Hacking the Webramp 700s.

For those who don't know, this internet firewall can be picked up for around $30-$50 from various sources. (At the time of this writing it looks like ebay is the best place)
The Webramp700s is the same hardware as the SonicWall SOHO internet firewalls, and can accept the same firmware. *Also* the upgrade algorithm has been cracked, and you can upgrade your firewall to unlimited users, VPN access, etc.. :)

Connect your Webramp700s to your network and go to the URL: http://192.168.1.251
Login with User=admin Password=password
Take note of what your model serial number is and then download the Webramp700s Hack Pack.
Included in this pack is all the documentation, Firmware, and the Key Generator you will need to hack it.

Using WinRAR unpack the Webramp700s Hacking Pack to c:Webramp.
go into a dos prompt and type cdWebramp
Then type in: keygen "serial number" ("serial number" being your model serial number you got above, serial number will be like: 0040100XXXXX )
Copy all this information down and save it for later. (I suggest putting it all in a text file in your c:webramp directory)

In your c:webramp directory you will find two firmware directorys.

• Sonicwall Firmware contains Sonicwall SOHO firmware upgrade 5.1.70. This will update your Webramp 700 to a Sonicwall SOHO. Read the Reference Manual above on how to upgrade the firmware on this firewall.
• Webramp Firmware contains Official Webramp Firmware update 5.11

I suggest using the Sonicwall SOHO Firware, but it is up to you. Connect back to your Webramp and upgrade it using whatever firmware you want. Now using your keygen output, unlock the features you want.

*Congrats you are done*

Documentation (These are external links, if they die all documentation is included in the hackpack)

Reference Manual (html)
Reference Manual (pdf)
QuickStart Guide (html)
QuickStart Guide (pdf)
VPN Guide
Node Upgrade
Check Point Firewall Configuration
GUI Demo
Manual Key VPN IRE Client Instructions
Secure Remote Management IRE Client Instructions

FAQ
(All this information used to be in my forums, so I gleaned all the imporatant info from there, and have posted it below)

How can you upgrade this firewall to a Sonic SOHO?
You can upgrade the firmware of this router to the Sonicwall firmware..

How to use the Keygen
Go to a Dos shell and change to the directory where you have extracted Keygen.exe. Then type
keygen 'Serial Number' (Replace 'Serial Number' with your Webramp Serial Number)
serial number will be like: 0040100XXXXX

Can you do the VPN and user upgrades after upgrading the firmware to the SOHO firmware?
Yes, but you enter the codes under tools-firmware-upgrade features not under the vpn section.

I understand that you normally have to "register" the unit, before you can do upgrades, however, from what I can gather, if you you have the .bin file you can go ahead and do an upgrade. Hence why is there a need to register?
There isn't really.

Secondly, I understand that it is not possible to generate a registration code on Sonicwall's web site. Is there any other way to register the device (if there is in reality a need to register it)?
The Nokia Webramp site has a functional registration site, but it will only work for those Webramps that do not that start with 0040100EC. You can find a registration generator on Tom's site. http://webramp.computechdata.com/reglookup.php

Thirdly, I notice that there is talk of a replacement eprom for the unit. What functionality does this eprom give to the unit? (bear in mind there are supposedly key generators in the wild that will apparently allow you to get unlimited user and unlimited vpn capability)
The replacement eprom gives the same functionality as the keygen, however, it comes with an actual license from Webramp.
The same is true of the codes CDS_Tom is generating with those licenses, using the Nokia Webramp site. As a possible side benefit, a few of CDS_Tom's upgraded routers have been registered as Sonicwall Pros, and can use the Sonicwall provided antivirus and site blocking lists with a subscription.

Finally, is there any downside from upgrading to the 5.1.7 SW firmware as opposed to sticking with the 5.1.1 Webramp firmware?
I guess what I'm hoping for is that after installing the 5.1.7 sonicwall firmware and the numbers produced by the "random number generator", I will end up with a fully operational, fully enabled, VPN capable firewall for unlimited users.

Not that I've seen.

For those who are interested in upgrading the legit way, here is the information about Tom posted above.

"Yes, if you purchase the upgrade through us your webramp will be legally upgraded, and the upgrades will be registered with the ramp networks website as well. If your unit can be registered with Sonicwall you CAN use the AV and the Filter list, but you will have to buy those upgrades directly from sonicwall.

The cost for the upgrade is $35.00/ea. Payment can be made via paypal.com (including credit cards) to 'tom@computechdata.com' or if you prefer, check or money order to:
Computech Data Systems
333 Quebrada del Mar
Marina, CA 93933

If you wish to purchase the upgrade, make sure you include your unit's serial number with payment.

Thank you for your interest,
Tom"

However, I think you can get them for $25 if you mention Ars Technica

A couple questions:

1. What benefit do I get from paying Tom to "legally" upgrade my Webramp over just using the keygen, other than possibly having the ability to purchase antivirus subscriptions and such?

2. Where exactly do I go in the web-based admin for the firewall to forward certain ports from the WAN side to specific IPs on the LAN side? Example: I'm running a web server on one of my PCs, and I would like to forward port 80 coming from the WAN to port 80 of the web server PC. I poked around in the administrator, and couldn't find exactly where to do this.
Left hand side of the screen, choose Access.
For the web server you describe simply put the PC IP address in the WEB (http) public LAN server box.

Not sure if it's been mentioned or not, but for all you using Dr.TCP, forget it, go get cablenut (www.dslnuts.com) and change the DefaultSendWindow to a higher value, just as you changed the tcprecievewindow (DefaultRecieveWindow). Good luck guys, worked fine for me :)

Ahh, forgot something - here's a nice link for some all around settings, but if you just use it for send and recieve windows as I did, should work fine :

http://broadbandnuts.com/cablenut.shtml

 FAQ for the keygen:
use winrar and extract the file to C:keygen
go into 192.168.1.251 and see what your model serial number is and then go into a dos prompt at C:keygen.
Then type in: keygen "serial number"

it spits out some codes and you input that into the webramp setup pages to unlock everything and set up the VPN

How exactly do I go about setting up VPN access to my LAN using the Webramp? e.g. I want to be able to VPN into my LAN from somewhere else on the Internet. I am running the latest Sonicwall firmware. I would prefer to use the VPN client built into Windows XP if possible.

There are a number of ways to do this. If you want to use the VPN functionality in the WebRamp and the built in client in Windows, you're going to have to jump through a few hoops and you may find it more productive to use a third party client.

That said, if you want to use the built in XP software:

1. Setup the SA on the WebRamp according to the manual
2. Tinker with the instructions located in "Appendix C: Configuring IPSec between a Microsoft Windows 2000 or XP PC and a Linksys Cable/DSL Firewall Router" as this is essentially the same type of VPN connection.

The LinkSys docs are probably the "easiest" to follow, but still a major pain. So you may find it worth while to save yourself the frustration and use a third party VPN client.

I just ordered two of these with the intention of creating a VPN across two private networks. Problem is that one networks is on DSL, the other on Cable, both IPs are automatically assigned, even though for all practical purposes they might as well be static since they never change. I also have dynamic dns entries that should get automatically updated if they were to change.

In the documentation it specifically states that you can VPN two SonicWall/WebRamp firewalls if only one of them is in "NAT with DHCP client" mode, the other must have a static IP. However I did notice a field in the setup called IPSec Gateway Address that looks like you could enter a fully qualified domain name and not just an IP address. So my question is whether or not I will be able to get this working with Dynamic IPs on both sides and if I can use FQDNs instead of IPs? I guess this is first a question of whether or not it will allow you to even try this knowing both sides are dynamic, then a matter of whether or not it's technically possible. If this doesn't work, then I assume the "roadwarrior" remote access scenario (to either LAN) where the IP of the remote computer is unknown is out of question as well? Again in this case both sides would have dynamically assigned IPs, although one does have a FQDN.

If this is not possible, I'm curious about possible ways around this to accomplish what I'm trying to do rather than specifically paying extra for a static ip (which isn't practical in my case). I've been doing a lot of research and somebody suggested that you can have it request a dynamic ip, and once it gets one, reconfigure it with the same ip statically. I believe he even suggested writing some sort of script to occasionally send the DHCP request to the ISP to make it still seem like it's dynamic. If this works, I still worry about the reliability of such a setup if something went wrong. Another possibility may make use of the existing DSL/Cable routers at each location. I have a linksys and D-link router that I could use in combination with this if that would help. I'm thinking if it was necessary for the Sonicwall/Webramp firewall to have a static ip, I could set it up on the LAN side of the existing router/firewall and make it DMZ where as the LAN would then be inside of that. Does this make sense? Are there any other reasons I should consider using both (the existing and the new) except as a 100BT switch to increase the number of computers and speed on my LAN? And if so what order should they be in?

Also, I am curious if the newer versions of the firmware have an option to assign a WINS server via DHCP. One of the release notes for the latest firmwares posted here suggested this but I was wondering if it was there since no screen shots seem to show it.

My last question is in regards to the two firmware upgrades Webramp and Sonicwall. Has anybody noticed any differences other than you can officially register with Webramp, but not with Sonicwall? And likewise I guess the incentive to register is for the Content List updates, correct? Also, can you still use the keygen for unlimited users and VPN with the Sonicwall firmware?

Thanks a bunch for any help offered!!!
To deal with dynamic DNS, I would just use one of the dynamic DNS registration sites like http://www.dyndns.org. Here you can register a host name on one of their many available domains for free and assign your home PC's a host name.

Then you need to run one of the little DNS checking widgets that will check your current IP address and makes the change at Dyndns.org automatically. There are a number of clients to choose from for all OS's. Most are pretty small and unobtrusive programs.

If you do this, you will have a FQDN that will follow your dynamic addresses. If you want to get a bit fancy and have a real domain hosted elsewhere, you can create a CNAME (alias) on your other domain pointed to your new dynamic host name.

Yes, the new firmware's DHCP can give out WINS.

As for functional differences, I didn't spend much time on the old version. If you look at the firmware release notes ( http://firmware.sonicwall.com ) on any of the versions, you will see that every release has a few bug fixes. That alone told me that I should opt for the newer version.

Yes the Keygen works on the SonicWall firmware.

Does the webramp/sonicwall (with firmware 5.1.7.0) have the ability to clone a MAC address? I have ATTBI (soon to be comcast) that ties my internet access to the MAC address of a network adapter. My Linksys and Dlink both can clone the mac address.

No, but you don't really need it.

I have ATTBI too, and all you need do is setup the Webramp to use DHCP to connect to ATTBI/Comcast, unplug the modem for about 5 minutes, then plug it back in.

It will give an address to the Webramp after the reset, though it may take a few minutes, and you'll be able to surf again.

Question: After flashing which version of the Sonicwall SOHO is this now?? SOHO, SOHO2, SOHO3?? Just looking for the proper documentation.

As far as the VPN client - I have a copy of the client software from SonicWall but have not had the opportinuty to test it...Serial number for vpn: . Use 1251-0818-T517-1789 when prompted.

I got my Webramp 2 months ago and it has worked great. I have flashed it to a Sonicwall 5.17 and used the keygen to unlock it to unlimited features Does anybody know how to block Kazaa or other p2p downloads? I have used key word blocking which prevents access to the Kazaa website, but it does not prevent Kazaa from downloading and uploading files if it is already installed on a computer. I have also tried creating rules for Kazaa, but I must be missing something because this didn't work.

I bridged through my DSL modem and have the Webramp handle PPPoE. With just the DSL modem, my download speeds were around 1300kbps. With the Webramp I sit at 800kbps. Then I tried letting the DSL modem handle PPPoE and hooked it up to one of the LAN ports on the Webramp. I put the Webramp in Standard mode, but my download speeds are still only 800kbps rather than 1300kbps. LAN-LAN transfers from computers are fine and max out around 900KB/s, but LAN-LAN transfers between computer and modem or WAN-LAN tranfers between computer and modem see the speed drop. Anyone know what is causing the slowdown or have similar problems.