Question How to disable access to the router login page from Internet?

[kurt16A]

I just got a new router Zyxel EX5601-T0. Everything goes well, except that I discovered accidentally that the admin interface can be accessed by anyone on the internet. This has never happened to me before (I used several routers before). Actually because of an indirect help from a subdomain (pointing to my public IP) that I discovered the problem. My problem is I tried to find where I can block the access to my router in the settings, but I can not find where to do it?? - I thought under the firewall, but there is no option for that except Access Control with an option to add a new ACL Rule!!

Any help or an idea is very appreciated

 

[kanewolf]

I just got a new router Zyxel EX5601-T0. Everything goes well, except that I discovered accidentally that the admin interface can be accessed by anyone on the internet. This has never happened to me before (I used several routers before). Actually because of an indirect help from a subdomain (pointing to my public IP) that I discovered the problem. My problem is I tried to find where I can block the access to my router in the settings, but I can not find where to do it?? - I thought under the firewall, but there is no option for that except Access Control with an option to add a new ACL Rule!!

Any help or an idea is very appreciated

The manual I found -- https://www.manualslib.com/manual/2859634/Zyxel-Communications-Ax-Series.html#product-EX5601-T0
Shows that there may be a screen like on page 388 of the manual. That is accessed by Maintenance > Remote Management > MGMT Services

 

[kurt16A]

The manual I found -- https://www.manualslib.com/manual/2859634/Zyxel-Communications-Ax-Series.html#product-EX5601-T0
Shows that there may be a screen like on page 388 of the manual. That is accessed by Maintenance > Remote Management > MGMT Services

There is no such "

Maintenance > Remote Management > MGMT Services

" in my router settings. I have under maintenance: System, User Account, Time Backup/Restore, Reboot and Diagnostic. The manual you linked is different, and I assure you that I have Zyxel EX5601-T0.

​

 

[USAFRet]

There is no such "

" in my router settings. I have under maintenance: System, User Account, Time Backup/Restore, Reboot and Diagnostic. The manual you linked is different, and I assure you that I have Zyxel EX5601-T0.

​

You can download your user manual here:

EX5601/EX5600-T Series

EX5601/EX5600-T Series

service-provider.zyxel.com

They ask for FAR too much info to get that actual download.

 

[kurt16A]

You can download your user manual here:

EX5601/EX5600-T Series

EX5601/EX5600-T Series

service-provider.zyxel.com

They ask for FAR too much info to get that actual download.

I went through the settings several times yesterday and today. I am sure that there is no place like "Remote Management". And I knew about "Remote Management" before I asked the question, but it doesn't exist. it's unbelievable.

 

[kanewolf]

I went through the settings several times yesterday and today. I am sure that there is no place like "Remote Management". And I knew about "Remote Management" before I asked the question, but it doesn't exist. it's unbelievable.

If there is no option, then you will have to change hardware.

 

[USAFRet]

In my router (completely different than yours), it is called "Remote Administration".

If it does not exist, you are out of luck.

 

[kurt16A]

In my router (completely different than yours), it is called "Remote Administration".

If it does not exist, you are out of luck.

I think so. But there must be a solution. no?!!!

 

[USAFRet]

I think so. But there must be a solution. no?!!!

If your device does not expose that function, you need a different device.

 

[kurt16A]

If your device does not expose that function, you need a different device.

The problem is I got this router 2 days ago (got fiber). I was happy, but now I am very sad. see the picture:

 

[USAFRet]

Look through ALL the settings and tabs.
If it is not there, you are out of luck.

 

[kurt16A]

Look through ALL the settings and tabs.
If it is not there, you are out of luck.

some days are like that...

 

[kanewolf]

I just got a new router Zyxel EX5601-T0. Everything goes well, except that I discovered accidentally that the admin interface can be accessed by anyone on the internet. This has never happened to me before (I used several routers before). Actually because of an indirect help from a subdomain (pointing to my public IP) that I discovered the problem. My problem is I tried to find where I can block the access to my router in the settings, but I can not find where to do it?? - I thought under the firewall, but there is no option for that except Access Control with an option to add a new ACL Rule!!

Any help or an idea is very appreciated

Did you test this access via a cell phone without WIFI or some other device that is guaranteed to not be on your LAN? Your router could have "hairpin NAT" which a LAN device can use the WAN IP address without an error. That could give your a false positive.

 

[kurt16A]

Did you test this access via a cell phone without WIFI or some other device that is guaranteed to not be on your LAN? Your router could have "hairpin NAT" which a LAN device can use the WAN IP address without an error. That could give your a false positive.

I tried access my public IP and my Nextcloud (using a subdomain pointing to my public IP) with my phone (using 4G) and surprising I can not access!!!
Now I don't understand what's happening?!!!
Why from my pc I can access my router login using my public IP or my subdomain?????
I am very LOST!!!!

 

[USAFRet]

I tried access my public IP and my Nextcloud (using a subdomain pointing to my public IP) with my phone (using 4G) and surprising I can not access!!!
Now I don't understand what's happening?!!!
Why from my pc I can access my router login using my public IP or my subdomain?????
I am very LOST!!!!

You need to do a real test, from some system outside your LAN.

This means actually going outside, to somewhere else.

 

[kanewolf]

I tried access my public IP and my Nextcloud (using a subdomain pointing to my public IP) with my phone (using 4G) and surprising I can not access!!!
Now I don't understand what's happening?!!!
Why from my pc I can access my router login using my public IP or my subdomain?????
I am very LOST!!!!

Your router was providing "hairpin NAT". JUST as I suspected. By using your phone on 4G you were outside your LAN. That is the only valid way to test external access. Google "hairpin NAT" for more info.

I don't believe your router admin IS exposed to the WAN. You had a false positive because of the hairpin NAT.

 

[kurt16A]

Your router was providing "hairpin NAT". JUST as I suspected. By using your phone on 4G you were outside your LAN. That is the only valid way to test external access. Google "hairpin NAT" for more info.

I don't believe your router admin IS exposed to the WAN. You had a false positive because of the hairpin NAT.

 

[kurt16A]

Thanks a lot. I really appreciate your answers and help. You point me to something important when you sad to try outside my LAN. I panicked when I saw the router login page when I use my public IP or my subdomain. Thanks again.