Critical Security Update for Hamvoip Nodes both GMRS and HAM
Critical Security Update for GMRS Hamvoip Nodes – Protect Your Bandwidth
I recently discovered a serious security issue affecting some default Hamvoip node setups. This is likely in all nodes based on that image and needs to be fixed or you need to take your nodes webpage off the internet. Close your ports.
This may explain why some users have to reboot everything after a while to stop jitter and sluggish nodes. As rebooting will give you a new IP and stop the abuse for a while.
Certain Apache proxy modules may be enabled by default, which allows your node to be used as a proxy by anyone on the Internet. This can lead to massive, unintended bandwidth usage and potentially put your node at risk of abuse or blacklisting.
At this time I don’t know which nodes have this proxy enabled likely all of them. But running this script will tell you if yours is affected or not.
In our tests, we observed extreme bandwidth consumption:
| Usage | 1hr | 12hr | 24hr | 1Week | 1Month |
|---|---|---|---|---|---|
| Upload | 45.90 MB | 59,585.11 TB | 59,585.11 TB | 4,562,704.53 TB | 5,935,882.69 TB |
| Download | 1.90 TB | 63,124.38 TB | 63,124.38 TB | 11,125,110.18 TB | 10,957,953.10 TB |
