Changing the number of rings before your mobile diverts to Voicemail

I keep missing phone calls on my mobile because it’s in my pocket and diverts to voicemail. This is so frustrating that I simply disabled voicemail – which annoys those who call me and want to leave a message. However, there is a way out. It is possible to change the delay before your phone will divert to voicemail. On my Nokia E72, you can set your ring time to 5, 10, 15, 20, 25 or 30 seconds.

  • Tap **61*121*11* into your phone as if you’re making a call.
  • Next enter a time between 5 and 30 (the number of seconds in multiples of 5)
  • Press # and then the call button. Don’t put the phone to your ear – just look at the display until you see a message confirming your ring time has been set.

For example, **61*121*11*25# followed by the call button would set your ring time to 25 seconds.

Vodafone warn that this will only work if your mobile phone’s on the Vodafone network and you have voicemail set up, but it may work on your network too.

Configuring HUAWEI E1750 for OpenDNS

I have recently been using a T-Mobile Mobile Broadband USB stick 610 to connect to the Internet, but pages keep failing to update. (Even Google kept timing out on me).

The status bar of Firefox said something like “looking up google.com”, so the problem was either a connectivity issue or a DNS issue. DNS converts something you and I understand (Google.com) into something the computer understand (a number). I tried opening Google directly at 173.194.37.104 (Google UK) and up popped the Google home page. This is apparently a common problem with mobile Internet. The answer is to use somebody else’s DNS Servers. A common choice is to use OpenDNS; there is no need to sign up, simply specify their servers at 208.67.220.220 and 208.67.222.222

T-Mobile’s technical support were no help when asked how to reconfigure the device to use OpenDNS instead and every time I tried to edit the configuration under Control Panel\Network and Internet\Network Connections, they kept getting overwritten.

The answer is to configure the DNS server through the Internet Manager which starts each time the stick is plugged in.

  • Start T-Mobile Internet Manager
  • Click on Tools then Options…
  • Select “Profile Management” in the left hand pane
  • Click on New button
  • Give profile a name (eg T-Mobile UK OpenDNS)
  • Set APN to static general.t-mobile.uk
  • Set Authentication as follows
    • Access number *99#
    • User name t-mobile
    • Password tm
  • Click on the Advanced… button
  • Click on Primary DNS and enter 208.67.220.220
    DNS Settings will change from Dynamic to Static
  • Click on Secondary DNS and enter 208.67.222.222
  • Click OK button
  • Click Save button
  • Click Set As Default button
  • Disconnect and Reconnect to T-Mobile

That’s it.

If you want to use the advanced features of OpenDNS, you will need to sign up for an account and use the OpenDNS Updater to keep OpenDNS informed of your Dynamic IP Address.

Optimising your broadband connection

I had some problems achieving the expected throughput from my broadband supplier. I have a nominal 24 Mbps ADSL2+ connection and should be achieving downloads of 14 Mbps. These are the steps to follow to improve your downloads.

First, establish whether the problem is upstream or downstream of your router.

  • Find out how far you are from your telephone exchange. The only way to get a true value is by running the line test facility, but BT have restricted this to authorised personnel. So, in the meantime raise a ticket with your provider and get them to find out. Alternately, you can get a rough idea by plugging your phone number and postcode into the Broadband Checker over at DSLZoneUK and you’ll get a pretty map. . I cannot find this on SamKnows anymore…
    Example: 460m
  • Calculate the route using Multimap to drive it for you. This will give you a rough guide of your possible cable length; they don’t always follow the most logical routing and if you’re in a rural environment, the cables will cut across fields.

    Example: 700m
  • Download and run DMT from http://dmt.mhilfe.de/. This page is in German, but just search for your modem and download the right version; this is v7.31 for the Speedtouch 780. You might be able to use this link for a Google translation of their site.
  • Look in the bottom right of the third graph (Channel Characteristics). This will give you the estimated loop length. This should be similar to your twice the cable length.

    Example: 830m-2015m
  • Go to router’s web interface and check what your current Sync speed and Line Attenuation are.

    Example: Bandwidth (Up/Down) [kbps/kbps]:394 / 18,106 —> 18106 kbps –> 17.7 Mbps (18106/1024)
    Line Attenuation (Up/Down) [dB]: 7.5 / 19.5 —> 19.5
  • Look up your expected Sync speed using either this interactive tool or the graphs provided by afster or Internode graph. Take 10% off the figure provided by the interactive tool to get a realistic sync speed.

    Example: Approx 18.2 Mbits/sec according to average graph
  • IF your sync speed is significantly lower than the expected value OR your Line Length is higher than predicted, THEN start looking at wiring issues. If not, then check OS parameters.

This graph shows the real life results from hundreds of users, relating their sync speed to the downstream attenuation reported by their router. Those above the green line are lucky :)

Next optimise your PC’s performance. You will need to be logged on as a user with Adminstrative privileges. If you only have one account, then you will have the required privileges.

  • Download and run TCP Optimiser from SpeedGuide.net. Click on Optimal settings, Apply changes and exit.
  • Reboot your computer.
  • Verify that your Network card is configured for maximum throughput (100 Mbps Full Duplex). To do this, click on
    • Start
    • Control Panel
    • Network and Internet Connections
    • Network Connections
    • Select your network card and click on Change Settings of this Connection or right click on the card and select Properties…
    • Click on the Configure… button next to the Network card name
    • Click on the Advanced tab.
    • Set the appropriate property to 100 Mbps Full-Duplex. On my network card, this is called Media Type
      There are other tweaks that you can do here, such as disable Rx and Tx Checksum Offload. I am not sure of the advisability of doing this.
    • Click on OK
  • Run Microsoft’s Guided Help to maximise your PC’s performance. WARNING! This will disable all themes and turn your PC into retro mode ;) Further details can be found in this knowledgebase article
  • Minimise the window during downloads where possible. It is possible that your graphics processor cannot keep up with the download :)
  • Check CPU usage during downloads and investigate any processes which are consuming too much. Anti Virus packages such as Kaspersky have been known to cause problems during downloads, so try disabling them TEMPORARILY while running any download tests.
    • Right click on a blank area of the taskbar at the bottom of your screen
    • Click on Task Manager
    • Click on the Processes tab and then double click on the column labelled CPU. If the CPU column is not displayed, then click on View and Select columns… then enable the CPU Usage option.
    • The process using the most processor time should be at the bottom of the list
  • Check your memory usage during downloads and investigate any processes which are consuming too much. If the Memory Usage column is not displayed in the task manager, then click on View then Select columns… and enable the Memory Usage option.

All speed checks should be run using a properly shielded Ethernet connection, even if your Wireless connection claims an ‘Excellent’ signal strength. If everything is OK, then we should be able to get download speeds at upto 80% of our sync speed.

NOTE: Speed Tests are to be used as a guideline only. As one commentator said

Speedtest.net shows me at 9000kbps, the Be* test puts me at 9500kbps, Thinkbroadband puts me at 16000kbps and the Virgin Media FTP puts me at about 8000kbps.

All of which are dramatically wrong, since I am synced at over 24000kbps and can download at 2MB/sec from some FTP’s on a single thread, let alone multi threading.

Securing and Configuring the SpeedTouch 780 WL

I have just received a SpeedTouch 780 WL Residential ADSL Router with VOIP from Be* Un Limited.

The router comes preconfigured with a username of Administrator and a blank password. In addition, there are also a number of other users preconfigured for use by Be* Technical support.
There are two ways to access the router; you may either use the graphical interface or the command line interface. The graphical interface is simpler to use, but is limited in its functionality.

  1. Connect the router to your computer

    You will need to use a cable for this first stage of the configuration.This is for your own security. Also, we are going to be changing some wireless parameters and we don’t want you to be locked out.

  2. Backup your current setup

    • Open your browser and navigate to http://192.168.1.254/. This is the default address for your router’s configuration interface. You can also access the router over a secure link by accessing https://192.168.1.254/, https://bebox/, https://speedtouch/ and https://dsldevice/. Note that the SpeedTouch uses a self signed certificate, which your browser will not recognise by default and may issue some security alerts if using HTTPS; you can proceed safely. You should always use HTTPS when accessing your router’s interface wirelessly.
    • If necessary, login using the username Administrator and a blank password.
    • You should be presented with your router’s home page. Your current username is shown in square brackets thus [Administrator] between the two horizontal lines at the top of the page. This region is known as the “Notification Area”
    • Click on the the Speedtouch button in the left hand column and then click on the Configuration hyperlink. At the bottom of the page you will see Save or Restore Configuration. Click it.
    • Click on the Backup Configuration Now button and save user.ini to your hard drive
  3. Change the default user and password

    • Click on the Toolbox in the lefthand menu bar
    • Click on User Management. You will be presented with a list of current users.
    • Click on Change My Password and enter a new password for the Administrator account. We will disable this account later, but let’s make life difficult for any hacker. When you click on the Change Password button, you will be presented with a login screen. Login as Administrator with the password you have just created.
    • Now create a new user by clicking on Add a new user. Create a new user with Administration Privileges set to Administrator. Click the Apply button to create the new user. The default password will be the same as their name.
    • Click on Switch to another user. If you are not presented with a login prompt, then click the link again. This time, login as the new user you created. Notice that the username has changed in the Notification Area.
    • Click on Change My Password again, but this time enter a new password for the new user’s account. Click on the Change Password button, and login as the new user, with the password you have just created.
    • Click on Administrator in the list of usernames and change their Administration Privileges to User (the most restricted) and click on Apply. There are eight predefined privilege levels.
      Role Access Rights
      root Any service and any access from LAN/WAN/LOCAL
      SuperUser Any service and any access from LAN/WAN/LOCAL
      TechnicalSupport Any service and any access from WAN
      Administrator Any service and any access from LAN/Local. No access from WAN
      PowerUser GUI (Service/overview page) via http/https from LAN origin
      WAN_Admin Only WAN related configurations from any Channel/Origin
      LAN_Admin Only LAN related configurations from any Channel/Origin
      User GUI (Overview page/Remote Assistance) via http/https from LAN origin
    • That is as much as you can do from the GUI interface. You can delete the Be* backdoors and the Administrator account if use the CLI
  4. Configuring Wireless Access

    IF YOU ARE NOT USING WIRELESS, THEN MAKE SURE YOU DISABLE IT!

    • Click on Home Network in the lefthand menu.
    • Click on WLAN:BeBox under Wireless in the list of interfaces
    • Click on Configure in the Notification Area
    • If you are not using Wireless access, then clear the check mark against Interface Enabled and click the Apply button.
    • If you are using Wireless access, then
      • Change the Network Name (SSID) from BeBox
      • Clear the check mark against Broadcast Network Name
      • Set Allow New Devices to New stations are allowed (via registration)
      • Set Encryption to Use WPA-PSK Encryption
      • The default WPA-PSK Encryption Key is a ten digit Hexadeciaml number (64 bit encryption). It should be be set to a random, 26 digit, Hexadecimal number for maximum security (128 bit encryption) (Example:FADDC2077AF10406E866984C9E). A Hexadecimal character is any of the numbers 0-9 and the letters A-F. Download this Excel spreadsheet to generate a key for you if you want to. Make a note of this number as you will need it later.
      • Set the WPA-PSK version to WPA2.
      • Click the Apply button to save your changes.
    • Now you need to configure your PC.
      • Click on the Start button
      • Click on Control Panel
      • If you are using Category View, then click on Network and Internet Connections
      • Click on Network Connections
      • Right Click on your Wireless Network Card and select Properties
      • If you are not going to use your Wireless link to connect to another computer on your home network, then deselect Client for Microsoft Windows and File and Printer Sharing for Microsoft Networks on the General Tab.
      • Select the Wireless Networks tab
      • Click on the Add button in the Preferred Networks pane
      • Enter the Network Name (SSID) of your Wireless router
      • Select WPA2-PSK from the drop down list for Network Authentication. If WPA2-PSK is not an option, then either your Wireless card does not support WPA2-PSK and you will need to use WPA-PSK instead OR you need to download the WPA2 update from Microsoft. Try the download first.
      • Set Data Encryption to TKIP
      • Enter the same 26 digit Hexadecimal number as you generated earlier in the Network Key and Confirm Network Key fields.
      • Click on OK to confirm your changes.
    • Even if you have done everything properly, you will still not be able to connect Wirelessly to your router until you have registered your Wireless card with it. The simplest way to do this is to press the button on the front of your router when trying to connect to it. You will then have one minute to connect. Once your card has been registered, you will not need to repeat this.
      The alternative way to register your card is via the GUI interface. Just click on Home Network, WLAN:YourSSID and then click Search for Wireless Devices when you try to connect to the router.
  5. Checking your security

    • Go to Gibson Research and run a ShieldsUP! test. The link is near the bottom of the page in the “Hot Spots” section.
    • Follow the instructions and run the Common Ports or All Service Ports ShieldsUP! service
    • If everything is OK, then you will get a TruStealth PASSED stamp. I had to close port 0 in order not to reply to pings. Replying to a ping (or ICMP request) is not a problem in itself, however it lets a hacker doing a port scan know that there is a potential target there.
    • In order to close a port, you will have to use the CLI to configure your router.
      • Connect to your router by typing telnet 192.168.1.254 from the command prompt of your computer
      • Login using your router’s username and password
      • Enter the command service system ifdelete name=PING_RESPONDER group=wan
      • Save the changes by entering the command saveall
      • End your session by typing exit
      • Other ports you should close (unless you NEED to access your router remotely)
        Port Command to delete
        21 service system ifdelete name=TELNET group=wan
        23 service system ifdelete name=FTP group=wan
        443 service system ifdelete name=HTTPs group=wan

        You can get a full list of services by issuing the command service system list