Printable View
Can anyone verify that the Linksys befvp41 and wrt54g have a new issue with their firmware, I can't seem to find any info on them.
It creates a DoS, the router starts sending out buttloads of packets.
Upgrading to the most recent firmware is advised.
Which firmware issue? I know that my Linksys WRT54G Ver 1.1, which has the 3.01.3, doesn't have too many issues (occassional IGMP request). Looking at the version info for firmware I don't see anything that might cause this.
Anyone running 2.7 or below. 3.01.3 is the most current, so obviously you are okay. Sorry I should have stipulated the older version number.
The reason I'm bringing this up is an ISP out here has quite a few users running the older firmware and they are pounding their network.
Firmware Version: v1.42.2
Linksys WRT54G
Sitting right next to me... hmm, wonder if there's something I should do?
It's also affecting the WRK54G. Just found one spitting a bunch of garbage. And there is no firmware update for it, march of last year is the most current. I've notified Linksys but I'm not holding my breath since they are owned by Cisco.
And ;TT I'd definitely do something. Upgrade the firmware to the most current or use a cutsom built firmware by sveasoft www.sveasoft.com or wifi-box.net. And I'd advise against using the web update function, it can be flaky.
Hmmm, can you post a PoC of your theory? None of the usual exploit sites have anything regarding these Linksys routers.. and you explain more clearly what it's spewing out and what ports and what exactly is happening?
I'm not personally experiencing it, so, no, I can't. I'm just relaying what another ISP is stating and I'm not going to ask him to stop going from customer to customer and do a sniff to see exactly what is going on because someone on a BB asked to see proof. I also trust the fact that he isn't making it up. And if you took the time to read my posts I'm also asking for some corroboration about this because I haven't seen any posts on any of the "usual exploit sites" either. Has anyone else seen it???????
Besides that you should always have the latest stable rev of firmware running on any of your devices for obvious reasons. But I guess that's just my opinion.
Hmm, seems you've taken this the wrong way. I was interested in knowing exactly what was happening, not doubting you.. I'll upgrade the router tonight or tomorrow but I'm pretty interested in what kind of packets are being sent and what causes it so once you make something up, err, I mean find something, please do post. ;-)
Kind of off-topic but relevant...
Has anyone tried the sveasoft firmware. My impression is that it's a lot like the hacks on the other linksys boxes that allow you to put a linux/snort install directly on the router. This thing had a big fat warning on it though that basically stated that the "upgrade" could be unstable at install and may leave the router irretrievable.... IOW, a very expensive door stop...
I have a WRT54G which it claims to enhance at work and the thought of some of the enhancements is tempting... I'm just wondering if anyone can justify the $20 for me.... :)
I haven't tried it yet but I'm going to. I also heard that just the performance increase is worth the money.
I have used the Sveasoft Software on WAP54g's and WRT54g's
works great, increase power, and you have 14 instead of 11 RF channels.
The use of channel 12,13,14 is not legal in a number of countries.
Check your countries rules on that.
Coz I feel a bit lazy.... :eek: What does the good ole USA say about 12,13 and 14? Not that it matters that much..... I would still only operate within the 'normal' channels.Quote:
Check your countries rules on that
Well I haven't had any problems yet, but thanks for the thread. You jogged my memory to go look, so I went and updated it anyway!
:D
12,13,14 are not allowed in the U.S. I think Europe allows 12, 13, and Japan uses 14. I may be off I don't remember exactly.
Up to 5000 bucks a day if they catch you.
Smile when you do it cause you'll stick out in a crowd. :thumbsup:
A crowd within 330 feet of your AP... ;)Quote:
Originally posted here by KorpDeath
12,13,14 are not allowed in the U.S. I think Europe allows 12, 13, and Japan uses 14. I may be off I don't remember exactly.
Up to 5000 bucks a day if they catch you.
Smile when you do it cause you'll stick out in a crowd. :thumbsup:
Its not like the FCC has anything better to do than to drive around looking for people using channels 12, 13 and 14... They get more money off of Howard Stern on a daily basis...
BTW: You may find the following links of some interest... the sveasoft firmware is GPL'd.
So some people have been nice enough to put up some torrents... easy enough.Quote:
By paying $20 a year, subscribers get priority release to firmware as well as technical support. A big debate grew, claiming that this model was against the code of the GPL. It wasn't, however, and Sveasoft were deamed to be acting completly within the law. The arguement revealed that the money paid wasn't for the firmware, it was for the distribution method and technical support.
You should, therfore, be able to get the firmware for free if you choose a different distribution method and dont expect technical support. This, however, has been the focus of another online argument. I firmly believe that this argument should be won by the free distribution people. It is in this respect, that TheIndividual is a champion of online rights.
That is... if you don't want support and you are not using their method of distribution...
Now... the important part... links!
Post explaining GPL situation.
Torrents! (not quite sure of legality... you decide)
some possible legal mumbo jumbo...
I say try it. If you like it... what is the $20?
If you try it and don't like it... will they refund you the $20?
I was thinking about this last night when showing students what wardriving is (we happened to find a WRT54G with no encryption and DHCPing all over the place). I wonder if it's the UPnP being the issue. I know that was a problem for my version, spewing UPnP packets all over the place, until the firmware upgrade and until I told Snort to stop looking for that from the router.