On Wednesday 29 Mar 2017 08:45:33 Neil Bothwick wrote: > On Tue, 28 Mar 2017 22:52:25 -0700, Jorge Almeida wrote: > > PS. I still would like to know what people in this list think about > > having an ISP managed device as router, re security. Not that I have > > any real option if I want the contracted speed... > > It's more a privacy issue that security for me. I have a similar setup > with a virgin cable router, which I set to what they call modem mode, > where only one of the ports works and connects to my router. The one time > I ran tech support they were able to see that I was using it this way and > even reset the modem for me. I suppose it makes life easier for them and > their typical customers, but it was a little unnerving.
Perhaps your 'modem mode' is a half-bridge set up with a public IP address and they can still access it via WAN? Bear in mind the TR-069 daemons may still be running no matter how you set up the router, unless you stop them manually. I have a Huawei which I use in a fully bridged mode as a modem and have to stop such services manually on every reboot, after I log into it with SSH. -- Regards, Mick
signature.asc
Description: This is a digitally signed message part.