Ubuntu Security :: Hidden Backdoor In AT&T 2Wire Modem/Router?
Aug 11, 2011
My 2Wire router/modem I got from AT&T for my DSL has port 3479 TCP open and I can't figure out how to close it. It's open to the entire internet. From a quick google search it's some port AT&T can use to update the modem's firmware or something.Consider how in bed AT&T is with government agencies it seems like a easy way for the government to get into my home network just by using what seems to me a backdoor put there by AT&T. Anyway to close this or secure it. Right now I'm using the hardware as my main router for my home network. I have Linsys I modded with DD-WRT. I'm thinking of re-configuring my network to use the DD-WRT router as the main router and the 2wire just as a modem. The 2wire is a hybrid modem/router and I'm kind of lazy and don't feel like re-configuring my entire network if I can just close the port.
View 9 Replies
ADVERTISEMENT
Sep 7, 2010
One day I lost my WiFi connection while doing nothing particularly interesting. OK then...I investigate, and I find that it only connects occasionally, and when it does, even then it will render a page almost none of the time. I can't even ping anything. I tried going to the router's config page (192.168.1.254 for this one) and found that even that won't load. I power cycled the router, and it did nothing. I thought that the router was dying, but I realized when I switched to Windows 7 (this is a dual boot machine) it works fine. Also, when I went back to Ubuntu and tried connecting to a neighbor down the block's WiFi, it also works fine (this is what I'm using to post this message.) I did all I could to fix this, even to the point of dismantling the machine and moving cards around and such, but it did nothing. I finally formatted my Ubuntu partition and reinstalled, and it also did nothing. It also doesn't work from the Live CD. The router works fine on all the other computers in the house, wired or wireless, and also my phone and PSP's.
While connected, in Firefox, sites sit at "looking up", "waiting for", or "connecting to". It seems to be at random which one. They all time out, none of them say server not found. I thought it was a DNS problem, so I tried some DNS's I know (Google's, OpenDNS, DNS Advantage etc.) but it did bupkis.One thing I notice is that while connected, I have a fantastic signal strength of about 85%, when before any of this happened, it was more around 70%. I didn't move the antenna anywhere or anything having to do with the reception. Also, once connected, it stays connected, it's just getting it initialized that's the problem, but even while connected it doesn't seem to work well.
This is incredibly frustrating, as I did not change anything with the router at all, in any way shape or form. It just spontaneously decided to not like Linux. The router's model is 2700HG-B.Could it be that my wireless card is dying? I've had the thing for 6 years, and had no sign of it failing. I'm thinking that can't be it because it works with the same computer and network, but with a different OS. Could there be something wrong with the Ubuntu driver for my card, ath5k? I was going to say there's something up with wpa supplicant, because I use WPA-PSK for authentication, but I turned that off from another computer and it still does not work.
Again, the problem is that Ubuntu works with every router I can connect to EXCEPT mine, and Windows 7 on the same machine works with the same router. My router works with every other device in the house. I have changed nothing networking related, and even reinstalling Ubuntu did nothing. I would try it with Ubuntu on another machine, but my machine is the only wireless one in the house (and I can't put Ubuntu on the wired ones, that would PO some people),and I would try it with a different wireless card/USB thingy, but I don't have another one.
EDIT: I got some other Live CDs out, I tried Kubuntu 10.04, and Ubuntu 9.10. NEITHER WORK!
View 3 Replies
View Related
Aug 1, 2011
I just installed 11.04 on my laptop and the wireless works fine connecting to a AT&T 2Wire router when the ac power adapter is connected. When running on battery power I stay connected to the router but barely any information is transmitted. ie. if i restart the router connection on my computer I can load a web page like google.com then nothing else will work unless I restart the connection again. If I am right next to the router it will continue to work but very slow ( takes about a minute to load ......com when it only takes 2 seconds on ac power ). When I run windows 7 everything works fine when on battery power.Also every thing works fine on a linksys router with ac and battery power.Dell Inspiron 14R Processor: i5-2400MWireless Card: Intel Centrino Wireless-N 1030Ubuntu 11.04 Natty Narwhal
View 1 Replies
View Related
Oct 4, 2010
AT&T will not help. I am trying to connect with Cable (CAT5). When I try to configure my network card with YaST here is the message received. "Unable to configure the network card becasue the kernal device (eth0, wlan0) is not present. This is mostly cause by missing firmware (for wlan device) See dmesg output for details"
View 2 Replies
View Related
Apr 13, 2010
I was looking at my firewall(firestarter) logs. It shows that a program named Master's Paradise has been trying to make connections to outside from my computer on port 3129. Why would I have something like this on my machine? Is this something I need to be worried about?? Or is some legitimate program using port 3129 and the firewall log is still showing it as Master's Paradise?
View 9 Replies
View Related
Nov 17, 2010
I did a port scan on my server from outside my network and saw that port 10080 AMANDA is open.Amanda isn't installed on any of my computers or my server and the port is not forwarded by my modem or router. So why is this port open and how can I close it?
View 6 Replies
View Related
Aug 28, 2010
I believe that the attacker somehow got in through the ssh daemon(OpenSSH 5.3p1) on June 12. From here, a user account named "crond" was created(can anyone confirm weather this is normal?) and according to the log, this account was accessed several times between Jun 12 and Jun 18 from the same ip address. Also on Jun 12, the MOTD on the ssh server was messed up and remained that way until it was reinstalled. The default ssh client(OpenSSH 5.3p1) was made completely non-functional.
I became alerted to the problem when my ISP advised me to run a virus scan on the machines on my network. Not knowing of any linux based anti-virus software, I decided to check for suspicious files on my hard drive. I found one, in the /tmp directory was a subdirectory called ".popscan". Inside was a script and a list of about 40 very default sounding usernames and passwords. There was also a file called "back.txt" in the root of my filesystem. Which is a pearl script that aparently spawns a shell.
At this point I disconnected the server from the internet and mirrored the drive. I found a suspicious home directory for "crond" I'm hesitating on setting up the server again for fear that it might just get rooted again. I would also like to find out how he got in so it can be prevented for other people aswell.
View 6 Replies
View Related
Jun 21, 2011
I can use TeamViewer to get into this remote host. It has sshd running. I would like to ssh to it. But it gives the system's IP as 192.168.xx.yy. How do I ssh into it?
View 1 Replies
View Related
May 9, 2011
I use Ubuntu 9.04 Jaunty Jackalope.I have been trying to configure a NETGEAR DGN1000 modem router. my manual says that to access the modem for configuration, I should "Type URL... in the address field of [my] browser, and then click Enter."my browser, though, does not seem to find any such page and so I cannot continue the configuration. btw, we had no problem configuring another computer in the house running on windows vista, so that it looks like the cables are all in place, the modem and the line are ok.
View 1 Replies
View Related
Feb 7, 2010
3G USB modem, in and using wireless router out (via ethernet) to lappy, Wii ect.We don't have a phone line just mobile phone and mobile internet because it is mobile.I have a wireless router only but need wireless to improve my standing within the house because I am seen as a net hog!
I did come across a Virgin wireless modem but it is soooo painfully slow (tested it against the USB dongle modem 3-4kb same test 1 min later 280-300kb's USB.) The wife could make herself a cuppa just waiting for the facebook login page to load!Would it need to pass on the connection bcause the USB is fully setup? then wireless is setup or would it be required to have a 3rd security setting ect in between?It would be good to use a low spec computer because I have a few. Headless too, maybe?
View 8 Replies
View Related
Feb 22, 2010
I brought my netbook so I could continue to keep up with my homework, which amounts to a lot of typing and editing some TIF files.
Problem: Windows 7 isn't compatible with the router/modem I have access to, so I have no internet access in the apartment we've rented. I know that it works, because I'm using the apartment owner's ancient anemic desktop. Can't do homework on this though.
Problem 2: I have Windows 7 Starter, so I can't use compatibility mode, so I can't use Wubi.
Problem 3: I don't have an optical drive and have just a 512mb flash drive which may not work, so I'm not sure how to fix this.
Problem 4: I don't have a Windows 7 backup disc; never received one.
Problem 5: My dad works with copyright and intellectual property so he'd notice if I pirated Windows and would be extremely not okay with it.
I could probably buy a bigger flash drive if I really had to, hopefully they're not too expensive. I am most comfortqble with Ubuntu but I will use whatever will run the Gimp (or some TIF editor) and Firefox. I cannot afford to get 3 weeks behind on my homework.I've only been off the plane for a few hours and am trying to get used to the French keyboard, so I apologize for any typos that slipped through.
View 9 Replies
View Related
Jul 28, 2011
I have an Ubuntu server that I need to access remotely while I am at school. The server's internet connection comes first through a DI-604 broadband router and then through a Netgear Wireless router:
ethernet wall jack --> Broadband Router --> Wireless Router --> Server's ethernet port
I can manage to get the SSH to work with the current IP address (dynamic) by connecting the server directly to the broadband router, but I cannot set up DNS (ddclient on the server, Namecheap for domain registrar and nameserver) with it. I can set up DNS on the router with no issue, as it has the DNS client built in, but I cannot get the SHH to connect through both the modem and the router as mentioned above. Best case scenario, this can be fixed without having to get anything new, but if that is the case, recommendations of a new setup
Other reference info - ISP at server is Verizon Fios, broadband router set to PPPoE.
View 1 Replies
View Related
Nov 11, 2010
As it stands I have a small home network operating behind my modem/router. Some of the ports on this are forwarded to my PS3 for gaming but I was looking at forward some for my file server.
At the moment I've forwarded port xxx22 to port 22 on my server for SSH for instance. ANd similarly 21 for FTP (although it doesnt seem to want to connect for any more than a few seconds using that). What I was thinking of doing was placing a small website for a handful of ppl to use on the server too and port forward again - xxx80 to 80. It works just fine but I'm a little concerned on the security front.
As I've moved the port to something different from the outside world I'm presuming I will have already cut the potential for malicious folks to wander in but is there anything else I should be doing? At the moment there's no firewall operating on the server, usually as its hidden behind the modem/router. But if I open this thign up more permanently what should I be doing? I've read a few articles on it but I'm always left with the overwhelming thought of "Thats if theres no firewall in my router" as they just seem to do the same.
View 5 Replies
View Related
Jan 22, 2010
I installed TrueCrype 6.3a on my 8.1 Ubuntu. Everything went fine until I got to the part where I need to protect my hidden volume from damaged caused by writing to the outer volume (these instructions: [url] ). I can't find the checkbox to "Protect hidden volume from damaged caused by writing to outer volume". The closest thing I can find is an option to "Protect hidden volume when mounting outer volume". Intuitively these don't sound the same to me. There are 2 difference between my setup and the instructions; 1) the instructions appear to be written for Windows and not Linux. 2) I am using a file volume and not a partition volume.
Does anyone know where the option is to protect the hidden volume when writing to the outer volume?
View 2 Replies
View Related
Jan 27, 2010
What, if any, significance is there to the following message shown in the rkhunter.log?
Code:
[21:11:58] Checking for hidden files and directories [ Warning ]
[21:11:58] Warning: Hidden directory found: /etc/.java
[21:11:58] Warning: Hidden directory found: /dev/.udev
[21:11:58] Warning: Hidden directory found: /dev/.initramfs
What need would there be for hidden directories to exist in /?
View 3 Replies
View Related
Jan 13, 2010
I post this to have a memo about how I looked into this problem. You can use this command to check what is hidden.
Code:
/usr/lib/chkrootkit/chkproc -v -p 3 | grep /proc/ | sed 's/.*(/proc/[0-9]*).*/1/'| xargs -n1 -I %%% cat %%%/cmdline
If it doesn't output anything, then nothing is hidden currently. This usually means that a process was started between the ps command and the /proc check of chkrootkit. You can check what those command(s) are by running the above in a loop, with high priority.
[Code]...
Does anyone know how to get rid of these false positives while retaining other functionality of chkrootkit?
View 1 Replies
View Related
Jan 22, 2010
I just bought a TRENDNET TDM C4000 (=modem/ wiredrouter) and got it working. If I connect my computer with through the ethernet port directly, the internet will work. However, when I try connecting the ends of the ethernet cable on the modem and my wireless router, it's not transmitting. I know I set up the wireless router correctly because it worked with my previous modem. I just need to know how to configure my modem so that it works with my wireless router (D-Link DI-524).
I have a long wired ethernet wire to satisfy my academic needs for the internet at the moment but my mother is not able to surf the internet and it would be more convenient for myself to put the wire back to my desktop and have my laptop browsing wirelessly.
View 1 Replies
View Related
Dec 20, 2010
not *buntu related but what is the difference between an adsl router and an ethernet modem?
View 5 Replies
View Related
Jan 25, 2011
i m using an adsl modem router for connecting into the internet while my operating system is windows 7,but i want to learn open source platforms like UNIX and Linux. so for this reason i install a Linux distro which is centos5. how i can configure my modem router with centos. modem router model is Billion BIPAC 5210s.i search internet for its drivers and the only thing which i found modem driver for windows platforms and nothing esle want to know that for installing this modem with my centos i need to download its drivers or not
View 14 Replies
View Related
Jan 25, 2011
I m using an adsl modem router for connecting into the internet while my operating system is windows 7,but i want to learn open source platforms like UNIX and Linux. so for this reason i install a Linux distro which is centos5. i want to ask how i can configure my modem router with centos. modem router model is Billion BIPAC 5210s.i search internet for its drivers and the only thing which i found modem driver for windows platforms and nothing esle want to know that for installing this modem with my centos i need to download its drivers or not and if the answer is yes or no how comes !
View 1 Replies
View Related
May 23, 2010
restrict a user from seeing hidden files and folders?
View 8 Replies
View Related
Oct 24, 2010
I'm sure most of you know that making a file or folder hidden is simple in the Linux world: Add a period (.) before the name. However, if you were to save such a file or directory to a flash drive, it would only be hidden on Linux systems. If you plug the flash drive into a Windows machine, Windows will happily show the file.Is there a way to make cross-platform hidden files?
View 4 Replies
View Related
Sep 30, 2010
I'm running Lucid xubuntu. i have a netgear WG111v3 usb wireless card. The router and the modem recognize each other,. but the connection drops constantly.Other times it takes many tries to connect. There are 3 windows and one Xbox users in my house, all on the same router. When I spoke with 2 different people at Radio Shack, I was told that the software on the router is Windows based, so the Windows modems get top priority over Linux, hence the dropped signals. I was advised I could do One of three things:
1. Buy another router, one that specifically recognizes every operating system. That way, we all get equal bandwith.
2. Buy an antennae that boosts the signal.
3. Buy a booster for the signal that one cable end plugs into the router,then the device into a power outlet; the other in any power outlet, and then hardwire that to my ethernet card in my computer, so the signal stays constant. This is the output from the terminal:
[Code]....
Based on this information, what would be my best option. I can't run line all the way across the house to my computer; that would take 50-75 feet after winding it's way through the house. I don't use the ethernet card although it's still in the machine. Could it interfere with the signal?
View 1 Replies
View Related
Jul 27, 2011
I have 2 machines both using U 11.04, one of them being Studio. I have tried to connect them together (via a modem/router of course) to browse files but I can't connect. I get error messages. I've installed samba and everything.
View 1 Replies
View Related
Jun 27, 2010
I am trying to configure my ADSL modem/router. According to the manual it should go as this: For the initial connection to the Internet and configuration of your router, you need to connect a computer to the router which is set to automatically get its TCP/IP configuration from the router via DHCP.
View 5 Replies
View Related
Nov 21, 2010
TrueCrypt hidden volume plausible deniability is documented at [URl]deniability but how plausible is it? there is no sign of the hidden volume's existence within the outer volume even if the user is forced to disclose the outer volume password. For this to be plausible the outer volume must be used or the user has no plausible reason for having it.
Quote:
If you mount a TrueCrypt volume within which there is a hidden volume, you may read data stored on the (outer) volume without any risk. However, if you (or the operating system) need to save data to the outer volume, there is a risk that the hidden volume will get damaged (overwritten). To prevent this, you should protect the hidden volume in a way described in this section.
The way described results in the outer volume properties including 'Hidden volume protected: Yes' which discloses the hidden volume's existence. The next section in the documentation has a diagram showing how the hidden volume is created at the top end of the outer volume space. Use of the outer volume must not write in the hidden volume space or the hidden volume will be corrupted. That limits the choice of outer volume file system to one of the FAT series because more sophisticated file systems do write in places across their whole space.How plausible is the choice of a FAT file system on Linux? Even on a dual boot system with the usual Windows versions NTFS is a better choice.
View 7 Replies
View Related
Aug 6, 2010
i'm having problems connecting to the internet unless i manually enter the IP info.
automatic DHCP does not work. I'm on a dual boot machine vista/ubuntu 10.04 LTS connecting to the internet through a lynksys wireless g router and a cable modem.
View 2 Replies
View Related
Dec 22, 2010
I snaptic installed xmacro. I do not see it show up anywhere. Lost. I need a macro that can record keystrokes to reset my cable/router modem combo. I now use autohotkey. But I cannot virtual machine this, because it would need to raise up a ms windows explorer, something that cannot be done in a virtual machine on guest OS.
View 1 Replies
View Related
Apr 1, 2011
I have 2 pcs at home. I dont have a switch so I can connect only one PC at a time to my adsl router/modem for internet access. In the past I had successfully connected the two PCs (NIC to NIC) to each other using the same ethernet cable which was supplied with my dlink adsl modem.
Recently the motherboard of on of my PC went bad so I replaced it with a new one. The problem is when I connect the two using the same Ethernet cable they won't connect. The lights on the Ethernet port won't light up. I can still connect both of them to the adsl router (NIC to Router) (one at a time).
View 5 Replies
View Related
May 18, 2010
I use Opensuse 11.2 & Edge/Gprs Modem to connect Internet.I configured /etc/wvdial.conf & /etc/resolv.conf. Now I can connect Internet using this command "wvdial MYNET" in terminal.Now I want to share my internet using Lan card & Netgear Router. If i connect my PC with Router using wire & change option ON BOOT find this device in ifup then it'll show in ifconfig command.
My Router IP : 192.168.0.1 & It gives my PC an IP automatically : 192.168.0.2
I can ping my router.. even I can browse Router Admin page in browser. No problem there.But now If i want to connect my net using wvdial command... net connected... but no data passing!!! If i disable Lan card in ifup then Edge/Gprs net connection again OK!
View 9 Replies
View Related
