User comments on ISPs
  >> BT Broadband


Register (or login) on our website and you will not see this ad.


Pages in this thread: 1 | 2 | 3 | 4 | (show all)   Print Thread
Standard User zenmaster
(member) Tue 10-Apr-12 00:12:32
Print Post

HG612 modem, remote port 8081 OPEN


[link to this post]
 
I have notice port 8081 is open,
when i connect to it externally it is going to a authentication page
"HuaweiHomeGateway"

I assue this is for BT to access the HG612 modem?

I have unlocked the firmware and can firewall it off.... but i do not know the username or password of this!!!
Standard User BatBoy
(legend) Tue 10-Apr-12 08:23:55
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: zenmaster] [link to this post]
 
Possibly TR-069 for CWMP http://en.wikipedia.org/wiki/TR-069

Mine is "closed" as I disabled the service on 301.

In reply to a post by zenmaster:
I have unlocked the firmware and can firewall it off.... but i do not know the username or password of this!!!
If you go to the Maintenance/Account tab, there are only 2 accounts defined - admin and user.



______________________________________________________________________________ this is not usenet __________________

Edited by BatBoy (Tue 10-Apr-12 08:54:31)

Administrator MrSaffron
(staff) Tue 10-Apr-12 08:24:40
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: zenmaster] [link to this post]
 
Open on WAN or LAN side?

Given the modem does not receive a WAN IP it should not be visible to the internet.

Andrew Ferguson, [email protected]
www.thinkbroadband.com - formerly known as ADSLguide.org.uk
The author of the above post is a thinkbroadband staff member. It may not constitute an official statement on behalf of thinkbroadband.


Register (or login) on our website and you will not see this ad.

Standard User BatBoy
(legend) Tue 10-Apr-12 08:36:21
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: MrSaffron] [link to this post]
 
WAN side - there's a PTM running on VLAN 301 for TR-069 which does DHCP.



______________________________________________________________________________ this is not usenet __________________
Administrator MrSaffron
(staff) Tue 10-Apr-12 08:45:31
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: BatBoy] [link to this post]
 
I presume you superglue the covers onto the diagnostic ports for your car too?

Andrew Ferguson, [email protected]
www.thinkbroadband.com - formerly known as ADSLguide.org.uk
The author of the above post is a thinkbroadband staff member. It may not constitute an official statement on behalf of thinkbroadband.
Administrator MrSaffron
(staff) Tue 10-Apr-12 08:46:53
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: BatBoy] [link to this post]
 
And it will NOT have a public IP address, but a non-routeable private IP, so unless someone hacks into the DSLAM it should not accessible

If people are hacking the DSLAM/MSAN then the admin port on your modem is the least of your worries

Andrew Ferguson, [email protected]
www.thinkbroadband.com - formerly known as ADSLguide.org.uk
The author of the above post is a thinkbroadband staff member. It may not constitute an official statement on behalf of thinkbroadband.
Standard User BatBoy
(legend) Tue 10-Apr-12 08:52:19
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: MrSaffron] [link to this post]
 
Well, it will have the public ip address of the modem on port 8081 as the OP said. I don't think it has anything to do with the DSLAM.



______________________________________________________________________________ this is not usenet __________________
Administrator MrSaffron
(staff) Tue 10-Apr-12 09:03:41
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: BatBoy] [link to this post]
 
The modem hands a public IP address to the consumers router, are you suggesting that the Openreach FTTC modem also has a public IP address?

Proof?

Andrew Ferguson, [email protected]
www.thinkbroadband.com - formerly known as ADSLguide.org.uk
The author of the above post is a thinkbroadband staff member. It may not constitute an official statement on behalf of thinkbroadband.
Standard User BatBoy
(legend) Tue 10-Apr-12 09:08:16
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: MrSaffron] [link to this post]
 
Yes, it has the same ip address, but you have to specify the port as well to access it from the internet.

The proof is as I said before - there's a PTM service defined on VLAN 301 for TR-069.



______________________________________________________________________________ this is not usenet __________________
Administrator MrSaffron
(staff) Tue 10-Apr-12 09:12:17
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: BatBoy] [link to this post]
 
So tell me the IP address of a FTTC modem and I'll see if port 8081 is visible

Andrew Ferguson, [email protected]
www.thinkbroadband.com - formerly known as ADSLguide.org.uk
The author of the above post is a thinkbroadband staff member. It may not constitute an official statement on behalf of thinkbroadband.
Standard User BatBoy
(legend) Tue 10-Apr-12 09:18:04
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: MrSaffron] [link to this post]
 
Mine is turned off as I said earlier. But anyone can use Shields-Up on http://grc.com to see for themselves.



______________________________________________________________________________ this is not usenet __________________
Standard User zenmaster
(member) Tue 10-Apr-12 10:13:46
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: MrSaffron] [link to this post]
 
this was open even before unlocking the hg612..
Administrator MrSaffron
(staff) Tue 10-Apr-12 10:57:27
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: BatBoy] [link to this post]
 
Have tried to access the port over the internet on a BT Infinity line and it is not accessible.

Other providers have done things like only allow certain IP addresses to access the TR-069 ports, so expect similar for Openreach.

grc is not infalliable too, a lot of routers detect the initial probes and then shut down ports, even if they were open as part of DoS protection.

Perhaps more people would like to PM the public IP address so I can peek away.

Andrew Ferguson, [email protected]
www.thinkbroadband.com - formerly known as ADSLguide.org.uk
The author of the above post is a thinkbroadband staff member. It may not constitute an official statement on behalf of thinkbroadband.
Administrator MrSaffron
(staff) Tue 10-Apr-12 12:24:28
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: MrSaffron] [link to this post]
 
People have remembered to look into this when NOT using an Ethernet router that maybe has these ports open? e.g. HomeHub3

Andrew Ferguson, [email protected]
www.thinkbroadband.com - formerly known as ADSLguide.org.uk
The author of the above post is a thinkbroadband staff member. It may not constitute an official statement on behalf of thinkbroadband.
Standard User zenmaster
(member) Tue 10-Apr-12 20:36:22
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: MrSaffron] [link to this post]
 
i can see its tr069 related
2 username login options
Standard User blueacid
(committed) Tue 10-Apr-12 21:49:34
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: MrSaffron] [link to this post]
 
I'm on Be*. I just tried to access a Plusnet FTTC connection's IP address on port 8081; connection timed out.
Standard User phonic2k
(newbie) Mon 04-Jun-12 01:06:46
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: MrSaffron] [link to this post]
 
I just had a infinity2 install last week, and noticed BT support in India can look what you've changed in the Home Hub, like SSID,etc. after that shock, I tested the ports, and found 8081 open.

From remote windows server, I got tried to see if I can login to my locked modem, and it did come up with the remote login in Chrome:

Authentication Required

The server 86.167.xxx.xxx:8081 requires a username and password. The server says: HuaweiHomeGateway.

User Name:

Password:


So it's open to anyone not just BT.
Does unlocking the modem and switching it to ATM mode close this port?

Edited by phonic2k (Mon 04-Jun-12 01:12:31)

Standard User BatBoy
(legend) Mon 04-Jun-12 08:32:19
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: phonic2k] [link to this post]
 
You don't want ATM mode, it should be PTM.

But if you change the firewall setting from BT to Custom or something, that should block the remote ports.


_____________________________________________________________________________________________ this is not usenet __________________

Edited by BatBoy (Mon 04-Jun-12 08:34:01)

Standard User phonic2k
(newbie) Mon 04-Jun-12 11:33:36
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: BatBoy] [link to this post]
 
yes, my mistake, infinity2 is VDSL2 based and supports the Packet Transfer Mode.

I've not unlocked the modem yet,but looking at the manual for the modem, it supports full router mode with NAT, DHCPd, firewall,etc,

Is this is true in the unlocked modem firmware?
if so, then you can bypass the homehub3, and plug direct to a Gbit switch.
Standard User BatBoy
(legend) Mon 04-Jun-12 11:42:57
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: phonic2k] [link to this post]
 
Yes, you can use the HG612 as a router and skip the HH3.

Thread here http://forums.thinkbroadband.com/fibre/t/4109217-hua...


_____________________________________________________________________________________________ this is not usenet __________________

Edited by BatBoy (Mon 04-Jun-12 11:45:11)

Standard User phonic2k
(newbie) Mon 04-Jun-12 12:43:27
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: BatBoy] [link to this post]
 
Thanks for the link, it seems simple to configure.

Have you called BT India support after unlocking your modem?
are there any downsides to unlocking the modem and blocking the port?

also, as port 8081 is open to all, I'm interested if anyone has worked out the user and password for the remote login on port 8081?
Standard User RobertoS
(sensei) Mon 04-Jun-12 18:02:57
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: phonic2k] [link to this post]
 
Try admin admin.

My broadband basic info/help site - www.robertos.me.uk
My domains,website and mail hosting - Tsohost. Internet connection - Plusnet Value Fibre.

"Where talent is a dwarf, self-esteem is a giant." - Jean-Antoine Petit-Senn.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Standard User think26872
(committed) Mon 04-Jun-12 20:04:37
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: BatBoy] [link to this post]
 
It appears I have incorrectly thought I could just plug the BT FTTC Modem into my existing router (just a router not a modem so no facilities to enter username / password details)?

Do you need to use the HomeHub thing to enter a username and password otherwise the BT FTTC Modem will not connect?

TIA
Standard User BatBoy
(legend) Mon 04-Jun-12 20:20:42
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: think26872] [link to this post]
 
Something has to establish a PPPoE connection to the ISP, so either the router does with the HG612 acting as a modem, or the HG612 does by acting as a router itself.


_____________________________________________________________________________________________ this is not usenet __________________
Standard User RobertoS
(sensei) Mon 04-Jun-12 23:18:09
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: think26872] [link to this post]
 
In reply to a post by think26872:
It appears I have incorrectly thought I could just plug the BT FTTC Modem into my existing router (just a router not a modem so no facilities to enter username / password details)?
What is your existing router? In particular, does it have a WAN port as well as normal ethernet ones?

If you go to BT Infinity they supply a HomeHub. Some other ISPs also supply (inclusive) routers.

BatBoy is right in what he says, but as supplied by Openreach the modem is locked down and cannot function as a router. It can only be used as a 2-port router if you unlock the firmware. It is in effect a pure modem with a single ethernet output. Only the Huawei one is easily unlocked at the moment. The ECI one requires you to do some soldering inside, as I understand the current position.
Do you need to use the HomeHub thing to enter a username and password otherwise the BT FTTC Modem will not connect?
If you only have one device, (a computer), that you can connect via ethernet, then you don't need a router, as you can enter the username and password for your ISP on your computer.

My broadband basic info/help site - www.robertos.me.uk
My domains,website and mail hosting - Tsohost. Internet connection - Plusnet Value Fibre.

"Where talent is a dwarf, self-esteem is a giant." - Jean-Antoine Petit-Senn.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Standard User phonic2k
(newbie) Tue 05-Jun-12 02:04:33
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: RobertoS] [link to this post]
 
admin admin is the default user and password used for the LAN side admin panel on port 80. I did try it before, but I didn't think BT would use the same defaults published in the manual for the remote access on port 8081.
Standard User think26872
(committed) Tue 05-Jun-12 09:45:57
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: RobertoS] [link to this post]
 
Thanks for both replies. I have looked again at the my router settings and there is a PPPoE option and when you select it a username/password option appears. Panic over.
Standard User RobertoS
(sensei) Tue 05-Jun-12 09:56:17
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: think26872] [link to this post]
 
I repeat, "What is your existing router? In particular, does it have a WAN port as well as normal ethernet ones?" WAN ports look like normal ethernet but are often coloured yellow. Should also be clearly labelled as such.

Some have dual capability on Port 1.

Is it even a router? Or is it a modem/router like the O2 box? We are normally very slipshod here about the difference, but in this case it matters.

My broadband basic info/help site - www.robertos.me.uk
My domains,website and mail hosting - Tsohost. Internet connection - Plusnet Value Fibre.

"Where talent is a dwarf, self-esteem is a giant." - Jean-Antoine Petit-Senn.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Standard User BatBoy
(legend) Tue 05-Jun-12 22:24:10
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: phonic2k] [link to this post]
 
Looks like there's a 2 level logon:

Connection request user name: acs/acs
ACS user name: hgw/hgw


_____________________________________________________________________________________________ this is not usenet __________________
Standard User RobertoS
(sensei) Tue 05-Jun-12 22:50:29
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: BatBoy] [link to this post]
 
Is one of those the password, or is that something else?

My broadband basic info/help site - www.robertos.me.uk
My domains,website and mail hosting - Tsohost. Internet connection - Plusnet Value Fibre.

"Where talent is a dwarf, self-esteem is a giant." - Jean-Antoine Petit-Senn.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Standard User BatBoy
(legend) Tue 05-Jun-12 23:01:36
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: RobertoS] [link to this post]
 
Sorry, it's username/password. For each login the username is the same as the password.


_____________________________________________________________________________________________ this is not usenet __________________
Standard User phonic2k
(newbie) Tue 05-Jun-12 23:33:01
Print Post

Re: HG612 modem, remote port 8081 OPEN


[re: BatBoy] [link to this post]
 
Have you logged in remotely to 8081 using these credentials?

It may work on the unlocked firmware, but it's not the case on the standard locked HG612 3B modem.
Pages in this thread: 1 | 2 | 3 | 4 | (show all)   Print Thread

Jump to