Very Slow downloads, speed normal upload on voxel firmware

[Johnathon]

Hi,

I am running Voxel's latest HW firmware on Windows 10 using an Netgear X10 Router. I need some help as I am not sure as to what's going on. I have a 1 gig down/1 gig up connection and I cannot seem to get a 1 gig down connection at all anymore on this router. I am using all CAT-7, have done clean reinstalls, factory resets etc., and I cannot get more than around 230 down, however, I am getting 1 gig upload.

Does anyone have any ideas or suggestions as I am stumped.

Thanks,

Johnathon

 

[cybrnook]

Do you have adaptive QoS enabled?

 

[Johnathon]

No, I did find a whole crapload of hacking related scripts thought inside Voxel's rom. There is a compromise here it looks like but where it originated, I don't know.

 

[Johnathon]

 

[cybrnook]

Did you actually open one up? It could just be "hijack" related stuff for the GUI. Not necessarily nefarious, could even be signed by Netgear.

 

[RogerSC]

The "hijack" stuff in the firmware procedure names undoubtedly is a red herring, and wasn't put there either by a hijacker or an internal Netgear person interested in putting a Trojan in their firmware. You will find procedures with "error" in the name in most software as well...generally there to handle errors rather than to inject them *smile*. It really isn't enlightening to look at the names of procedures. Looking at the code and comments can be very interesting, though.

You can download the gpl bundle from Netgear and open it up and look at the code on a Linux machine or a Linux virtual machine if you want to. That can be very enlightening. I suppose now that I've mentioned that, I should do it. I've looked at this stuff before, not hard to do, just use normal developer tools:

https://kb.netgear.com/2649/NETGEAR-Open-Source-Code-for-Programmers-GPL

Update: Taking a look at this, it is most definitely GUI-related. Dealing with graphical events and windows.

 

[Johnathon]

Well... I did open the NVRAM and it was nice of Netgear to put in plain text the answers to our recovery/rescue questions. I mean I don't get it, as an engineer wouldn't you at least say no to something like that. Yes, they shadow the passwords for the users but they also have several active guest accounts within the shell.

 

[cybrnook]

Yeah, I have thought that as well. I don't like not having the option to disable the use of challenge questions on first set up.