High security option

[dblais]

It would be great to have a simple check box to deasactivate all no essential services/port.

https://securityevaluators.com/knowledge/case_studies/routers/soho_service_hacks.php


We know there is many open ports (even if you desactivate all services). Why these +-10 ports? I just want a basic faste router to use internet for home/work at home. I dont user file sharing, printer sharing, VPN etc.

There is many port that we dont even know what they do, like the 9999 witch had a exploit on it (corrected now).

I think it can be simple to add the rules in the firewall to block all these port? The only essential are like DNS, DHCP, HTTP (for router administration), may be ntp?


Thank you!

 

[huotg01]

It would be great to have a simple check box to deasactivate all no essential services/port.

https://securityevaluators.com/knowledge/case_studies/routers/soho_service_hacks.php


We know there is many open ports (even if you desactivate all services). Why these +-10 ports? I just want a basic faste router to use internet for home/work at home. I dont user file sharing, printer sharing, VPN etc.

There is many port that we dont even know what they do, like the 9999 witch had a exploit on it (corrected now).

I think it can be simple to add the rules in the firewall to block all these port? The only essential are like DNS, DHCP, HTTP (for router administration), may be ntp?
Thank you!

If it is that important for you, you could just use one of the User scripts (look at the wiki: https://github.com/RMerl/asuswrt-merlin/wiki) and disable or enable whatever you want, no ?

 

[dblais]

Hi,

Thank you for your answer. I dont see any existing script that close all no essential application/port and i dont know how to program this...

There is a existing script for that?

Thank you.

 

[huotg01]

Hi,

Thank you for your answer. I dont see any existing script that close all no essential application/port and i dont know how to program this...

There is a existing script for that?

Thank you.

I pointed out the wiki to show how to setup a user script. The fact that there is no example of a script to answer the explained need is maybe also an answer by itself to your question ? Maybe not.

 

[Nullity]

It would be great to have a simple check box to deasactivate all no essential services/port.

https://securityevaluators.com/knowledge/case_studies/routers/soho_service_hacks.php


We know there is many open ports (even if you desactivate all services). Why these +-10 ports? I just want a basic faste router to use internet for home/work at home. I dont user file sharing, printer sharing, VPN etc.

There is many port that we dont even know what they do, like the 9999 witch had a exploit on it (corrected now).

I think it can be simple to add the rules in the firewall to block all these port? The only essential are like DNS, DHCP, HTTP (for router administration), may be ntp?


Thank you!

Setting the router an an "AP" will practically accomplish what you want.

You can also compile Asuswrt-merlin yourself and remove the featuers you don't need. You can build your own lean & mean system that way.