Re: D-Link 604 Router

From: Leythos (void_at_nowhere.com)
Date: 06/23/04 

Date: Wed, 23 Jun 2004 12:49:56 GMT

In article <e8lid09d8gnc0388e7aqplpu4ai70h7lgf@4ax.com>,
plesbit@hotmail.com says...
> On Mon, 21 Jun 2004 18:14:35 GMT, Leythos <void@nowhere.com> wrote:
>
> >The DI-604 is just a router that provides NAT and some additional
> >features found in any firewall, but it is not a firewall. This is about
> >the same as any other router on the market, mostly marketing hype.
>
> Is this correct?
>
> So you are saying there is no firewall on my fairly standard Netgear
> DG834G, even though I can open up or shut down ports in either
> direction at will, and log all attempts to breach the restrictions.
>
> If you aren't familiar with the device there is a review of the
> previous (now obselete) version which had the beginnings of the
> firmware currently in use at the following location:

Even the cheapest Linksys units have the ability to configure "Private"
ports - the ports that are not permitted out of the local network. Yes,
I've familiar with the NetGear and D-Link and Linksys, etc... I have not
tested/used the 834 unit you specifically mention.

If the device is a router with NAT, that may or may not employ SPI, then
it's just want I wrote, a NAT router with SPI, not a firewall. By
default, your device permits all outbound traffic completely
unrestricted, and does not have rules for blocking services/ports by IP
address inside the lan.

Here is a list of Security features for the product:

Security Features:
=3F Firewall: Stateful Packet Inspection, Intrusion logging and
Reporting, Denial of Service protection
=3F VPN Functionality: NAT traversal (VPN pass-through) for IPSec, PPTP
and L2TP VPNs
=3F Mode of Operation: Network Address Translation (NAT), static routing
IP Address Assignment: Static IP address assignment, internal DHCP
server on LAN, DHCP client on WAN

>From the list, it uses SPI as it's means to call the device a firewall.
The other features are just features, not firewall services.

Don't get me wrong, it's a nice unit, but it's just a router with NAT. 

-- 
--
spamfree999@rrohio.com
(Remove 999 to reply to me)

Relevant Pages

  • Re: New modem and iptables...
    ... The router performs firewall and NAT functions ... If you want to persuade me it's a modem, ... it's a router and _it_ has your public Internet address. ... It also does NAT (otherwise you couldn't have a private IP address on ...
    (Fedora)
  • Re: Would a firewall prevent Sasser worm?
    ... >> the same level of protection that I would have with any NAT router? ... >There are a variety of known attacks which can crash routers, ... >Firewall capability allows you to modify the NAT behaviour to allow selected ...
    (comp.security.firewalls)
  • Re: Would a firewall prevent Sasser worm?
    ... >> the same level of protection that I would have with any NAT router? ... >There are a variety of known attacks which can crash routers, ... >Firewall capability allows you to modify the NAT behaviour to allow selected ...
    (alt.computer.security)
  • Re: IP Addressing
    ... Address of the ISA server? ... firewall and router). ... On the firewall create a static NAT entry as I wrote ...
    (comp.dcom.sys.cisco)
  • Re: Would a firewall prevent Sasser worm?
    ... >> the same level of protection that I would have with any NAT router? ... >There are a variety of known attacks which can crash routers, ... >Firewall capability allows you to modify the NAT behaviour to allow selected ...
    (comp.security.misc)
Quantcast