Hello,

This is somewhat OT but still I'm fairly sure that might cover several users here, too. Several critical vulnerabilities have been found from ASUS home routers.

The recommended action is to upgrade to the latest firmware update available from ASUS (version 3.0.0.4.374.4422 or later).

See details here:
https://sintonen.fi/advisories/asus-router-auth-bypass.txt

The same update also fixes other critical vulnerabilities, discussed here:
http://seclists.org/bugtraq/2013/Jul/87

My Asus RT-N16 successfully updated :)

Using one of these alternative firmwares if your router is supported might be a good idea.

https://openwrt.org/
https://secure.dd-wrt.com/site/
http://www.polarcloud.com/tomato
http://tomatousb.org/

I'm no security professional though so I defer to Piru's knowledge.

Quote:
Indeed. The only problem with them is that they're not very end user friendly.

Quote:

Very true, though I've had dd-wrt on my tp-link router for a couple of years and it took a bit of pain to initially configure but pretty much takes care of itself now.

http://lifehacker.com/how-to-supercharge-your-router-with-dd-wrt-508138224

Quote:
Of course that highly depends on the user

I find it much more user friendly to be able to write f.ex. port forwarding rules to specific files with a text editor, with any amount of comments I like, rather than "trying to squeeze the same information into few html text boxes" (minus comments, usually...)

And official firmwares are hardly ever very user friendly to begin with (assuming you want anything more complex than "being able to access facebook with browser" or such). Documentation is usully really bad, and wastes >50% of available pages on "How to get any internet connection working on Windows XP".

Last time I was using asus router, I couldn't figure out how to enter port forwarding rules. Only got highly informative error message "Port X is not a valid port." for which ever port number I entered. Of course I carefully picked the model so it would work with OpenWRT (unlike my previous Linksys WRT54g, which had to be manually rebooted twice a week, or it would slow down, and eventually stop working at all) - I installed it, and that was SO much easier, but definitely needs some "unix knowledge", if you have it and like it, you're at home. Of course unofficial firmwares also have html interfaces aswell.