Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » Firewall Settings for Actiontec Gateway DSL don't make sense
Search Topic:
Uniqs:
2142
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
AVG updates grant full control to Everyone, changes owner? »
« 2006 FireWall Leak Tester results  
AuthorAll Replies


owlyn
Premium,MVM
join:2004-06-05
Newtown, PA
clubs:

reply to ActiontecDSL
Re: Firewall Settings for Actiontec Gateway DSL don't make sense

From Actiontec support:

"No, when the firewall is set to High, the firewall cannot be altered.

The Medium settings is what you want to use; it will allow you to lock it down more that High.

We've already brought this issue up with our engineers."


ActiontecDSL



reply to Cudni
Re: Firewall Settings for Actiontec DSL Gateway don't make sense

Click for full size
I've gone ahead and attached the JPEG file of the Actiontec firewall settings page screenshot to this post.

Thanks again!

George


ActiontecDSL

reply to Cudni
Sorry, but could you please tell me how to post the screenshot, which I've saved as a JPEG file? Is it done as an attachment?

Thanks very much!

George


Cudni
La Merma - Vigilado
Premium,MVM
join:2003-12-20
Someshire
reply to ActiontecDSL
Re: Firewall Settings for Actiontec Gateway DSL don't make sense

Could you post a screenshot of services that you can allow/block?

Cudni


ActiontecDSL



I have an Actiontec GT704WG DSL Gateway, which I got from Verizon, and am unable to make any sense of the way the firewall settings are described and implemented. I'm running a single (no network) Windows XP Pro machine.

Here are the main elements of the Actiontec firewall interface:

There are four possible levels of security, each with a corresponding radio button: Off, Low, Medium and High. The default setting is "Off".

There is a note that says:

"Note: If a check appears in a box, that service is open (or allowed). An empty box signifies the service is closed (or blocked). Any Services not listed below are not allowed."

Underneath this note, the services over which you are offered some control -- there are about eleven of them, including well-known ones like HTTP, DNS, FTP, POP3, among others -- are listed. There are two columns of check boxes to the right of the service name column -- one column is labeled "In", the other is labeled "Out". Note that the "In" column controls access to a listed service by a user *outside* of the network, so that's a security risk that I would want to block.

OK. No problem with all this.....yet.

Now, since I want the highest level of security, I choose the "High" setting. When I do this, the check boxes in both the "In" and the "Out" columns for the services that are listed are all *checked* and *grayed out*. So, according to the interface's note (quoted above), this means that all of these services are *allowed* and I *cannot* change them because they're grayed out.

Now, I'm starting to have a problem. How is a setting that *allows* users *outside* of my home "network" (again, just one PC behind the Actiontec router) to have access to services like HTTP and FTP a "high" level of security??! And because it's grayed out, you can't change it.

Then, I decide to select the "Medium" security level and see what happens. The same eleven services are listed, and they're all *checked*, but they're *not* grayed out. So, with this "Medium" setting, I can clear a check box and *block* a service, which is good. But how does the ability of the "Medium" security level to *block* a service that you could *not* block when you chose the "High" level correspond to a *lower* level of security (relative to the "High" level)? In other words, "Medium" allows me to increase security relating to the listed services -- i.e., to block them -- in a way that "High" does *not* allow me to do. What kind of sense does that make?

Thanks to anyone for any help or suggestions!

George
Forums » Up and Running » Security » SecurityAVG updates grant full control to Everyone, changes owner? »
« 2006 FireWall Leak Tester results  


Thursday, 10-Dec 06:40:38 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [200] Sprint Sued For Distracted Driving Death
· [117] AT&T Launching New 24 Mbps U-Verse Tier
· [82] 3G Network Test Says AT&T Is Tops
· [72] Mediacom Unveils 105 Mbps Pricing
· [67] AT&T Hints At Usage-Based iPhone Data Pricing
· [66] Sprint Poised For A Turnaround?
· [66] WPA Cracker: Test WPA-PSK Networks In 20 Minutes
· [51] The Future Of Wi-Fi Is Bright
· [47] Site Leaks Yahoo, Verizon Fed Data Share Pricing
· [45] Microwaving Your Innards Is Not 'Extreme'
Most people now reading
· Windows 7 boot manager editing questions [Microsoft Help]
· IMG 1.7 (IMG Updates and Discussion) [Verizon FIOS TV]
· 3.x Feral Druid - Bear Tanking Guide [World of Warcraft]
· Need some electrical advice - one circuit on two fuses? [Home Repair & Improvement]
· Connecting to Google Voice Via SIP [VOIP Tech Chat]
· Cross Server Dungeon Experience [World of Warcraft]
· Adobe Flash Player version 10.0.42.34 [Security]
· SB6120 Firmware update [Comcast HSI]
· Extjs grid combo box. [Webmasters and Developers]
· Comcast refused to install 400' feet. [Comcast HSI]