Join operators from across the region for a relaxed, friendly weekly net on BM TG 31225. Whether you’re local to Louisiana or checking in from across the country, everyone is invited to participate.

Bring your questions, your updates, or just stop by to say hello. We look forward to hearing you on the air!

The post Southeast Louisiana Net Thursdays – 8:00 PM CST BrandMeister DMR Talkgroup 31225 Open to Everyone – All Check‑Ins Welcome first appeared on Louisiana Nationwide.

I recently discovered a serious security issue affecting some default Hamvoip node setups. This is likely in all nodes based on that image and needs to be fixed or you need to take your nodes webpage off the internet. Close your ports.

This may explain why some users have to reboot everything after a while to stop jitter and sluggish nodes. As rebooting will give you a new IP and stop the abuse for a while.

Certain Apache proxy modules are enabled by default, which allows your node to be used as a proxy by anyone on the Internet. This can lead to massive, unintended bandwidth usage and potentially put your node at risk of abuse or blacklisting.

At this time I don’t know which nodes have this proxy enabled likely all of them. But running this script will tell you if yours is affected or not.

In our tests, we observed extreme bandwidth consumption:

Clearly, leaving these modules enabled can lead to enormous, unmonitored network usage, potentially incurring charges or throttling from your ISP.

From the nodes webserver logs
64.xxxxxxxxx- – [30/Aug/2025:08:35:17 -0500] “GET http://api.xxxxxxx.org/?format=json HTTP/1.1” 302 –
64.xxxxxxxxx- – [30/Aug/2025:08:35:19 -0500] “CONNECT www.xxxxxxxx.org:443 HTTP/1.1” 302 –

In the above example they are using the node as a proxy to download files for them. And who knows what they are doing ( hacking, spam, illegal traffic). All of which will be coming from your IP

To prevent this, I have created a safe script to fix your node:

1. change to tmp

cd /tmp

2. Download the fix script

curl -sSL -o fix_proxy.sh https://raw.githubusercontent.com/tmastersmart/gmrs_live/refs/heads/main/fix_proxy.sh

3. Inspect it before running

less fix_proxy.sh

4. Run the script

bash fix_proxy.sh

Above is on a old GMRSLive node I converted to GMRSHUB.
This fully explains most all the problems we have had for years.
Jitter, Sluggish and lockups. Ever had to reboot your router? this is why.

this is why.

What the script does:

• Scans your Apache configuration for active proxy modules.
• Comments out all potentially unsafe proxy modules.
• Displays messages showing which modules are being disabled.
• Reboots your node to apply the changes.

Why you should act immediately:

Leaving these proxy modules active exposes your node to external abuse, which can:

• Consume massive amounts of bandwidth.
• Slow down your node for legitimate GMRS use.
• Create potential legal or ISP issues if your node is used for malicious activity.

We strongly encourage all GMRS Hamvoip node operators to review their Apache configuration and run this fix script to ensure their nodes are secure.

Manual Instructions for Advanced Users

If you prefer to manually inspect and fix your node:

1. Check which proxy modules are loaded

httpd -M | grep proxy

2. Open your Apache config file

nano /etc/httpd/conf/httpd.conf

or wherever your Hamvoip Apache config is located.

3. Comment out all potentially unsafe proxy modules by adding a # at the start of lines like:

LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_connect_module modules/mod_proxy_connect.so
LoadModule proxy_ftp_module modules/mod_proxy_ftp.so
LoadModule proxy_http_module modules/mod_proxy_http.so
LoadModule proxy_fcgi_module modules/mod_proxy_fcgi.so
LoadModule proxy_scgi_module modules/mod_proxy_scgi.so
LoadModule proxy_wstunnel_module modules/mod_proxy_wstunnel.so
LoadModule proxy_ajp_module modules/mod_proxy_ajp.so
LoadModule proxy_balancer_module modules/mod_proxy_balancer.so
LoadModule proxy_express_module modules/mod_proxy_express.so

4. Save and exit, then restart Apache:

systemctl restart httpd

5. Verify the modules are disabled:

httpd -M | grep proxy

You should only see modules that are intentionally enabled, and none of the risky proxy modules.

Takeaway: Act immediately. Leaving these proxy modules active exposes your node to abuse, which can consume massive amounts of bandwidth and may lead to network or legal issues.

I would be interested in finding out if you node is affected and which release it is. Please add your comment here. Perhaps some don’t have this but I suspect they all.

Final thought is after finding how bad this software is setup, even after patching I would not expose any ports to the internet if you need a status page you need a hub in the cloud or a hub running on a desktop. Don’t use a pi image for a hub. And don’t expose the port 222 as I am sure this old ssh also has problems. I am in the process of Harding the Louisiana Image since its also hamvoip based, to this and will have a new release tonight.
It would be interesting to see who activated this proxy by seeing which images have it.

Vulnerability of HAMVOIP and other pi images to Proxy Exploits

The Hamvoip system, particularly when configured default or unsecure settings exhibits notable vulnerabilities proxy functionalities. These weaknesses primarily stem from the default enabling certain Apache proxy modules, which can be exploited malicious actors to the node as an open proxy.

Exploitation of this vulnerability allows unauthorized users to leverage the node bandwidth for malicious activities such as illegal file transfers, spam distribution, or hacking attempts. Consequently, this can lead to bandwidth consumption, network slowdown, and potential blacklisting by service providersFurthermore the exposure of modules increases the risk of external abuse which may result in legal complications or of ISP policies. It is imperative operators to review configuration settings diligently and disable any unnecessary proxy modules mitigate these risks.

Proactive measures include running scripts designed to identify and comment out active proxy modules within the Apache configuration. Manual inspection and disabling of these modules are recommended for advanced users aiming to fort their against potential proxy exploits.

summary, while Hamvoip offers robust communication capabilities, its default proxy configurations pose significant security concerns necessitate immediate attention and remediation to prevent misuse and safeguard operational integrity.

The post Critical Security Update for Hamvoip proxy first appeared on Louisiana Nationwide.

Louisiana Nationwide is a community-driven GMRS network that connects users across the country — without relying on traditional repeaters. Instead, we use a custom digital linking system that allows GMRS radios, hotspots, and gateways to communicate directly over the internet, creating a seamless and reliable experience for licensed GMRS operators.

Whether you’re in rural Louisiana or across the country, you can join the conversation and stay connected with others — no repeater coverage required. Perfect for families, travelers, and off-grid communication enthusiasts, the Louisiana Nationwide system brings the GMRS community closer than ever.

The post Louisiana Nationwide GMRS first appeared on Louisiana Nationwide.

Are you an outdoor enthusiast craving more connectivity on your adventures? Maybe you’re a family looking for a reliable way to stay in touch during outdoor excursions. Or perhaps you’re just someone intrigued by the world of radio communication. Whatever your motivation, obtaining your General Mobile Radio Service (GMRS) license could be the ticket to enhancing your outdoor experiences and opening up a world of communication possibilities.

So, why should you consider diving into the world of GMRS licensing? Here are a few reasons why it’s not only practical but also incredibly fun:

1. Extended Range Communication: GMRS radios offer significantly better range compared to standard walkie-talkies, often reaching several miles or more depending on terrain and conditions. With your license, you gain access to higher power levels and better antennas, extending your communication reach even further. Whether you’re hiking, camping, or off-roading, staying connected with your group has never been easier.
2. Safety First: In remote areas or during emergencies, having reliable communication can be a lifesaver. With a GMRS license, you have access to channels specifically designated for emergency and priority communications. Whether it’s summoning help in a remote location or coordinating rescue efforts during a crisis, having a licensed GMRS radio can be invaluable.
3. Family Bonding: Planning a family camping trip or a day out in the wilderness? GMRS radios can turn your outdoor adventures into memorable bonding experiences. From playing outdoor games to coordinating exploration missions, these radios keep everyone connected and ensure that nobody misses out on the fun. Plus, it’s a great way to teach kids about responsible communication and navigation skills.
4. Community Engagement: Joining the GMRS community opens up opportunities to connect with like-minded individuals who share your passion for outdoor activities and radio communication. Whether it’s participating in local GMRS events, joining online forums, or simply chatting with fellow license holders on the airwaves, you’ll find a supportive community eager to share tips, stories, and advice.
5. Exploration and Discovery: With your GMRS license in hand, you’re free to explore new territories with confidence, knowing that you have a reliable means of communication at your disposal. Whether it’s venturing into remote wilderness areas, exploring off-the-beaten-path trails, or embarking on cross-country road trips, having a GMRS radio ensures that you’re never too far from help or companionship.

Getting your GMRS license is not only a practical step towards safer and more enjoyable outdoor adventures but also a gateway to a vibrant community of radio enthusiasts. So, why wait? Dive into the world of GMRS licensing today and unlock a whole new realm of communication possibilities!

Tune in click out listen Live button

The post Why Getting Your GMRS License is a Blast! first appeared on Louisiana Nationwide.

The post GMRSKurvey 10min node setup first appeared on Louisiana Nationwide.

This is a lq test audio will be better on the next 2.

The post Bernies net 3/1/24 first appeared on Louisiana Nationwide.