So how is the Exede warning even valid if the Airouter's are using VPN IP addresses only and are invisible to the public WAN?
From: [email protected] [mailto:[email protected]] On Behalf Of Clay Stewart Sent: Friday, April 29, 2016 1:07 PM To: Ubiquiti Users Group Subject: Re: [Ubnt_users] Exede issue policy against AirRouters Yes, we just had an issue yesterday on a local relay being whopped on 5.8Ghz whereas the issue was the industrial buildings owner had placed 6 routers inside (Netgears). Noise floor for incoming AF5X was trashed. On Thu, Apr 28, 2016 at 4:33 PM, Phil Curnutt <[email protected]<mailto:[email protected]>> wrote: We're seeing 80 MHz channel widths default on new 5 GHz routers. Talk about hogging spectrum. Phil On Thu, Apr 28, 2016 at 2:25 PM, Kees H <[email protected]<mailto:[email protected]>> wrote: May I change that last line. They should not have start selling to end users. (period) But if they want to sell to end users, they should have 2 packages, one for wisps with remote management on by default and one with it off for those idoits who can't prgram their routers. And speaking of which, their radios should have been defaulted with low -- read very low -- power so that the idoits who just take the radios out of the box to borrow the internet from their parents across the street don't ruin 40 mhz of bandwidth for us wisps. ----- Original Message ----- From: Clay Stewart<mailto:[email protected]> To: Ubiquiti Users Group<mailto:[email protected]> Sent: Thursday, April 28, 2016 1:13 PM Subject: Re: [Ubnt_users] Exede issue policy against AirRouters AirControl works well enough, but we do quite a bunch of scripts now on our own for data extraction and updates. And I agree, they were initially for WISPs and thus just need properly programmed, which we do... The only issue is that when UBNT started selling to end user suppliers, the Firewall check box should have defaulted as on. On Thu, Apr 28, 2016 at 3:52 PM, Mike Hammett <[email protected]<mailto:[email protected]>> wrote: Aircontrol keeps breaking, so they just abandoned centralized update management? ;-) ----- Mike Hammett Intelligent Computing Solutions<http://www.ics-il.com/> [http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/ICSIL>[http://www.ics-il.com/images/googleicon.png]<https://plus.google.com/+IntelligentComputingSolutionsDeKalb>[http://www.ics-il.com/images/linkedinicon.png]<https://www.linkedin.com/company/intelligent-computing-solutions>[http://www.ics-il.com/images/twittericon.png]<https://twitter.com/ICSIL> Midwest Internet Exchange<http://www.midwest-ix.com/> [http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/mdwestix>[http://www.ics-il.com/images/linkedinicon.png]<https://www.linkedin.com/company/midwest-internet-exchange>[http://www.ics-il.com/images/twittericon.png]<https://twitter.com/mdwestix> The Brothers WISP<http://www.thebrotherswisp.com/> [http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/thebrotherswisp>[http://www.ics-il.com/images/youtubeicon.png]<https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg> ________________________________ From: "Kees H" <[email protected]<mailto:[email protected]>> To: "Ubiquiti Users Group" <[email protected]<mailto:[email protected]>> Sent: Thursday, April 28, 2016 2:53:04 PM Subject: Re: [Ubnt_users] Exede issue policy against AirRouters Why would a wisp not update? ----- Original Message ----- From: Josh Luthman<mailto:[email protected]> To: Ubiquiti Users Group<mailto:[email protected]> Sent: Thursday, April 28, 2016 12:15 PM Subject: Re: [Ubnt_users] Exede issue policy against AirRouters "...as long as you're on the latest firmware" You know WISPs aren't updating all of them all the time, do you really think consumers are??? Josh Luthman Office: 937-552-2340<tel:937-552-2340> Direct: 937-552-2343<tel:937-552-2343> 1100 Wayne St Suite 1337 Troy, OH 45373 On Thu, Apr 28, 2016 at 3:11 PM, Matt Hardy <[email protected]<mailto:[email protected]>> wrote: Hi guys, There are no known issues with airRouters as long as you're on the latest firmware. I had to dig deep to find any reference to a specific issue, and the issue they referenced doesn't have anything to do with allowing remote access or DDOS attacks. And it was resolved in v5.6.3. I've reached out to them to see if they can update the articles to be more technically correct, hopefully they will. Let me know if you have any more questions :) -Matt On Thu, Apr 28, 2016 at 3:07 PM, Phil Curnutt <[email protected]<mailto:[email protected]>> wrote: As best we could tell about 4 years ago when the AirRouter was first introduced was that they came with no firewall rules as default, it was up to the user to implement them. So, we don't use them, except as CPE's, not routers. Phil On Thu, Apr 28, 2016 at 12:54 PM, Clay Stewart <[email protected]<mailto:[email protected]>> wrote: Can a UBNT support person comment on this: Subject: Security Alert! Malicious Routers on Exede Network - #20160427 [http://www.wildbluetools.com/content/FS/CommImages/TB_Header.jpg] DATE APRIL 27, 2016 Security Alert! Malicious Routers On Exede Network — #20160427 Summary The security team at Exede Internet has issued a warning to anyone using Ubiquiti or Netis routers. Due to extreme security weaknesses in these routers, malicious hackers have been able to access these routers and mount cyber attacks. Customers with these routers should replace them as soon as possible to prevent suspension of their Exede service. [http://www.wildbluetools.com/content/FS/CommImages/breaker.jpg] FAQs · Q: What type of security risk do these routers present? · A: These routers permit a Distributed Denial of Service (DDOS) attack. When a DDOS attack comes from a router on our network, the target network sees that exede.net<http://exede.net/> is the source of the attack and closes our access to their network. For the customer, this means that some sites won't load, that their service is slow, and that their data usage adds up very quickly. · Q: How can Technicians help secure the Exede network? · A: There are several ways that technicians can help with this effort. o Look for these routers during installation or service calls o Educate the customer that these routers are a severe security risk o Educate the customer that their service may be suspended or terminated according to ourAcceptable Use Policy<http://www.exede.com/documents/master/acceptable-use-policy.pdf> if they continue to use the router o Suggest these other resources to find a replacement router § Upgrade to an Exede WiFi-only plan, if available, and have a secure router as part of their modem § Engadget reviews<http://www.engadget.com/reviews/routers/> § CNET reviews<http://www.cnet.com/topics/networking/best-networking-devices/> [http://www.wildbluetools.com/content/FS/CommImages/breaker.jpg] -- -- Clay Stewart, CTO SCS Broadband A Division of Acelanet, LLC 434.263.6363<tel:434.263.6363> O 434.942.6510<tel:434.942.6510> C [email protected]<mailto:[email protected]> “We Keep You Up and Running” Please send sales inquiries to [email protected]<mailto:[email protected]> Please send service/repair requests to [email protected]<mailto:[email protected]> _______________________________________________ Ubnt_users mailing list [email protected]<mailto:[email protected]> http://lists.wispa.org/mailman/listinfo/ubnt_users _______________________________________________ Ubnt_users mailing list [email protected]<mailto:[email protected]> http://lists.wispa.org/mailman/listinfo/ubnt_users _______________________________________________ Ubnt_users mailing list [email protected]<mailto:[email protected]> http://lists.wispa.org/mailman/listinfo/ubnt_users ________________________________ _______________________________________________ Ubnt_users mailing list [email protected]<mailto:[email protected]> http://lists.wispa.org/mailman/listinfo/ubnt_users _______________________________________________ Ubnt_users mailing list [email protected]<mailto:[email protected]> http://lists.wispa.org/mailman/listinfo/ubnt_users _______________________________________________ Ubnt_users mailing list [email protected]<mailto:[email protected]> http://lists.wispa.org/mailman/listinfo/ubnt_users -- -- Clay Stewart, CTO SCS Broadband A Division of Acelanet, LLC 434.263.6363<tel:434.263.6363> O 434.942.6510<tel:434.942.6510> C [email protected]<mailto:[email protected]> “We Keep You Up and Running” Please send sales inquiries to [email protected]<mailto:[email protected]> Please send service/repair requests to [email protected]<mailto:[email protected]> ________________________________ _______________________________________________ Ubnt_users mailing list [email protected]<mailto:[email protected]> http://lists.wispa.org/mailman/listinfo/ubnt_users _______________________________________________ Ubnt_users mailing list [email protected]<mailto:[email protected]> http://lists.wispa.org/mailman/listinfo/ubnt_users _______________________________________________ Ubnt_users mailing list [email protected]<mailto:[email protected]> http://lists.wispa.org/mailman/listinfo/ubnt_users -- -- Clay Stewart, CTO SCS Broadband A Division of Acelanet, LLC 434.263.6363 O 434.942.6510 C [email protected]<mailto:[email protected]> “We Keep You Up and Running” Please send sales inquiries to [email protected]<mailto:[email protected]> Please send service/repair requests to [email protected]<mailto:[email protected]>
_______________________________________________ Ubnt_users mailing list [email protected] http://lists.wispa.org/mailman/listinfo/ubnt_users
