Telecom HG630b, disable admin login from wan

Forums › Spark New Zealand (including Skinny and BigPipe) › Telecom HG630b, disable admin login from wan

Gozer

185 posts

Master Geek
+1 received by user: 32

#143005 31-Mar-2014 18:30

Is it possible to disable admin login from wan port on Telecom HG630b?

I have looked through and there doesn't seem to be an obvious switch.

Seem ridiculous to me that someone as big as Telecom would put out a router with default username and password with WAN wide open.

hio77

'That VDSL Cat'
13036 posts

Uber Geek
+1 received by user: 3896

ID Verified

Trusted

Lizard Networks

Subscriber

#1016157 31-Mar-2014 18:50

is this only open with defaults after resetting maybe?

ild expect telecom probably have it open for remote management, but normally have something non default set.

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

plambrechtsen

1948 posts

Uber Geek
+1 received by user: 459
Inactive user

#1016159 31-Mar-2014 18:53

I'm 99% sure it's disabled by default.... I'll check with my router here at home, but I thought it was already turned off.

Gozer

185 posts

Master Geek
+1 received by user: 32

#1016185 31-Mar-2014 19:31

ild expect telecom probably have it open for remote management, but normally have something non default set.

They should be using TR069 (which is also enabled) for remote management.

Gozer

185 posts

Master Geek
+1 received by user: 32

#1016186 31-Mar-2014 19:32

plambrechtsen: I'm 99% sure it's disabled by default.... I'll check with my router here at home, but I thought it was already turned off.

Brand new router, noone else has touched it so its on default config.

Peppery

919 posts

Ultimate Geek
+1 received by user: 188

Trusted

#1016230 31-Mar-2014 21:05

Is the HTTP server even listening on the WAN port? That's unusual

plambrechtsen

1948 posts

Uber Geek
+1 received by user: 459
Inactive user

#1016235 31-Mar-2014 21:26

I just port scanned my router, and only found one port open which is 8081 that you can only do a http get against. I'm 99% sure that's the TR069 client interface to kick off a Connection Request as there was nothing useful at the other end.

Perhaps you could check you have the latest firmware?

Lenovo

Shop now for Lenovo laptops and other devices (affiliate link).

yitz

2239 posts

Uber Geek
+1 received by user: 594

#1016242 31-Mar-2014 21:41

You are testing from outside your LAN right?

Gozer

185 posts

Master Geek
+1 received by user: 32

#1016244 31-Mar-2014 21:49

yup, testing from phone with wifi off. going to reset the router tomorrow see if it does anything

plambrechtsen

1948 posts

Uber Geek
+1 received by user: 459
Inactive user

#1016587 1-Apr-2014 14:11

Any update on this, as I have not managed to duplicate this on a few different firmware versions I have here. Without intentionally opening it up.

Gozer

185 posts

Master Geek
+1 received by user: 32

#1016916 1-Apr-2014 23:14

Reset router and is is gone, I'm confused but satisfied for now.

Thanks for the suggestions

plambrechtsen

1948 posts

Uber Geek
+1 received by user: 459
Inactive user

#1017001 2-Apr-2014 09:42

Gozer: Reset router and is is gone, I'm confused but satisfied for now.

Thanks for the suggestions

Thanks for confirming this. I was a bit surprised it had happened. Are you sure your internal network is malware free?? As I have heard of some more advanced malware able to connect to customer edge routers and reconfigure them for their own malicious use. So that could be the issue if it happens again unexpectedly.