Broadband Tech > Security > Security > Linksys Firewall Router

Linksys Firewall Router

Do you have any old computers lying around with two network cards?
--
WASTING TIME spelled backwards is...

reply to Lokro
Check out the Linksys forum »Linksys there will be lots of info there.

Until then..., that's the router I use. It's a good unit and if you use it just for NAT, lots of the complaints regarding the firmware are irrelevant since they involve the advanced features. For simple NAT usage (and that's what I do also), it's problem free.

Blue

reply to Lokro
Even the cheaper BEFSR41 will do most people.

The BEFSX41 has a nice feature that it stores up to 1000 intrustion attempts with accurate timestamps.

With WallWatcher's GetLog, when you boot your computer you can retrieve the events and report them to DShield and myNetWatchman.

I have a BEFSR41.

I wouldn't want it running at a remote location, where I'd have to drive out if it needed re-setting. But for the home it is great.
--
(Virus&Hijacking FAQ+Submit suspected malware+Security FAQ)

reply to Lokro
I was going to post int he Linksys forum but since it's a firewall router I thought you paranoid bunch would have some good info.

One last thing is the web based set up easy to use? My old DSL modem web based setup was poor and it made setting up permissions kinda a pain in the butt.

I think I will go pick it up tomorrow. I could use a router.
--
"You cannot carve rotten wood." -Confucius

said by Lokro:

---

I was going to post int he Linksys forum but since it's a firewall router I thought you paranoid bunch would have some good info.

One last thing is the web based set up easy to use? My old DSL modem web based setup was poor and it made setting up permissions kinda a pain in the butt.

I think I will go pick it up tomorrow. I could use a router.

---

--
WASTING TIME spelled backwards is...

reply to Lokro
Linksys BEFSX41 Router/Firewall is what I use. We have never had problems with it. You can check the logs of what is going on.
»www.linksys.com/products/product···prid=433

-Monique

reply to Lokro
Just thought I would toss in my two cents on this:

I've had the BEFSX41 for a couple years or so, and am very happy that my son recommended it. I just use it to share my cable modem connection, and just can't offer any criticism of it.

reply to Lokro
Unless they have added it to recent models, most Linksys models do not include firewalls, even though they may be advertised as such by their marketing hype. They are just plain NAT routers, with the addition of VPN for the BEFSX41. If you want a real firewall/router with configurable rules, I'd get a Zyxel Prestige, or something similar with real firewall rules. A NAT router is not a firewall.
--
TheJoker

So the Lynksys BEFSX41 isn't a firewall? Well it sure looks like one to me.

Advanced SPI (Stateful Packet Inspection) firewall with protection against a variety of DoS (Denial of Service) attacks

VPN (virtual private network) capabilities create 2 separate IPSec-based (Internet Protocol Security-based) VPN tunnels for secure connections to distant servers

NAT (Network Address Translation) routing allows shared access to broadband connection

Browser-based setup, configuration and remote management

URL and time filtering enables administrators to establish specific Internet access blocks

NTP (Network Time Protocol) support for synchronization with a real-time server

IPSec and PPTP pass-through

Blocks Java, ActiveX and cookies

Dedicated DMZ hosting port

Traffic and event logging

The ZyXEL Prestige 324 doesn't seem to offer anything the Linksys doesn't.
--
"You cannot carve rotten wood." -Confucius

There are different levels of firewall capabilites, just as there are different levels of any capability.

I happen to believe that Zyxel gives its users a lot of bang for the buck, but that's just me.

If you want to have a hardware appliance today then get the Linksys. It is easy to setup and secure out of the box.

There was a Linksys box set up and the IP address published on this forum for anyone that wanted to hack it. As far as I know no one did.
Another user was worried about his Linksys so I NMAP scanned it several times and found nothing exploitable. I think he had read that remote administration was never really turned off and the port replied open. That wasn't the case in my scans.

Some of the Linksys boxes show open on port 113 and this can't be turned off. It's my understanding that this is not exploitable. If it concerns you forward this port to a non-existent IP address on the lan and you will show true stealth if that is your goal. If not then just leave it.

The newer Linksys routers can be configured to respond to pings or not depending on your preference. Personally I'd set it up to respond to pings and leave port 113 alone. Since there are 4 possible configurations for these 2 settings any discussion would lead to someone taking each of the four sides, just do what you think best.

reply to Lokro
i have the BEFW11S4 V2 Linksys Wireless router..it acts as a firewall..this and the BEFSR41 are enough for most home users..

btw: thess are Cisco routers now

reply to Lokro

said by Lokro:

---

One last thing is the web based set up easy to use? My old DSL modem web based setup was poor and it made setting up permissions kinda a pain in the butt.

---

reply to TheJoker

said by TheJoker:

---

Unless they have added it to recent models, most Linksys models do not include firewalls, even though they may be advertised as such by their marketing hype. They are just plain NAT routers, with the addition of VPN for the BEFSX41. If you want a real firewall/router with configurable rules, I'd get a Zyxel Prestige, or something similar with real firewall rules. A NAT router is not a firewall.

---

quote:

---

Well since I have gotten back on broadband my software firewall has been working overtime. I would like piece of mind with some hardware protection. I miss at least having NAT like I did with my DSL modem.

---

reply to Lokro
Get it. It's a couple of levels up from the plain ol' BEFSR41.
I've used both, and prefer the SX.
Remember to disable remote management, and change the password from ADMIN.
--
~Help find a cure for cancer~

Proud Member

Team Discovery

reply to Lokro
There is no substitute for core components of good security IMHO are an update AV proggie and a SW firewall.

The plain NAT router takes away annoying scan hits on the incoming for sure, but thats not the primary purpose which is for sharing internet and creating an infrastructure for the LAN. Even adding SPI is good but does not inspect the whole data packet but adds another layer of better inspection of the incoming.

As to Terry and JOkers comments, if the linksys can allow you to make firewall rules (separate from NAT) on both the inbound and outbound traffic, then you can start discussing its hardware firewall values. Some routers do that with more fidelity than others. Quite right to point out that the poster should be happy with his choice. Here is a typical link of what one should consider to nail down not just the incoming (blocked by most by default) but also the outgoing (allowed by most by default)
»lockdown LAN to WAN traffic

Even with a hardwire firewall with SPI, the SW firewall has its place, as its application specific whereas the hardware addresses packet types, ip addresses and so forth but not applications. It catches all that spyware trying to get out, which then you can add to URL or domain blocking lists etc.... Those that attached their systems for testing etc directly to the modem or used dialbackup found how quickly without protection they can get infested with viruses/worms.
--
Ain't nuthin but the blues! "Albert Collins". Leave your troubles at the door! "Pepe Peregil" De Sevilla. Just Don't Wifi without WPA, "Yul Brenner"

Okay, but the price seems way too high. It goes for as little as $58 elsewhere...

And as others implied, any old NAT router would really do just fine, especially if you also use personal firewall software.

For example, I see:

-- Linksys BEFW11S4 WIRELESS router $39.99 after rebate

-- a combo of the Netgear WGR614 Router and WG511 PC Card for $59.99 after $10 off $100 Coupon and rebate

-- a combo of the Netgear MR814 Cable/DSL Wireless Router and MA521 Wireless Network PC Card for $19.98 after $75 in rebates

-- Netgear WGT624 - Wireless 802.11G 108 Mbps Firewall 4-Port Router for $58.86 after rebate (BUY.COM)

-- B
--
In a realm outside causality and function

reply to Lokro
Spending a bit more money for the Linksys WRT54G model. Would in fact allow you to use the different open source firmware to add something like Smoothwall to the router.

»www.smoothwall.org

»[wireless] WRT54G - Hacked Firmware v2.00.8.G-> by WiFi-Box

»docs.sveasoft.com/index.html

»Security »When is an NAT router inadequate protection?

»Re: do i need this?

»When is a NAT Router Not Enough?

»Software Firewall Needed With Router?

»NAT & Firewall

»Software Firewall Behind NAT

The are even more informative links in my firewall bookmarks on my site.

I'm currently using the Linksys WRT54G with ZoneAlarm Pro. Never had a router in the past. But when I went with VOIP had to invest in one. My choice was to go with a wireless model. Because this would allow for access throughout the house when we get another pc, laptop or other device.
--
Test Your Security
Team Z Member
Cable Modem Diagnostics

reply to Lokro
I have used that product for over a year now, recommended by another registered DSLR/BBR member, and I am quite happy with it. It's simple enough that even I understand most of it! It also does the job it is supposed to do NAT wise.

reply to Lokro
That's what I use and I love it!

Lots of nice features the basic 4 port Linky doesnt have (or at least didnt when I used it years ago).

Excellent choice IMO.
--
Team Z Member