Re: Desperate for good firewall: ARP and DNS attacks
On Sat, Mar 06, 2010 at 04:11:49PM +1100, Tim Clewlow wrote:
> > I did try a new modem/router, a Linksys/Cisco WAG120N, but as soon
> > as
> > I plugged it in, I had no hope of getting to the configuration page
> > in
> > the browser before it was being attacked.
>
> Use a clean computer and plug the modem into that, do NOT plug the
> modem into the adsl line. Go to the modem config page and change the
> default password. Now lock down the modem, ie make sure no ports are
> open / mapped / forwarded unless YOU specifically want them open.
[snip]
> >
>
> Get a minimal CD to install a clean system from, either *nix or *bsd
> will do. Run the CD, do not install, instead drop to a shell and
> manually clear the entire disk, dd would be the command I would use.
> It is NOT possible for an ATA hardware controller to get haxored, so
> this will always work.
>
> Now you have a clean modem and a clean computer - installing and
> config a secure sys is now up to you, but most *nix and *bsd sys are
> quite secure by default.
might want to do the laptop first and then make sure nothing else apart
from the laptop is connected to the modem.
Then work up from there
>
> Regards, Tim.
>
>
--
"A dictatorship would be a heck of a lot easier, there's no question about it."
- George W. Bush
07/27/2001
Reply to: