Netgear setup flaw

[Robertm]

The instruction with my Netgear RP614 said to connect the computer to the
DSL modem, disable the software firewall, and turn it all on and run the
setup disk. The second step was to add the router. In the short time that
the computer was running unprotected, two VPN viruses were installed and
began to execute. Fortunately, I kept Norton antivirus running and it caught
it. However, before adding the router, it was an involved process to get rid
of the viruses because Norton won't directly delete them. It meant finding
and deleting files and modifying the registry. I know the software firewall
must be disabled for the network install, but the period of time that the
computer is run with no protection leaves it wide open to attack. Surely
they could find a way around this.

Bob

 

[N. Miller]

The instruction with my Netgear RP614 said to connect the computer to the
DSL modem, disable the software firewall, and turn it all on and run the
setup disk. The second step was to add the router. In the short time that
the computer was running unprotected, two VPN viruses were installed and
began to execute. Fortunately, I kept Norton antivirus running and it caught
it. However, before adding the router, it was an involved process to get rid
of the viruses because Norton won't directly delete them. It meant finding
and deleting files and modifying the registry. I know the software firewall
must be disabled for the network install, but the period of time that the
computer is run with no protection leaves it wide open to attack. Surely
they could find a way around this.

Bob

You are certain of this? Which version? I just downloaded the .pdf manual
for the RP614v3. It does not say to do what you have done. To transcribe:

==========================================================================
1. Connect the router, the computer, and the modem

a. Turn off your computer.
b. Turn off the cable or DSL broadband modem and unplug it.
c. Locate the Ethernet cable (Cable 1 in the diagram) that connects
your PC to the modem.
d. Disconnect the cable at the computer end only, point A in the
diagram above.
e. Look at the label on the bottom of the router. Locate the Internet
port of the router as shown in point B of the diagram below.
f. Securely insert the blue cable that came with your router (the blue
Netgear cable in the diagram below) into a LAN port on the router
such as LAN port 4 (poing C in the diagram), and the other end into
the Ethernet port of your computer (point D in the diagram).

Your Network cables are connected and you are ready to restart your
network.
==========================================================================

I also checked the troubleshooting guide. I found no instructions to bypass
the router and connect directly with the firewall disabled. Not even for
running the CD; which, BTW, is never necessary.

 

[Robertm]

Yes, I am positive of this. I followed the software setup step by step as
shown on the CD. It does have you plugging in the modem first without the
router and then disconnecting and adding the router. It is Version 3.

Bob

 

[Robertm]

There is a one sheet setup guide which I am looking at now:

1. Remove the Netgear CD (from package)

2. Remove the Router (from package)

3. Attach Feet

4a "Be sure your Internet connection is active. DO NOT plug the router
in yet."

4b "Insert the NETGEAR CD into your computer"

4c. Next, Click Setup.

The CD setup then tells you to disable the software firewall. the diagram
shows the modem connected directly to the computer without the router.
Farther along in the setup process it tells you to disconnect the computer
from the modem and put the router in between. The software CD is Version 1.1

I've sent an e-mail to Netgear and asked them why they do it this way and
leave the computer open to attack. I'll post their answer if and when they
reply.

Bob

 

[N. Miller]

There is a one sheet setup guide which I am looking at now...

Well, that certainly is problematic. It would certainly cause an
inexperienced user some damage. I have set up enough routers, and DSL
accounts to know how to ignore those directions, though.

I can't see anything in the manual to suggest why they even need a setup
CD. I didn't run the setup CD for my Netgear FR114P, except to set up the
printer port. I did run the setup CD on a D-Link DI-704UP; but I didn't
really see it do anything that I couldn't have done manually.

 

[Robertm]

An experienced user might not use the CD, but I had never seen a network
before and knew nothing about them. Many programs have a setup CD to install
drivers and such so it seemed a normal thing to follow the manufacturer's
instructions and use the CD to set it up. I've learned much in the last week
and I'd do it manually the next time.

Bob

 

[Robertm]

An experienced user might not use the CD, but I had never seen a network
before and knew nothing about them. Many programs have a setup CD to
install drivers and such so it seemed a normal thing to follow the
manufacturer's instructions and use the CD to set it up. I've learned much
in the last week and I'd do it manually the next time.

Bob

Netgear will only give me an answer if I register, create a username and
password. Too much trouble remembering the passwords I already have. Since
the problem is past and gone, it doesn't really matter what they have to say
about it, except maybe for the next unfortunate person.

Bob