View Full Version : DSL router, remote access
herbalist
October 22nd, 2006, 12:58 PM
I've recently switched to DSL service after years on dialup. I'm using a Netopia 3341 supplied by my internet service. Its security settings are horrible. I've managed to tighten some of it, but one big problem remains that I haven't figured out how to fix. If I connect to my IP from another PC and find the HTTP server port, which shows open with a port scan, all that stands in the way is an 8 character password, the largest it will accept. How do I close this port? Is it possible with this unit to configure it not to respond to port scans at all?
Rick
Alphalutra1
October 22nd, 2006, 01:08 PM
This (http://www.netopia.com/support/hardware/technotes/CIR_014.html) may help
Cheers,
Alphalutra1
herbalist
October 22nd, 2006, 01:55 PM
Thanks. It does help. I was at their site and didn't find that. This is the first time I've dealt with setting up a DSL router.
I almost laughed when I read this:
-{ Quote: "Although this will allow remote access into the router, it will still be necessary to enter the admin username and password to make and save any changes. Even with remote access restrictions removed there is a layer of security present." }-
Some layer! The only choices for usernames are "admin" and "user", with an 8 character password. Not much of a security layer.
I couldn't help noticing this either:
-{ Quote: "In factory default settings, these types of access are only allowed from the LAN interface for security reasons. However, there may be occasions when remote access is necessary for troubleshooting or configuration purposes." }-
I spent better than an hour on the phone with a rep from my service provider, manually configuring this thing. It either wasn't configured before being shipped or got reset to factory settings along the way. Apparently, either my ISP wanted it left open to configuration from the net or he didn't think about disabling it. The first sounds more likely if it's normally shipped with these disabled. I can somewhat accept my ISP needing access to the router, possibly for IP address changes, but that's just too easy for anyone to gain access.
Rick
vBulletin® Copyright ©2000-2012, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2012, Wilders Security Forums