Security Begins at the Home Router

Re:Security Begins at the Home Router by wyldfire on Monday July 30, 2018 @05:27PM (#17648214)

I've been very particular about using my own router and/or wifi in the past, installing one of openwrt/dd-wrt/tomato and tweaking to my heart's content. I would create a DMZ for one or more servers, do the dynamic DHCP, the whole bit.

But now, the ISP provides a single device that is where they terminate the DOCSIS connection and originate the Wifi router. And casual investigation leads me to believe that I "can't" replace this device. I don't want/need a DMZ or my own public servers. Also, I have less patience for tracking down my own breakage these days. The ISP's device works and performs spectacularly. I know of no public vulnerabilities for the provided router.

So IMO no I don't "really want to get rid of any kind of ISP provided router and Wifi".

[ Parent | on HN ]

Re:Security Begins at the Home Router by Willamin on Monday July 30, 2018 @05:34PM (#17648263)

You can purchase a modem as a separate device that you could then use with any router. It could save you some money depending on whether or not your ISP charges you for renting their hardware.

[ Parent | on HN ]

Re:Security Begins at the Home Router by izacus on Tuesday July 31, 2018 @04:45AM (#17651553)

Hmm, no idea for your ISP, but most of the ISPs I've used had the option to switch their equipment to so-called "bridge mode", where it just did the DOCSIS/DSL thing, gave you one unfirewalled external IP and let your router do NAT etc.

They usually didn't advertise that though.

[ Parent | on HN ]