Firstly, I hope this post is not against forum rules, please delete if it is but almost no one seems to be aware of this - or feel safe to voice their opinions publicly.

While i`m unwell I have to do non-strenuous things, like `investigating` computer hardware. I unlocked a white modem of the type supplied by BT but not the one they supplied me with as this remains their property, because I wanted my linestats mostly - inside I found something nasty.

There is a back door.

The connection goes to...


I am working on a method to change the way the modem connects using telnet, it is a complex problem without paying 100-150 quid for an aftermarket modem/router.

If you google for something like "why is my openreach modem connected to DoD" you will discover a document called full disclosure which makes for an alarming read.

Had someone approached me with this theory prior to my own discovery, I would have been sceptical too.

Having spent about 15 hours trying to find a solution I succeeded, however the fix only lasts till a modem/router reset. My connection is reliable - 10 days can pass without a reset, oddly enough my modem/router reset within 5 minutes of applying the fix. Time is money as they say, although in my case it`s more a matter of using my time in a better way. So i`m going to give up and buy one of the Draytek range of modem/routers, other types can be used but setup is more complex.
I hope this has been of some use or interest to readers.

I shall be buying the VDSL2 version of the Draytek Vigor 120 when they finally release it. Nice find buy the way

definitely interesting, but if this was true i cant believe its not across the board (i.e. #### ############# ###### ### ####)
I have never used supplied routers because they have always been crap so far, opting for a Belkin super duper jobby, but with the volume of sales of other makes of modems surely this would limit ######## #################### ### ########### ###### ####### ####
## ######### ###### ####### #####

I think there are a lot of holes in the theory/thesis, as it stated that "High risk" users would not have this activated, ok high risk possibly referred to the internet expert, but that could be a cover, or learnt with the sole purpose of ######## ######### ########, and not to shop the ########## and then appear on their ##### #### rendering their skills and expertease wasted!

Im certain we ### ##### ######### ## #### way, but this could well just be a ########## ###### something much ######! or just to spread paronoia to keep us all in line! lol

Are you telling me the government is spying on us through our modems?

Anyway,

http://cryptome.org/2013/12/Full-Disclosure.pdf

Page 43 made me laugh, real tin foil hat type stuff.

I spoke to a friend who is fairly high up at BT here is the conversation:
Me: "Whats going on at BT?
Read this http://cryptome.org/2013/12/Full-Disclosure.pdf It would appear that ALL BT Modems have a backdoor to NSA/GCHQ installed. "

His reply: "I think you will find all ISP supplied modems have this now. !"

Another friend who works doing Network stuff for various Home Office and various Police forces etc
After I posted it on my Facebook wall messaged me to say:
"Yes since 1996. Cant say much more OSA. I will explain more when I see you next."

I must admit I did laugh at page 47..

Me too re page 47. I happen to prefer black boxes!
BT didn`t want to talk to me about it.

For 10 years I have assumed my internet activity could be/was logged/viewed by my ISP. However, the way the openreach modem connects appears to grant the unknown powers remote access prior to internet connectivity being established. I don`t like it.
The modem itself performs remarkably well compared to the Draytek. This really all started as I was supplied the ECI OR modem and HH3. The HH3 has been found to be the culprit of my dreadful LAN throughput. I am on a pretty strange profile as far as I can see...
17.73/20, it is supposed to be 80/20 - possibly due to the fact I am connected to three separate cabinets? I don`t know as much as i`d like to about networking, all I can say is i`m learning. Having an ongoing row with BT unfortunately.

No idea what happened to my original message lol


definitely interesting, but if this was true i cant believe its not across the board (i.e. in all firmware updates for all modem routers)
I have never used supplied routers because they have always been crap so far, opting for a Belkin super duper jobby, but with the volume of sales of other makes of modems surely this would limit the effectiveness and use of their resources to a percentage of the population as opposed to *EVERYONE*

I think there are a lot of holes in the theory/thesis, as it stated that "High risk" users would not have this activated, ok high risk possibly referred to the internet expert, but that could be a cover, or learnt with the sole purpose of countering surveillance methods and NOT to shop the government as that would be pointless as they would then appear on their watch list rendering their skills and expertise wasted!

Im certain we are being monitored in some way, but this could well just be a deflection hiding something much bigger! or just to spread paranoia to keep us all in line! lol

Anyway this is what was supposed to go up no idea what happened there lol

Personally I always recommend ASUS routers, the RT56 and RT66 are simply fantastic routers, and they release the source code into the community which means that not only is it checked to ensure no security holes but also custom firmware is available.

As for Belkin routers, avoid like the plague. This is what one of their own employees said about their stuff (admittedly back in 2009)
"Infact, our products are such junk, when an internal survey was done, it was found that the majority of Belkin employees purchased competitors products for home use, even with ours being offered free, as they are of such poor quality."

Original article

For good advice about routers and fair and honest reviews, head over to Small Net builder and check out their rankings (Select via the drop down menu).

I think that if there are any "back doors", they will be in the Modem side of the device, and not the router side. In which case every ISP supplied device will be suspect. For instance we have Virgin cable, and the Netgear "Superhub", I switch the router function off and have it in "modem only mode", as I prefer my own router. If the backdoor was in the router side, I would now have closed it. Thats too easy.

Hi Charlie_croker interesting post, im just about to go with Virgin this Friday, hopefully, what sort of set-up would you recommend for use with Virgin?
asus 66 looks good to me

I have always had to get a new router due to needing 5 ports!, or 4 now as Wife's is wireless now, although would go back to wired if possible

I must admit your bit about belkin seems to ring true i have had network issue's in the past and still do currently with a wireless printer! also my last one went pop after a power cut now with a F.O.C. replacement but i think its of quite poor quality compared to previous one

H_R, forget the consumer nonsense, I find a good setup to be:


+

+


Proper BSD based firewall/router, 48 port PoE switch, Ubiquiti wireless access points (400ft range anyone?)

you have lost me there, whats that a control panel for the millenium falcon and an outside light?

5 would be plenty 48 may be a bit out of my leauge!
where does the Virgin bit go?
cheers for thinking of me/us though Ollie!

Virgin "hardware" goes before m0n0wall on whatever interface you've told it is WAN traffic.

On a serious note, I'd look into Draytek stuff. Their kit is top notch and rock solid. Maaaaaaybe a little techy for the average home user, but with a bit of effort you can have one versatile setup.

Problem is a lot of providers are no longer supplying the DSL or cable modem logon credentials, I also know that a lot of the bigger players stipulate that only there hardware can be used on home user contracts.

Its normally easy*ish* to extract these from a dump of the backup file the router creates. Its also interesting to see the difference in sync rates you can get with different hardware.

I had fun with a Virgin modem: it is supposed to have a modem mode but it won't talk to anything upstream if you use it... won't even provide an IP address. I ended up using one of the normal ports to talk to my wireless router, and killed the wireless on the Virgin box.

Just shows the importance of using a decent ISP. Having used Eclipse now for a good few years, I would never go back to the utter arse that is the mainstream providers.

I have been through so many Routers and Firewalls it's scary, the problem is that I have a 120mbps DL and 20 Mbps UL, So the Cisco Wired router with Intruder Protection was great but maxed connection out at about 20Mbps DL, so that was replaced with a Zyxell Ipsec and that was awful to use, so that was sold on, then I imported an Amped Wireless RG1000 from USA, that wasn't good firmware wise, so then I tried an Asus RT56 with custom firmware from Padovan I still rate this as one of the best routers I have owned, it had lots of cool features Asus RT56 Then the RT66 came out and I couldn't resist that so that Merlin Firmware was installed.

I concur about the Ubiquiti Waps though, we have 4 (Picostation M2 (2.4GHz) ) of these around the house AirOS is not the best for routers but as a WAP its ideal.

Charlie, I'd stick with the most reliable VDSL2 modem you can find then stick m0n0wall, or another BSD based firewall/router, behind it to do all your DNS forwarding, DHCP, SPI etc etc.

m0n0wall will quite happily handle gigbit WAN if you can feed it enough CPU. A cheap desktop CPU like a Pentium 4 or even a low power Atom would handle those speeds.

I didn't think VDSL was compatible with Virgin Cable?
I am more than happy with my Custom firmware RT66, as it has huge speed, great firewall, hardware NAT and lots of custom extras. Besides I have 10GBe backbone to install for the bit between study and Room where we keep the QNAP NAS's and the Apple Timecapsule