Re: LinkSys WRT54G administration page availble to WAN

[Jerry Zwanenburg <J.Zwanenburg () chello nl>]

In-Reply-To: <019201c4494b$9a3c1460$476ffc50@tera>

Peter,

I agree on that.

For the external loggin. Look at www.wallwatcher.com.
Its a great free tool written for linksys.

Cheers,
Jerry


> Received: (qmail 11131 invoked from network); 3 Jun 2004 19:57:09 -0000
> Received: from outgoing.securityfocus.com (HELO outgoing3.securityfocus.com) (205.206.231.27)
>  by mail.securityfocus.com with SMTP; 3 Jun 2004 19:57:09 -0000
> Received: from lists2.securityfocus.com (lists2.securityfocus.com [205.206.231.20])
>       by outgoing3.securityfocus.com (Postfix) with QMQP
>       id D892B236FD2; Thu,  3 Jun 2004 18:43:34 -0600 (MDT)
> Mailing-List: contact bugtraq-help () securityfocus com; run by ezmlm
> Precedence: bulk
> List-Id: <bugtraq.list-id.securityfocus.com>
> List-Post: <mailto:bugtraq () securityfocus com>
> List-Help: <mailto:bugtraq-help () securityfocus com>
> List-Unsubscribe: <mailto:bugtraq-unsubscribe () securityfocus com>
> List-Subscribe: <mailto:bugtraq-subscribe () securityfocus com>
> Delivered-To: mailing list bugtraq () securityfocus com
> Delivered-To: moderator for bugtraq () securityfocus com
> Received: (qmail 1667 invoked from network); 3 Jun 2004 03:04:23 -0000
> Message-ID: <019201c4494b$9a3c1460$476ffc50@tera>
> From: "Peter Becker" <peter.becker () oberkassel de>
> To: <bugtraq () securityfocus com>
> References: <C0BEC2592902BF45B8777C49B1F2A08C5485FA () aples2 dom1 jhuapl edu>
> Subject: Re: LinkSys WRT54G administration page availble to WAN
> Date: Thu, 3 Jun 2004 11:17:27 +0200
> MIME-Version: 1.0
> Content-Type: text/plain;
>       charset="iso-8859-1"
> Content-Transfer-Encoding: 7bit
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook Express 6.00.2800.1409
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
>
> > I have a WRT54G at home.  After seeing all the discussion here about the
> > remote administration vulnerability I tried to access the web interface
> > today on ports 80 and 443 from outside of my home network and was not able
> > to get to the web interface either.
> >
> > But, having said that, I'm still fairly disappointed with this product.
> > Linksys used to incorporate SNMP support that made it possible to use
> > Linklogger, a very inexpensive and capable firewall logger.  But, it
> appears
> > that SNMP and syslog support are gone.  I contacted tech support about
> this
> > and they agreed that the WRT54G has no support for external event logging.
> > Too bad.
>
> There are several other firmwares for this product.
> I use OpenWRT this is realy great.
> I don't know, if the other firmware makes it possible to external event log,
> but you could make nfs-mounts so you could write the eventlog on a
> network-share.
>
> To the issue:
> I tested the original firmware before flashing.
> And I also wasn't able to access the webinterface from the wan-port.
> I've got hardware revision 2.
>
>
> Peter