This is a Fastweb (italian ISP) router with voip and usb port

1. enable telnet server
2. connect via telnet to your device using web interface credentials
3. type the undocumented “sh” command
4. enjoy your root shell!

Latest device was shipped with the very old 2.6.8.1 Linux kernel WITHOUT swap support. Swap support can't be compiled ad module so you should be careful with memory usage.

For some strange reason in VoIP configuration the option “Interface name” must be the internal lan, not wan.

If you activate telnet on wan interface the service is reachable over this interface but the router won't accept any credential

OpenWRT porting was done for a similar model that differ only for half size ram and flash. FXS/FXO ports are not working on OpenWRT (to be verified). I prefer keep the original firmware and extend its functionality.

1. Download latest busybox for mips
2. Download a brcm63xx generic jffs2-128k image (backfire link)
3. Unpack it on your computer (take a look in how-to section on Linux page
4. Move rootfs and busybox on the drive attached to your Telsey for example using tar
5. Copy system files and bind system folders inside chroot

   CHROOTDIR=/var/udev/mount/NASusbsda/openwrt_backfire
   
   cp /etc/hosts $CHROOTDIR/etc/hosts
   cp /etc/fstab $CHROOTDIR/etc/fstab
   cp /etc/resolv.conf $CHROOTDIR/etc/resolv.conf
   
   mount -o bind /proc $CHROOTDIR/proc
   mount -o bind /dev $CHROOTDIR/dev
   
   mount -o bind /var/udev/mount/NASusbsda $CHROOTDIR/mnt/NASusbsda

6. Make a “boot” script to set right variables inside chroot

   vi $CHROOTDIR/root/startchroot
   (paste this inside)
   #!/bin/sh
   
   source /etc/profile
   /bin/sh

7. Chroot!

   ./busybox-mips chroot $CHROOTDIR /root/startchroot

• DEL - ONLY in bash it print a ~ without delete characters, however it works fine in vi
• ENTER - ONLY in nano I can't confirm the filename when saving

Somethings works but for example reading log cause a system crash

SSH accepts commands but can't open a remote shell, so you can use direct commands in this way:

ssh root@Telsey "touch /tmp/thisworks"

or use rsync This issue is related with the kernel that miss /dev/pts filesystem (and can't be fixed using a module)

Be sure that your /etc/resolv.conf contains a working DNS server /etc/hosts is not read when a DNS is in progress so you can't specify a particular ip for a name or use localhost instead of 127.0.0.1

• Merlino60
• Pegasus (usb-ethernet driver) kernel module
• Alsa+USB Soundcards kernel modules