Page 1 of 1

Reset:Factory Defaults

Posted: Sat Jul 24, 2010 11:24 am
by JCS
I am interested in blocking external Internet access at particular times throughout the day and night. I am exploring upgrading the firmware in my Linksys WRT54G wireless router to gain support for "Time Restrictions". The question I have is, using the Gargoyle firmware upgrade, what will happen if the "Reset" button is pressed. Will this restore a default configuration? Is there anyway to prevent the default restoration of the "Administrator" password and or the configured "Time Restrictions" times?

Thanks.

Re: Reset:Factory Defaults

Posted: Sat Jul 24, 2010 6:01 pm
by pbix
If someone has physical access to the router then there is no way to prevent them from changing any setting or even changing the firmware itself.

If you want to know how you can research failsafe mode over at openwrt.org

Re: Reset:Factory Defaults

Posted: Sat Jul 24, 2010 6:09 pm
by Eric
Right now the reset button doesn't reset the password. Actually, it doesn't do anything right now.

However, as pbix said, if an attacker has physical access they can bypass any password requirements. Someone with physical access could load a new firmware onto the router using TFTP, bypassing any security restrictions in Gargoyle.

Re: Reset:Factory Defaults

Posted: Sun Jul 25, 2010 5:42 pm
by uncle john
I can see why you would be reluctant to introduce hardware specific code (ie. reset button support).
On the subject of security, I'd suggest that having the ability to disable system administration via the WAN would be a really good feature. (e.g. http://www.coova.org/node/245).

Re: Reset:Factory Defaults

Posted: Sun Jul 25, 2010 6:57 pm
by pbix
Remote Web access can be disabled on the System-Router Access page. Just set it to disabled which is its default.

Re: Reset:Factory Defaults

Posted: Tue Jul 27, 2010 7:46 am
by uncle john
Sorry. I did write WAN but I meant WLAN.