domingo, 13 de septiembre de 2015

Hacking you residential Internet connection

This week I was experimenting a lot issues with my Internet connection in my house. The ISP installed a few years ago the following device: THOMSON TG585 v7.

I checked the logs from the Thomson device, and I could see these:

Info Sep 13 19:00:39CONFIGURATION mbus atomic sync successful
Info Sep 13 19:00:30LOGOUT User logged out on TELNET (64.20.227.134)
Info Sep 13 19:00:23LOGOUT User logged out on TELNET (64.20.227.134)

In the last example was an scan that I did from www.mxtoolbox.com where I could see the telnet and http ports open. So I decided to close them because they are related with the device management.

Then I found this link: https://groups.google.com/forum/#!topic/demon.service/uFtKsZZCx5g

And the commands to solve this situation were:

First:  login via telnet

  service system ifdelete name=TELNET group=wan
  service system ifdelete name=HTTP group=wan
  service system ifdelete name=FTP group=wan

Then: Rescan from the WAN side and you should feel a bit happier.

Finally:

  saveall

And that's it, the administration is secured.

I hope this could be helpful for you.

Regards.

NOTE: If you want the device manual, you can download it from here