remote access ATT

[tjones9163]

Hello, I have turned it off now but when I enable remote access on my ATT router, I am able from outside my network to access my home router by typing my public ip and port 8080 into an address bar. Then it prompts me for password to get into router homepage.

Is anyone that has my public IP able to get to my password page of my home router?

 

[ch33zw1z]

Yes.

 

[tjones9163]

Yes.

thanks for the response, does any different routers combat this problem with more security? Maybe a router that has DMZ features?

 

[ch33zw1z]

Dmz reduces security.

Disabling remote router access is strongly advised

 

[mxnerd]

thanks for the response, does any different routers combat this problem with more security? Maybe a router that has DMZ features?

No. You just have to use more complex password for webpage login to prevent being hacked.

Or setup VPN on the router or a VPN server behind the router, hen use VPN client to login. Then you can disable remote login web page.

==

Oops, I don't believe AT&T router got VPN function.

==

Change that popular 8080 port to some odd number over 20000 or 30000 that people usually won't use if you absolutely need the login web page. Port scanner will have to take a long time to scan to your open ports.

 

[tjones9163]

No. You just have to use more complex password for webpage login to prevent being hacked.

Or setup VPN on the router or a VPN server behind the router, hen use VPN client to login. Then you can disable remote login web page.

==

Oops, I don't believe AT&T router got VPN function.

==

Change that popular 8080 port to some odd number over 20000 or 30000 that people usually won't use if you absolutely need the login web page. Port scanner will have to take a long time to scan to your open ports.

Do you recommend any good VPN routers? preferably less than 200$.

 

[mxnerd]

Probably ASUS RT-AC68U?

https://www.amazon.com/Dual-Band-AiMesh-Router-AC1900-System/dp/B00FB45SI4

https://www.asus.com/support/FAQ/1008713/

 

[tjones9163]

Probably ASUS RT-AC68U?

https://www.amazon.com/Dual-Band-AiMesh-Router-AC1900-System/dp/B00FB45SI4

https://www.asus.com/support/FAQ/1008713/

Thanks

 

[VirtualLarry]

Yeah, DO NOT EXPOSE REMOTE LOGIN TO YOUR PRIMARY ROUTER. That's a BAAAD idea. You'll likely get 0wn3d in a matter of minutes from some Chinese or Middle-eastern IP.

Edit: And yeah, I second the AC68U/R/AC1900/AC1900P routers, they are great, using one now.

 

[mxnerd]

Thanks

You also need to do port forwarding UDP port 1194 to ASUS router's IP address.