Urgent help with firewall, hackers are behind

Posts: 12 · Vonage Forum Associate Joined: Jul 24, 2005 Posts: 12

Hello,

Vonage is working fine with my WRT54GP2. Unfortunately I had to disable the firewall in my DSL modem (Voip works only with firewall disabled) and now I'm under attack from hackers.

My firewall has the option to enable Voip port and close all the rest

Can someone help me and explain what is the port number for Voip?

Thanks in advance

Posts: 3198 · Posted: Sat Sep 24, 2005 5:59 pm Post subject:

heh, not sure how you know or why you think that, but considering routers are hardware firewalls exactly like your modem...
at any rate, the ports can be found by searching this forum or actually at vonage.com of all places.
http://vonage.com/help.php?article=89

Posts: 1715 · Posted: Sun Sep 25, 2005 1:31 am Post subject:

As long as your computer's connected to the Vonage router rather than the DSL modem/router, your computer is behind a hardware firewall.

Posts: 646 · Posted: Sun Sep 25, 2005 8:13 pm Post subject:

Posts: 2 · New Forum Member Joined: Oct 02, 2005 Posts: 2

Beware...

The help page referenced in this thread is the better page that Vonage publishes (though not easliy found). However, an analysis of my logs shows this to be inaccurate. I have been forced to route a HUGE number of high UDP ports inbound. At least to get sound from the other end.

I have had engineers say that you have to set the PAP2 (one would presume that all other linksys devices would require the same) to be a TFTP and HTTP _server_. In addition to what is shown in this help page.

Vonage does not seem to know what traffic they require. Or they have processes that do not conform to their documentation.

That leads one to the conclusion that the routers that are supposed to firewall and provide traffic priority cannot function correctly either. How can they filter traffic if there is traffic other than what is documented by them???

This issue is a serious failing by Vonage. Users are going to to have thier Vonage devices hacked at some point. The assumption that a device has a bug free code base is insane. The assumption that a device will protect your internal network after it has been compromised is idiocy.

Vonage is forever asking you to put the device on the public internet - one would think that they would want the protection from attack. The truth is that most in the organization do not know what the traffic is. I won't say that someone does not know, but they surely are not sharing it.

They should publish a defintive description of the traffic, port, direction, source IP address blocks... the whole nine yards. It is mandatory for those that must be behind a firewall, and ideal for the rest.