From Rivalug Wiki

Security Issues

exploit in web server in everything before build 12533 of v24 preSP2

• http://en.wikipedia.org/wiki/Ddwrt#Security_issues

Setup

Using GUI interface v24-sp2 (08/07/2010) mega build 14896

Administration -> Management

   Router Username (default: root)
   Router Password (default: admin)
   Re-enter to Confirm 

Services -> Services

   SSHd: Enable
   Syslogd: Enable
       Remote Server: <log_server> 

Administration -> Management

   SSH Management: On 

Setup -> Basic Setup

   Network Setup
       Local IP Address: <something other than 192.168.1.1> 
   Time Settings
       NTP Client: Enable
       Time Zone: UTC -5:00
       Summer Time (DST): 2nd Sun Mar - first Sun Nov
       Server IP/Name: <ntp_server> 

Wireless -> Basic Settings

   Wireless Network Name (SSID) <ssid> 

Wireless -> Advanced Settings

   Wireless GUI Access: Disabled 

Wireless -> Wireless Security

   Security Mode: WPA2 Personal
   WPA Algorithms: TKIP+AES
   WPA Shared Key: <pick a good one>

Access Point

Default setup is as a router with wireless, this configuration changes it to a wireless access point

• http://www.dd-wrt.com/wiki/index.php/Wireless_Access_Point