Search results

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

  1. E

    How to block FTP access from WAN on RT-N66U

    As there are different ways to accomplish things, these are the couple ones that have worked for me. iptables -I INPUT -p tcp --destination-port 21 -j DROP iptables -I INPUT -p tcp --destination-port 21 --source `nvram get lan_ipaddr`/`nvram get lan_netmask` -j ACCEPT
  2. E

    Network Place (Samba) Share on LAN only

    Just wanted to point out tha this issue is fixed on RMerlin's .39 firmware. (Thanks!) When enabling the service port 445 now shows as Closed (Not Stealth) in Shields Up. Still, for those interested, if you want to enable FTP on the LAN but block it on the WAN side, you'll need to manually...
  3. E

    RT-AC68U running on micro DC UPS

    Thanks for your quick response Kris. This is (with the exception of the price) kind of what i was looking for. The fact it is not specifically advertised as a (DC) UPS is what doesn't convince me yet since my assumption is that it's not intended specificly to be always connected and the...
  4. E

    RT-AC68U running on micro DC UPS

    Hi, I got all my home 12V network devices running on a micro DC UPS which in case of a power interruption (kind of frequent where i live) keep the network up and running for as long as 8-10 hours. The product i'm using is this. These UPS devices are small, affordable and on top of that...
  5. E

    Network Place (Samba) Share on LAN only

    Will have to try the fix but many thanks in advance for figuring this out until we get something from Asus. @phaelium At the top of this thread you'll find the two IPTABLES rules that disable FTP on the WAN while enabling it on the LAN side. You'll just have to put them in a firewall startup...
  6. E

    Network Place (Samba) Share on LAN only

    An example of how an otherwise useful feature will remain unused (in my case) due to justified security concerns. For those RT-AC68U users who are still seeing a closed WAN SMB port (in theory good) whenever the service is enabled, you should have a very good level of trust in how your ISP is...
  7. E

    Network Place (Samba) Share on LAN only

    Just tested 374_583. ShieldsUp still shows 445 as "open" both at the LAN and WAN when enabling the service on the router (RT-AC68U). Probably this is by design but in my opinion we need a way to limit it to the LAN.
  8. E

    Network Place (Samba) Share on LAN only

    @mtrains Thanks for your report. Hopefully we could get a few more from other RT-AC68 users to double check and confirm whether this is an issue affecting all or part of these routers. I've done the same tests as you on ShieldsUp. Mine shows open whenever enabling SMB. Apparently RMerlin had...
  9. E

    Asuswrt-Merlin 3.0.0.4.374.38 is out

    @bobyang Did you by any chance enabled QoS? Just a guess as this disables HWA. Enviado desde mi iPhone con Tapatalk
  10. E

    Asuswrt-Merlin 3.0.0.4.374.38 is out

    @bobyang Do you have an RT-AC68? If that's the case, I can confirm that whenever enabling FTP it shows open in the WAN and you're not able to close it there unless you use a couple of IPTABLES rules. Unfortunately I cannot link those here but search for the "Network Place (Samba) Share on LAN...
  11. E

    Network Place (Samba) Share on LAN only

    Thanks Merlin, I think the safest thing to do for RT-AC68U users at this moment would be to just disable SMB services until this gets fixed by ASUS or if this open WAN port is not a desired feature. Users who've enabled FTP should also be aware that this also opens a port on the WAN side...
  12. E

    Network Place (Samba) Share on LAN only

    @sinshiva Well, unfortunately port forwarding didn't work either. Scanned through ShieldsUP! and the port 445 still looks OPEN no matter what. As RMerlin suggested, this issue appears to be particular to the AC56/AC68U models. That might be the reason why on yours it worked flawlessly...
  13. E

    Network Place (Samba) Share on LAN only

    @RMerlin Thanks for your kind reply. So it looks like a bug which needs to be addressed. I'm glad to hear I'm not alone in this... I was going crazy going through all of the options and then thankfully found the forum. @sinshiva Now that's clever! Let me try it out and will report...
  14. E

    Network Place (Samba) Share on LAN only

    Hi all, It looks like whenever enabling the SMB service, it opens port 445 on both LAN and WAN interfaces. I haven't gotten across a way to limit this behavior and keep the SMB service to my local LAN only, which is my objective. In fact I migrated to RMerlin's firmware...
Top