5

I have the Easybox 904 xDSL router from Vodafone (Germany) running the latest firmware 03.17.01.17.

I wanted to upgrade the firmware but found out that the latest version is from 2015 - no updates since then. There's a list of all open source software used in this router, including:

  • OpenSSL 0.9.8p
  • OpenVPN 2.2.2
  • linux kernel modules, V2.6.32

What I actually want to accomplish is to gain access to a Synology DS916+ running the latest OS, having letsencrypt certificates and lots of security configured:

  • access CloudStation and FileStation using dynamic DNS and port-forwarding
  • access Gitlab by using a VPN-connection to my network

Is it still secure using this router or should I get a new one?

  • 3
    If its an ISP provided router try complaining to your ISP that its not fit for purpose. They may issue a new one. – Hector Oct 10 '17 at 7:51
  • 1
    @Hector Thought about that as well. Unfortunately I got this router from the ISP but not as a rental. Also it is still their best router as far as I can guess. So I doubt that they will exchange it or that I will get any newer/better product from them. – lampshade Oct 10 '17 at 8:40
  • 2
    Disable everything you can on this router and get upgradable router with DD-WRT. These usually don't have DSL support so you can keep your existing DSL router. – Aria Oct 10 '17 at 9:04
  • 1
    @lampshade - Rental? Such a weird concept to me! In the UK you are issued a router (which theoretically remains their property but its unheard of for them to ask for them back). I'd still say its worth asking for an upgrade - worst case they say no. They still issue these things? I'd launch a complaint and assuming they do nothing about it contact a prominent security researcher ideally from within your country - a tweet from someone well known could be enough to kick them into action. – Hector Oct 10 '17 at 9:56
  • 2
    Maybe send a tweet to the CCC or netzpolitik.org and see if they can nudge Vodafone into issuing some routers with newer software. – Tom K. Oct 10 '17 at 14:17
-1

You may disable all the features you don't want to use on your router. You can enable SSH only when needed and keep it disabled at all other times. Port forwarding and connection over VPN to your local devices is very good approach. Also make sure there is no way to connect to your router from the internet - allow access only from your local network and always via SSL if possible. Use UPS to power your router and if you have to REBOOT it do it offline, then connect the internet wire once fully rebooted. Routers tend to be vulnerable during the boot sequence, typical attack might be to force the user to reboot the router and then attack it.

  • 2
    please do not add signatures to your posts – schroeder Oct 10 '17 at 13:57

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.