Wednesday, November 17, 2004

IDENT port 113

Data travels across the internet in packets of information. One of the interesting things about these packets is that they all a port number on them. The idea is that your computer is running three programs at once , (a browser, a chat program , oh and your mail is being checked every 5 min because you're running a small business so you keep it running all the time.)

Basically your browser(usually the Internet Explorer) only pays attention to info coming down on it's port (8080 I think) , email only on it's port , the chat program only on it's , ,and even though the stuff is all coming down the same wire in a random mish mash mess , nothing gets confused and everythign goes to the right program.

Stay with me on this. I'm getting there.

The idea is that you're pretending that you're plugging a wire into your email program to the email server , and none of the other wires going to other programs get mixed up with it. At least that's what it looks like. So we say "it's coming down on port 25" , instead of things like " the data is tagged with port 25" or something confusing like that.

Yeah yeah , I'm getting there.

Just got a linksys router off a friend. Works great on one computer. Crashes on two computers a lot. Not too useful, but playing with it I did learn a very interesting thing. (aside from the obvious ... buy new computer stuff, second hand give aways are usually given away for a very good reason)

By default, all routers (of this make and model) have the same password. Until you change it.

They also have "remote administration" turned on. That is to say , you can plug into the router on it's administrator port , if you know the password, and control it from remote. From outside the house, from the internet at large. (port 113, often called the ident port)

While this makes great business sense if you're selling to an office , because these are the setting perfect for a network administrator to just plug the things in and go , this is a disaster for anyone else.

You're brand new router has a known password. And a known port. and anyone who knows these two items can simply start scanning the internet for such routers and take them over by remote control.

What was that you said ? You bought that router to act as a fire wall to make you feel more secure ? Ha ha ha. Have I got news for you !!!


1 comment:

Anonymous said...

Ok, nice cooment on ..."security"? What do you call somebody who buys something without knowing what he bought? Should U understand that if you buy a certain router, that is going to be that for your security?!? No, my fellow... you have to SET IT UP p r o p e r l y for you needs... So... Buy a CISCO instead. You will be impressed by the number of options AFTER you read the manual ;) Cheers!