Topic 'Re: 2wire 3800HGV-B and Double Firewall' in forum '2Wire' - dslreports.com

Re: 2wire 3800HGV-B and Double Firewall

Fri, 23 Mar 2012 21:19:29 EDT

SpkyMky posted : As an update....

I looked around at various hardware firewalls and they were pretty pricey for what I wanted as a feature set. So I dragged an old Athlon box out of the basement, threw clearOS on it, and it is running great. Now only the provider's equipment is at the first level, and everything else is behind clearOS.

Re: 2wire 3800HGV-B and Double Firewall

Thu, 22 Mar 2012 04:50:47 EDT

SpkyMky posted :

said by wayjac:

Most any modem or router has a way for it to be configured remotely via the internet

Yes, but I usually see it as an option in the device configuration to enable or disable remote configuration.

Re: 2wire 3800HGV-B and Double Firewall

Wed, 21 Mar 2012 20:49:04 EDT

wayjac posted :

said by SpkyMky:

I understand that you may have to be vague for very good reasons

Most any modem or router has a way for it to be configured remotely via the internet

I don't have any association with 2wire but I am a subscriber of att dsl

Re: 2wire 3800HGV-B and Double Firewall

Wed, 21 Mar 2012 19:40:16 EDT

SpkyMky posted : Thanks for your help wayjac. I'd love to know the real details of all ways that lead into the 2wire (for peace of mind) but I understand that you may have to be vague for very good reasons.

Re: 2wire 3800HGV-B and Double Firewall

Wed, 21 Mar 2012 19:25:52 EDT

wayjac posted :

said by SpkyMky:

A cursory glance indicates that the client device is the one that initiates the request

TR-069 has been around since 2004

said by SpkyMky:

So does the 2wire periodically check an ATT ACS

There are messages in the 2wire logs that show that traffic

said by SpkyMky:

if a support person makes changes the modifications are configured then?

There are other ways for a support agent to modify the modems comfiguration

Re: 2wire 3800HGV-B and Double Firewall

Wed, 21 Mar 2012 19:13:53 EDT

SpkyMky posted : Interesting... I'll have to look at TR-069 closer. A cursory glance indicates that the client device is the one that initiates the request. So does the 2wire periodically check an ATT ACS, and if a support person makes changes the modifications are configured then?

Re: 2wire 3800HGV-B and Double Firewall

Wed, 21 Mar 2012 18:53:32 EDT

wayjac posted :

said by SpkyMky:

I have run some scenarios in my head on how they are able to configure it remotely and have come up with a few, but I'm just throwing darts in the dark

TR-069 is used to manage the 2wire

Re: 2wire 3800HGV-B and Double Firewall

Wed, 21 Mar 2012 18:33:22 EDT

SpkyMky posted : I used the att speed test and also the ones on dslreports and got the same results.

And what I did was call Uverse support and asked them if there were known issues with router behind router configurations. I had already tried the r-b-r configuration and event notification before I called and changed it back. During the call they modified the settings, we tried it again, and then they changed it back.

I detect no open ports on the 2wire from the outside, and they all show as stealth. I have run some scenarios in my head on how they are able to configure it remotely and have come up with a few, but I'm just throwing darts in the dark. I'm assuming the way they modify settings is through a very clever method that doesn't involve anything accessible to the internet but is lower level through the connection.

Re: 2wire 3800HGV-B and Double Firewall

Wed, 21 Mar 2012 17:58:25 EDT

wayjac posted : The speed test could be wrong

Sounds like you requested help with configuring the 2wire

Re: 2wire 3800HGV-B and Double Firewall

Wed, 21 Mar 2012 17:47:40 EDT

SpkyMky posted : I'm sure that the fvs318 wouldn't be able to support the 16Mb down based on processing power, but it just seemed weird that when I was using it behind the Speedstream 5100 DSL it was a consistent 5Mb and I've read that most people can get up to 8Mb with it.

On ATT configuring the modem... when I called support to see if I was doing something wrong they changed the settings on my 2wire for DMZ+ and router-behind-router notification remotely. Am I missing something?

Re: 2wire 3800HGV-B and Double Firewall

Wed, 21 Mar 2012 14:36:32 EDT

wayjac posted :

said by SpkyMky:

Today I got Uverse. Connecting through the 2wire directly I get about 16Mb down and 1.5Mb up (but it changes quite a bit) If I put the FVS318 it download drops to about 1.5 - 2.0 Mb down and .5Mb up.
I realize I am double natting and double firewalling, but I didn't expect it to be that bad

I doubt that "double natting and double firewalling" are the cause of the loss of speed
It's very likley that the fvs318 cannot support the uverse speeds

said by SpkyMky:

With AT&Ts ability to config the modem remotely I don't feel safe

Your fears are misplaced, att does not tinker with the modems configuration like you think

2wire 3800HGV-B and Double Firewall

Tue, 20 Mar 2012 21:42:45 EDT

SpkyMky posted : I am looking for tips on setting up my 3800HGV-B Uverse router with another hardware firewall behind it.

I originally had a speedstream 5100 and a Netgear FVS318 behind it and consistently got 5Mb Down and almost 1Mb up. Today I got Uverse. Connecting through the 2wire directly I get about 16Mb down and 1.5Mb up (but it changes quite a bit) If I put the FVS318 it download drops to about 1.5 - 2.0 Mb down and .5Mb up.

I realize I am double natting and double firewalling, but I didn't expect it to be that bad. With AT&Ts ability to config the modem remotely I don't feel safe. When I asked what happens if a disgruntled employee goes in probing machines they said they have legal punishments in place. Not good enough for me.

Any ideas on 2 levels of hardware firewalls in this configuration?