These should be as baned as the major Huawei ban... yes they are probably the source of the backdoors that are turning into ransomware problems...

On 09/14/2020 09:45 AM, Ken Hohhof wrote:
Good find.  Or this:

https://www.alibaba.com/product-detail/11ac-1200Mbps-Smart-Wireless-Router-Realtek_60798208358.html

Order 1000 and get custom logo and packaging, and now you’re a router vendor. Set up an Amazon store and you’re in business.

I have told the customer they have to get a different router. The open DNS resolver on the WAN side is getting constant 2-way traffic, which can use their entire Internet bandwidth if they get used for a DNS amplification attack. It makes no sense for someone to use them as a DNS resolver, so even what they’re seeing now 24x7 is probably going to spoofed IP addresses as part of an attack.

Add in the open telnet interface, what is that?  A backdoor for China?

If it was a name brand router, I would tell them to try updating the firmware or contacting their tech support. But that’s not going to work for a Tamifly router from DiJi. They need to return it to Amazon and buy a name brand router. If they can’t return it, throw it out and call it a $50 learning experience.

*From:* AF <af-boun...@af.afmug.com> *On Behalf Of *Joe Novak
*Sent:* Monday, September 14, 2020 11:14 AM
*To:* AnimalFarm Microwave Users Group <af@af.afmug.com>
*Subject:* Re: [AFMUG] Yunlink router?

Well I'm glad that specific router isn't going for 6/per on alibaba. This looks just like it:

https://yuncore.en.alibaba.com/product/60847306416-803098363/Realtek_Network_wireless_router_FR800_M1_With_Mesh_function_Router.html?spm=a2700.icbuShop.41413.20.3c006dca8hw5o8

I'm not sure what you do about that. Consumer routers have hit such a bad point I'm not sure what to do anymore. They all seem to have crap software, which makes the 'okay' hardware worse.

On Mon, Sep 14, 2020 at 10:34 AM Ken Hohhof <af...@kwisp.com <mailto:af...@kwisp.com>> wrote:

    It appears this is what the customer bought:

    https://www.amazon.com/dp/B08FJ2TQRW

    To find a brand name you have to watch the video, it's apparently a
    Tamifly from DiJi, or is it LucaSng?

    Amazon will be the death of us, with 3rd party Chinese sellers and
    Chinese crap they bought off Alibaba and are reselling.  Then they
    get phony "reviewers" to post glowing reviews to phony review
    sites.  And Amazon says "Amazon's Choice for diji wifi router" and
    the listing says "Newest 2020" and it's a high speed gaming router
    ideal for home office & HD video streaming works great with any devices.

    Amazon always sells the best stuff, right?  Like a Tamifly gaming
    router for $50.  What could go wrong?  Like big gaping security
    flaws?  Why are we worried about Huawei and ZTE when our citizens
    install this crap on their home Internet?


    -----Original Message-----
    From: AF <af-boun...@af.afmug.com <mailto:af-boun...@af.afmug.com>>
    On Behalf Of Robert Andrews
    Sent: Friday, September 11, 2020 7:37 PM
    To: af@af.afmug.com <mailto:af@af.afmug.com>
    Subject: Re: [AFMUG] Yunlink router?

    Yeah, and I was dumbfounded, he was talking stuff like "what's the
    iperf
    numbers for your network"   I was thinking he had a clue, but somewhere
    he fell into the IFM trap...  When he said there wasn't an ethernet
    anywhere, I think my jaw actually dropped because he gave me a look.

    On 09/11/2020 04:44 PM, Ken Hohhof wrote:
     > Unbelievable.
     >
     > As I was reading your email I was waiting for the part where he
    prewired the house with Cat6 or fiber to every room with wall outlet
    or ceiling WiFi6 APs in every room.  Oops.
     >
> I'm not a big fan of powerline networking as a primary solution. To fill a deadspot, sure.
     >
     > -----Original Message-----
     > From: AF <af-boun...@af.afmug.com
    <mailto:af-boun...@af.afmug.com>> On Behalf Of Robert Andrews
     > Sent: Friday, September 11, 2020 5:26 PM
     > To: af@af.afmug.com <mailto:af@af.afmug.com>
     > Subject: Re: [AFMUG] Yunlink router?
     >
     > We had a customer the other day have us come out to look at his new
     > house for a future install.   The whole house is e-glass and
    concrete.
> Interior as well as exterior walls. New concrete is wet. Between the
     > concrete and the eglass he had built a wifi proof blockhouse.   I
    showed
     > him how bad the attenuation was from a phone set as a hotspot to
    another
     > phone in another room.   Yeah he's going to be praying at the
    alter of
     > ethernet over powerlines because he put ZERO cat5 in during
    construction
     > figuring he was going to mesh the whole place..   Phone in 5 Ghz
    there
> was barely a signal at all.. -85 from one room to another.. They all are experts now. The most dangerous person in the world is
    someone with just a little tech knowledge...
     >
     > On 09/11/2020 12:22 PM, Ken Hohhof wrote:
     >> When we deploy premise routers with SFP ports, customers could care
     >> less.  Only one has ever been used, and that’s at a business
    customer
     >> where we used a direct attach cable to a POE switch for their
    VoIP phones.
     >>
     >> All customers want any more is WiFi.  Nobody wants Ethernet.  Or
    fiber.
     >> What they call “hardwired” or “Earth Net”.
     >>
     >> *From:* AF <af-boun...@af.afmug.com
    <mailto:af-boun...@af.afmug.com>> *On Behalf Of *Carl Peterson
     >> *Sent:* Friday, September 11, 2020 2:10 PM
     >> *To:* AnimalFarm Microwave Users Group <af@af.afmug.com
    <mailto:af@af.afmug.com>>
     >> *Subject:* Re: [AFMUG] Yunlink router?
     >>
     >> With an SFP port?!
     >>
     >> On Fri, Sep 11, 2020 at 1:27 PM Bill Prince <part15...@gmail.com
    <mailto:part15...@gmail.com>
     >> <mailto:part15...@gmail.com <mailto:part15...@gmail.com>>> wrote:
     >>
     >>      Theese seems to bee thee one:
     >>
     >> https://yuncore.en.alibaba.com/
     >>
     >>      bp
     >>
     >>      <part15sbs{at}gmail{dot}com>
     >>
     >>      On 9/11/2020 11:14 AM, Ken Hohhof wrote:
     >>
     >>          MAC address.  So yes, could be OEM.  But I asked the
    tech who
     >>          did the install about a week ago and he said the router
    name was
     >>          either Yunlink or something similar.  He said that he’s
    seen one
     >>          more recently.
     >>
     >>          *From:* AF <af-boun...@af.afmug.com
    <mailto:af-boun...@af.afmug.com>>
     >>          <mailto:af-boun...@af.afmug.com
    <mailto:af-boun...@af.afmug.com>> *On Behalf Of *Nate Burke
     >>          *Sent:* Friday, September 11, 2020 1:05 PM
     >>          *To:* AnimalFarm Microwave Users Group <af@af.afmug.com
    <mailto:af@af.afmug.com>>
     >>          <mailto:af@af.afmug.com <mailto:af@af.afmug.com>>
     >>          *Subject:* Re: [AFMUG] Yunlink router?
     >>
     >>          Is that what the router actually says, or just what the
    MAC is
     >>          registered to?
     >>
     >>          On 9/11/2020 12:54 PM, Ken Hohhof wrote:
     >>
     >>              Anybody else encountered a Yunlink router?
     >>
     >>              Where do customers find these things?  Are they
    shopping on
     >>              Alibaba?  I can’t find Yunlink for sale on Amazon or
     >>              anywhere else.  We’ve got a new customer with an
    open DNS
     >>              resolver and telnet interface.  I figure it’s just
    a matter
     >>              of time before the DNS server gets exploited for an
     >>              amplification attack.
     >>
     >>      --
     >>      AF mailing list
     >> AF@af.afmug.com <mailto:AF@af.afmug.com> <mailto:AF@af.afmug.com
    <mailto:AF@af.afmug.com>>
     >> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
     >>
     >>
     >> --
     >>
     >> Carl Peterson
     >>
     >> *PORT NETWORKS*
     >>
     >> 401 E Pratt St, Ste 2553
     >>
     >> Baltimore, MD 21202
     >>
     >> (410) 637-3707
     >>
     >>
     >>
     >
     > --
     > AF mailing list
     > AF@af.afmug.com <mailto:AF@af.afmug.com>
     > http://af.afmug.com/mailman/listinfo/af_af.afmug.com
     >
     >
     >

    --
    AF mailing list
    AF@af.afmug.com <mailto:AF@af.afmug.com>
    http://af.afmug.com/mailman/listinfo/af_af.afmug.com



-- AF mailing list
    AF@af.afmug.com <mailto:AF@af.afmug.com>
    http://af.afmug.com/mailman/listinfo/af_af.afmug.com




--
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Reply via email to