Ask your questions here.
Post a reply
nadir

- nadir
- Posts: 1160
- Joined: Wed Mar 09, 2011 4:18 am
- Location: here

## hardening router

Sat Feb 16, 2013 8:41 pm

As of now i used my own routers.
Now i got one from the ISP, it is good (fritz.box 7360SL)
but i am paranoid.
How do i check the router?
How can i "harden" it?
I didn't look at the handbook yet or such.
I am asking for lose ideas.
Say:
I wouldn't know how to monitor traffic on another device (i run tcpdump on the PC and monitor the router).
Does anyone have any experience with that?
fsmithred

- fsmithred
- Posts: 2101
- Joined: Wed Mar 09, 2011 9:13 pm

## Re: hardening router

Sat Feb 16, 2013 9:33 pm

No experience with that. Just want to encourage you to check the router settings. I got one from the ISP once, and not only did it have wireless on and unenecrypted, but it also had remote administration enabled. Don't change the password, and any of your neighbors can administer your router.
nadir

- nadir
- Posts: 1160
- Joined: Wed Mar 09, 2011 4:18 am
- Location: here

## Re: hardening router

Sun Feb 17, 2013 11:24 am

Those settings were fine (wireless was enabled, but with password, remote administration was disabled).
I also disabled "automatic firmware upgrades" and more (i can't remember atm).
I am more concerned about backdoors and such.
-
saving link: http://canyouseeme.org/
fsmithred

- fsmithred
- Posts: 2101
- Joined: Wed Mar 09, 2011 9:13 pm

## Re: hardening router

Sun Feb 17, 2013 1:56 pm

http://www.grc.com/default.htm
Scroll down to "Shields up" for a more complete port scan.
You might like this one, too;
http://netalyzr.icsi.berkeley.edu/
ukbrian

- ukbrian
- Posts: 109
- Joined: Mon Jul 25, 2011 8:22 am
- Location: Cheltenham, UK

## Re: hardening router

Sun Feb 17, 2013 10:17 pm

Thanks for sharing Mr Smith +1
nadir

- nadir
- Posts: 1160
- Joined: Wed Mar 09, 2011 4:18 am
- Location: here

## Re: hardening router

Tue Feb 19, 2013 11:21 pm

It might be my duck-foo is low these days, but i can't find a way to telnet into the router.
Being able to do so would help, i think
(not that i would be very keen on it, when i did it last time it was pretty much of a mess).
Oh, i also can't find a reset-to-default button. Lol.
port scan from the links above show ports i see open from a local nmap as closed, so at least that is ok (if i understand it correct).
Just chatting.
Post a reply
Jump to:

Powered by phpBB © phpBB Group.

phpBB Mobile / SEO by Artodia.