Web access from WAN

[DmitryOlenin]

I am using 3.0.0.4_354.29 at Asus RT-N16.
I have a dynamic ip within L2TP connection.

There is my Administration - System settings.

Why i can use my ip (like http://92.25.80.82) from another PC (not in my homenet) to get access to my Asus RT-N16 Web-interface?
As i think, if i didn't check "Enable Web Access from WAN" - there must be no access.

 

[RMerlin]

I am using 3.0.0.4_354.29 at Asus RT-N16.
I have a dynamic ip within L2TP connection.

There is my Administration - System settings.

Why i can use my ip (like http://92.25.80.82) from another PC (not in my homenet) to get access to my Asus RT-N16 Web-interface?
As i think, if i didn't check "Enable Web Access from WAN" - there must be no access.

Do you have the firewall enabled?

Can you see if the same issue occurs with the original Asus FW? I wonder if it wouldn't be an issue caused again by that damned VPN tunnel your ISP uses

 

[DmitryOlenin]

Windows firewall is disabled and i don't have any other.
I didn't try original firmware.
I thought about Beeline tunnels in this case.

Is there some way to change l2tpd to rp-l2tp? Maybe it can help...

 

[dmillerzx]

I am on 3.0.0.4.354.28 (merlin) and both SSH and Web (80) are completly open to my WAN. Huge security issue!!

I have access web admin / ssh from WAN disabled yet I am clearly able to... I also have the built in firewall disabled (which shouldn't make a difference) Might have to revert to stock if I can't figure this out.

 

[RMerlin]

I I also have the built in firewall disabled (which shouldn't make a difference) Might have to revert to stock if I can't figure this out.

Uh, if you disable the firewall, why are you expecting your router to be firewalled?

 

[vnangia]

Sorry for resurrecting this thread, but it appears to be the right one.

I'm running 376.44 on the AC68U. Even with the firewall (both IPv4 and IPv6) enabled, and the "Enable Web Access from WAN" box set at "No", I'm still being able to get to the admin interface from WAN. Am I missing something?

ETA: somehow, between when I found this thread and started typing and when I hit save, I missed a .01 update, though I can't seem to see a changelog. I'll try that first.

 

[RMerlin]

Sorry for resurrecting this thread, but it appears to be the right one.

I'm running 376.44 on the AC68U. Even with the firewall (both IPv4 and IPv6) enabled, and the "Enable Web Access from WAN" box set at "No", I'm still being able to get to the admin interface from WAN. Am I missing something?

ETA: somehow, between when I found this thread and started typing and when I hit save, I missed a .01 update, though I can't seem to see a changelog. I'll try that first.

Make sure you test from outside of your network, otherwise you will be avoiding your own firewall by never leaving your LAN if you go through the NAT loopback.

 

[vnangia]

Make sure you test from outside of your network, otherwise you will be avoiding your own firewall by never leaving your LAN if you go through the NAT loopback.

I should have specified: I am testing from outside of the network - from my phone over 4G to my dynamic DNS address and I do get the RT-AC68U prompt for username and password.

 

[icepick314]

I have same problem where I can access my RT-AC68U from my work.

I access it by chance but I have the "Enable Web Access from WAN" in Administration tab to "No" and yet I can still access the router.

I've tried to set web access to both Yes and No and both does allow me to access my router from outside.

Am I missing something?

How can I lock my router from outside access?

 

[RMerlin]

My original response stands. If you are able to access the router from the WAN side, then it means you either disabled the firewall, or you are not really WAN-side.

 

[martinr]

I have same problem where I can access my RT-AC68U from my work.

I access it by chance but I have the "Enable Web Access from WAN" in Administration tab to "No" and yet I can still access the router.

I've tried to set web access to both Yes and No and both does allow me to access my router from outside.

Am I missing something?

How can I lock my router from outside access?

I have just double-checked my RT- AC68U, which has web access from WAN disabled and it is working properly: no login box appears. [I disabled wifi and enabled cellular data (and ensured I was connected to the internet) and entered my ddns address into my browser. On re-enabling wifi (so I'm now LAN side) and reloading the browser, the login box appears exactly as you'd expect.]

Apologies for asking this but my aim is solely to help you get to the bottom of this: after resetting "Enable web access From WAN" to No, you did hit Apply, didn't you? Did you clear your browser cache after going from Yes to No (or, better, use a different browser to call up your public IP address)?

Martin

 

[icepick314]

I have to enable firewall on the router to keep out WAN access to router?

It doesn't sound right that WAN access is tied to router's firewall.

Anyway I enabled firewall on the router and it seems like it's working.

Thanks.

My original response stands. If you are able to access the router from the WAN side, then it means you either disabled the firewall, or you are not really WAN-side.