Security

You want to hold my hand?

Unless I'm not doing it right, I can't seem to pull SNMP statistics from a Linksys BEFVPN41 v1 or v2 device. I can pull the stats just fine from a local machine on the same network but if you try to pull those stats over the VPN tunnel, it will not work. It doesn't seem to listen on the SNMP ports on the public interface, which is good, but it totally kills any type of centralized monitoring for multisite locations.

So, in this instance, we can poll the head end unit at the head office just fine because it is on the same local network but getting any useful information from branch offices is impossible if this is a limitation in the firmware.

It looks like this XSS exploit has been around, and reported, but ignored, for over 2 years, which is unfortunate.

http://news.netcraft.com/archives/2006/07/20/paypal_xss_exploit_available_for_two_years.html