I don't normally do hardware reviews, but this particular gizmo has proven to be a worthy exception to the rule. In summary: it is a broadband internet router, usable on Big Pond Advance, Optus@Home, and some ADSL services (basically any broadband modem that uses Ethernet).

When placed between your modem and local network, it (a) shares the internet with as many computers as you like, (b) keeps your network secure from hackers, (c) keeps your computer safe from worm viruses, (d) controls who has access to the net at different times, and as an extra for BPA users (e) it keeps you reliably logged in.

A full review is attached.

FIRMWARE UPDATE (26 Mar 2001)

There is a firmware update available here. In particular, setup of Netmeeting and Quicktime streaming has been simplified, since port forwarding now lets you assign port ranges. You can read the full list of changes here.

INTRODUCTION

I regularly receive emails from fellow broadband users, asking for my advice or opinion. Besides from "do you prefer BPA or Optus@Home", some of the most common questions I am asked are...

1. "what should I do to secure my computer from hackers and worm viruses, like that recent QAZ outbreak?",
2. "how can I run a home computer network that is secured from the internet?"
3. "how can I share my cable internet with other computers in my house?",
4. "is there a way to stop Launchpad crashing all the time?" (for users of Big Pond Advance)

...and for each of these questions, there are very good answers:

1. Buy some software like BlackICE Defender (about $75), which can monitor internet activity for suspicious behaviour. It is also important to ensure you don't have Windows File and Print sharing enabled, which is a big security hole.
2. You need to buy a second Ethernet card (about $40) for your primary computer, so that the cable/adsl modem is not directly connected to your network. You'll need to turn on Windows File and Print sharing to do this, but make sure it's only linked to your second ethernet card.
3. Buy some software like WinRoute Lite (about $120 for 3 users), which can share your connection to two other computers on the network. You'll also need a hub (about $90) if you want more than one other computer connected to your network. Cheaper 'proxy' solutions are available, but they often don't work with many programs, like games.
4. There are better alternatives to Launchpad, like WinCable ($20).

But hang on, isn't this a review for a broadband internet router? You see, the beauty of this little gizmo is that it effectively answers all four questions, with surprisingly little hassle...

1. Because you're behind a firewall, these security issues aren't important since nobody can directly access your computer from the internet.
2. When the router is connected, you can run a home network over the same cables without problems. You can even use the built-in hub to connect more than two computers together.
3. This device will share the internet with every computer on your network (up to 253, they claim).
4. BPA users will be pleased to hear that this router has a built-in login client, so you don't have to rely on one computer being on all the time.

INSTALLATION

For me, I installed this router without a single problem. Assuming your computers are set up correctly for your current ISP, everything should start working with few changes to your computer's existing configuration.

Less experienced users may have trouble with setting up the network, but that would be inevitable regardless which router they purchased. Still, it'd be nice if companies provided seperate "expert" and "novice" manuals.

CONFIGURATION

As far as the manual goes, it's fine as long as you don't treat it like a reference guide. It's a bit too verbose in some areas (e.g., Windows 95 network setup), and sparse in others (e.g., telnet configuration).

The manual came with a photocopied addendum, which contained instructions for using "Australia Telstra's Big Pond Advanced Cable Service", since the BPA login client was only recently added with the latest firmware upgrade. The instructions reek of poor English translation (Compex is based in Singapore), but they were sufficient.

Surprisingly, there is no software to install (in fact, there's no CD or floppy in the package), the configuration is done entirely through a web browser. You can also use telnet, or a serial cable and terminal software, but that's only if you're sadistic (or changed the router's IP and forgot what it was).

For what it's worth, the device will work equally well in a Mac-only environment, in a mixed platform situation, or in a PC-only home. It doesn't require any special drivers or software, and it doesn't care what sort of computer you're using.

INTERFACE

The interface is easy enough -- once you type in its local IP into your browser location bar, you are presented with a bland yet complete configuration interface. The next few paragraphs detail the options available in a few sections.

LAN Setup: You can pick an IP for the router, as well as a range of IPs for the DHCP server to offer out to your computers. For the nerdier among us, you can also set the network mask, name servers, see active DHCP leases, and reserve IPs. Some of these complex settings are in separate screens, but others are unfortunately lumped into the main section, meaning that the interface is essentially a 4x6 grid of input boxes.

WAN Setup: Here you select the type of ISP you are connecting to (e.g., Optus@Home users pick Dynamic IP Address). BPA users can log in and out from this page. Nothing wrong here, although it could have been better named "ISP setup".

NAT: You can turn NAT on and off here, but it's on by default and that's where you'll want to leave it. If you turn it off, it basically disables the router and directly connects the modem to your network. This section also lets you assign ports to be visible to the outside world, in case you want to run a game server or various other things else that hate firewalls.

Filtering: Here you can add various outgoing packet filters. For instance, you can tell the router to not allow the kids' computer access to the internet after 9:30 on school nights. Or maybe even deny them direct HTTP access, so all surfing has to pass through a filtering program on another computer. Unfortunately in some cases the parents will have to ask their nerdy son how to wield this interface.

TESTING

For the last 15 months, I have been using a similar system (IPNetRouter). It does much the same thing, except it is software (requires a stand-alone computer), and isn't quite as reliable. IPNetRouter was pretty stable, as long as the computer wasn't used. And every now and again, the BPA login client would freeze up, quit or hang.

This router is another matter altogether! Once I finished poking around with its capabilities, I cleared its settings and set it up from scratch. I put it in place of my original 'server' computer, and it immediately worked. I've been online for a full week now without touching it at all, even after trying a few stunts like disconnecting the coax (Foxtel cable) for a couple of hours.

Mind you, NAT routing has its (amazingly small) share of limitations. In particular, you can't connect to "broadcasted" multimedia streams (rarely used). I had varying success with UDP services -- Quicktime streaming refused to work, while games like Quake 3, Tribes and Half Life ran perfectly. Users of Quicktime streaming will have to switch the connection from UDP to the more compatible HTTP streaming mode.

Out of curiosity, I ran the ShieldsUP! test, to see what it would say. Interestingly, it stated that port 23 (telnet) was open! This was a bit of a concern, because the manual stated that the router could be configured using telnet. Fortunately, any attempt to connect to the port through my dial-up connection was immediately dropped. While it is probably not a security threat, it would be nice to see this fixed in the next firmware update. Furthermore, all the other ports were marked as Closed and not Stealth, which -- as the ShieldsUP! page explains -- is less desirable. Again, this isn't really a problem but hopefully a firmware update will fix this as well.

SUMMARY

This device seems best suited to small business, home business, or families with 3 or more computers in the house. It could also be worthwhile to anyone looking to strengthen a two-computer arrangement.

According to the Australian distributors, the Compex NetPassage 15 will sell for around the $477 mark (it was going to be less; blame the aussie dollar). It's not particularly cheap, but is a reasonable value. You could get an old 486 to run as a Linux-based router, but it certainly won't be as convenient or as easily configured. It also won't save you much money once you factor in the extra ethernet cards you'll need, the hub (the Compex has one built-in), or the time you'll waste setting it up. Furthermore, unlike a Linux router, this unit is less than half the size of a cable modem.

I feel that I have written more than enough already. All in all, this is a great little gizmo. I can highly reccomend it to anyone who has at least three computers, and wants a fast, reliable & secure way to connect them all to the internet.

Should you have any question you'd like to ask me about this router, please write a reply and I'll endeavour to answer it.

MORE INFO...