Jump to content

Recommended Posts

  • Root Admin
Posted (edited)

If you own your own router and are not renting it from your Internet Service Provider and have signs of compromise or are simply suspicious of a possible compromise you may want to consider doing a factory reset of the router.

Please ensure that you have the user manual for your router before considering performing a factory reset.


Some notes and tips for the Router:

  • Disable acceptance of ICMP Pings
  • Change the Default Router password using a Strong Password
  • Use a Strong WiFi password on WPA2 using AES encryption or Enable WPA3 if it is an option.
  • Disable Remote Management
  • Create separate WiFi networks for groups of devices with similar purposes to prevent an entire network of devices from being compromised if a malicious actor is able to gain unauthorized access to one device or network.
    Example:  Keep IoT devices on one network and mobile devices on another.  
  • Change the network name (SSID).  Do not use your; Name, Postal address or other personal information.  Make it unique or whimsical and known to your family/group.
  • Mitigate SSID Confusion attacks [CVE-2023-52424] by avoiding credential reuse across SSIDs by using a unique password per SSID.
    Example:  One password for 2.4Ghz and a different password for 5.0Ghz.
  • Is the Router Firmware up-to-date ?  Updating the firmware mitigates exploitable vulnerabilities.
  • Specifically set Firewall rules to BLOCK;   TCP and UDP ports 69, 135 ~ 139, 161, 445, 1234, 3389, 5555 and 9034
  • Many Routers support Saving and Restoring settings from a file.  It is suggested to make a backup by saving your Router's settings once it has been configured.
  • Document passwords created and store them in a safe but accessible location.


NOTES:  

  • The above suggested tips may be dependent upon one's preferences and the Router's capabilities.
  • Same rule of applying Strong Passwords on all IoT devices, never retaining the Default.

References:

  1. What is a Cable Modem?
  2. What is a Router?
  3. what is a Modem+Router?
  4. How To Reset Your Router
  5. Ports Database
  6. IANA official ports

 

This article courtesy of @David H. Lipman

 

Edited by AdvancedSetup
Updated information
  • Thanks 3
Link to post
Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.