A Broadband and ADSL forum. BroadbanterBanter

Welcome to BroadbanterBanter.

You are currently viewing as a guest which gives you limited access to view most discussions and other FREE features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload your own photos and access many other special features. Registration is fast, simple and absolutely free so please, join our community today.

Go Back   Home » BroadbanterBanter forum » Newsgroup Discussions » uk.telecom.broadband (UK broadband)
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

uk.telecom.broadband (UK broadband) (uk.telecom.broadband) Discussion of broadband services, technology and equipment as provided in the UK. Discussions of specific services based on ADSL, cable modems or other broadband technology are also on-topic. Advertising is not allowed.

Netgear DG834G V2 - security issue



 
 
Thread Tools Display Modes
  #1  
Old February 25th 06, 07:52 PM posted to uk.telecom.broadband
drjon
external usenet poster
 
Posts: 10
Default Netgear DG834G V2 - security issue

For those thinking of purchasing the Netgear DG834G V2. Note that there
is a security issue. Before I go into this I should say apart from this
it has been rock solid. I have had a Netgear router for a couple of
years now and have been and am very happy with it.

Well happy except for when it died. I had a V1 which was rock solid, on
23/7, until it stopped connecting to the (asdl) internet. But and an
important but, Netgear were very good on replacing it. I was sent a V2
but this also did not connect to the internet! They then sent me
another V2 which has been rock solid.

Security issue (btw I have XP SP2) :

Login as Admin and

1. Go to : Maintenance, Attached devices - this does not show all
attached devices connecting to the router. At the moment I have 1 PC
connected via lan cable and 3 via wlan. Only 1 of the wlan PCs can be
seen as being attached and that is intermittent ie just did a refresh
and it has gone.

2. Go to : LAN IP Setup : Address Reservation - if you reserve an IP
address for a given PC ie it's MAC you will find that it does not work
ie I have a PC connecting to the router via WLAN but it did not get
the IP address reserved for it (it's MAC - checked and it's the
correct MAC). And worse still a second PC subsequently connecting via
WLAN obtained that reserved address! Again security issue.

Are Netgear aware? Yes I have been waiting for a fix now since, wait
for it : 11/2/2005 7:55:00 PM. I have tried all their suggestions.
They even closed the case once without resolving the issue (Netgear,
"please note that Online Technical Submissions are closed automatically
after sometime.") But they have reopened it - Monday, November 14,
2005.


I assume at some point there will be a fix.

  #2  
Old February 25th 06, 08:40 PM posted to uk.telecom.broadband
Brian McIlwrath
external usenet poster
 
Posts: 352
Default Netgear DG834G V2 - security issue

drjon wrote:
: For those thinking of purchasing the Netgear DG834G V2. Note that there
: is a security issue. Before I go into this I should say apart from this
: it has been rock solid. I have had a Netgear router for a couple of
: years now and have been and am very happy with it.

I'm sorry but I don't think your problem should be classified as a security
issue!

Also is does not happen to me...perhaps it is WLAN only. A PC connected
via a RJ45 cable has a reserved address which is has *NEVER* missed getting
correctly.
  #3  
Old February 27th 06, 06:57 PM posted to uk.telecom.broadband
drjon
external usenet poster
 
Posts: 10
Default Netgear DG834G V2 - security issue

Both of the following to me are security issues:

1) I wanted to restrict access to the router using MAC addresses. This
feature is offered by the router but does not work.

2) Another feature offered is to be able to monitor devices attached to
to the router. This does not work.

So I cannot restrict access to the router using MAC address - one of
the top security tips for home Wi-Fi networks - and in addition I
cannot see who is connected to my router. Both security issues to me.

Sorry if I didn't make it clear but - for me - this has only been a
WLAN problem.

  #4  
Old February 27th 06, 08:40 PM posted to uk.telecom.broadband
Sunil Sood
external usenet poster
 
Posts: 1,590
Default Netgear DG834G V2 - security issue


"drjon" wrote in message
oups.com...
For those thinking of purchasing the Netgear DG834G V2. Note that there
is a security issue. Before I go into this I should say apart from this
it has been rock solid. I have had a Netgear router for a couple of
years now and have been and am very happy with it.

Well happy except for when it died. I had a V1 which was rock solid, on
23/7, until it stopped connecting to the (asdl) internet. But and an
important but, Netgear were very good on replacing it. I was sent a V2
but this also did not connect to the internet! They then sent me
another V2 which has been rock solid.


You do know that v1 and v2 of the DG834G use the same firmware? (i.e. if
there is a problem in v2, it will be the same as in v1)

btw what version firmware are you running? There are several different
versions available..

Regards
Sunil



  #5  
Old February 28th 06, 08:45 AM posted to uk.telecom.broadband
Harry Bloomfield
external usenet poster
 
Posts: 97
Default Netgear DG834G V2 - security issue

drjon explained :
1) I wanted to restrict access to the router using MAC addresses. This
feature is offered by the router but does not work.


I have one with the latest firmware installed. This feature works here
in as much as if the MAC address is not included in the list, then the
PC will not be able to connect via WiFi.


2) Another feature offered is to be able to monitor devices attached to
to the router. This does not work.


Obviously I can't watch the list of connected devices 24/7, but on
those occaisions when I have checked, all connected devices have been
correctly listed.

I have no use for the section which allows you to schedule when devices
are allowed to connect, but I tested that briefly a few months ago and
it worked correctly at that time.

--

Regards,
Harry (M1BYT) (L)
http://www.ukradioamateur.co.uk


  #6  
Old February 28th 06, 10:13 AM posted to uk.telecom.broadband
Sam Nelson
external usenet poster
 
Posts: 84
Default Netgear DG834G V2 - security issue

In article ,
"Harry Bloomfield" writes:
drjon explained :
1) I wanted to restrict access to the router using MAC addresses. This
feature is offered by the router but does not work.


I have one with the latest firmware installed. This feature works here
in as much as if the MAC address is not included in the list, then the
PC will not be able to connect via WiFi.


Same here.

2) Another feature offered is to be able to monitor devices attached to
to the router. This does not work.


Obviously I can't watch the list of connected devices 24/7, but on
those occaisions when I have checked, all connected devices have been
correctly listed.


Same here.

I have no use for the section which allows you to schedule when devices
are allowed to connect, but I tested that briefly a few months ago and
it worked correctly at that time.


Never noticed that---not that it would be of any use to me.
--
SAm.
  #7  
Old February 28th 06, 11:23 PM posted to uk.telecom.broadband
Peter X
external usenet poster
 
Posts: 42
Default Netgear DG834G V2 - security issue

Harry Bloomfield wrote:
drjon explained :

2) Another feature offered is to be able to monitor devices attached to
to the router. This does not work.


Obviously I can't watch the list of connected devices 24/7, but on those
occaisions when I have checked, all connected devices have been
correctly listed.


It doesn't *always* show all connected computers.
This post might help explain why:
http://forum1.netgear.com/support/vi...148&highlight=

But it's certainly not a security issue!
  #8  
Old March 9th 06, 04:59 PM posted to uk.telecom.broadband
drjon
external usenet poster
 
Posts: 10
Default Netgear DG834G V2 - security issue


Anthony R. Gold wrote:
On 6 Mar 2006 08:40:59 -0800, "drjon" wrote:

How is someone accessing my router via wlan - using an IP address
reserved for one of my PCs (MAC) - and with me not even be able to see
that they were connected not a security issue?


How is someone abducting you into their spaceship and reading your mind
not one too? Those Netgear people have a lot to answer for :-)

But seriously, how will someone access your WLAN? Are you using WPA (or
at least WEP)? If intruding into your WLAN is not VERY difficult, then
you do have a security issue to whinge about, but has that ever happened?

Tony


I'm very happy with the router and not whinging so much as bemused.

I find it odd that no one else has seen this problem when I have seen
it with two version 2 machines and odd that I have worked with Netgear
to try and solve this - updating to the latest firmware, (now
3.01.29) try not using encyption, firewalls etc etc - and still have an
open ticket for over a year (bear in miind they close tickets asap).

I have WEP encryption on and limit the number of IPs so I am not overly
concerned that my router will be used by anon.

Being an honest chap I feel duty bound to mention that I recently tried
to use one PC to obtain an IP address reserved for a second PC (mac)
and it would not obtain the IP address ie this time I could not
reproduce the problem mentioned above.

But I should also mention that some time ago I added an extra IP
address to the router so that a friend could access the router with his
laptop (wlan) and he obtained the ip address reserved for my laptop
(mac) and I was allocated the spare IP address. Fortunately he was
there to confrim this and that I was not losing my marbles.

The second problem is reproducible ie I can be the only PC connected to
the router (wlan) and 'attached devices' shows no PCs connected.

  #9  
Old March 11th 06, 09:38 AM posted to uk.telecom.broadband
drjon
external usenet poster
 
Posts: 10
Default Netgear DG834G V2 - security issue


drjon wrote:
SNIP/SNIP
I'm very happy with the router and not whinging so much as bemused.

I find it odd that no one else has seen this problem when I have seen
it with two version 2 machines and odd that I have worked with Netgear
to try and solve this - updating to the latest firmware, (now
3.01.29) try not using encyption, firewalls etc etc - and still have an
open ticket for over a year (bear in miind they close tickets asap).

I have WEP encryption on and limit the number of IPs so I am not overly
concerned that my router will be used by anon.

Being an honest chap I feel duty bound to mention that I recently tried
to use one PC to obtain an IP address reserved for a second PC (mac)
and it would not obtain the IP address ie this time I could not
reproduce the problem mentioned above.

But I should also mention that some time ago I added an extra IP
address to the router so that a friend could access the router with his
laptop (wlan) and he obtained the ip address reserved for my laptop
(mac) and I was allocated the spare IP address. Fortunately he was
there to confrim this and that I was not losing my marbles.

The second problem is reproducible ie I can be the only PC connected to
the router (wlan) and 'attached devices' shows no PCs connected.


Just updated Firmware to Version V3.01.29 - does not fix this.

 




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Netgear Security Alerts? Steve uk.telecom.broadband (UK broadband) 3 February 19th 06 09:57 PM
Netgear Security Alerts? Steve uk.comp.home-networking (UK home networking) 0 February 15th 06 10:25 AM
Netgear WG511, DG384G and WPA security Paul D.Smith uk.telecom.broadband (UK broadband) 10 May 2nd 05 10:58 AM
Netgear WG511, DG384G and WPA security Paul D.Smith uk.comp.home-networking (UK home networking) 10 May 2nd 05 10:58 AM
Update: Netgear WG511, DG384G and WPA security Paul D.Smith uk.comp.home-networking (UK home networking) 0 April 28th 05 08:53 AM


All times are GMT +1. The time now is 03:05 PM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2019, Jelsoft Enterprises Ltd.Content Relevant URLs by vBSEO 2.4.0
Copyright 2004-2019 BroadbanterBanter.
The comments are property of their posters.