Linksys Routers... secure??

[groovin]

How secure are Linksys routers? anyone know? Specifically the BEFSR41 and similar models.

They use NAT, but I was just wondering how secure they are. How would someone intrude on one of these things?

Thanks

 

[sohcrates]

well, most WAP's support 128 bit encryption, which is pretty secure

enabling 128 bit WEP cuts down on your access distance and speed a little bit, but works well

 

[bbqweed]

Linksys router's are going to be as secure as any other brand of SOHO routers. You are pretty secure. If someone wanted to hack into your system they would have to hack through hardware firewall...and it won't matter if you have software firewall as well. If someone is determined enough to get into your network...smart enough, and has that much time on their hands...then they will get in regardless of what you may do.

The key here is that some protection is better than none.

as for:

well, most WAP's support 128 bit encryption, which is pretty secure

WEP is only encryption for wireless devices to the AP, not 128-bit over the internet....the router provides the protection from the internet. WEP is simply protection from other wireless clients from entering onto your network (usually these devices would have to be relatively close to your AP).

 

[sml]

WEP [40 bit or 128 bit] is not secure at all; this is due to a flaw in the size and location of the keyspace used to encrypt the traffic with the RC4 algorithm. See this research by a colleague of mine for more information. As far as default Linksys/D-Link router configurations, they are absolutely not secure by default. These SOHO vendors are notorious for compromising security for ease of use. Many security features ship 'OFF' by default, including WEP for wireless capable routers from companies like Linksys. They are also known to ship with default passwords, poor access control, etc. Browse archives.securityfocus.com 'pen-test' or 'bugtraq' lists for more information. Things you should do:

1) Upgrade your device to the latest firmware as soon as you get it out of the box.

2) Thoroughly read through and make sure you understand all the configuration options

3) change default passwords and secure the router as much as possible through its options

4) See if your router supports syslog logging, set up Kiwi syslogd on your Windows system and monitor your logs to see who's banging on your front door regularly.

5) Keep up to date on firmware revisions and security bulletins from your vendor.

Security is a journey, not a destination

 

[groovin]

Thanks again for the input.