OpenWrt - WAN side udhcp Vendor Class obfuscation

Marvin · January 28, 2021, 6:47am

I've been running Wireshark to monitor OpenWrt router's chatter on the WAN side and noticed that as part of DHCP discover OpenWrt sends "udhcp 1.25.1" as part of Vendor Class Identifier. This is known behavior and documented in https://openwrt.org/docs/techref/busybox. Question is how can I remove/obfuscate this info (as it makes identifying router OS/Services and discovering potential vulnerabilities that much easier for an adversary)?

anon50098793 · January 28, 2021, 7:22am

uci set network.wan.vendorid='fishandchips'
uci commit network

vgaetera · January 28, 2021, 8:00am

See also:
https://openwrt.org/docs/guide-user/network/ipv4/start?s=vendorid#protocol_dhcp

Marvin · January 28, 2021, 5:35pm

Much appreciated!

Marvin · January 28, 2021, 5:36pm

Useful pointer. Thanks!

system · February 7, 2021, 5:37pm

This topic was automatically closed 0 minutes after the last reply. New replies are no longer allowed.