Orcon White Router Firewall

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › Orcon White Router Firewall

fizzychicken

313 posts

Ultimate Geek

#152458 27-Sep-2014 10:46

In the few days I have had the Orcon White router, Ive somehow uploaded more data than I had done in the previous 3 weeks combined. Most worrying is today where I woke up and logged on at 10 am to find I had already uploaded 2.2GB of data (PC wasnt on but NAS was, though NAS is not configured for remote access).
Does anyone have any experience with setting up a firewall on the white router, there is next to no info on the NAT security page and I fully admit I do not know what I am doing when it comes to firewalls.

https://keybase.io/fizzychicken

freitasm

BDFL - Memuneh
79270 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1138663 27-Sep-2014 10:59

Go to http://www.openresolver.jp/en/ and scroll to bottom of page. Click the link to check your connection to see if it's an open DNS resolver.

In the result page you are looking for "SOURCE":

Let us know the result.

fizzychicken

313 posts

Ultimate Geek

#1138688 27-Sep-2014 11:49

I cant even open that site

https://keybase.io/fizzychicken

freitasm

BDFL - Memuneh
79270 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1138691 27-Sep-2014 12:03

Try this page then: http://www.thinkbroadband.com/tools/dnscheck.html

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1138694 27-Sep-2014 12:06

The router has a firewall enabled and will not respond to DNS requests unless you've purposely chosen to disable it.

fizzychicken

313 posts

Ultimate Geek

#1138724 27-Sep-2014 12:42

freitasm: Try this page then: http://www.thinkbroadband.com/tools/dnscheck.html

Success! We detected your IP address as 121.98.90.234 and did not find an open DNS resolver running.

https://keybase.io/fizzychicken

FireEngine

1223 posts

Uber Geek

Trusted

#1138745 27-Sep-2014 14:14

Looked at your pattern and with one exception it looks like an increase in the number of days where you have approx 1.2GB download - a film more often maybe? The exception was a single day of 3.9GB but 200MB upload so that still doesn't indicate any kind of reflection attack going, either by volume or data direction.

As we swapped out the router for a connection issue I'd suggest we have fixed it and the additional download is what was being attempted before???

Regards FireEngine

fizzychicken

313 posts

Ultimate Geek

#1138750 27-Sep-2014 14:29

Yeah I think Ill just have to look out for everything, the 3.25GB upload on the 25th and 2.3GB upload today are what concerned me, especially considering I havent seeded any download and seed speed during download was limited to 5KB/s, I also havent offered any file/service externally. My download data looks legit for what I've done myself.

thanks all

https://keybase.io/fizzychicken