Superhub What settings are best for R36?

Risco · 13-07-2012, 20:18

Obviously before, you could not run 300mbps and ip flood etc. So out of the following, what should I enable?

OBSS - WTF is this lol?
IP Flood
Port Scan Detection
IPSec Pass-Through
PPTP Pass-Through
Multicast Pass-Through

Also, what do all of these actually do in plain english?

craigj2k12 · 13-07-2012, 20:43

keep OBSS disabled it kills wireless speeds, its a known bug

best disabling IP flood as well

AndyCalling · 13-07-2012, 21:16

It seems, OBSS off and Greenfield mode off as well. Two bugs.

Keep that firewall disabled. Forever. Even if that feature was working perfectly, it should still be off as it is useless and can only restrict you. All of the firewall settings should be unselectable if the firewall is disabled with the initial, master tick box on the menu.

thenry · 13-07-2012, 21:21

disabling the firewall isnt a good idea in my opinion. firewall set as low and ip flood enabled should be fine. ive tested using clean systems no problems.

others have had issues with firewall set as low, i blame their setup causing problems not the SH.

firewall set to anything above low will block messenger etc.

AndyCalling · 13-07-2012, 21:52

What are you hoping to achieve by setting your firewall to low Thenry? What is it going to be stopping exactly?

If there's some new bit of gubbinry in the firewall code that makes it potentially useful for stopping something then I might reconsider. It would make the Shub the first router I've ever seen with a worth while firewall.

thenry · 13-07-2012, 22:03

its an added layer of protection however little it may be

**Hugh** · 13-07-2012, 22:04

So is unplugging your modem.....

AndyCalling · 13-07-2012, 22:09

Ah, I see. Well OP, there is another school of thought from Thenry there, clearly. I would still keep it turned off. It takes all sorts I suppose.

But if you do keep it switched on, and something you do over the net one day gets an intermittent drop problem, or some other weirdness occurs, remember to turn off the firewall and test to see if that's what's clamping down on you.

(Psst, turn it off, it's rubbish! But don't tell Thenry I said so...)

~

thenry · 13-07-2012, 22:23

im setting my band to 40max now

Risco · 13-07-2012, 23:01

Thanks guys, not disabling the firewall because as stated something is better than nothing and it is not causing me issues. Other than that I have disabled greenfield and OBSS.

What do 4,5 and 6 actually do?

craigj2k12 · 13-07-2012, 23:10

4. http://en.wikipedia.org/wiki/IPsec

5. http://en.wikipedia.org/wiki/Pptp

6. http://en.wikipedia.org/wiki/Multicast

forwards the above

General Maximus · 14-07-2012, 06:37

Disable 1, 2 and 3. 4, 5 and 6 wont really affect you i would have thought. They tell the router how to handle encrypted traffic like VPNs. IPSec, is IPSecurity, PPTP is Point to Point Tunnelling Protocol and Multicast Addresses are special addresses which peeps use if for example you wanted to stream a video to a selected group of people. You don't need to worry about them and I doubt you'll ever use them.

I know I am going to shoot myself in the foot by saying this but you shouldn't have any problems leaving them on (don't embarrass me shub)

kwikbreaks · 14-07-2012, 08:31

Quote:

Originally Posted by AndyCalling

Keep that firewall disabled. Forever. Even if that feature was working perfectly, it should still be off as it is useless and can only restrict you.

I hadn't bothered and had left it at the default low with no restrictions and all the pass-throughs checked but now you mention it I think you're quite right - SPI on top of NAT for a home router is probably overkill and could lead to more problems than it prevents.

It caused me no problems having it on that I'm aware of but turning it off will (or at least should if the option works) stop at least some of the superhub code from running and given its track record that's probably no bad thing.

Sephiroth · 14-07-2012, 10:36

If you're gonna have a hardware firewall, don't have it running in the wretched SH. Use modem mode, get a decent router with a well reviewed firewall and use that.

I appreciate that some users can't deploy a firewall in all their end user devices. If they can, (like McAfee, etc), then do that have firewall switched off in front end equipment.

jfish · 14-07-2012, 11:02

Quote:

Originally Posted by Sephiroth

If you're gonna have a hardware firewall, don't have it running in the wretched SH. Use modem mode, get a decent router with a well reviewed firewall and use that.

I appreciate that some users can't deploy a firewall in all their end user devices. If they can, (like McAfee, etc), then do that have firewall switched off in front end equipment.

or setup a IDPS system using Linux/Snort in between the SH (if running in modem only mode) and your LAN and sniff all packets and drop anything suspicious.