Thanks Colin. That was it - the firewall had somehow been turned off. After turning it back on they no longer show as open. It is interesting that the other services I can see on the inside interface were also not exposed. Perhaps the ISP is blocking common ports to prevent people making...
Hi Colin,
Thanks for your reply. These ports are definitely exposed to the WAN interface. The scan was run from my mobile phone with wifi turned off. When I run netstat -a after my port scan I can see the port in a CLOSE_WAIT state showing my phone's public ip address (which is in a...
Hi all,
I am running an RT-AC68U on 386.13 (latest available release). Recently I ran an external scan of the WAN interface and I found a number of ports publicly exposed.
Port 3394 - u2ec (USB printing?)
Port 5473 - u2ec
Port 7788 - cfg_server
Port 18017 - Asus wanduck (from what I have...
Update: After some reading I discovered that YazFi can support custom firewall/routing rules. So, I have now added an IP TABLES entry to permit 2-way traffic to the HA IP address (and port, as it is on a server running other services).
Hi all,
I am using YazFi to host some IOT devices on a wifi network isolated from my main network. I have just started tinkering with HomeAssistant, which is running on my main network. I have the IOT network configured to allow one-way comms from the main network to the IOT network, but not...
I figured that was the case. Somewhere in the documentation I read 'not required' but what you are saying is what I expected.
After a factory reset, is it safe to restore from a saved config or should I rebuild it from scratch?
Hi all,
I seem to be having a strange problem getting an ssh terminal session on my router consistently. I am using putty from my laptop, and I only succeed in getting a login prompt about 20% of the time - the rest of the time I just see the cursor and then the session drops after about a...
Thankyou so much for the suggestion! I hadn't actually flashed to Asus-merlin but this gave me the reason to do so, and I discovered it was far simpler than I had expected (Last time I did this was getting DD-WRT onto a WRT54G which was a much more complex process! This time I even retained my...
Hi all,
I currently have set up a Guest wifi SSID for all my IOT devices - all the things in my home that need internet access but I don't completely trust. I have created this using the guest network feature and I have set 'Access Intranet' to 'disable'. As a result, the devices on this...