RE: about my dlink DI-804hv

[Murad Talukdar <talukdar_m () subway com>]

Does the default config allow remote admin?(I doubt it but you never know).
Also, did you leave the default login/password on it?

If everything is default, then why not do a hard reset? 
The blocked access entries seem to be run of the mill. Are there any ports
which it doesn't stealth/close as default?

When you say failing, what does that mean? You can't get access to the net
or....
If you can, go to shields up http://grc.com/default.htm for a quick test on
how well your router is working.
Regards
Murad Talukdar

-----Original Message-----
From: Robert T [mailto:roberto.torres.aguayo () gmail com] 
Sent: Friday, November 04, 2005 1:06 PM
To: security-basics () securityfocus com
Subject: about my dlink DI-804hv

hi everyone

a few days ago my router  d-link DI-804hv, started failing, today i
got access to the log and it´ shows lots of records like this:
"""
03 de Noviembre de 2005 08:52:27 p.m. Blocked access attempt from
84.48.59.185:27446 to UDP port 6881
Jueves, 03 de Noviembre de 2005 08:52:32 p.m. Blocked access attempt
from 221.211.255.9:34482 to UDP port 1027
Jueves, 03 de Noviembre de 2005 08:52:34 p.m. Blocked access attempt
from 201.128.243.234:3361 to TCP port 445
"""
It´s posible that somebody tried to re-configure or gain access  of my
DI-804hv, and because of that the performance of my router fails???

i don´t have rules configured execpt the ones that comes with the
configuration....

Thanks ind advanced


--
RoberTukoTheBest