Live data from Hacker News

MikroTik routers are forwarding owners’ traffic to unknown attackers

blog.netlab.360.com

131–140 of 151 posts

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#131
post #17

Earlier quoted context omitted.

Maybe something like the PC Engines apu2? http://www.pcengines.ch/apu2.htm x86, can run OpenWRT.

I have an APU2 and it's really the perfect router for any small office or house. Intel NICs, plenty of ram and an mSATA port make it quite capable. I have pfSense on it at the moment, which works very well. At one point I had an 802.11n card in my older ALIX2D router, but there were stability and performance issues so now I always use a separate access point, most recently a Unifi AC-PRO which has some quirks but wor…

[deleted]

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#132

Earlier quoted context omitted.

Sorry for the spam, I seem to post this regularly but the Ubiquiti EdgeRouter Lite will happily run OpenBSD. It supports the onboard packet accelerator with some extra configuration.

I wonder if the EdgeRouter Lite is similar enough to the Unifi Security Gateway to port that...

Yes. http://www.codeghar.com/blog/openbsd-on-ubiquiti-usg.html

They're basically the same hardware.

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#133

Earlier quoted context omitted.

On the AC66U, 5GHz radio seemed to work well and I got consistent 105-ish Mbps in the same room as the AP. (I'm not disputing your experience, but don't want other readers to conclude that 5GHz doesn't work on any of them.)

Is that the expected rate on an AC66U? I'm getting close to 300 Mbps real-world speeds in a very noisy environment on my Unifi lite.

Sorry. I certainly should have been clearer, especially with this crowd. That test was rate-limited by my cable modem. I was on a 100-down package at the time. I did not do a intra-house speed test.

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#134
post #99

Earlier quoted context omitted.

Cool, you ignored half my comment to engage in dishonest bickering filled with more assumptions as to my motivations. Are you having fun?

Can you please not do flamewars on HN? Incivility like this will get you banned here regardless of how provocative some other comment was. Edit: I'm sorry to see that you've done this repeatedly before. If you would please review https://news.ycombinator.com/newsguidelines.html and follow the rules when posting here in the future, we'd appreciate it.

You're right, I have clearly forgotten the spirit of the discussion here. I apologize for that.

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#135
post #98

Earlier quoted context omitted.

> Show, don't tell. Sure. Should we start with the estimated 262 million counts of democide committed last century? http://www.hawaii.edu/powerkills/20TH.HTM Or perhaps you're one of those people who thinks mass murder of humanity is a good thing because it reduces the human impact on the environment? > If you can't explain it adequately to an audience, then you don't know it well enough to to be stating it as fact.…

> Absolutely untrue. That requires you to assume the audience is both intellectually capable of understanding a complex proposition I downvoted this, but now I'm gonna reply to explain why. This is a veiled insult against your audience, and as such it's both a fallacy and a bad-faith argument. The rest of the sentence, too. Let's not do "I'm smarter than you all and you're all biased" here, please. It just makes the…

I actually did not intend to specifically insult the audience in this case, but I can understand why it was interpreted that way. I'll make an effort to be more civil in my future replies.

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#136
post #111

Earlier quoted context omitted.

Not yet... I bought a brand new one just for testing with OpenBSD vs Vyatta because I'd like to benchmark performance of each.

Are you planning to post your benchmarks? Also, any helpful info on getting OpenBSD running on one of these is welcome!

Yes I will post benchmarks and rulesets. I plan to make equal rulesets for each OS if possible.

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#137

Earlier quoted context omitted.

Sorry for the spam, I seem to post this regularly but the Ubiquiti EdgeRouter Lite will happily run OpenBSD. It supports the onboard packet accelerator with some extra configuration.

Do you have any documentation on using the onboard packet accelerator with OpenBSD? I thought it was just binary linux blobs.

Just saw this, so sorry for the late reply: https://undeadly.org/cgi?action=article;sid=20180418073437

Unfortunately I was wrong and the post is just for cryptography acceleration. Will have to check the commits to see if any other work has been done.

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#138
post #104

I always disable winbox on installation. /ip service disable winbox Why would anyone want to use that? My theory is that it has something to do with how in many cases the MT sshd has to be told to figure out the terminal: $ ssh user+t@192.168.88.1 ...and this information is really hard to find. If the terminal settings aren't right and you can't fix them, ssh is unusable and you're stuck with either winbox or webfig.…

Afaik winbox is the only way to reconfigure the device in case of serious IP misconfiguration, or if layer 3 networking does not work for some reason (I just had to debug a switching loop...), as winbox can connect by MAC, rather than IP.

In such a situation I would probably hard reset and upload a saved configuration... certainly not ideal.

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#139

Earlier quoted context omitted.

Do you have any documentation on using the onboard packet accelerator with OpenBSD? I thought it was just binary linux blobs.

Just saw this, so sorry for the late reply: https://undeadly.org/cgi?action=article;sid=20180418073437 Unfortunately I was wrong and the post is just for cryptography acceleration. Will have to check the commits to see if any other work has been done.

Ahh, that’s unfortunate. Thanks for looking it up anyway.

Re: MikroTik routers are forwarding owners’ traffic to unknown attackers

#140

Earlier quoted context omitted.

I am curious what type of things you're running on your router. I have an ER-X, but haven't ever thought to run software on it (aside from some of the obvious packages like VPN and such).

I have an EAP Proxy Python script running. It allows me to easily and permanently bypass my ATT fiber modem. Speed and service quality went way up when I did that.

I have AT&T fiber and hate the hardware I have. Could you link to your script please? I'm toying w/ the idea of buying my own hardware.
Post reply on HN