305f\u3089\u30af\u30ea\u30a2\u3059\u308bscript\u3092\u7528\u610f\u3057\u3066\u307f\u307e\u3057\u305f\uff0e<\/p>\n<\/div>\n
\n
script \u306e\u4e2d\u306b\u66f8\u304d\u305f\u304f\u306a\u3044\u306e\u3067 ID\/PASSWORD\u306f ~\/.netrc<\/code> \u306b\u66f8\u3044\u3066\u304a\u304d\u307e\u3059\uff0e<\/p>\n
\/\/ EDIT : wget\u306b\u6012\u3089\u308c\u305f\u306e\u3067 netrc \u306e machine \u3092 ADSL ROUTER<\/code> \u304b\u3089 ADSL_ROUTER<\/code> \u306b\u5909\u66f4(script\u3082)
\n\/\/ wget: \/home\/mk\/.netrc:1: \"ROUTER\" \u306f\u4e0d\u660e\u306a\u533a\u5207\u308a\u8a18\u53f7(token)\u3067\u3059<\/code><\/p>\n<\/div>\n
\n
~\/.netrc \u306b\u8ffd\u8a18<\/div>\n
\n
$ echo 'machine ADSL_ROUTER\r\n> login user\r\n> password  password\r\n> ' | tee -a ~\/.netrc\r\nmachine ADSL_ROUTER\r\nlogin user\r\npassword  password<\/pre>\n<\/div>\n<\/div>\n
\n
\u9069\u5f53\u306a script \u3092\u7528\u610f\u3057\u3066\uff0c<\/p>\n<\/div>\n
\n
nat_clear.bash<\/div>\n
\n
#!\/bin\/bash\r\n\r\n# ~\/.netrc \u8aad\u307f\u8fbc\u307f\r\nusrinfo=(`awk 'c&&c--;\/ADSL_ROUTER\/{c=2}' $HOME\/.netrc | awk '{printf \"%s \", $2}'`)\r\nUSER=${usrinfo[0]}\r\nPASS=${usrinfo[1]}\r\n\r\n# NAT table \u767b\u9332\u6570\u78ba\u8a8d\r\nNAT_TABLE=$(curl  -s -u \"${USER}:${PASS}\" 'http:\/\/192.168.1.1\/cgi-bin\/main.cgi?mbg_webname=nattbl'|lynx -stdin -dump -width=256|grep -m1 '\u73fe\u5728\u306e\u767b\u9332\u4ef6\u6570'|sed -e 's\/^.*\uff1a\\(.*\\)\\\/.*$\/\\1\/')\r\n\r\n# NAT table \u304c 750 \u3088\u308a\u5927\u304d\u3044\u3068NAT table clear\r\nif[ 750 -lt $NAT_TABLE ]; then\r\n  echo \"NAT table clrar(${NAT_TABLE})\"\r\n  # tcp:80 \u306b\u30a2\u30af\u30bb\u30b9\u3057\u3066\u3044\u308b ip \u3092\u78ba\u8a8d\u3057\u3066\u8868\u793a\r\n  curl  -s -u \"${USER}:${PASS}\" 'http:\/\/192.168.1.1\/cgi-bin\/main.cgi?mbg_webname=nattbl' | lynx -stdin -dump -width=256 | grep 192.168.1.102\/80 | awk {'print $6'} | cut -f1 -d\\\/ | sort | uniq -c\r\n  # NAT table clear\r\n  curl  -s -u \"${USER}:${PASS}\" -F 'mbg_webname=natclear' -F 'nat_clear=\u6d88\u53bb' 'http:\/\/192.168.1.1\/cgi-bin\/main.cgi' | lynx -stdin -dump\r\nfi<\/pre>\n<\/div>\n<\/div>\n
\n
\u5b9f\u884c\u6a29\u3092\u4ed8\u4e0e\uff0e<\/p>\n<\/div>\n
\n
\n
$ chmod +x nat_clear.bash<\/pre>\n<\/div>\n<\/div>\n
\n
crontab \u306b\u767b\u9332\u3057\u30665\u5206\u6bce\u306b\u547c\u3076\u3088\u3046\u306b\u8a2d\u5b9a\uff0e<\/p>\n
\/\/ EDIT: 1024\u4f7f\u3044\u5207\u3063\u3066\u304b\u3089\u30af\u30ea\u30a2\u304c\u591a\u3044\u306e\u30673\u5206\u6bce\u306b\u5909\u66f4\u3057\u305f<\/p>\n<\/div>\n
\n
\n
$ crontab -e\r\ncrontab: installing new crontab\r\n$ crontab -l | grep nat_clear.bash\r\n*\/5 * * * *     \/home\/mk\/bin\/nat_clear.bash<\/pre>\n<\/div>\n
\n
\/\/ EDIT: \u5b9f\u969b\u306b\u52d5\u4f5c\u3057\u305f\u3068\u304d\u306e\u30ed\u30b0\u8ffd\u8a18<\/p>\n
NAT table clrar(1024)\r\n    837 103.234.73.6\r\n    102 51.254.167.83\r\n   NAT\u30c6\u30fc\u30d6\u30eb\u6d88\u53bb\r\n   [1]\u30d8\u30eb\u30d7 [2]help\r\n   -----\r\n\r\n   NAT\u30c6\u30fc\u30d6\u30eb\u306e\u6d88\u53bb\u3092\u884c\u3044\u307e\u3057\u305f\u3002\r\n\r\n   \u623b\u308b\r\n\r\nReferences\r\n\r\n   1. file:\/\/\/cgi-bin\/main.cgi?mbg_webname=help&mbg_helpname=natclear\r\n   2. file:\/\/\/cgi-bin\/main.cgi?mbg_webname=help&mbg_helpname=natclear\r\n<\/pre>\n<\/div>\n<\/div>\n
\n
\u3068\u308a\u3042\u3048\u305a\u3053\u308c\u3067\u69d8\u5b50\u898b\u4e2d\u3067\u3059\uff0e\u3057\u304b\u3057\u5bfe\u51e6\u7642\u6cd5\u3067\u30a2\u30af\u30bb\u30b9\u304c\u5897\u3048\u305f\u3089\u8010\u3048\u3089\u308c\u306a\u304f\u308a\u307e\u3059\u306d\u2026\u2026\uff0e
\n\u30b5\u30fc\u30d0\u6a5f\u80fd\u3092\u5f15\u3063\u8d8a\u3057\u3066\u5916\u90e8\u304b\u3089\u306e\u30a2\u30af\u30bb\u30b9\u3092\u906e\u65ad\u3057\u305f\u3089\u3053\u306e\u554f\u984c\u306f\u89e3\u6c7a\u3059\u308b\u306f\u305a\u3067\u3059\u304c\u51fa\u6765\u305f\u3089\u9078\u3073\u305f\u304f\u306a\u3044\u3067\u3059\uff0e
\nADSL\u30e2\u30c7\u30e0\u3092\u9ad8\u6a5f\u80fd\u306a\u3082\u306e\u306b\u7f6e\u304d\u63db\u3048\u308b\u3068\u8a2d\u5b9a\u3067\u3069\u3046\u306b\u304b\u306a\u308b\u304b\u3082\u3068\u304b\uff0c\u3057\u304b\u3057\u305d\u3082\u305d\u3082ADSL\u81ea\u4f53\u304c\u53ce\u675f\u306a\u306e\u3067\u88fd\u54c1\u304c\u5b58\u5728\u3059\u308b\u306e\u304b?<\/p>\n<\/div>\n
\n
\u3068\u304b\u601d\u3044\u306a\u304c\u3089\u8a2d\u5b9a\u9805\u76ee\u3092\u898b\u3066\u3044\u308b\u3068\u300cPPPoE\u30d6\u30ea\u30c3\u30b8\u6a5f\u80fd\u300d\u3068\u3044\u3046\u3082\u306e\u304c\u3042\u308a\u307e\u3057\u305f\uff0e\u3053\u308c\u3092\u4f7f\u3046\u3068ADSL\u30e2\u30c7\u30e0\u306e\u88cf\u306e\u30b5\u30fc\u30d0\u7b49\u304b\u3089PPPoE\u3067\u7e4b\u3052\u305d\u3046\u306a\u611f\u3058\u304c\u3057\u307e\u3059\uff0e\u305d\u308c\u304c\u51fa\u6765\u305f\u3089n\u5206\u4ee5\u5185\u306bn\u56de\u30a2\u30af\u30bb\u30b9\u304c\u3042\u3063\u305f\u3089\u3057\u3070\u3089\u304f\u7121\u8996\u3059\u308b\u3068\u304b\u67d4\u8edf\u306a\u8a2d\u5b9a\u304c\u51fa\u6765\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\uff0e\u6b21\u306f\u3053\u308c\u3092\u8a66\u3057\u3066\u307f\u305f\u3044\u3068\u601d\u3044\u307e\u3059\uff0e<\/p>\n<\/div>\n
\n
\"30105335967<\/span><\/a><\/p>\n<\/div>\n
\n
\uff03\u5149\u56de\u7dda\u306f\u3088\u2026\u2026<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"
\u53e4\u3044ADSL \u30e2\u30c7\u30e0\u3067\u81ea\u5b85\u30b5\u30fc\u30d0\u3092\u7acb\u3066\u3066\u3044\u308b\u5834\u5408\u306e\u8a71\u306a\u306e\u3067\u73fe\u4ee3\u3067\u306f\u5f79\u306b\u7acb\u305f\u306a\u3044\u3067\u3057\u3087\u3046\u304c\u5065\u5fd8\u9332\u3068\u3057\u3066\u66f8\u3044\u3066\u304a\u304d\u307e\u3059\uff0e(\u5149\u56de\u7dda?\u570f\u5916\u306a\u306e\u3067\u3059orz) \u74b0\u5883 ADSL\u30e2\u30c7\u30e0-SV3 Hardware Revision: 00 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"webmentions_disabled_pings":false,"webmentions_disabled":false,"activitypub_content_warning":"","activitypub_content_visibility":"","activitypub_max_image_attachments":4,"activitypub_interaction_policy_quote":"anyone","activitypub_status":"","footnotes":""},"categories":[1],"tags":[416],"class_list":["post-2150","post","type-post","status-publish","format-standard","hentry","category-1","tag-adsl"],"_links":{"self":[{"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/posts\/2150","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/comments?post=2150"}],"version-history":[{"count":0,"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/posts\/2150\/revisions"}],"wp:attachment":[{"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/media?parent=2150"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/categories?post=2150"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/matoken.org\/blog\/wp-json\/wp\/v2\/tags?post=2150"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}