Trustpower KInect ADSL modem - firewall disabled by default

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Trustpower KInect ADSL modem - firewall disabled by default

ajbw

115 posts

Master Geek

Lifetime subscriber

#114255 13-Feb-2013 16:07

I have just helped a neighbour who has switched to Trustpower Kinect install the ADSL modem that was supplied.
I was rather surprised to see the following:

1 The admin username and password were left at the default
2 uPnP was enabled, and accessible over the internet (see http://upnp-check.rapid7.com/ or http://www.grc.com )
3 The firewall was not enabled, and telnet, SSH, FTP and various other services were exposed.

Am I right to be worried about the level of care that Trustpower are taking with their customers?

raytaylor

4014 posts

Uber Geek

Trusted

#761888 13-Feb-2013 18:57

I was going to suggest doing a port scan on a certain other isp's ip range and you will be horrified - but i wont mention the name of the ISP for the sake of their customers.

Ray Taylor

There is no place like localhost

Spreadsheet for Comparing Electricity Plans Here

dimsim

848 posts

Ultimate Geek

Trusted

Lifetime subscriber

#761892 13-Feb-2013 19:02

raytaylor: I was going to suggest doing a port scan on a certain other isp's ip range and you will be horrified - but i wont mention the name of the ISP for the sake of their customers.

Surely you should name them for the sake of their customers that do read this forum so they are able to do something about it?

raytaylor

4014 posts

Uber Geek

Trusted

#761916 13-Feb-2013 19:38

Okay
If you have a dynalink router provided by your isp, enable the firewall and switch off wan admin access

Thats the best I will do. If frieatism wants me to name the ISP then i will, but i would rather not.

If i am at a customer site and needing to replace the router, but dont want to call the ISP for a password reset on their ppp username, i just log into the router config page using firefox and view source on the html - works for about 50% of the routers out there where the password is in plaintext in the html, but the browser only shows stars.

Ray Taylor

There is no place like localhost

Spreadsheet for Comparing Electricity Plans Here