D-Link DI-604 grc.com probe test results.

[Hobbzilla]

Okay, I just recently purchased the very inexpensive D-Link 604. I did so 100% because of its price. It was < $30 at BestBuy (after rebate). I was also looking at the linksys BEFSX41 which has true VPN & DMZ but cost 3x as much. I decided to save the extra money and am happy with my choice. It does what I need it to do.

Anyway, above was perhaps geared towards people wanting to make up their minds about a router to purchase..

I ran Steve Gibson's "Shield's Up" & "Probe My Ports" test and everything showed steath except TCP port 113 (identd) which showed "CLOSED" so, how can I make this show stealth as well? Is is possible? Thanks for your replies.

 

[mboy]

Try putting an empty Ip in as the dmz addy (I believe it supports the typical SOSHO (ie not a real) DMZ.
See if that helps.

 

[dakata24]

i have this problem (yet havnet fixed it though) and the fix is to setup a virtual server for port 113 and point it to a non-existant ip addy.

credit goes to this thread on dslreports

 

[JackMDS]

Originally posted by: HobbzillaI was also looking at the linksys BEFSX41 which has true VPN & DMZ but cost 3x as much.

I know what three times the price means.

However, I will appreciate if someone can explain to me (concerning Entry Level Cable/DSL Routers) what Real VPN, and Real DMZ means.???

 

[mboy]

You mean the DMZ in a SOHO router which really just opens all the ports to the machine as opposed to a true DMZ which places the DMZ computers on a different subnet then the LAN, placing it, in effect outside of the LAN? Soho DMZ keeps the machine inside the LAn subnet, if it gets hacked, they walk right thru the front door.

 

[QTPie]

but it's still better than nothing. good enough for a $50 router, though.

 

[JackMDS]

Thanks mboy. (It was a rhetorical question).

None of the Entry Level Routers (no matter what gimmick is used in advertising is a real VPN appliance either).

QTPie states ? but it's still better than nothing. good enough for a $50 router, though.?

The yard stick between Entry Level and above is more like $300.

But it is much more then just money.

The Entry level systems are designed for singular simple small LANs. People are trying to milk out of the Entry Level Gizmos, Gold rather then to enjoy the Milk.

BTW, some of the new Entry Routers (like the SMC VBR7004) issued an interim solution. Providing you have additional External IPs from the ISP you can put up to 10 computers on their own DMZ.

 

[mboy]

I know Jack, it wasnt for your benefit, it was for everyone else's who didnt know the difference. The SMC 7004fw isnt a bad solution either. The real deal is the Webramp (original Sonicwall SOHO) that is posted in the hot deals forum. This is the real deal Firewall appliance with true IPSec VPN endpoint, syslog, domai/keyword filtering, SPI, 1-1 NAT.

$80 or so including the upgrade IC chip to unlimited user/vpn is the way to go. (no DMZ tho real or implied

 

[JackMDS]

Thanks mboy for the Hot Deal pointer. I think I am for one.

 

[mboy]

Originally posted by: JackMDS
Thanks mboy for the Hot Deal pointer. I think I am for one.

I am for one? For getting one?lol

I just picked it up, very nice for the price. REAL protection!
Only major fault is the thruoughput. I hav an 8Mb pipe, but this chops me down to 3-4Mb (guess thats what happens when u have real ACL's and such. Considering it is an older model, I cant complain. The price is right, especially for what it can do compared to a SOHO cheapie solution.