Intelbras ONU R1 v2.0

Informações sobre a Intelbras ONU R1 v2.0 XPON ONT/ONU. Teardown, hacking, unlocking (desbloqueio), firmwares, custom images, recuperação, bridge.

Disclaimer

Todas as informações, métodos, procedimentos, firmwares, aplicativos e material sobre modificações e configurações postadas neste wiki foram criados pelo O3 Labs (salvo menção em contrário) e disponibilizadas GRATUITAMENTE desde o dia de sua elaboração. Denuncie quando possível quaisquer tentativas de venda destes material.

Hardware

SoC	Realtek RTL9601D
RAM	32 MB (embedded)
Flash	XM25QH128CHIQ - XMC 128 Mbit SPI Flash
LAN	1 Gbit/s
USB	-
Wireless 2.4 GHz	-
Wireless 5 GHz	-
XPON Laser Driver	Realtek 8290B
Acoplamento fibra	SC/APC
FXS	-
HPNA	-
Serial	Sim
JTAG	-
Alimentação	DC 12 V / 500 mA
Credenciais padrão	admin / intelbras
IP LAN padrão	192.168.1.1

Bootlog

9601D
PRELOADER Bismarck 3.5
II: PLR:f2dde527, Build_date:21061712, Toolkit:rsdk-1.5.6-5281-EB-2.6.30-0.9.30.3-131105
II: Disable OCP Timeout Monitor
II: Disable LX Timeout Monitor
II: Enable Triple Synchronizer
II:cg_cpu_clk_init doneII:cg_spif_clk_init doneII: CPU 300MHz (600/2/0), MEM 325MHz, LX 200MHz, SPIF 25MHz
II: NOR SPI-F... 204018/MMIO16-1/ModeC done
AK: DRAM AUTO CALIBRATION(20210202)
AK: ZQ Calibration PassedAK: ZQ Calibration PassedAK: ZQ Calibration PassedAK: ZQ Calibration PassedAK: MR0: 0x00100952
AK: MR1: 0x00110040
AK: MR2: 0x00120000
AK: MR3: 0x00130000
AK: clear dwdqor
AK: Bit/max_r_s/max_r_l/max_w_s/max_w_l    Bit/max_r_s/max_r_l/max_w_s/max_w_l(Hex)
   [ 0]       0      1f       0      17   [16]       0      1f       0      17
   [ 1]       0      1f       0      17   [17]       0      1f       0      17
   [ 2]       0      1f       0      15   [18]       0      1f       0      17
   [ 3]       0      1f       0      17   [19]       0      1f       0      17
   [ 4]       0      1f       0      17   [20]       0      1f       0      17
   [ 5]       0      1f       0      17   [21]       0      1f       0      17
   [ 6]       0      1f       0      17   [22]       0      1f       0      19
   [ 7]       0      1f       0      17   [23]       0      1f       0      19
   [ 8]       0      1f       0      19   [24]       0      1f       0      19
   [ 9]       0      1f       0      19   [25]       0      1f       0      19
   [10]       0      1f       0      17   [26]       0      1f       0      17
   [11]       0      1f       0      19   [27]       0      1f       0      19
   [12]       0      1f       0      19   [28]       0      1f       0      19
   [13]       0      1f       0      19   [29]       0      1f       0      19
   [14]       0      1f       0      19   [30]       0      1f       0      1b
   [15]       0      1f       0      17   [31]       0      1f       0      19
AK: DQ enable delay sync with DQ delay tap.
    0xb80015D0=0x07070707, 0xb80015D4=0x07070707, 0xb80015D8=0x08070808, 0xb80015DC=0x07080808
AK: DRAM size = 0x2000000
AK: Disable read after write function
AK: Support tREFI divided by 4
AK: dram auto calibrtaion is done
II: MEM_PROBE_OK
II: MEM_XLAT_OK
II: MEM_TO_REG_OK
II: MEM_CAL_OK
II: Change Stack from 0x9f007ff8 to 0x80efffe0
II: Decompressing U-Boot (0x81c00000 <- 0x9fc179c0)... (184 KB <- 70 KB) OK
II: Starting U-boot... 


U-Boot 2011.12.NA (Jun 17 2021 - 12:49:20)

Board: RTL9601D, CPU:300MHz, LX:200MHx, MEM:325MHz, Type:DDR2
DRAM: 32 MB
SPI-F: 204018/MMIO16-1/ModeC 1x16 MB (plr_flash_info @ 81c2cb9c)
Loading 8192B env. variables from offset 0x40000
Loading 8192B env. variables from offset 0x42000
Loaded 8192B env. variables from offset 0x40000
Net:   LUNA GMAC 
Warning: eth device name has a space!

Hit any key to stop autoboot:  0
## Booting kernel from Legacy Image at 94840000 ...
   Image Name:   Linux Kernel Image
   Created:      2021-08-24  21:17:19 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1388318 Bytes = 1.3 MB
   Load Address: 80000000
   Entry Point:  80000000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK

Starting kernel ...

Linux version 2.6.30.9 (root@fac35782359c) (gcc version 4.4.6 (Realtek RSDK-1.5.6p2) ) #40 Tue Aug 24 21:04:52 UTC 2021 [luna SDK V1.9.0]
RTL9602C PLL
CPU revision is: 0000dc02
Determined physical RAM map:
 memory: 016ff000 @ 00000000 (usable)
 memory: 006ff000 @ 01800000 (usable)
II: Kernel command line modified: mtdparts=rtk_spi_nor_mtd ->   mtdparts=physmap-flash
Zone PFN ranges:
  Normal   0x00000000 -> 0x00001eff
Movable zone start PFN for each node
early_node_map[2] active PFN ranges
    0: 0x00000000 -> 0x000016ff
    0: 0x00001800 -> 0x00001eff
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 7616
Kernel command line: console=ttyS0,115200   mtdparts=physmap-flash:256K(boot),8K(env),8K(env2),240K(config),3M(k0),4864K(r0),3M(k1)ro,4864K(r1)ro,4K@0ro,4K@0ro,4K@0ro,4K@0ro,3M@8448K(linux),4864K@11520K(rootfs) root=31:7
root_dev_setup line 180 root: 31:7
icache: 64kB/32B, dcache: 32kB/32B, scache: 0kB/0B
NR_IRQS:128
PID hash table entries: 128 (order: 7, 512 bytes)
console [ttyS0] enabled
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 20472k/30712k available (8608k kernel code, 10240k reserved, 1041k data, 112k init, 0k highmem)
Calibrating delay loop... 299.00 BogoMIPS (lpj=1495040)
Mount-cache hash table entries: 512
IMEM section size = 0xf80
net_namespace: 788 bytes
NET: Registered protocol family 16
=================================
rtk_ldo_init
=================================
0xbb000044=0x00000002
0xbb000130=0x00ec0005
bio: create slab <bio-0> at 0
Sangoma WANPIPE Router v1.1 (c) 1995-2000 Sangoma Technologies Inc.
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
NET: Registered protocol family 1
=================================
CONFIG_LUNA_SOC_GPIO: gpio_init()
=================================
=================================
luna_capabilities_init
=================================
************ Watchdog Setting ****************
WDT_E=0, (1-enable, 0-disable)
LX(MHz)=200
WDT_CLK_SC=0
PH1_TO=0
PH2_TO=0
WDT_RESET_MODE=0
**********************************************
netlog: listening on port 4660
squashfs: version 4.0 (2009/01/31) Phillip Lougher
JFFS2 version 2.2. (NAND) Â 2001-2006 Red Hat, Inc.
msgmni has been set to 39
io scheduler noop registered (default)
Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x0 (irq = 49) is a 16550A
PPP generic driver version 2.4.2
NET: Registered protocol family 24
8686 Ethernet driver v0.0.1 (Feb 17, 2012)[Dual Band Disable]
TX[1024,64,64,64,64] , RX[256,32,32,32,64,32]
eth0 (): not using net_device_ops yet
eth0: RTL-8686 at 0xb8012000, 00:00:00:01:00:02, IRQ 26
eth0.2 (): not using net_device_ops yet
eth0.2: RTL-8686 at 0xb8012000, 00:00:00:01:00:02, IRQ 26
eth0.3 (): not using net_device_ops yet
eth0.3: RTL-8686 at 0xb8012000, 00:00:00:01:00:02, IRQ 26
nas0 (): not using net_device_ops yet
nas0: RTL-8686 at 0xb8012000, 00:00:00:01:00:02, IRQ 26
>>>> Set nas0 carrier off !!! 
pon0 (): not using net_device_ops yet
pon0: RTL-8686 at 0xb8012000, 00:00:00:01:00:02, IRQ 26
RTL8686 GMAC Probing..
first entry: 0, portmask 127, rx: 80352ecc
eth0.2 -> 0x1
eth0.3 -> 0x2
nas0 -> 0x4
Init RTK Driver Module....OK
Init RTK Core Dev Module....OK

 rtdrv_init !!! for netfilter
pkt_redirect_init complete
interrupt broadcaster init ok!
u32 classifier
nf_conntrack version 0.5.0 (479 buckets, 1916 max)
nf_conntrack_rtsp v0.6.21 loading
nf_conntrack_ipsec loaded
nf_conntrack_l2tp version 3.1 loaded
nf_nat_rtsp v0.6.21 loading
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 10
lo: Disabled Privacy Extensions
ip6_tables: (C) 2000-2006 Netfilter Core Team
NET: Registered protocol family 17
Bridge firewalling registered
Ebtables v2.0 registered
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
Realtek GPIO Driver for Flash Reload Default
=================================
rtk_ims_init
=================================
priority: 0, portmask 127, rx: 80352ecc
insert here, priority: 1, portmask 127, rx: 8022ba48
physmap platform flash device: 0b000000 at 14000000
Luna SPI NOR FLASH G3 driver-XMC/204018/MMIO16-1 <5>master->name physmap-flash
cmd: cmdlinepart
14 cmdlinepart partitions found on MTD device physmap-flash
Creating 14 MTD partitions on "physmap-flash":
0x000000000000-0x000000040000 : "boot"
0x000000040000-0x000000042000 : "env"
0x000000042000-0x000000044000 : "env2"
0x000000044000-0x000000080000 : "config"
0x000000080000-0x000000380000 : "k0"
0x000000380000-0x000000840000 : "r0"
0x000000840000-0x000000b40000 : "k1"
0x000000b40000-0x000001000000 : "r1"
0x000000000000-0x000000001000 : "Partition_008"
0x000000000000-0x000000001000 : "Partition_009"
0x000000000000-0x000000001000 : "Partition_010"
0x000000000000-0x000000001000 : "Partition_011"
0x000000840000-0x000000b40000 : "linux"
0x000000b40000-0x000001000000 : "rootfs"
VFS: Mounted root (squashfs filesystem) readonly on device 31:7.
Freeing unused kernel memory: 112k freed
init started: BusyBox v1.12.4 (2021-08-24 21:06:20 UTC)
starting pid 150, tty '': '/etc/init.d/rcS'
=== Start to run rc0 / rc63 ===
----- do_rc [/etc/init.d/rc2] -----
Mounting /dev/mtdblock3 onto /var/config as the configuration data storage
re8670_open 3338
ADDRCONF(NETDEV_UP): nas0: link is not ready
----- do_rc [/etc/init.d/rc10] -----
----- do_rc [/etc/init.d/rc14] -----
----- do_rc [/etc/init.d/rc18] -----
no need to do reset to default
----- do_rc [/etc/init.d/rc20] -----
------ [-b]Bootup_config ------
Wait for configd initialize 'MsgQ' and 'Shm'... 
set_msgqueue_max_size:180> set msgqidds.msg_qbytes=20600 OK
set_msgqueue_max_size:180> set msgqidds.msg_qbytes=20600 OK
Fetch mib data (type 8) from program code.
Fetch mib data (type 2) from program code.
Pre-fetch mib data from program default done.
Checking input file [/var/config/lastgood_hs.xml].
[OK] Valid config file!

***** config_parser(): dfname=[/etc/config_default_hs.xml](0) loaded *****

***** config_parser(): fname=[/var/config/lastgood_hs.xml](0) loaded *****

[xml_INFO]: Load HS configuration success.
Checking input file [/var/config/lastgood.xml].
[OK] Valid config file!

***** config_parser(): dfname=[/etc/config_default.xml](0) loaded *****

***** config_parser(): fname=[/var/config/lastgood.xml](0) loaded *****

[xml_INFO]: Load CS configuration success.
----- do_rc [/etc/init.d/rc21] -----
omci platform attached!
register_gpon_evt_state: register gpon event state Successfully !
Loading TR-142 Module...
Realtek TR-142 Module initialized. err = 0, max_ponq_id=65
----- do_rc [/etc/init.d/rc22] -----
/etc/runomci.sh: line 212: /etc/runigmp.sh: not found
running GPON mode ...
insmod: rldp_drv.ko: module not found
----- do_rc [/etc/init.d/rc32] -----
MIB chain descriptors checking (total 32) ok !
<utility.c 488 setup_mac_addr> macAddr[5]+1 = 16
xml_mib_update():...
xml_mib_update():...
   CMD: /bin/ifconfig eth0.2 hw ether d8778ba3cc15 
   CMD: /bin/brctl addbr br0 
------ [-u cs]Update cs setting ------
------ [-u hs]Update hs setting ------
[rtkbosa Tool]
i2c dev 0x55, reg 0x90: 0x82
i2c dev 0x55, reg 0x91: 0x90
i2c dev 0x55, reg 0x94: 0x01
RTL8290B is Found
   CMD: /bin/ifconfig br0 hw ether d8778ba3cc15 
   CMD: /bin/brctl stp br0 off 
   CMD: /bin/brctl setfd br0 1 
   CMD: /bin/brctl setageing br0 7200 
   CMD: /bin/brctl addif br0 eth0.2 
device eth0.2 entered promiscuous mode
system(): /bin/echo 1 eth0.2 > /proc/rtl8686gmac/dev_port_mapping
port 1 assign to eth0.2
eth0.2 -> 0x2
init mac based tag des
Turn on.
===============================CAUTION===============================
This functionality should configure BEFORE romeDriver initialization.
Otherwise may cause unpredictable problem.
Init RG with GPON mode.
=============Init_rg_api SUCESAlways Trap.
S!!======[WARNING] INGRESS_L4_POROTCAL_VALUE_BIT must set with INGRESS_IPV4_TAGIF_BIT or INGRESS_IPV6_TAGIF_BIT @ _rtk_rg_aclSWEntry_to_asic_add(2105)
[WARNING] Return Error (0x10007:RT_ERR_RG_INVALID_PARAM) at line:2106 @ return_err_mapping(9627)
[_rtk_rg_aclSWEntry_to_asic_add+0xb8/0x50c8][_rtk_rg_apollo_aclFilterAndQos_add+0x1c8/0x3fc][rtk_rg_aclFilterAndQos_add+0xcc/0x1ac][do_rtdrv_rg_get_ctl+0xc98/0x2bb0][do_rtdrv_get_ctl+0xb918/0xb94c][nf_sockopt+0x80/0xb4][nf_getsockopt+0x20/0x2c][ip_getsockopt+0x98/0xd0][sys_getsockopt+0x84/0xc0][stack_done+0x20/0x40]
============
RG_add_2000 12000
icmpv6_trap_rule QoS rule failed! (ret = 655300 (default: 20 secs)
43)
/proc/sys/net/ipv4/ip_local_port_range open failed portA=32768   portB = 61000 
   CMD: /bin/ifconfig br0 192.168.1.1 netmask 255.255.255.0 mtu 1500 
   CMD: /bin/ifconfig br0 add fe80::xxxx:xxxx:xxxx:xxxx
ifconfig: SIOCSIFADDR: File exists
   CMD: /bin/boa 
drivers/net/rtl86900/sdk/src/rtk/pon_led.c:1118 led sw blink init complete!
rtk_pon_led_SpecType_set 0
[xml_INFO]: Update hs configuration success.
RG_reset_static_route-1431 DONE !
xml_mib_update():...
netIfIdx 1 vid 7 pri -1 type 1 service 0 isBinding 0 bAdd 1 
Disable DMAC to CVID !!
Disable dmac2cvid of wan portmask=0x4
   CMD: /bin/ifconfig nas0 up 
pEntry->vid: 7
pEntry->vprio: 0
vlantag: 0x7
TRACE: /bin/ethctl addsmux ipoe nas0 nas0_0 vlan 7
nas0_0 (): not using net_device_ops yet
   CMD: /bin/ifconfig nas0_0 hw ether d8778ba3cc16
system(): /bin/echo 2 nas0 > /proc/rtl8686gmac/dev_port_mapping
port 2 assign to nas0
nas0 -> 0x4
GPON mode.
/var/config/europa.data existed, do nothing.
/var/config/rtl8290b.data existed, do nothing.
[xml_INFO]: Update cs configuration success.
------ [-u cs]Update cs setting ------
europa_drv: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint

RTL8290 series driver version [0.3.16]

   Parameter: I2C_PORT=1 INTR_PIN=29 TXDIS_PIN=13 TXPWR_PIN=43 PON_MODE=1

Init I2C for Europa.
rtl8290b_i2c_init: use RTK_API, i2cPort = 1  
rtl8290b_i2c_init  enable = 1 width=0  clock = 1008 
RTL NUM = 0x8290 
RTL VID = 0x0001 
Open file: rtl8290b.data.
Read flash config data...
Get current segment descriptor....
Set segment descriptor associated to kernel space....
Read the file....
   CMD: /bin/ifconfig nas0_0 txqueuelen 10
   CMD: /bin/ifconfig nas0_0 up
ADDRCONF(NETDEV_UP): nas0_0: link is not ready
1483 MER
   CMD: /bin/ifconfig nas0_0 mtu 1500 
   CMD: /bin/iptables -A INPUT -i nas0_0 -p UDP --dport 69 -d 255.255.255.255 -m state --state NEW -j ACCEPT 
Restore segment descriptor....
Loaded data from rtl8290b.data
Europa Chip Type = 0x0001 
rtl8290b_pon_mode = 0!
Init RTL8290B module...
config TX_DIS = 13 pin...
Config GPIO 13 to OUTPUT mode, value = 0
config TxPwr = 43 pin...
Config GPIO 43 to OUTPUT mode, value = 0
rtl8290b_parameter_init... 
Update DDMI A0...., flash_update = 1, addr = 0xc0172ae0
Update DDMI A2...., flash_update = 1, addr = 0xc0172be0
Update RTL8290B A4...., flash_update = 1, length =0x85, addr = 0xc0172ce1
 APC Init....
rtl8290b_fsuEnable_set = 1, flag = 1
Config FSU, fsu_flag = 0x1
Calibrating IMPD by internal 50u current...[startIP_v4:3947][pon_mode:1][device_mode:0]
   CMD: /bin/ifconfig nas0_0 up
   CMD: /bin/udhcpc -i nas0_0 -p    CMD: /var/run/udhcpc.pid.nas0_0 -s /etc/scripts/udhcpc.sh
ERROR! No such file or directory
   CMD: /bin/ethctl conntrack killall 
ERROR! No such file or directory
system(): /bin/echo 1 > /proc/sys/net/ipv4/ip_forward
   CMD: /bin/iptables -P INPUT ACCEPT 
   CMD: /bin/iptables -P FORWARD ACCEPT 
   CMD: /bin/iptables -A FORWARD -p tcp -o ppp+ --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu 
   CMD: /bin/iptables -A FORWARD -p tcp -i ppp+ --tcp-flags SYN,RST SYN -m tcpmss --mss 1452:1536 -j TCPMSS --set-mss 1452 
   CMD: /bin/iptables -A INPUT -p udp --dport 520 -j ACCEPT 
   CMD: /bin/iptables -A INPUT ! -i br0 -d 239.255.255.250 -j DROP 
   CMD: /bin/iptables -A INPUT -d 224.0.0.0/4 -j ACCEPT 
   CMD: /bin/iptables -N aclblock 
   CMD: /bin/iptables -t nat -N aclblock 
   CMD: /bin/iptables -t mangle -N aclblock 
   CMD: /bin/iptables -A aclblock -i br0 -s 0.0.0.0/0 -j RETURN 
   CMD: /bin/iptables -t mangle -A aclblock -i nas0_0 -p TCP --dport 23 -j MARK --set-mark 0x1000 
[xml_INFO]: Update cs configuration success.
   CMD: /bin/iptables -t mangle -A aclblock -i nas0_0 -p TCP --dport 80 -j MARK --set-mark 0x1000 
udhcp client (v0.9.9-pre) started
initialDhcpcOptionTbl: existing rule num:21
   CMD: /bin/iptables -t mangle -A aclblock -i nas0_0 -p ICMP --icmp-type echo-request -m limit --limit 10/s -j MARK --set-mark 0x1000 
   CMD: /bin/iptables -A aclblock -p udp -i br0 --dport 53 -j RETURN 
   CMD: /bin/iptables -A aclblock -p udp -i br0 --dport 67 -j RETURN 
   CMD: /bin/iptables -A aclblock -i lo -j RETURN 
   CMD: /bin/iptables -A aclblock -i nas0_0 -m mark --mark 0x1000 -j ACCEPT 
size of linux : 3145728
size of linux : 8126464
init_global_parm891::size of g_max_upload_size : 8126464
   CMD: /bin/iptables -A aclblock -i nas0_1 -m mark --mark 0x2000<0> TX enable....
 -j ACCEPT 
~~~BOSA Type=PIN, power down booster...
 <0> RX enable....
~~~Config LOS, W36= 0xBA, Flash 71 = 0x1   
 <0>~~~Config LOS, W40= 0x63, Flash 68 = 0x1   
 <0>~~~BOSA Type = PIN
 [ Enable up      ]
init RTL8290B user parameters ...
europa_param.rssi_v0 = 0x89c77
europa_param.gnd_v0 = 0x1a2d36
europa_param.vdd_v0 = 0xe73274
europa_param.half_v0 = 0x7fed2c
europa_param.rssi_k = -8041
europa_param.mpd1 = 576000
RX A = 0, RX B = 9812, RX C = -5130, TX A = 863
rssi_r1= 33000 
rssi_r2= 6800 
Iavg1 = 0x8e 
temp_0 = 310 
temp_0_offset = 20 
Update DDMI A0....,  addr = 0xc0172ae0
 <0>FSU TXSD_DIS: loop_mon_time = 100
europa_param.mpd0 = 0x9d9
   CMD: /bin/iptables -A aclblock -i nas0_2 -m mark --mark 0x3000 -j ACCEPT 
   CMD: /bin/iptables -A aclblock -i nas0_3 -m mark --mark 0x4000 -j ACCEPT 
   CMD: /bin/iptables -A aclblock -i nas0_4 -m mark --mark 0x5000 -j ACCEPT 
   CMD: /bin/iptables -A aclblock -i nas0_5 -m mark --mark 0x6000 -j ACCEPT 
   CMD: /bin/iptables -A aclblock -i ppp0 -m mark --mark 0x7000 -j ACCEPT 
   CMD: /bin/iptables -A aclblock -i ppp1 -m mark --mark 0x8000 -j ACCEPT 
   CMD: /bin/iptables -A aclblock ! -i br0 -p ICMP --icmp-type echo-request -m limit --limit 1/s -j DROP 
   CMD: /bin/iptables -A aclblock -m state --state ESTABLISHED,RELATED -j ACCEPT 
   CMD: /bin/iptables -A aclblock -j DROP 
   CMD: /bin/iptables -A INPUT -j aclblock 
   CMD: /bin/iptables -t nat -A PRRun rtl8290b_ldd_mapper
EReuropa_intrInit, pin = 29 
OUTI DDMI Polling Task Add Success.
NG - LoopMon Task Add Success.
j Init Europa Finish.
aclblock 
initialDhcpcOptionTbl: add 0 rule to interface 0x1ff00
   CMD: /bin/iptables -t mangle -A PREROUTING -j aclblock 
   CMD: /bin/ebtables -N br_wan 
$ /bin/sh /etc/scripts/insert_europa.sh----- do_rc [/etc/init.d/rc34] -----
write watchdog_flag to 0x00000001
[Kthread : watchdog ] init complete!
************ Watchdog Setting ****************
WDT_E=1, (1-enable, 0-disable)
LX(MHz)=200
WDT_CLK_SC=3
PH1_TO=31
PH2_TO=0
WDT_RESET_MODE=0
**********************************************
   CMD: /bin/ebtables -P br_wan RETURN 
   CMD: /bin/ebtables -N br_wan_out 
   CMD: /bin/ebtables -P br_wan_out RETURN 
   CMD: /bin/ebtables -A INPUT -j br_wan 
   CMD: /bin/ebtables -A OUTPUT -j br_wan_out 
   CMD: /bin/iptables -N domainblk 
   CMD: /bin/iptables -A INPUT -j domainblk 
----- do_rc [/etc/init.d/rc35] -----
   CMD: /bin/iptables -A FORWARD -j domainblk 
   CMD: /bin/iptables -A OUTPUT -j domainblk 
   CMD: /bin/iptables -N portmapping_dhcp 
   CMD: /bin/iptables -A INPUT -j portmapping_dhcp 
   CMD: /bin/ebtables -N portmapping_igmp 
   CMD: /bin/ebtables -P portmapping_igmp RETURN 
   CMD: /bin/ebtables -A INPUT -j portmapping_igmp 
   CMD: /bin/iptables -N dhcp_port_filter 
   CMD: /bin/iptables -A INPUT -j dhcp_port_filter 
   CMD: /bin/iptables -N urlblock 
   CMD: /bin/iptables -A FORWARD -j urlblock 
UPNP=0
Turn on phy power...
   CMD: /bin/iptables -N portfw 
   CMD: /bin/iptables -A FORWARD -j portfw 
   CMD: /bin/iptables -t nat -N portfw 
   CMD: /bin/iptables -t nat -A PREROUTING -j portfw 
   CMD: /bin/iptables -t nat -N portfwPreNatLB 
   CMD: /bin/iptables -t nat -A PREROUTING -j portfwPreNatLB 
   CMD: /bin/iptables -t nat -N portfwPostNatLB 
[ERR] Warning, unknown dir name: OMCI_WAN_QOS_QUEUE_NUM
<fMgmtInit:420> is the so is not a regular file.
<fMgmtInit:420> is the so is not a regular file.
<fMgmtInit:420> is the so is not a regular file.
Module libtr142.so is loaded and inited
Module /lib/features/internal/bdp_00000008.so is inited
Module /liport 2 bassign to pon0
/pon0 -> 0x4
features/internal/bdp_00000080.so is inited
omci_wrapper_msgHandler: devMode 0,receiveState 1,logLevel 0,sn ITBSxxxxxxxx
iphost's mac xxxxxxxxxxxx 
iphost's mac XX XX XX XX XX XX
iphost's mac XX XX XX XX XX XX
iphost's mac xxxxxxxxxxxx 
iphost's mac XX XX XX XX XX XX 
iphost's mac XX XX XX XX XX XX 
iphost's mac xxxxxxxxxxxx 
iphost's mac XX XX XX XX XX XX 
iphost's mac XX XX XX XX XX XX 
private MEs were initialized. 

[libtr142] omci_cfg_get_extwan is called OpIdx(6)
[libtr142] omci_cfg_get_extwan is called OpIdx(6)
[libtr142] omci_cfg_get_extwan is called OpIdx(6)
[libtr142] omci_cfg_get_extwan is called OpIdx(6)
[libtr142] omci_cfg_get_extwan is called OpIdx(6)
[libtr142] omci_cfg_get_extwan is called OpIdx(6)
priority: 1, portmask 127, rx: 8022ba48
insert here, priority: 4, portmask 4, rx: 80180ec8
   CMD: /bin/iptables -t nat -A POSTROUTING -j portfwPostNatLB 
   CMD: /bin/iptables -F portfw 
   CMD: /bin/iptables -t nat -F portfw 
   CMD: /bin/iptables -t nat -F portfwPreNatLB 
   CMD: /bin/iptables -t nat -F portfwPostNatLB 
   CMD: /bin/iptables -N ipfilter 
   CMD: /bin/iptables -F ipfilter 
   CMD: /bin/iptables -A ipfilter -m state --state ESTABLISHED,RELATED -j RETURN 
   CMD: /bin/iptables -A ipfilter -d 224.0.0.0/4 -j RETURN 
   CMD: /bin/ethctl conntrack killall 
   CMD: /bin/iptables -A FORWARD -j ipfilter 
   CMD: /bin/iptables -t nat -N dmzPreNatLB 
   CMD: /bin/iptables -t nat -A PREROUTING -j dmzPreNatLB 
   CMD: /bin/iptables -t nat -N dmzPostNatLB 
   CMD: /bin/iptables -t nat -A POSTROUTING -j dmzPostNatLB 
   CMD: /bin/iptables -N dmz 
   CMD: /bin/iptables -t nat -N dmz 
   CMD: /bin/iptables -F dmz 
   CMD: /bin/iptables -t nat -F dmz 
   CMD: /bin/iptables -t nat -F dmzPreNatLB 
   CMD: /bin/iptables -t nat -F dmzPostNatLB 

   CMD: /bin/iptables -A ipfilter -j dmz 
   CMD: /bin/iptables -t nat -A PREROUTING -j dmz 
   CMD: /bin/iptables -A ipfilter ! -i br0 -j DROP 
   CMD: /bin/iptables -t nat -N macfilter 
   CMD: /bin/iptables -t nat -I PREROUTING -j macfilter 
   CMD: /bin/ebtables -N macfilter 
   CMD: /bin/ebtables -F macfilter 
   CMD: /bin/iptables -t nat -F macfilter 
/bin/ebtables -P macfilter RETURN
   CMD: /bin/ebtables -A FORWARD -j macfilter 
   CMD: /bin/ebtables -P FORWARD DROP 
   CMD: /bin/ebtables -N disBCMC 
   CMD: /bin/ebtables -A disBCMC -d Broadcast -j DROP 
   CMD: /bin/ebtables -A disBCMC -d Multicast -j DROP 
   CMD: /bin/ebtables -I FORWARD -j disBCMC 
   CMD: /bin/ebtables -P disBCMC DROP 
   CMD: /bin/ip6tables -P INPUT DROP 
   CMD: /bin/ip6tables -A INPUT -p icmpv6 --icmpv6-type router-advertisement -j ACCEPT 
   CMD: /bin/ip6tables -A INPUT -p icmpv6 --icmpv6-type neighbour-solicitation -j ACCEPT 
   CMD: /bin/ip6tables -A INPUT -p icmpv6 --icmpv6-type neighbour-advertisement -j ACCEPT 
   CMD: /bin/ip6tables -A INPUT -p icmpv6 -i br0 -j ACCEPT 
   CMD: /bin/ip6tables -A INPUT -m state --state NEW -i br0 -j ACCEPT 
   CMD: /bin/ip6tables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT 
   CMD: /bin/ip6tables -A INPUT -p udp --dport 546 -j ACCEPT 
   CMD: /bin/ip6tables -A INPUT -i br0 -p udp --dport 547 -j ACCEPT 
   CMD: /bin/ip6tables -N aclblock 
   CMD: /bin/ip6tables -A aclblock ! -i br0 -s ::/0 -p ICMPV6 -m limit --limit 1/s -j ACCEPT 
port set phy-force-power-down port all state disable 
   CMD: /bin/ip6tables -A aclblock -p udp -i br0 --dport 53 -j RETURN 
   CMD: /bin/ip6tables -A aclblock -p udp -i br0 --dport 67 -j RETURN 
   CMD: /bin/ip6tables -A aclblock -i lo -j RETURN 
   CMD: /bin/ip6tables -A aclblock -m state --state ESTABLISHED,RELATED -j ACCEPT 
   CMD: /bin/ip6tables -A aclblock -j DROP 
   CMD: /bin/ip6tables -A INPUT -j aclblock 
   CMD: /bin/ip6tables -N ipv6filter 
   CMD: /bin/ip6tables -A FORWARD -j ipv6filter 
RTK.0> command:starting pid 908, tty '/dev/ttyS0': '/bin/login -p'
starting pid 910, tty '': '/bin/systemd'
starting pid 909, tty '': '/bin/inetd'
Restart IPv6 Filter!
   CMD: /bin/ip6tables -F ipv6filter 
   CMD: /bin/ip6tables -A ipv6filter -m state --state ESTABLISHED,RELATED -j RETURN 
Update Firewall rule set by user.
Open file /var/prefix_info fail !
Error! Note Got prefix yet!
   CMD: /bin/ethctl conntrack killall 
login:    CMD: /bin/ip6tables -N reject_list 
   CMD: /bin/ip6tables -A FORWARD -j reject_list 
   CMD: /bin/ip6tables -N reject_list_no_router 
  TRC_PG(setupOtherWan:9406):	[cmd:iptables -D INPUT -i eth0.2 -p udp --dport 67 -j DROP]
iptables: Bad rule (does a matching rule exist in that chain?)
  TRC_PG(setupOtherWan:9410):	****Enable ftp ALG function!*****
0m[itfgroup:0]
*****Enable h323 ALG function!*****
sh: can't create /proc/algonoff_irc: nonexistent directory
*****Enable rtsp ALG function!*****
*****Enable sip ALG function!*****
*****Enable pptp ALG function!*****
   CMD: /bin/ifconfig eth0.2 up 
[SYSTEMD] free memory is too small (1176 kB), drop caches !!!
ADDRCONF(NETDEV_UP): eth0.2: link is not ready
   CMD: /bin/iptables -t mangle -A PREROUTING ! -i br0 -p TCP --dport 7547 -j MARK --set-mark 0x1000 
IGMP Snooping: enabled
   CMD: /bin/ebtables -D FORWARD -j vlanmapping 
Illegal target name 'vlanmapping'.
   CMD: /bin/ebtables -N vlanmapping 
   CMD: /bin/ebtables -P vlanmapping DROP 
   CMD: /bin/ebtables -F vlanmapping 
   CMD: /bin/ebtables -A FORWARD -j vlanmapping 
   CMD: /bin/ebtables -t broute -D BROUTING -j broute_vlanmapping 
Illegal target name 'broute_vlanmapping'.
   CMD: /bin/ebtables -t broute -N broute_vlanmapping 
   CMD: /bin/ebtables -t broute -D BROUTING -j vlanbinding 
Illegal target name 'vlanbinding'.
   CMD: /bin/ebtables -t broute -N vlanbinding 
   CMD: /bin/ebtables -t broute -P vlanbinding RETURN 
   CMD: /bin/ebtables -t broute -F vlanbinding 
   CMD: /bin/ebtables -t broute -I BROUTING -j vlanbinding 
   CMD: /bin/ebtables -t broute -P broute_vlanmapping RETURN 
   CMD: /bin/ebtables -t broute -F broute_vlanmapping 
   CMD: /bin/ebtables -t broute -I BROUTING -j broute_vlanmapping 
   CMD: /bin/ebtables -t broute -N broute_chain_eth0.2 -P RETURN 
   CMD: /bin/ebtables -t broute -F broute_chain_eth0.2 
   CMD: /bin/ebtables -t broute -F vlanbinding 
   CMD: /bin/iptables -t mangle -D PREROUTING -i br0 -j lan_mark 
iptables v1.2.7a: Couldn't find target `lan_mark'

Try `iptables -h' or 'iptables --help' for more information.
   CMD: /bin/iptables -t mangle -N lan_mark 
   CMD: /bin/iptables -t mangle -F lan_mark 
   CMD: /bin/iptables -t mangle -A PREROUTING -i br0 -j lan_mark 
   CMD: /bin/ebtables -F portmapping_igmp 
   CMD: /bin/ebtables -D FORWARD -j portmapping 
Illegal target name 'portmapping'.
   CMD: /bin/ebtables -N portmapping 
   CMD: /bin/ebtables -A FORWARD -j portmapping 
   CMD: /bin/ip rule del fwmark 0x00008000/0x000f8080 
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00010000/0x000f8080 
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00018000/0x000f8080 
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00020000/0x000f8080 
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00028000/0x000f8080 
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00030000/0x000f8080 
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00038000/0x000f8080 
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00040000/0x000f8080 
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00048000/0x000f8080 
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00050000/0x000f8080 
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00058000/0x000f8080 
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00060000/0x000f8080 
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00068000/0x000f8080 
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del fwmark 0x00070000/0x000f8080 
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del prohibit 
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del prohibit 
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del prohibit 
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del prohibit 
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del prohibit 
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del prohibit 
RTNETLINK answers: No such filenetIfIdx 1  vid 0 opri 0 rtype 0  service 0 disBinding 0 ibAdd 0 
rectory
   CMD: /bin/ip rule del prohibit 
RTNnetIfIdx 1 ETvid 7 Lpri -1 Itype 1 Nservice 0 KisBinding 0  bAdd 1 
answers: No such file or directory
   CMD: /bin/ip rule del prohibit 
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del prohibit 
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del prohibit 
RTNETLINK answers: No such file or directory
   rtk fast bridge is enabled
CMD: /bin/ip rule del prohibit 
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del prohibit 
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del prohibit 
RTNETLINK answers: No such file or directory
   CMD: /bin/ip rule del prohibit 
RTNETLINK answers: No such file or directory
   CMD: /bin/iptables -F portmapping_dhcp 
   CMD: /bin/ebtables -I vlanmapping -i eth0.2 -j RETURN 
   CMD: /bin/iptables -t mangle -A lan_mark -i eth0.2 -unlearned SA rate limit disabled.
j MARK --set-mark 0x00008000/0x000f8080 
   CMD: /bin/ip route add default dev nas0_0 table 32 
subr_qos_3.c: setupIPQ  2561
sh: can't create /proc/FastPath: nonexistent directory
Init System OK for IPV6
   CMD: /bin/ebtables -t broute -D BROUTING -j untag_pvid_2cpu 
Illegal target name 'untag_pvid_2cpu'.
   CMD: /bin/ebtables -t broute -N untag_pvid_2cpu 
   CMD: /bin/ebtables -t broute -P untag_pvid_2cpu RETURN 
   CMD: /bin/ebtables -t broute -F untag_pvid_2cpu 
   CMD: /bin/ebtables -t broute -I BROUTING -j untag_pvid_2cpu 
No lease, wait 30 second to retry.

Firmwares

Stock

Versões oficiais e não modificadas para o aparelho podem ser encontrados no site oficial da Intelbras.

Intelbras

Custom

Exceto pelas alterações realizadas, as imagens de firmware continuam de propriedade das marcas/fabricantes do aparelho. Não solicite suporte ou assistência para dispositivos utilizando uma imagem custom.

Estas imagens são testadas localmente ao máximo possível porém seu uso e possíveis implicações são de total responsabilidade do proprietário do aparelho.

Versões modificadas com correções e/ou melhorias, baseadas em releases oficiais/stock.

As versões são cumulativas, ou seja, a mais recente sempre contém também todas as modificações das versões anteriores.

É possível atualizar entre versões custom ou stock sem nenhum problema. Note que saltos na versão base podem incluir ou remover parâmetros de configuração, portanto é aconselhável um factory reset após realizar tais atualizações. Adicionalmente, efetue estes procedimentos com a fibra desconectada do aparelho.

Caso a versão base continue a mesma de uma versão custom para a outra, não é necessário o factory reset, salvo se solicitado explicitamente na descrição.

1.9-220719

Baseada no release oficial V1.3-220719
Adicionado utilitário setcons.
- Vários comandos executados via telnet no aparelho tem sua saída configurada para o console (, apontado para a porta serial/UART), sendo necessário desmontar e usar um adaptador/cabo/conversor serial para vê-los. A ferramenta setcons permite redirecionar a saída do console para o terminal atual - provavelmente sua sessão telnet -, permitindo ver as saídas diretamente. Após conectar-se via telnet no aparelho, execute o comando setcons para instruções de uso; ou, resumindo:

setcons -s
omcicli get tables
omcicli mib get 84
setcons -r

Os comandos entre o setcons são apenas exemplos, execute os comandos que desejar. O redirecionamento não é permanente, sendo válido apenas para a mesma sessão. Mesmo que não retorne para a saída padrão depois, tudo retorna ao normal após um reboot ou se desconectar.

1.9-220719.tar ( SHA256: 4f6a7b06ca390460c727f43a739476ffd5439dd843d8aeb63c65be830635e92e )

Agradecimentos

Pessoas envolvidas em arquivos, discussões, dicas ou bate papo em geral. Lista em ordem alfabética.