[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]
Julian Hall wrote: > Simon Robert wrote: > >> Hi >> >> just thought I'd mention a linux compatible USB wifi dongle I've come >> across. Manufactured by edimax, I'd not heard of them before, it >> actually mentions linux on the box and has the source for drivers >> included on the disc. >> >> The driver involved depends on the version of the device, mine turns out >> to be the ralink 73, rt73. This just worked when I plugged it into my >> kubuntu box. >> >> If a manufacturer actually supports linux, instead of linux supporting >> the manufacturer, I think it's worth a mention. >> >> Simon >> >> >> >> > Hi All, > > A note of caution. The Edimax BR6215SRg I mentioned a few months ago > has a major security design flaw. You may recall it has 2 USB ports > which may be used to connect either printers or NAS drives or one of > each. However having done a check of my system using Shields Up! on > www.grc.com I found to my alarm that Edimax have put the USB ports > *outside* the firewall, therefore any network drives attached to them > are visible over the Internet, thereby destroying the stealth > characteristics of any network security. There IS a setting to stop it > being visible over the Internet, however this doesn't work. > > Additionally, even though now I have now disabled the NAS function of > the router and the drive is no longer connected, the facility is still > blaring its' existence globally. Needless to say I am looking for a new > router. > > It's probably OK to use this router *internally* on a network as long as > something else sits between it and the Internet, but I wouldn't > recommend using it as a main gateway. > > Kind regards, > > Julian > > Nice feature ;-) Are there any firmware fixes to resolve this? My new BT Home Hub has a NAS feature although I've yet to try it, I'm hoping that it's a bit more secure than your Edimax router. Rob -- The Mailing List for the Devon & Cornwall LUG http://mailman.dclug.org.uk/listinfo/list FAQ: http://www.dcglug.org.uk/linux_adm/list-faq.html