Cable Forum - View Single Post

Raistlin · 06-09-2008, 10:49

Couple of points here though.

When you open that 'remote administration' service up you're asking for trouble.

Make sure you have a really good password (upper case, lower case, numbers, special characters, completely random string, as long as you can make it), because otherwise it won't take long for someone to brute force it.

You also need to make sure that you've updated to the very latest firmware, and that you continue to do so. The remote admin services on routers are not best known for being bullet-proof, if you know what I mean.

For example:

http://labs.idefense.com/intelligenc...lay.php?id=305

This one could allow a remote attacker to gain access to your router and, from there, they have a foothold which they could leverage to gain access to other systems on your network.

You really should ask yourself whether you absolutely need to be able to administer that router remotely.....

06-09-2008, 10:49	#3
Raistlin Inactive Join Date: Feb 2004 Location: There's no place like 127.0.0.1 Services: Depends on the person and the price they're offering Posts: 12,384	Re: Linksys WRT54 Remote access. Couple of points here though. When you open that 'remote administration' service up you're asking for trouble. Make sure you have a *really* good password (upper case, lower case, numbers, special characters, completely random string, as long as you can make it), because otherwise it won't take long for someone to brute force it. You also need to make sure that you've updated to the very latest firmware, and that you continue to do so. The remote admin services on routers are not best known for being bullet-proof, if you know what I mean. For example: http://labs.idefense.com/intelligenc...lay.php?id=305 This one could allow a remote attacker to gain access to your router and, from there, they have a foothold which they could leverage to gain access to other systems on your network. You really should ask yourself whether you absolutely need to be able to administer that router remotely.....