Belkin F5D7230 Wireless 802.11 b/g Router
It already runs Linux! Getting a bash shell is easy!
Here's the specs I have found so far:
CPU: BCM4710 rev 0 at 125 MHz (MIPS Processor)
FLASH: 4MB (AM29LV320DB)
eth2: Broadcom BCM43XX 802.11 Wireless Controller (chip reads BCM4306KFB)
WAN: One 10/100 RJ-45 port for WAN connectivity
LAN: Four 10/100 RJ-45 Auto-MDI(X) switched ports
WLAN: 54mbps 802.11g on a MiniPCI card (1.0)/built-in (1.1) with dual external RP-TNC antenna ports
dual Hirose antenna connectors? (that may be correct name)
The wireless board looks the same as the one in the Linksys WRT54G, if
so then it's output is 15 dBm (says it can be increased to 84mw=19.24db)
The shell hack is very easy, if the link to the binary firmware below
still works, then you simply use the web interface on the box to
do a "firmware upgrade" to the binary you downloaded from the link
below. I am pretty sure if you mess up really bad you can then
tftp the original binary back in from belkin, BUT DO SO AT
YOUR OWN RISK! I haven't tried the tftp thing yet but the
shell firmware works great.
After that you simply telnet into the box 192.168.2.1 and the bash
shell comes up! (it's busybox) Then you can start the web server
so you can then do the normal web menu stuff and still be
telneted in! What fun!
You can run the normal web server by typing the two lines
wget is also available! iptables!
The firmware for this hack is a old version 3.00.07 but you can always
use the web interface to upgrade back to the stock version. I haven't
done that yet but when I first got it I upgraded to the latest version
from Belkin's site before doing any of this.
One bad thing, the damn thing checks into Belkin via ping every 2 1/2
minutes, that needs to be shut off, no option or mention about it
anywhere, bad, bad belkin!
I posted pics of the PCB and where the hidden screws are for the case,
if you pull up on the top cover back part and press the top cover sides
in a little bit (attempt to slide the top cover sideways) the little
clips (see pics) will release.
Shell firmware link (use at own risk for as long as this link lasts,
I didn't do this, it's not my link) this is a complete binary at
about 2.6MB, just load it in then telnet to the box! (see above details)
Seattle Wireless info page, this is where I found the shell firmware link
This board setup is just about the same as a Linkys WRT54G board
Misc info: 15db=31mW 17db=50mW 20db=100mW