Technicolour DGA0122 (Version Damson (19.4)) Disable Remote Management

[#1]

Hi,

I've been asked to disable remote management on my router by worldly for port number 8443 TCP.

How would I go about doing this? Iv'e had a look online and I'm unable to find out how to do this?

Can someone help point me in the right direction or provide as step by step for this please?

[#2]

@Hartland  - This router looks similar to the one we used many years ago (TG582N) and assuming the remote management works in the same way, this is built into the firmware and can't be changed/disabled. We Use TR069. This is used to update the username and passwords automatically for PPP authentication and some other tricks.

Hope that helps you in someway.

[#3]

This is not a TR069 thing.

@Hartland's router interface is wide open to the Internet (albeit behind a login).

My first suggestion would be to log into the router, likely by browsing to http://192.168.1.1 and ensure that Remote Assistance is disabled: -

[#4]

Hi,

Thank you for the reply. This setting is already toggled off. I've been advised to disable SSL VPN. Iv'e tried looking in the portal for the router and can't find any obvious way to disable this. 

Please can you advise?

[#5]

If the router originated here https://internetservices.freshdesk.com/support/solutions/articles/5000799995-technicolor-routers-rem... then there doesnt appear any way to disable remote admin on port 8443

[#6]

Moderator's note:
Thread moved from Broadband to Tech Help

[#7]

@Hartland 

What happens if you try port forwarding TCP 8443 to an unused LAN IP address ?

You should be able to test remote port probing using GRC ShieldsUP! , click on [Proceed],

enter "8843" in the white box, and clicking on [User Specified Custom Port Probe]  to run the test.

[#8]

---

@bobpullen wrote:

My first suggestion would be to log into the router,... ... and ensure that Remote Assistance is disabled: -

---

while that is a good idea, looking at this suggests that 'Remote Assistance' uses port 55665, so won't help with TCP 8443 being open.

☹️

I wonder if there is something similar to this METHOD of port blocking (used here for blocking SSH)

the problem is knowing what the equivalent configuration parameter string is for TCP 8443 would be !

For SSH the parameter is -

InternetGatewayDevice.Services.X_000E50_AccessManagement.SSH.ServerAccess.1.Enable 0

[#9]

---

@Anonymous wrote:

---

the problem is knowing what the equivalent configuration parameter string is for TCP 8443 would be !

---

With command line access, I suspect running this would dump the entire data model: -

get InternetGatewayDevice.

[#10]

Hi,

Thank you for all your responses.

This is all new to me and I'm very much a novice. How would I go about implementing this?