IMPORTANT: bm622m 2012 https protection

[hi2u]

I had the http disabled and could still access the https,and in scans most of the people you see these days have only port 443 open. Your results may be different because the firmware is buggy.

 

[x3n0nx]

So not all of the modem have this software bugs i think?

 

[edgexxv]

^ bro i tried the ip filtering and enable the wan if surely ba binoblock niya kaso indi i can still access it. mas advantage talaga if u have 2 modems to test if your protection really works..and as i've observe if i open the wan http i can access also the https but when I disable the wan on the http i can't access the https. so it's says na protected na?

may mali jan sa ip filtering mo kaya napapasok mo pa din sya guhehe xD try mo magdownload ng patch protection config para sa 622 at tignan mo kung pano ang pagkakalagay ng ip incoming filtering dun. may mga ports pa kasi yan eh. the best way jan eh magpalit ka ng port number sa https. ilang libo ang combinations ng port numbers kaya mahihirapan ang mga remoters na mascan yan. ang importante lang naman sa 622m eh wag makita ung publicinfo kasi makikita ung mac na gamet mo dun. kung incase na remoter ako at alam ko ung ip ng modem mo pero ung port hindi ko alam, hindi ko na pagaaksayahan ng oras hulaan ung port na pinalit mo sa https dahil may masscan pa naman akong iba. just saying pero kung hindi mo na maaccess ung https sa modem mo eh d good for you. natural lang naman na alisin naten ung lahat ng check sa wan eh guhehe xD

 

[hi2u]

How is changing the port number the best way when you can simply close all access to the port using a command that runs by itself at boot? Changing the port doesn't always work properly, the technique I have given does. I have tested it on 3 different modems and after applying it I was never able to access HTTPS on them. The bonus of my technique is that it even works after you change the mac and do a factory reset. That way you won't have to waste time with changing the port every single time, which is annoying, and will probably not work unless you reboot the modem, if it even works at all.

The options in the Huawei GUI suck, some of them don't do what they should and instead completely disconnect you from the internet even if you are connected with a working mac. Some of them do nothing. Others require a reboot to work. You can do a better job with iptables yourself.

 

[x3n0nx]

^ hi2u bro the command you've posted thus the port 80 23 22 is included on it? TIA

 

[jellcass]

paboomark brother.thanks

 

[hi2u]

Just 443 is included but the others should be disabled by default

 

[lindol10]

boss bkt ganto yung bm622m 2012 ko wala syang advance settings sa gui di ko tuloy malagyan ng protection naiscan ko padin ip ko

 

[g00drich]

boss bkt ganto yung bm622m 2012 ko wala syang advance settings sa gui di ko tuloy malagyan ng protection naiscan ko padin ip ko

Sa admin ka po ba nag login?

 

[lindol10]

sa webrowser boss bakit ganun walang advance settings

 

[g00drich]

Login ka po sa admin gamit favorite browser mo

 

[lindol10]

ginamit ko yung acl file ni ts ngayon di na ko makalog in sir panu to mababalik

 

[ruaya24]

ako di ko na disable yung port 80 , 23 at 22 iniiba ko lang yung port ng kagaya nito 101443 at yung port ng telnet 102443 at yung ssh port 103443 try mo ko scan HAHA , tama yung isang nag comment jan na libolibo ang pedeng gawing combination sa port , eh ang default lang naman na na scan diba port 80,23,22,443 lang naman eh baguhin mo din yung port 443 ng ganto 104443 peaceman

halimbawa lang yung mga port na yan

 

[hifi_me]

Bro, tanong ko lang ha kasi parang medyo malabo kasi to eh.. kung disable ka nman lahat sa ACL, hindi ka naman ma iiscan sa angry ip di ba? (tama o mali).. Kung tama, pa'no ka ma reremote kung di ka makikita in the first place? Clarification lang po...

 

[slimwilly21]

Just 443 is included but the others should be disabled by default

paano ma disabled by default yung port 80 23 22? Thx

 

[hi2u]

Yes, 22, 23, and 80 are not accessible from WAN by default on bm622m 2012. You should check from another modem to be sure.

 

[amerot]

sir,this protection is temporary only or it should be back to normal after reboot?pls send me info about this sir..thanks much...

 

[Maxsel]

tested b to?

 

[mckie]

Yun ohhhhh!!!!!huli rin ang kiliti ng mga laruan natin..pa bm po ts...TIA

 

[kamotewar]

sir tanong lang po about sa pag babago ng port sa bm622m bka pwede mag paturo thanks.