why the HELL is my router exposed to the internet

@twinkle to be fair i believe that is it’s job

@eri no, i mean that you can remotely access my router if you know the password.

……………………

this is options that is hidden via CSS

RE: https://sweet.succubi.services/objects/92b5c1a7-2711-44e0-9e4d-ae495cc60f09

@eri @twinkle that's exactly what I said to the mouse a few hours before your post!

so i am realising that all of these are hidden because the userType is locked to “User” and not “Admin”

@twinkle consumer routers are secured against the end user and left wide open for the isp. this is why our first task with a new isp is to yeet their gear and stand up our own

@atax1a i am unfortunately not a network mouse

@atax1a my current problems: apparently port forwarding works actually, except for when im connecting from LAN

@twinkle ah yeah thats caused by a lack of "hairpin NAT", the port forwardings only apply from outside of the network.

@atax1a Ah,

how would i make this work

@twinkle if your router doesnt do it youre basically hosed. we have to make it work in our network with an elaborate ruleset that performs the required inside translations

@atax1a fucking awesome

@atax1a it’s probably capable of doing it but i can’t log in as an actual admin acc so fuck me i guess

@atax1a great… none of the things online for decrypting/editing the config backup works with this model (XGB430v Pro)

@twinkle yeah when we were using CenturyLink we had to reverse-engineer the router firmware in order to read the config lol

@atax1a i am: unfortuantely not cool enough to know how to RE

@twinkle nothing cool about it, we downloaded the firmware and ghidra and started clicking around. they were shelling out to openssl

@atax1a wait

??? the US version of the firmware just has a source code download as per GPL

Please note: The products of TP-Link partly contain software code developed by third parties, including software code subject to the GNU General Public Licence (“GPL“), Version 1/Version 2/Version 3 or GNU Lesser General Public License (“LGPL”). You may use the respective software condition to following the GPL licence terms.

since fucking when did companies respect GPL lmao

did TP-Link get sued or smth

@twinkle oh yeah some router companies comply with the letter of the law there lol. but the interface stuff and encrypted config shit is likely all buried in some proprietary binary that theyve replaced the entire userspace with.

@atax1a yeahhhh it is

@atax1a ah…….. i think the firmware might be encrypted

@atax1a i at least found a way to just manifest the firmware upgrade ui, let’s hope that this changes anything

@atax1a spoke too soon

@atax1a it’s okay, i did something cursed and it works

@twinkle that netmask creeps us out, should be closer to 255.255.255.255 >.>

@atax1a i think this would break whenever my public ip changes but i guess if it annoys me enough (in case digi doesn’t fucking fix it for me or give me a router that does hairpinning) i can always just do a lil crontab

@atax1a i didn’t change it cuz it was filled automatically by the ui oops lol

@twinkle yeah that netmask of 255.0.0.0 says to forward all traffic for any address starting with 79. to your router. which. it might work by coincidence, but also is creepy.

@atax1a its a good catch ty (i honestly was too tired and exhausted from looking at this for so many hours to even notice the netmask LOL)