Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi all! We have been experiencing an issue on site where threads have been missing the latest postings. The platform host Vanilla are working on this issue. A workaround that has been used by some is to navigate back from 1 to 10+ pages to re-sync the thread and this will then show the latest posts. Thanks, Mike.
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

Warning about the new F2000 modem supplied by Eircom with E-Fibre

  • 08-04-2015 12:52pm
    #1
    CountyHurler
    Closed Accounts Posts: 8,657 ✭✭✭


    Hi,

    I arrived out to install e-fibre on a site yesterday and found one of these new F2000 devices connected to the E-Fibre line.

    I tried to configure it the same way as we have been configuring D1000s and F1000s for the last three years but it seems there is a bug with it. You are currently unable to change the LAN Interface subnet mask on the device... Tried it every which way when I was on the site, but ended up having to put in a spare F1000 after spending an hour talking to Eircom "support", who told me that it was a customer site configuration problem ... (in spite of the fact that it was Eircom who had told me to use the current setup we are using). He also said that he was unaware of any firmware update that addresses the issue. Eircom support are an absolute waste of time anyway tbh...

    I googled around the issue and it seems that a company in NZ are aware of the problem with the device, which is actually a Huawei HG659b
    https://www.spark.co.nz/help/internet-data/equipment/huawei/hg659-gateway/changing-the-lan-host-ip-address-huawei-hg659-hg659b/
    Important: Currently you are unable to change the Subnet Mask on the Huawei HG659. We are working on resolving this issue.

    Has anybody else experienced this problem?


Comments

  • #2
    ED E
    Registered Users, Registered Users 2 Posts: 36,169 ✭✭✭✭ED E


    If Spark have the issue too its a Huawei bug, it'll be up to them to fix it.


  • #3
    paconarvaez
    Registered Users Posts: 1 ✭paconarvaez


    i recently changed my modem from f1000 to the new f2000 because i heard the wifi was better, and everything works except my sky b/b connecter , it one of those little black connecters with the wps button , but when i press the wps on my modem and activate my sky connecter it dosent see my modem. has anyone else had this prob. thanks for your time,


  • #4
    yuloni
    Registered Users, Registered Users 2 Posts: 2,040 ✭✭✭yuloni


    This post has been deleted.


  • #5
    mass_debater
    Closed Accounts Posts: 3,072 ✭✭✭mass_debater


    If you are using something different to a /24 subnet why are you not bridging the modem and providing your own router and firewall


  • #6
    CountyHurler
    Closed Accounts Posts: 8,657 ✭✭✭CountyHurler


    mass_debater wrote: »
    If you are using something different to a /24 subnet why are you not bridging the modem and providing your own router and firewall

    Dont get me started on this... All of the sites used to be set up with the D1000/F1000s in bridge mode, so that the sites only required one IP address.... That was until we discovered that both D1000 and F1000s changed from bridge mode BACK to routing mode if the power was cut for any reason.


  • Advertisement
  • #7
    mass_debater
    Closed Accounts Posts: 3,072 ✭✭✭mass_debater


    CountyHurler wrote: »
    Dont get me started on this... All of the sites used to be set up with the D1000/F1000s in bridge mode, so that the sites only required one IP address.... That was until we discovered that both D1000 and F1000s changed from bridge mode BACK to routing mode if the power was cut for any reason.

    That's a new one, I've never encountered this and I've setup plenty of them. Are you sure nobody's pressing the reset?


  • #8
    CountyHurler
    Closed Accounts Posts: 8,657 ✭✭✭CountyHurler


    mass_debater wrote: »
    That's a new one, I've never encountered this and I've setup plenty of them. Are you sure nobody's pressing the reset?

    Nah, I've tried it myself... Take a D1000, and configure it for bridge mode... Then pull the power on it, and it returns to Routing mode... Had the same issues with the F1000. We've had to order 4 IPs for every site and configure a routed connection.

    We tried replacing the D1000/F1000 with a Cisco or Zyxel device which is stable in bridge mode... But we found that if there are any issues with the line.... Eircom will not provide support unless one of their devices (i.e. the D1000 or F1000) is connecting to the line...


  • #9
    ainiseoir
    Registered Users Posts: 292 ✭✭ainiseoir


    " Eircom support are an absolute waste of time anyway tbh... "

    You can sing that. I contacted them yesterday and it was a heart scald listening to somebody from the subcontinent scrambling through the manual.
    I have the bloody manual myself.
    Have they outsourced the technical support ?


  • #10
    Bazideluxe
    Registered Users Posts: 29 ✭Bazideluxe


    Guys can anyone check if you have this wifi bug I found please?

    Got new F2000 today and whenever I try to hide SSID, the wifi goes OFF:

    ihuDVE2.png

    9uPauAS.png

    a9EFG3C.png


  • #11
    ninkovicz
    Registered Users Posts: 1 ✭ninkovicz


    You are messing with wrong settings mate.... Go to Home Network....Wireless settings ....Advance settings and you will be able to HIDE SSID...


  • Advertisement
  • #12
    ihastakephoto
    Registered Users Posts: 58 ✭✭ihastakephoto


    there is a password which eircom support are using which gives them admin rights to your modem. Thats all fine if this is protected and known only to eircom staff, however, after 3 minutes of webchat, the support tech gave me the password. I asked if it was common use and he said, it was "like some kind if backdoor for all eircom routers"
    Imma upgrade my firmware and debrand asap.... after I remove the support account from mine, I will approach eircom about a disclosure through appropriate channels


  • #13
    jca
    Closed Accounts Posts: 8,585 ✭✭✭jca


    ihastakephoto wrote: »
    there is a password which eircom support are using which gives them admin rights to your modem. Thats all fine if this is protected and known only to eircom staff, however, after 3 minutes of webchat, the support tech gave me the password. I asked if it was common use and he said, it was "like some kind if backdoor for all eircom routers"
    Imma upgrade my firmware and debrand asap.... after I remove the support account from mine, I will approach eircom about a disclosure through appropriate channels

    Get a life ffs...


  • #14
    roast
    Registered Users, Registered Users 2 Posts: 2,320 ✭✭✭roast


    ihastakephoto wrote: »
    there is a password which eircom support are using which gives them admin rights to your modem. Thats all fine if this is protected and known only to eircom staff, however, after 3 minutes of webchat, the support tech gave me the password. I asked if it was common use and he said, it was "like some kind if backdoor for all eircom routers"
    Imma upgrade my firmware and debrand asap.... after I remove the support account from mine, I will approach eircom about a disclosure through appropriate channels

    I wouldn't consider this a particularly devious or malicious security issue, it's by design. It's fairly common for ISP-provided equipment to have remote management access for the likes of firmware updates, remote troubleshooting and diagnosis. See TR-069 here.

    If you can answer all the troubleshooting questions should a fault arise and thus not require remote assistance, then I'm sure Eircom, Vodafone and the like don't really care if you disable it anyway. :pac:
    There are some security issues with TR069 but that goes with for any protocol really.


  • #15
    ihastakephoto
    Registered Users Posts: 58 ✭✭ihastakephoto


    @jca says the guy reading the forum at midnight himself and feeling the need to comment about someone else's life..

    @roast the issue is in the fact that they gave out the password... with very little effort I can now collect ip addresses of anyone who visits my site, determine if theyre using the same modem, if so, remotely access and change their passwords, reboot their modem, install my own firmware....the list goes on.


  • #16
    roast
    Registered Users, Registered Users 2 Posts: 2,320 ✭✭✭roast


    ihastakephoto wrote: »
    @roast the issue is in the fact that they gave out the password... with very little effort I can now collect ip addresses of anyone who visits my site, determine if theyre using the same modem, if so, remotely access and change their passwords, reboot their modem, install my own firmware....the list goes on.

    Hold on, you're saying you can remotely login to other users routers and do the above? You can't... by default, TR-069 is configured to only allow access from a certain source (in this case, Eircom). It's not like any randomer can login and start arsing with your settings. You can enable access from other IPs, but only if you're logged into the router already.


  • #17
    jca
    Closed Accounts Posts: 8,585 ✭✭✭jca


    Well at least I'm not worrying about my isp looking at my router configuration....


  • #18
    jca
    Closed Accounts Posts: 8,585 ✭✭✭jca


    ihastakephoto wrote: »
    @jca says the guy reading the forum at midnight himself and feeling the need to comment about someone else's life..

    @roast the issue is in the fact that they gave out the password... with very little effort I can now collect ip addresses of anyone who visits my site, determine if theyre using the same modem, if so, remotely access and change their passwords, reboot their modem, install my own firmware....the list goes on.

    Give us a link to your "site" I'll take a gawk at how to make a tinfoil hat and you can hack my router.....


  • #19
    ihastakephoto
    Registered Users Posts: 58 ✭✭ihastakephoto


    roast wrote: »
    Hold on, you're saying you can remotely login to other users routers and do the above? You can't... by default, TR-069 is configured to only allow access from a certain soruce (in this case, Eircom). It's not like any randomer can login and start arsing with your settings. You can enable access from other IPs, but only if you're logged into the router already.

    Ive logged into my own, my parents, my in laws, and restarted their connections from my office, my home and my mobile wifi.
    hence my concern


  • #20
    ihastakephoto
    Registered Users Posts: 58 ✭✭ihastakephoto


    you're a gas chap, now run along, I'm sure there are loads of people you can troll before school tomorrow


  • #21
    jca
    Closed Accounts Posts: 8,585 ✭✭✭jca


    ihastakephoto wrote: »
    Ive logged into my own, my parents, my in laws, and restarted their connections from my office, my home and my mobile wifi.
    hence my concern

    That makes you the one doing wrong here. You don't find any Eircom employees logging into their parents, in laws or other people's routers. I bet you're the guy who rings people and tells them they have a virus on their computer...


  • Advertisement
  • #22
    roast
    Registered Users, Registered Users 2 Posts: 2,320 ✭✭✭roast


    Lads, will ye cop on...


    Anyway
    ihastakephoto wrote: »
    Ive logged into my own, my parents, my in laws, and restarted their connections from my office, my home and my mobile wifi.
    hence my concern

    How? By HTTP? Or what port?


  • #23
    bk
    Moderators, Motoring & Transport Moderators, Technology & Internet Moderators Posts: 23,006 Mod ✭✭✭✭bk


    MOD: jca, please remember, attack the post not the poster.

    In fairness, ihastakephoto absolutely has a valid concern if s/he can log into other peoples routers.

    Nor would I consider it doing anything wrong to log into your relatives routers with their permission to test the theory that you have found a back door.


  • #24
    ED E
    Registered Users, Registered Users 2 Posts: 36,169 ✭✭✭✭ED E


    I HIGHLY doubt you've found a remote exploit for the webui. The F2000 is one of the first ISP modems that uses full HTTPS/SSL on its interface. And as above TR069 pinhole will only accept a signed request from the CPE management system in eircom before it opens up its other ports to requests.


  • #25
    jca
    Closed Accounts Posts: 8,585 ✭✭✭jca


    bk wrote: »
    MOD: jca, please remember, attack the post not the poster.

    In fairness, ihastakephoto absolutely has a valid concern if s/he can log into other peoples routers.

    Nor would I consider it doing anything wrong to log into your relatives routers with their permission to test the theory that you have found a back door.

    My God I'm speechless thank God ED E has come along to put some sanity on this ridiculous thread.


  • #26
    bk
    Moderators, Motoring & Transport Moderators, Technology & Internet Moderators Posts: 23,006 Mod ✭✭✭✭bk


    jca wrote: »
    My God I'm speechless thank God ED E has come along to put some sanity on this ridiculous thread.

    Well in fairness jca, Eircom does have a very bad track record of securing their routers, remember how easy it use to be to crack the WEP encryption on the old Netopia Eircom routers:

    http://www.tomdoyletalk.com/2007/10/01/eircom-netopia-wireless-router-hack/

    So it wouldn't be terribly surprising to discover another security issue.

    This may or may not be the case, but either way one of the first rules of boards is attack the post not the poster.


  • #27
    dalta5billion
    Registered Users, Registered Users 2 Posts: 1,034 ✭✭✭dalta5billion


    Prompted by ihastakephoto I found the same vulnerability on the F1000, and have confirmed it as exploitable in the wild.


    WxQgfsQ.png

    It's a hidden account with slightly reduced privileges but enough to cause havoc (attacker can flash firmware). Users should disable all forms of remote management to mitigate.

    Most likely it is the same case with the F2000, as ihastakephoto reported here. I think you should all apologise to him/her.


  • #28
    ED E
    Registered Users, Registered Users 2 Posts: 36,169 ✭✭✭✭ED E


    dalta5billion wrote: »
    Most likely it is the same case with the F2000, as ihastakephoto reported here. I think you should all apologise to him/her.

    Unlikely, F1000 is Zyxel and the F2000 is Huawei (a far more competent company IMO).


    Is the password there a random char string? There are two accounts on the 2000s IIRC, admin and Supervisor, but they both use the system pasword by default, but only persons on site could read that from the label, or if they were given the WLAN PSK.


  • #29
    dalta5billion
    Registered Users, Registered Users 2 Posts: 1,034 ✭✭✭dalta5billion


    ED E wrote: »
    Unlikely, F1000 is Zyxel and the F2000 is Huawei (a far more competent company IMO).


    Is the password there a random char string? There are two accounts on the 2000s IIRC, admin and Supervisor, but they both use the system pasword by default, but only persons on site could read that from the label, or if they were given the WLAN PSK.

    Seemingly random, but this is hard coded into every F1000 - i.e. every F1000 will allow login with this user:pass.

    Edit: also remember, Zyxel and Huawei cannot be held responsible for poor configs from ISPs


  • #30
    ihastakephoto
    Registered Users Posts: 58 ✭✭ihastakephoto


    ok, the account username is support, which suggests to me that eircom added / request huawei add this hidden account.
    I have used the same password to access 3 different routers.
    I hope to get time tomorrow to update my own firmware and test.

    just to clarify, these are routers of mine and family who were aware that I was testing.


  • Advertisement
  • #31
    ED E
    Registered Users, Registered Users 2 Posts: 36,169 ✭✭✭✭ED E


    Oh eircom.....


  • #32
    mass_debater
    Closed Accounts Posts: 3,072 ✭✭✭mass_debater


    What administration options are available to this support login account?


  • #33
    anvilfour
    Closed Accounts Posts: 720 ✭✭✭anvilfour


    My Cisco router with dd-wrt installed arrived today - am going to try and put my Eircom router into bridge mode tonight and use the Cisco one instead. Hopefully this will be enough.


  • #34
    MrGarak
    Registered Users Posts: 144 ✭✭MrGarak


    Sorry for thread bump - but is this back door still present on both the F1000 and F2000? Was considering calling during the week to upgrade to the F2000, may look at 3rd party options now. Any up to date information on either front would be great.


  • #35
    John Dough
    Registered Users Posts: 347 ✭✭John Dough


    I know EIR sent out a new software update ti their modems a couple of months ago so maybe it is sorted or wait for experts to respond.


  • #36
    andrewdeerpark
    Registered Users Posts: 951 ✭✭✭andrewdeerpark


    A word of warning on the F2000 Router.

    As of about 2 weeks ago Eircom rolled out a firmware update (Firmware version:V100R001C59B035) that disables the user configurable Isolated Guest Wifi access functionality. This is most useful for allowing someone on your WIFI but they have no access to any devices in your LAN and is simple to setup.

    What they are doing is creating there own cluster on Wifi networks on your modem, in your house or business that is accessible to individuals registered in the my eir portal.

    https://www.eirmobile.ie/opencms/export/sites/default/.content/pdf/terms/eir_wifi_terms_and_conditions.pdf

    I only found out when all the guest wifi config on my F2000 modem was disabled with no way to re enable it please be warned.

    Anyone with a working generic firmware that I can flash to the modem giving me back charge of the device (Huawei HG659) appreciated?


  • Advertisement
  • #37
    pg17
    Registered Users Posts: 121 ✭✭pg17


    The recent firmware upgrade was discussed in other threads - in particular eir replied yesterday as follows 
     
    Eir: PamelaVerified representative
    April 19 2017  14:20#15
    [font=Open Sans, Arial, Helvetica, sans-serif]Hi All,[/font]


    The recent firmware upgrade for the F2000 removed the Guest Wifi network and replaced it with the eir Wifi service. This service allows eir Customers to use these guest networks using their My eir credentials to log in.

    For customers who do not want to avail of the eir Wifi service, we can offer an alternative firmware that will reinstate the configurable Guest Wifi Network, however, the eir F2000 modem will no longer support eir WiFi and VoBB functionality. This Firmware change will take 2-3 Working Days to complete and none of these changes will have any effect on your standard wifi network.

    Our broadband technical support team will be more than happy to assist you with reinstating the configurable Guest Wifi Network. You can contact them directly on 1890260260 or freephone 1901 option 2.

    Let me know if you need any further assistance.

    Thanks,
    [font=Open Sans, Arial, Helvetica, sans-serif]Pamela[/font]
    [font=Open Sans, Arial, Helvetica, sans-serif]https://www.boards.ie/b/thread/2057715926#103253453[/font]


  • #38
    John Dough
    Registered Users Posts: 347 ✭✭John Dough


    I got the new modem and guest wi-fi was enabled so rang eir and they said they would turn it off but never happened!! so went in to the eir app and turned it off.:D

    Now my problem is wi-fi dissapeering for times and sometimes have to reboot the router to get it back must be a box of sh** this router.


  • #39
    garra
    Registered Users, Registered Users 2 Posts: 2,954 ✭✭✭garra


    andrewdeerpark wrote: »
    A word of warning on the F2000 Router.

    As of about 2 weeks ago Eircom rolled out a firmware update (Firmware version:V100R001C59B035) that disables the user configurable Isolated Guest Wifi access functionality. This is most useful for allowing someone on your WIFI but they have no access to any devices in your LAN and is simple to setup.

    What they are doing is creating there own cluster on Wifi networks on your modem, in your house or business that is accessible to individuals registered in the my eir portal.

    https://www.eirmobile.ie/opencms/export/sites/default/.content/pdf/terms/eir_wifi_terms_and_conditions.pdf

    I only found out when all the guest wifi config on my F2000 modem was disabled with no way to re enable it please be warned.

    Anyone with a working generic firmware that I can flash to the modem giving me back charge of the device (Huawei HG659) appreciated?

    Hi Did you get a response to this post?

    We are using same F2000 in work, we configure Port Forwarding on the device but we have had to re-configure it about 5 times in last couple of months.

    Eircom must be pushing out lots of firmware updates, its a bloody pain in the ass having to re-configure it every time.

    Is there a way to disable firmware updates or remote reboots of the device?


  • #40
    Packet
    Registered Users, Registered Users 2 Posts: 188 ✭✭Packet


    garra wrote: »

    We are using same F2000 in work, we configure Port Forwarding on the device but we have had to re-configure it about 5 times in last couple of months.

    Eircom must be pushing out lots of firmware updates, its a bloody pain in the ass having to re-configure it every time.

    Is there a way to disable firmware updates or remote reboots of the device?

    What firmware version do you have? Perhaps you aren't being firmware upgraded at all and something else is happening. It is listed under status information on the login screen. My Port Mapping rules weren't wiped going from B023 to B035, which was done in a single step.


  • #41
    garra
    Registered Users, Registered Users 2 Posts: 2,954 ✭✭✭garra


    Packet wrote: »
    What firmware version do you have? Perhaps you aren't being firmware upgraded at all and something else is happening. It is listed under status information on the login screen. My Port Mapping rules weren't wiped going from B023 to B035, which was done in a single step.

    We have B035 version. We have checked that rebooting router does not wipe the Port Forwarding config. Nothing in the logs to suggest what is happening.

    I will call Eircom, god help me. Thanks for info that your config does not get wiped with firmware updates, I am surprised to hear that.


  • Advertisement
Advertisement