MikroTik routers are forwarding owners’ traffic to unknown attackers

Re:MikroTik routers are forwarding owners’ traffic to unknow... by yjftsjthsd-h on Tuesday September 04, 2018 @08:28AM (#17908527)

I know this doesn't help friends and non-technical folks, but I finally gave up and bought an APU[0], installed Debian, and configured dnsmasq+hostapd+iptables. With unattended updates, it was the most secure thing I could think of. Well, I suppose using openbsd would have been potentially more secure, but there were driver issues with the wireless card that I wanted.

[0] https://pcengines.ch/apu2.htm

[ Parent | on HN ]

Re:MikroTik routers are forwarding owners’ traffic to unknow... by bscphil on Tuesday September 04, 2018 @06:00PM (#17913216)

I really, really love these machines. I'm using one with OPNsense myself. They're just fast enough to get gigabit throughput, but no faster (or more power hungry). Personally I like to separate switching from the firewall and so I've got everything attached to an unmanaged switch or a Unifi AP.

My one complaint about this approach is that there are so many interactions happening at the software level that any time I set up a network stack, I always feel as though the whole thing is very fragile and only works because everything is precisely configured. Since I like to tinker, I want a system that feels more reliable, and so I go for the router-in-a-box approach of pfsense or opnsense. I wish it was easy to get a network configuration that "just works".

[ Parent | on HN ]

Re:MikroTik routers are forwarding owners’ traffic to unknow... by kuon on Tuesday September 04, 2018 @08:38AM (#17908591)

I second that. I don't use wireless and know OpenBSD well, so I went the OpenBSD route, but I am sure linux can be made to be very secure if configured properly.

It can sustain 500mbit/s with no issue. As this is my internet connection speed, I don't know if it can go any higher.

[ Parent | on HN ]

Re:MikroTik routers are forwarding owners’ traffic to unknow... by LeoPanthera on Tuesday September 04, 2018 @01:30PM (#17910936)

I'm running pfSense on an APU2. Works great. A good option if you don't want the effort of configuring things manually - pfSense has a nice web UI.

[ Parent | on HN ]

Re:MikroTik routers are forwarding owners’ traffic to unknow... by dsr_ on Tuesday September 04, 2018 @08:55AM (#17908687)

I highly recommend this sort of roll-your-own, with Debian or OpenBSD depending on your skill set.

[ Parent | on HN ]