MikroTik routers are forwarding owners’ traffic to unknown attackers

Re:MikroTik routers are forwarding owners’ traffic to unknow... by alias_neo on Tuesday September 04, 2018 @08:42AM (#17908610)

For something with hardware offload, get a Ubiquiti EdgeRouter. I run one at home, it's debian based, I have lots of tools I've written in Go compiled and running on it for various purposes and you can install debian packages for things you need.

The other option I've heard good things about are the PCEngines devices. They don't, as far as I'm aware, have hardware offload, so make sure their performance suits, but they use OSS U-Boot and you install the OS of your choice. It's one of the most open devices in a router form factor I've come across.

Depending on the number of ports you need, you could also use one of the Jetway devices. They make them with varying numbers of ports as SBCs in a case and you add RAM/M.2 SSD. I got a Celeron one with 2 ports and run it as a Suricata IPS. It performed just fine with my 100M pipe.

[ Parent | on HN ]

Re:MikroTik routers are forwarding owners’ traffic to unknow... by JustSomeNobody on Tuesday September 04, 2018 @09:05AM (#17908734)

I am curious what type of things you're running on your router. I have an ER-X, but haven't ever thought to run software on it (aside from some of the obvious packages like VPN and such).

[ Parent | on HN ]

Re:MikroTik routers are forwarding owners’ traffic to unknow... by zamadatix on Tuesday September 04, 2018 @09:59AM (#17909049)

I have an EAP Proxy Python script running. It allows me to easily and permanently bypass my ATT fiber modem. Speed and service quality went way up when I did that.

[ Parent | on HN ]

Re:MikroTik routers are forwarding owners’ traffic to unknow... by ericfrederich on Tuesday September 04, 2018 @10:51PM (#17914702)

I have AT&T fiber and hate the hardware I have. Could you link to your script please? I'm toying w/ the idea of buying my own hardware.

[ Parent | on HN ]

Re:MikroTik routers are forwarding owners’ traffic to unknow... by yumraj on Tuesday September 04, 2018 @09:55AM (#17909014)

Which VPN do you run on it? Wireguard? How's the performance, I ask as I too have an ER-X.

[ Parent | on HN ]

Re:MikroTik routers are forwarding owners’ traffic to unknow... by msh on Tuesday September 04, 2018 @10:23AM (#17909226)

I have ipsec on my er-x, it's build in. They have a bug in the ipsec offloading in the last few firmware releases so that can't be enabled.

So speeds are kind a slow, around 50-90 megabits (i have gigabit fiber, that the er-x otherwise can fill out completely).

[ Parent | on HN ]

Re:MikroTik routers are forwarding owners’ traffic to unknow... by chooseaname on Tuesday September 04, 2018 @11:57AM (#17909936)

Not OP, but, I use the built in IPSec vpn. I have been looking into WireGuard though.

[ Parent | on HN ]