Posted: Wed Aug 29, 2012 2:36 Post subject: router hacked?
Today I was having trouble connecting to the internet. I restarted my cable modem numerous times with no luck. I restarted my ASUS RT-N16 running dd-wrt [DD-WRT v24-sp2 (11/21/10) big (SVN revision 15778)] and when it came back on, it had the "unsafe" password screen up and was prompting me for a password reset. I updated the password and then noticed that all of my Port Forwards are now gone.
I got to thinking -- has my router been hacked or something? Is there any way to know? Why would the password get reset?
probably your router ran out of nvram space, overwriting some crucial settings. after setting up again, how much nvram space is left? keep monitoring it, especially when you use wan traffic metering. _________________ now running tomato by shibby
E4200v1 cfe 2010.09.20.0
You can issue this via the Run Commands section in the GUI or via Telnet/SSH:
Code:
nvram show | grep free
It will report two numbers, your total nvram space in bytes and then the amount free. As your router seems to have been reset (or lost its settings) it will be an inaccurate value. You should reconfigure it to your normal settings and see if you are running out of NVRAM space _________________ James
Main router:
Netgear R7000 overclocked to 1.2GHz - DD-WRT v3.0-r35965M kongac
IPv6 6in4 (HE.net), OpenVPN (with PBR and split tunnelling), Entware, dnsmasq with ipset
Ouch. That doesn't seem like much at all. What happens when you try to exceed this value? Do you get memory corruption due to a buffer overflow or does it crash the router?
Seems a bit scary that all of my settings (including password) got wiped.
Ouch. That doesn't seem like much at all. What happens when you try to exceed this value? Do you get memory corruption due to a buffer overflow or does it crash the router?
Seems a bit scary that all of my settings (including password) got wiped.
that is over 7k free.. that is plenty.
maybe more was used when the router was fully configured.
config it again.. and check as you go.
if you exceed the nvram space with config data, many things can happen but the router resetting to defaults is a common symptom. _________________ [Moderator Deleted]
FYI I had the same problem with my RT-N16, it was fixed by doing a complete wipe down of the NVRAM as per http://www.dd-wrt.com/wiki/index.php/Hard_reset_or_30/30/30 and then starting again from scratch, I haven't had that problem since
