I noticed that my 5268AC rebooted last night and it's showing a software version of 1.2.1.531810-att. Is this a new version?
↧
New software version for Pace 5268AC?
↧
Why is my BGW210 talking to AWS
I noticed this entry in my NAT table:
ipv4 tcp 6 28480 ESTABLISHED 192.168.1.101 37142 34.216.164.228 5222 34.216.164.228 5222 xxx.xxx.xxx.xxx 37142
I've masked out my IP. I don't have any device on .101, not on the device list, on the nat table display options. It shows up on a network scan as Arris Motorola and responds to pings. Anyone have a clue what this is? Why is is talking to an AmazonAWS IP address?
Thanks in advance
↧
↧
[AT&T Fiber] Any way to bypass att modem using ASUS GT-AC5300?
Was curious if anyone else was using this specific router with att 1000 plan. If so, the options in the advanced settings have all sorts of options that look like could be use to "simplify" bypassing the modem.
Don't really wanna shell out $135 for an USG. But I will if I have to if I can't get around their modem.
Or if anyone else that uses this router, what were your go to settings? I tried putting the router in AP mode and it significantly improved my wifi speeds and kept them consistent.
↧
Does anyone have a copy of Taylor Smith's Unifi USG Bypass Page
I have been trying for the last 12 hours to get to Taylor's article on Unifi USG bypass, but I am getting redirect warnings. Does anyone have a PDF copy?
https://blog.taylorsmith.xyz/att-uverse-modem-bypass-unifi-usg/
↧
[AT&T Fiber] IPv6 with bypass
I have successfully bypassed the RG and I'm currently getting IPv6 leases assigned to my SonicWall but they are not routing. IPv4 is working fine but IPv6 is not working at all. I figured if I got a lease, I should be good. Anyone have any ideas? Thanks.
↧
↧
[AT&T Fiber] New Pace Firmware Fixes DMZ+
There are a couple of reports on the AT&T Uverse Fiber Community forum that people have received new firmware for the Pace that fixes DMZ+ (again). Version reported as 11.4.1.532484-att.
No word yet on what they've broken. ;)
↧
[AT&T Fiber] DNS Settings Linksys Velop
SO this post might be better suited to a hardware forum, but it relates specifically to AT&T fiber. I had been using cloudflare DNS on my Linksys Velop, connected via dumb bypass. Some people in my home complained that web pages were loading slowly, so I decided to switch to google. When I had cloudflare, the only 2 DNS servers that showed on whatsmydnsserver.com were cloudflare. Now that I've switched to google, I have 4 results on that webpage, 2 google, and 2 AT&T. Why is that? The 2 AT&T DNS don't respond to pings either. I'd really prefer AT&T didn't snoop on my traffic. Inb4 someone says google will do that anyway. I'd rather have an advertiser snoop my web traffic than my ISP. And I need web pages to load.
↧
[AT&T Fiber] EdgeRouter Bypass with Successful IPv6
This is under the assumption you are already bypassed on the edgerouter and have a connection from the edgerouter straight to the ONT.
This has been up for me for the last few days and I have restarted the router a couple times and it grabs back the IPV6 connection in a few minutes after boot.
I generated the DUID from [link]https://github.com/aus/pfatt/blob/master/bin/gen-duid.sh and then grabbed the last octets after the 31:36:33:31:35:30 and pasted that in.
Edit: From DLS suggestions, to get rid of /128 and then added to the loopback.
Interfaces
Xinterfaces { ethernet eth0 { duplex auto firewall { in { ipv6-name WANv6_IN name WAN_IN } local { ipv6-name WANv6_LOCAL name WAN_LOCAL } out { } } mac [MAC ADDRESS] speed auto vif 0 { address dhcp description Internet dhcpv6-pd { duid 00:02:00:00:0d:e9:30:30:31:45:34:36:2d:[SN converted into ASCII] pd 1 { interface eth1 { host-address ::1 no-dns prefix-id :2 service slaac } interface eth2 { host-address ::1 no-dns prefix-id :0 service slaac } interface eth2.40 { host-address ::1 no-dns prefix-id :1 service slaac } interface lo { host-address ::1 no-dns prefix-id :9 service slaac } prefix-length 60 } prefix-only rapid-commit enable } firewall { in { ipv6-name WANv6_IN name WAN_IN } local { ipv6-name WANv6_LOCAL name WAN_LOCAL } out { } } mac [MAC ADDRESS] } } ethernet eth1 { address 192.168.10.1/24 description Local duplex auto speed auto } ethernet eth2 { address 192.168.20.1/24 description LAN duplex auto ipv6 { dup-addr-detect-transmits 1 router-advert { cur-hop-limit 64 link-mtu 0 managed-flag false max-interval 600 other-config-flag false prefix ::/64 { autonomous-flag true on-link-flag true valid-lifetime 2592000 } reachable-time 0 retrans-timer 0 send-advert true } } speed auto vif 40 { address 192.168.40.1/24 description WLAN mtu 1500 } } ethernet eth3 { duplex auto speed auto } ethernet eth4 { duplex auto speed auto } ethernet eth5 { duplex auto speed auto } ethernet eth6 { duplex auto speed auto } ethernet eth7 { duplex auto speed auto } loopback lo { }}
Firewall
Xfirewall { all-ping enable broadcast-ping disable ipv6-name WANv6_IN { default-action drop description "WAN inbound traffic forwarded to LAN" enable-default-log rule 10 { action accept description "Allow established/related sessions" state { established enable related enable } } rule 20 { action drop description "Drop invalid state" state { invalid enable } } rule 30 { action accept description "Allow ICMPv6" protocol icmpv6 } } ipv6-name WANv6_LOCAL { default-action drop description "WAN inbound traffic to the router" enable-default-log rule 10 { action accept description "Allow established/related sessions" state { established enable related enable } } rule 20 { action drop description "Drop invalid state" state { invalid enable } } rule 30 { action accept description "Allow IPv6 icmp" protocol ipv6-icmp } rule 40 { action accept description "allow dhcpv6" destination { port dhcpv6-client } protocol tcp_udp } } ipv6-receive-redirects disable ipv6-src-route disable ip-src-route disable log-martians enable name WAN_LOCAL { default-action drop description "WAN to router" rule 10 { action accept description "Allow established/related" state { established enable related enable } } rule 20 { action drop description "Drop invalid state" state { invalid enable } } rule 40 { action accept description ike destination { port 500 } log disable protocol udp } rule 50 { action accept description esp log disable protocol esp } rule 60 { action accept description nat-t destination { port 4500 } log disable protocol udp } rule 70 { action accept description l2tp destination { port 1701 } ipsec { match-ipsec } log disable protocol udp } } name WAN_OUT { default-action drop description "" rule 10 { action accept description "Allow established/related" log disable protocol all state { established enable invalid disable new disable related enable } } } receive-redirects disable send-redirects enable source-validation disable syn-cookies enable}
↧
The long (but not too long...) install road
My fiber just got completed today and I'm pulling full gigabit to the AT&T modem installed (still need to bridge it to my USG). I'm the first in my immediate neighborhood that I know of in Livermore, CA. I know there are other areas in Livermore that it is available (most of those places are aerial I believe - mine was all underground). Here is my install story.
~ April
I see AT&T trucks rolling fiber on the main street just over from me. I ask them if fiber is coming soon and they say at least a few months.
~ May
I see more AT&T trucks rolling fiber on the connection street between my street and the main street.
~ June
Contractors come down my street and replace all the boxes on the south side (opposite me, I'm on the north side) in preparation for the new fiber.
~ July
Mid July I see that suddenly fiber is available to order. I did find this strange as I didn't see any fiber actually rolled down my street. I figured they would do so as part of my install. I place an order and get an install date for the about 7 days out.
~End of July
A tech shows up and says there is no fiber in the box. No surprise there. He called his supervisor and said they wouldn't be rolling fiber here until early next year because of "permit issues." Uh huh. To be honest it wasn't the fact there was no fiber that bugged me, it was that they allowed people to order it when it clearly wasn't ready yet. Someone green lit the address too quickly. This actually turned out to be a blessing in disguise though because I ended up getting fiber in September, as opposed to next year.
My grandpa (the house owner) calls the California PUC and files a complaint. They say they can't do anything really but forward on the complaint AT&T. By the way I am leaving out all the phone calls to useless AT&T customer support because they have no clue what they are doing. Seriously so many hours wasted there.
~ August
My grandpa gets a call from "Randy", from the AT&T president's office. And now things get interesting. Randy from the president's office can actually get things done. He's the real deal. He apologizes to my Grandpa and says he will send another tech out.
Another tech arrives and says the same thing. This get's reported to Randy (Idk why the first one didn't...). Randy then puts in a maintenance ticket to roll the fiber and expedites it.
~Mid August
Fiber is actually rolled to the box on the south side opposite my house. Over the course of the next week random people show up and start painting out where everything is (water lines, electrical, etc.).
~End of August/Beginning of September
AT&T shows up again and tries to pull the fiber to a smaller box on my side of the street. No dice, it's blocked. The box on my side is disintegrating anyway so it should be replaced. The next week AT&T shows up again and replaces the box, runs fiber to it, and then digs a trench and installs the conduit to my house.
~Mid September
Several weeks go by and AT&T schedules an appointment for an install for today.
Today:
The tech shows up. Funny enough, it was the first tech that showed up back in July and said there was no fiber and it wouldn't be here till early next year. He said he couldn't believe they actually did it all in 2 months. He ran the fiber from the box through the conduit, around the house, into my server room. Next he terminated the fiber, setup the AT&T modem, and did some final setup.
Everything works and I'm pulling 994 mbps down and 949 mbps up.
All throughout these two months my Grandpa was constantly getting status updates from Randy about when what was going to happen. So here's to you Randy, thanks! Turns out there is actually at least one competent person at that company.
I look forward to calling Comcast tonight and canceling my account.
↧
↧
[IP-TV] ACC Network - Channels 610 - 1610
Just noticed that the recent discussions with Disney have apparently resulted in the channel addition
https://www.cordcuttersnews.com/acc-network-is-now-available-on-att-tv-now/
↧
[AT&T Fiber] Automating the dumb switch bypass?
Hi Everybody!
Just got Fiber installed and found my way here as I researched bypass techniques.
I was able to very easily do the dumb switch bypass technique, but I did wonder about the wife-acceptance factor.
Since the process really is just letting the devices power on, off, on in a specific sequence, I wanted to ask if anybody has found a way to automate that. I have been researching smart power outlets or strips, one that can sequentially turn things on/off based on a timer, but haven’t found any obvious hardware solutions yet.
So, I figured I would ask if anyone has figured this out yet. If not, I plan to try to cobble something together.
Thanks!
↧
[AT&T Fiber] Typo or Reality?
I was curious how much we'd save by downgrading from Internet 1000 to 300. This is what I found online after logging into our account. Does this make sense? I'd call AT&T right now but they might be closed by now and I've had a long day. :D If it's accurate, why bother downgrading?
↧
[AT&T Fiber] Is there a gigabit connection limit at the box in my back yard?
Last summer AT&T contractors dug up my back yard and painstakingly ran fiber all along my street/neighborhood (made a mess of my yard). They didn't return til late fall to finish up. They installed an ugly 'box' (cylindrical tube) for hooking up (guess) 3-4 households to each box as the next 'box' seems to be every other yard on my side (with a culdesec behind my house). Service became available earlier this year, but I didn't sign up until March. My neighbor immediately next to me signed up right away for 1000mbps service and was tied into the box in my yard. I have a camera monitoring all activity in my yard and capture all motion and he was the only hookup other than mine. I elected the 300/300mbps service in March and had the install done. The first year contract is $70/month, but just recently my friend in another city with AT&T was able to get switched from the same plan to 1000mbps for $70 month. I called AT&T and tried to do the same thing to get the speed upgrade for same cost I am paying and the first rep told me 1000mbps is not possible at my address! What??!?! The neighbor next to me tied in the box in my yard is on the 1000mbps plan! When I told the rep this they said there is a limited number of households that can get that service. So is he telling me for each box only one household is able to get 1000mbps? Ludicrous! I got irate that they tore up my back yard and I had to fix it up by leveling the ground and seeding my own grass to fix it and they are telling me I am not eligible for the top tier 1000mbps service? I got escalated to a second rep and she told me the same thing until she then started to spin bundling services to achieve 1000mbps service. WHAT? My neighbor down the street is paying $90/month for only 1000mbps service and has no other AT&T service, but I was being told I cannot just buy Internet by itself. She said that is not an option. She said I need to also subscribe to DirecTV dish service in order to get a bundle to get 1000mbps. I don't want a dish. Finally she told me DirecTVNow streaming is a bundle-able service but she could not sign that up for me and I would have to do that online. I had thought of getting that so excitedly I hung up to look into that. Nowhere on the site do I see how to bundle DirecTVNow to get 1000mbps service. I'm really annoyed and evidently stuck til next March with AT&T at 300mbps service. Am I being lied to?
↧
↧
NVG589 rebooted and updated to 9.2.2h13d26
NVG589 rebooted and updated to 9.2.2h13d26 last night...
↧
AT&T Equipment
So I've noticed something popping up around town... Am I right to assume these new little boxes are indicators that AT&T is expanding fiber in our area? One pic is the before and then the other is after, from Google Maps.
↧
[AT&T Fiber] Pace 5268 AC admin interface wide open from IPv6 WAN
Just found this out today, but apparently the Pace 5268AC exposes it's internal management interface on the router's IPv6 address and AFAIK I couldn't find a way to turn it off (tried firewall rules, etc, no effect).
It is only accessible through the gateway's IPv6 address, the IPv4 WAN address access is blocked.
This just shows another reason why AT&T should stop forcing users to use their broken and insecure gateway, because they are clearly not competent enough to engineer it properly.
Here, I accessed the 5268's web interface from a machine running in DigitalOcean which clearly should NOT have happened, but it was wide-open.
[user@do-sfo ~]$ ping6 2600:1700:xxxx:xx0::1PING 2600:1700:xxxx:xx0::1(2600:1700:xxxx:xx0::1) 56 data bytes64 bytes from 2600:1700:xxxx:xx0::1: icmp_seq=1 ttl=56 time=6.82 ms64 bytes from 2600:1700:xxxx:xx0::1: icmp_seq=2 ttl=56 time=6.69 ms^C--- 2600:1700:xxxx:xx0::1 ping statistics ---2 packets transmitted, 2 received, 0% packet loss, time 1002msrtt min/avg/max/mdev = 6.693/6.759/6.825/0.066 ms[user@do-sfo ~]$ sudo nmap -O -v -6 2600:1700:xxxx:xx0::1 Starting Nmap 6.40 ( http://nmap.org ) at 2019-09-27 01:18 CDTInitiating Ping Scan at 01:18Scanning 2600:1700:xxxx:xx0::1 [3 ports]Completed Ping Scan at 01:18, 0.01s elapsed (1 total hosts)Initiating System DNS resolution of 1 host. at 01:18Completed System DNS resolution of 1 host. at 01:18, 0.01s elapsedInitiating SYN Stealth Scan at 01:18Scanning 2600:1700:xxxx:xx0::1 [1000 ports]Discovered open port 80/tcp on 2600:1700:xxxx:xx0::1Discovered open port 443/tcp on 2600:1700:xxxx:xx0::1Completed SYN Stealth Scan at 01:18, 1.98s elapsed (1000 total ports)Nmap scan report for 2600:1700:xxxx:xx0::1Host is up (0.081s latency).Not shown: 987 closed portsPORT STATE SERVICE25/tcp filtered smtp80/tcp open http109/tcp filtered pop2110/tcp filtered pop3135/tcp filtered msrpc139/tcp filtered netbios-ssn143/tcp filtered imap443/tcp open https445/tcp filtered microsoft-ds465/tcp filtered smtps587/tcp filtered submission995/tcp filtered pop3s49152/tcp filtered unknownDevice type: general purposeRunning: Linux 3.XOS CPE: cpe:/o:linux:linux_kernel:3OS details: Linux 3.7Network Distance: 9 hops Read data files from: /usr/bin/../share/nmapOS detection performed. Please report any incorrect results at http://nmap.org/submit/ .Nmap done: 1 IP address (1 host up) scanned in 6.68 seconds Raw packets sent: 1056 (69.016KB) | Rcvd: 990 (59.396KB)[user@do-sfo ~]$ curl -g -6 http://[2600:1700:xxxx:xx0::1]/<?xml version="1.0"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>Home</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <link rel="stylesheet" type="text/css" title="Main" href="css/basic.css" /> <link rel="stylesheet" type="text/css" title="Main" href="css/tabs.css" /> <script type="text/javascript" src="javascript/prototype.lite.js"></script> <script type="text/javascript" src="javascript/behaviour.js"></script> <script type="text/javascript" src="javascript/style.js"></script> <style type="text/css"> ul.to-do { list-style: none; padding: 0; margin: 0.5em 0 0 0; } span.to-do-link { display: inline-block; width: 12em; } table.layout { width: 100%; margin-top: 1em; } td.col-1 { width: 35%; } td.col-2 { width: 40%; } td.col-1 img { vertical-align: middle; margin-right: 0.5em; } td.indent-1 { padding-left: 4.75em; } td.indent-2 { padding-left: 6.5em; } .head-space { padding-top: 0.75em; } </style> </head> <body> <div class="skip-nav-link"> <a href="#main">Skip to main content</a> </div> <div id="container"> <div> <img src="/images/att_globe_logo.png" alt="at&t" /> </div> <div id="header"> <ul id="primary"> <li> <span>Home</span> </li> <li> <a href="/xslt?PAGE=B_0_0">Services</a> </li> <li> <a href="/xslt?PAGE=C_0_0">Settings</a> </li> <li> <a href="/xslt?PAGE=D_0_0">Site Map</a> </li> </ul> </div> <div id="main"> <div id="outercontainer"> <div id="header2"></div> <div id="innercontainer"> <div id="contents"> <form method="post" action="xslt?PAGE=A_0_0"> <input type="hidden" name="NONCE" value="362c125f8766458" /> <input type="hidden" name="THISPAGE" value="A_0_0" /> <div class="bottomborder"> <input type="submit" name="REFRESHPAGE" class="button right-floater" value="Refresh Page" /> <h2>Key Things to do Using Your Gateway</h2> </div> </form>.....................Omitted
↧
[U-verse Voice] Can anyone get into the telephone portal today?
I wanted to add another number to my Uverse voice home phone blocklist today. Clicking on the "GO TO HOME PHONE PORTAL" under the "MANAGE HOME PHONE" box does absolutely nothing, like it isn't even programmed to do something. I tried Firefox on two different systems. One Linux, and another windoze. Both with the same lack of results.
↧
↧
Does anyone have a copy of Taylor Smith's Unifi USG Bypass Page
I have been trying for the last 12 hours to get to Taylor's article on Unifi USG bypass, but I am getting redirect warnings. Does anyone have a PDF copy?
https://blog.taylorsmith.xyz/att-uverse-modem-bypass-unifi-usg/
↧
[AT&T Fiber] Can I use another AT&T RG other than one I was given?
Can I purchase another AT&T-branded RG from ebay to use for my AT&T fiber connection? I would like to use the 5268ac and use DMZ+ instead of my BGW210's IP Passthrough. I don't want to use the "dumb switch" bypass and my own router doesn't support eap proxy.
When I had AT&T FTTN (VDSL) I was able to use other AT&T RGs such as the 3600HGV instead of the 5031nv I was given. I also have an AT&T-branded 3801HGV but its ports are 100 Mbps only.
Thanks!
↧
AT&T Fiber slow down when using Disney Circle on Router
so in summary I have Fiber 1000 and Have the BGW210 in IP pass through and use my nighthawk X6s wifi router. All running newest latest firmware. My X6s has Disney circle, when enabled the speeds drop down from 960 mbps to 300 mbps on the speed tests. After I factory restore both BGW210 and X6s the speeds return back to normal however once circle is enabled again it goes right back to 300 mbps and even if idisable circle it stays there until i facory reset the x6s. What could my issue be?
↧