Privacy without compromise with GemiGuard Mirage

GemiGuard Mirage Pro on the GL.iNet Mudi 7

A portable 5G router with dual SIM: a deterministic IMEI per SIM, a leak-free RF gate and a reduced attack surface

The GL.iNet Mudi 7 (GL-E5800) is the newest portable 5G model with dual SIM (two Nano-SIM cards, or Nano-SIM plus eSIM), and Mirage Pro does noticeably more on it than on the Mudi V2. The stock firmware on the Mudi 7 keeps a set of background services running that a privacy device does not need, and Mirage Pro for the Mudi 7 disables them, keeps the identifiers under control and adds the full GemiGuard feature set.

What GemiGuard Mirage Pro does on the Mudi 7

• Identity. Every SIM card gets its own deterministic IMEI — the Mudi 7 carries two IMEIs (one per connection), and Mirage manages both.
• Leak-free boot (the RF gate). The radio stays off until Mirage has set the IMEI for each SIM, so no Mudi 7 identifier reaches the cellular network beforehand — even after a SIM swap.
• Encrypted DNS. Cloudflare DNS over TLS with DNS-rebinding protection.
• MAC and BSSID randomization. Mirage keeps the randomization of network identifiers enabled on every boot.
• Log wiping. Continuous wiping of system logs and Wi-Fi client-MAC logs; the client-MAC database is kept in RAM only.

A smaller attack surface on the Mudi 7

The Mudi 7 runs on a Qualcomm platform with Android userspace components, so the stock firmware keeps a debug daemon and an eSIM management agent running and leaves several service ports open on the local network. A privacy device does not need them.

Mirage Pro:

• disables the Android Debug Bridge (adbd) and keeps it disabled on every boot;
• disables the eSIM remote-management agent (LPA) — a background service for the remote management of eSIM profiles;
• blocks the unauthenticated service ports the stock firmware leaves open on the local network, reducing what an untrusted network can reach;
• wipes Android trace artefacts (crash dumps).

This is attack-surface reduction: Mirage removes unnecessary paths to the device. Order Mudi 7 with optional add-on GemiGuard Mirage Pro.

GemiGuard Mirage Pro — IMEI obfuscation on Mudi V2

Stronger anonymity and log management on the GL.iNet Mudi GL-E750V2 VPN router

GemiGuard Mirage is hardened privacy firmware for the GL.iNet Mudi GL-E750V2, adding tools to boost anonymity and control network identifiers. The Mirage Pro version improves operational stability and adds new functionality for automatically wiping traces of activity.

Key new features in Mirage Pro

Improved stability. Optimizations that reduce the likelihood of freezes and increase reliability in real-world operating conditions.

Continuous wiping of logs and Wi-Fi history. Added a feature that automatically wipes system logs and the connection history of Wi-Fi clients every 30 minutes. The goal is to reduce the volume of accumulated activity traces on the device and lower the risk of information leakage through local logs.

IMEI and the modem chip

An IMEI number is assigned to the modem chip inside a mobile device. The modem is responsible for initiating and managing data transfer with cellular networks. The IMEI is encoded in the modem chip’s firmware, stored in non-volatile memory and retained even after a software update. Each modem is assigned a unique IMEI to ensure global uniqueness and efficient network management.

In devices with multiple modems, each modem has its own IMEI. In the case of a shared modem serving several SIM cards, a single IMEI is used for all connections.

The GL.iNet GL-E750V2 Mudi has a single modem — the Quectel EM060K-GL — and therefore a single IMEI number. On the Mudi V2, GemiGuard Mirage randomizes this IMEI: each SIM card gets its own.

Since Mirage v3 IMEI randomization is automatic on every GL.iNet cellular model: Mirage gives each SIM card its own IMEI. The same SIM always gets the same IMEI, and a different SIM gets a different one.

GemiGuard Mirage and the obfuscation of IMEI, MAC and BSSID

GemiGuard Mirage extends the capabilities of the Mudi router, providing control over:

• IMEI — the cellular modem identifier
• MAC addresses of the Wi-Fi interface
• Wi-Fi BSSID — the access point identifier

These features make it harder for an attacker to identify and track the Mudi, delivering a substantial boost to privacy and anonymity.

Beyond these identifiers, Mirage also encrypts DNS queries — hiding your lookups from the local network and upstream providers, and preventing DNS-based snooping and leaks.

Benefits of using GemiGuard Mirage

Risks of obfuscation and log wiping

Legal and regulatory aspects. In some jurisdictions or for certain classes of use, removing logs or identifiers may carry legal consequences — be sure to verify compliance with local law.

Loss of records for investigation or diagnostics. Automatic log wiping makes it harder to reconstruct events during incidents and may make post-factum investigation of problems impossible — before enabling it, we recommend assessing your logging policy and monitoring tools.

Standardization. Mirage generates every IMEI in the valid format defined by 3GPP TS 23.003.

Network problems. An invalid IMEI can attract the attention of network operators and attackers; every IMEI Mirage sets is valid.

Key considerations

• Integrate IMEI, MAC and BSSID obfuscation into a comprehensive counter-surveillance strategy — do not rely on a single layer of protection alone.
• Weigh the trade-off between anonymity and the ability to perform diagnostics and investigations — assess your threat model.
• Use reliable hardware and software — stable equipment and dependable firmware are critical.
• Assess your adversary’s capabilities and plan accordingly — IMEI spoofing can also serve as a tool to mislead an opponent.

Obfuscation of the IMEI and network identifiers, along with the new local-data management capabilities, make GemiGuard Mirage Pro a useful tool for strengthening operational security. Before deployment, we recommend carrying out an internal assessment of risks and logging policies.

Reference knowledge base article

For a deeper understanding of the IMEI as an identifier, the scenarios in which it is transmitted to the cellular network and the principles of obfuscation, read our detailed article: IMEI obfuscation on the GL.iNet Mudi GL-E750V2 VPN router. We separately address the topic of GPS telemetry in the Mudi and Puli — what the device transmits and what it does not.