ppp/scripts

This directory contains a set of scripts which have been used on Linux
as well as Solaris 2.x systems to initiate or maintain a connection 
with PPP.  The files in this directory were contributed by Al Longyear 
(longyear@netcom.com) and Adi Masputra (adi.masputra@sun.com)

------------------------------------------------------------------------

1. README

This file. You are reading it. It is just documentation.

------------------------------------------------------------------------

2. ppp-on

This script will initiate a connection to the PPP system. It will run
the chat program with the connection script as a parameter. This is a
possible security hole. However, it is simple. It is meant to replace
the previous version of ppp-on which was not very functional.

The ppp-on script has entries for the account name, password, IP
addresses, and telephone numbers. The parameters are passed to the
pppd process and, then in turn, to the second part of the connect
script, as a set of environment variables.

Please make sure that you put the full path name to the ppp-on-dialer
script in the reference to it in ppp-on.

------------------------------------------------------------------------

3. ppp-on-dialer

This is the second part to the simple calling script, ppp-on.  It
executes the chat program to connect the user with a standard UNIX
style getty/login connection sequence.

------------------------------------------------------------------------

4. callback

This script may be used in lieu of the ppp-on-dialer to permit the
common modem callback sequence. You may need to make changes to the
expected prompt string for the modem.

The script works by disabling the system's detection of the DCD
condition and working on the modem status message "NO CARRIER" which
is generated when the modem disconnects.

It is crude. It does work for my modem connection. Use as you see fit.

------------------------------------------------------------------------

5. redialer

The redialer script is a replacement for the ppp-on-dialer script.  It
will do 'attack dialing' or 'demon dialing' of one or more telephone
numbers. The first number which responds will be used for a
connection.

There is a limit of ten attempts and a 15 second delay between dialing
attempts. Both values are set in the script.

------------------------------------------------------------------------

6. ppp-off

This is a script which will terminate the active ppp connection. Use
as either "ppp-off" to terminate ppp0, or "ppp-off <device>" to
terminate the connection on <device>. For example, "ppp-off ppp2" will
terminate the ppp2 connection.

------------------------------------------------------------------------

7. secure-card

This script was written by Jim Isaacson <jcisaac@crl.com>. It is a script
for the 'expect' programming language used with Tcl. You need to have
expect and Tcl installed before this script may be used.

This script will operate with a device marketed under the name "SecureCARD".
This little device is mated with its controller. On the credit card size
device, there is a sequence number which changes on a random basis. In order
for you to connect you need to enter a fixed portion of your account name
and the number which is displayed on this card device. The number must match
the value at the controller in order for the account name to be used.

The problem is that chat uses fixed response strings. In addition, the
timing for running the script may prevent the use of a script that reads the
value before it starts the dial sequence. What was needed was a script which
asked the user at the user's console at the time that it is needed.

This led to the use of expect.

------------------------------------------------------------------------

8. ppp-on-rsh

This script will initiate a PPP connection to a remote machine using rsh.
This is implemented by creating a master/slave pseudo-tty with the slave 
pointing to rsh, specifically with the 'pty' and 'notty' options of pppd. 
It is assumed that the remote machine contains some sort of trust 
mechanisms (such as ~/.rhosts, et al) to allow the local machine to 
connect via rsh as root.

------------------------------------------------------------------------

9. ppp-on-ssh

This script will initiate a PPP connection to a remote machine using the 
secure shell, or ssh. I've only tested this on ssh 1.x, so those of you 
who are running ssh 2.x mahy need to modify the ssh options slightly.
This is implemented by creating a master/slave pseudo-ttyt with the slave 
pointing to ssh, specifically with the 'pty' and 'notty' options of pppd. 
It is assumed that the remote machine can accept the ssh connection from 
the local host, in the sense that all ssh authentication mechanisms have 
been properly configured, so that a remote root user can open a ssh 
connection.

------------------------------------------------------------------------

10. options-rsh-loc & options-rsh-rem

These options files accompany the ppp-on-rsh script mentioned above. In 
theory, you'd want to copy the options-rsh-rem to the remote machine where 
in.rshd is running. The only extra option required on the remote machine 
options file is the 'notty' option. In addition, all ASCII control characters 
[0x00 to 0x1f], plus 0xff, are escaped. This may need to be modified 
depending on the rsh (or pseudo-tty) implementation which may differ across 
platforms, for further optimizations.

------------------------------------------------------------------------

11. options-ssh-loc & options-ssh-rem

These options files accompany the ppp-on-ssh script mentioned above. I've
only tested this on ssh 1.x, so those of you who are running ssh 2.x need
to modify the ssh options slightly. In theory, you'd want to copy the 
options-ssh-rem to the remote machine where sshd daemon is running. The only 
extra options required on the remote machine options file is the 'notty' 
option. In addition, all ASCII control characters [0x00 to 0x1f], plus 0xff, 
are escaped. This may need to be modified depending on the ssh (or 
pseudo-tty) implementation which may differ across platforms, for further 
optimizations.