Help & FAQs    Search BCF    Members    Groups    Events Calendar
Resend my activation email : Register : Log in 
BCF: Bike Chat Forums


Blocking port 443

 Reply to topic
Bike Chat Forums Index -> The Geek Zone
View previous topic : View next topic  
Author Message

R1stu
Shrek!



Joined: 12 Mar 2003
Karma :
PostPosted: 11:53 - 18 May 2016    Post subject: Blocking port 443 Reply with quote
Hi guys, we mainly use TP Link TD-W8968 for our clients. One of our customers wants us to block port 443 on their router as they are failing PCI compliance for their PDQ company.

Dose anyone know how to configure these to block incoming traffic on port 443?

The firewall only seems to allow me to configure rules for ip address on the lan side and forward to other ip's or to block outbound traffic or offer time restrictions.

Google only seems to show family safety firewall set ups. Is it even possible on these routers?
____________________
Carbon closet tart! https://www.bikepics.com/members/r6stuk/02r6/
Stolen bike. 2000 R1: https://www.bikepics.com/members/r6stuk/00r1/
Current bike 1991 Honda ST1100 Pan European, 1986 Honda cb350sg (Finished)
 Back to top
View user's profile Send private message Send e-mail Visit poster's website You must be logged in to rate posts

CaNsA
Super Spammer



Joined: 02 Jan 2008
Karma :
PostPosted: 11:59 - 18 May 2016    Post subject: Re: Blocking port 443 Reply with quote
R1stu wrote:
Google only seems to show family safety firewall set ups.


1st hit on google when searching for:- block 443 TP Link TD-W8968

https://forum.tp-link.com/showthread.php?3080-Newbie-Firewall-rules-to-prevent-Internet-access-hacks
 Back to top
View user's profile Send private message You must be logged in to rate posts

R1stu
Shrek!



Joined: 12 Mar 2003
Karma :
PostPosted: 12:16 - 18 May 2016    Post subject: Reply with quote
Saw that link, it blocks all traffic to all devices. I only want to block 1 port to the router, not to the pcs. its for a PDQ machine so you cant really configure much on that.
____________________
Carbon closet tart! https://www.bikepics.com/members/r6stuk/02r6/
Stolen bike. 2000 R1: https://www.bikepics.com/members/r6stuk/00r1/
Current bike 1991 Honda ST1100 Pan European, 1986 Honda cb350sg (Finished)
 Back to top
View user's profile Send private message Send e-mail Visit poster's website You must be logged in to rate posts

CaNsA
Super Spammer



Joined: 02 Jan 2008
Karma :
PostPosted: 12:24 - 18 May 2016    Post subject: Reply with quote
R1stu wrote:
Saw that link, it blocks all traffic to all devices. I only want to block 1 port to the router, not to the pcs. its for a PDQ machine so you cant really configure much on that.


Only if you follow that guide exactly.

Decription: IN
LAN Host: PDQ Ip addy
WAN Host: Any host
Schedule: Any schedule
Action: Deny
Status: Enabled
Direction: In
Protocol: TCP

Then Enable the firewall and Deny packets that do not follow the rules. This will stop A L L incoming traffic to that IP addy.

Then open ports that the PDQ does use and direct it to it.
 Back to top
View user's profile Send private message You must be logged in to rate posts

R1stu
Shrek!



Joined: 12 Mar 2003
Karma :
PostPosted: 12:33 - 18 May 2016    Post subject: Reply with quote
Oke doke, will try and get the info from the customer, should be fun. our customers don't even know what an IP address is lol.

I'm just worried that ill lock us our the remote access for the router, and our remote phone system uses 443, so we will have to change that also.
____________________
Carbon closet tart! https://www.bikepics.com/members/r6stuk/02r6/
Stolen bike. 2000 R1: https://www.bikepics.com/members/r6stuk/00r1/
Current bike 1991 Honda ST1100 Pan European, 1986 Honda cb350sg (Finished)
 Back to top
View user's profile Send private message Send e-mail Visit poster's website You must be logged in to rate posts

CaNsA
Super Spammer



Joined: 02 Jan 2008
Karma :
PostPosted: 12:36 - 18 May 2016    Post subject: Reply with quote
R1stu wrote:
I'm just worried that ill lock us our the remote access for the router, and our remote phone system uses 443, so we will have to change that also.


Open the ports that the pdq uses before you block all other traffic.

Why would you need to change the phone system port?
All you are doing is blocking access to the PDQ on 443, not everything on the internal network.

TBH, I have no idea why 443 is an active port on the PDQ if it is such a security risk in the first place.
 Back to top
View user's profile Send private message You must be logged in to rate posts

R1stu
Shrek!



Joined: 12 Mar 2003
Karma :
PostPosted: 12:48 - 18 May 2016    Post subject: Reply with quote
something to do with stupid PCI compliance for networks now. If your network doesn't meet the criteria, you have to pay a monthly subscription to a 3rd party for the privilege.
____________________
Carbon closet tart! https://www.bikepics.com/members/r6stuk/02r6/
Stolen bike. 2000 R1: https://www.bikepics.com/members/r6stuk/00r1/
Current bike 1991 Honda ST1100 Pan European, 1986 Honda cb350sg (Finished)
 Back to top
View user's profile Send private message Send e-mail Visit poster's website You must be logged in to rate posts

CaNsA
Super Spammer



Joined: 02 Jan 2008
Karma :
PostPosted: 12:50 - 18 May 2016    Post subject: Reply with quote
IMO it's not an issue with the network config, it's a PDQ machine issue.

If the port wasn't active on the machine in the first place you could chuck all the data at it you want, but nothing would happen.
 Back to top
View user's profile Send private message You must be logged in to rate posts
Old Thread Alert!

The last post was made 10 years, 112 days ago. Instead of replying here, would creating a new thread be more useful?
  Display posts from previous:   
This page may contain affiliate links, which means we may earn a small commission if a visitor clicks through and makes a purchase. By clicking on an affiliate link, you accept that third-party cookies will be set.

Post new topic   Reply to topic    Bike Chat Forums Index -> The Geek Zone All times are GMT + 1 Hour
Page 1 of 1

 
 You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum

Read the Terms of Use! - Powered by phpBB © phpBB Group
 
Debug Mode: ON - Server: birks (www) - Page Generation Time: 0.06 Sec - Server Load: 0.88 - MySQL Queries: 13 - Page Size: 58.49 Kb