Euphrates
join:2007-04-30
Bellingham, WA
| reply to Phraxos
Re: Is it national hack a router day?
Depending on your router, may I suggest VPN access. You VPN into the router and then access it like it's a local device on the network. Most Cisco VPN enabled routers being sold have 2 free SSL VPN licenses that you can use for administration of the router. You can even configure it to answer on some high up non-standard port.
This way, any other connection attempts will be immediately blocked by the ACL on the router.
Another note. In case you don't have it, I would also suggest ensuring the "no ip unreachables" command is configured on your outside interface. When an ACL blocks access to that port, it sends an unreachable reply to the machine attempting to access it. It's basically like someone knocking on your door and you not opening the door and saying, "I'm not home!" My guess, is that although you are blocking access, unreachables may be getting out which is alerting people that there is something there but it's just not currently accessible. |
