Firewall/NAT

All of the routers I have had, my ISP has been able to change my configuration settings to what they want or to the factory default, they have done this several times, I have had them do it to a Linksys, Motorola, and USR. Not only can they change settings they can see my current settings without logging into my router, I know this because anytime someone is logged in and another, either same or different username, logs in it will kick the other off. Can they do this with m0n0wall?? How are they able to do this?

hi

your ISP should not be touching your router, anything up to the modem they can but any thing after the modem they can not touch, as the router is not there equitment and is not owned by them but is owned by you..

2nd point do not enable the option to allow remote config of any router , you should only config any router from the same LAN.

3rd your ISP should not be able to log in to monowall

if you follow the above you should be safe but if my ISP had changed any of the settings in my router that i purchased and does not belong to them, i would have screamed and shouted at them and gone for legal advice ..... as that not acceptable ..... i would also end my contract with them and go with a differnent ISP...

hope the above helps ...

can any one else add to this ?

...
...

It was when i was having connectivity problems, they tried to say it was because the router was giving out wrong IP's (within the 10.x.x.x subnet that I specified) and they wanted to reset my router to factory defaults, I had to get a manager to tell the XSR that my IP settings were fine and it was on the ISP's end (the connectivity issue) No remote access was enabled.
Then there was another time that a family member had called while I was away and the ISP reset the router to factory defaults only after they gave their permission as the CSR said that the same as they told me, it was the router that was causing the problem with the wrong ip, same subnet as before, that step was useless as it did not solve the problem.

It just upsets me that they can see the settings at anytime, even if remote access is disabled.

i'm still not sure how they can "see" your router's settings unless they're the defaults and you have remote management enabled. if you or a family member has allowed them access to the management interface, then of course they'll be able to change whatever, whenever.

if not, they should have no access. the only equipment they should be able to control is the cable modem itself, since they own it. in some cases, even that may not be true if you bought the modem and just subscribe to the service.

regardless, if you're running m0n0wall, you'd specifically have to grant management access (admin login/pass) to your ISP, so don't do that. if they can't walk you through a problem on the phone, ask to speak with a more knowledgeable tech who can.

I am hoping someone who works for an ISP can help me out. The guy was not that smart he saw it was 10.x.x.x and said my routers messed up and wanted to reset it, I asked how he knew and he said that it was because  it had a 10. something ip, it should have a 192.168.1.1 I told him no, i changed the settings in the router... I was transferred to someone that actually knew something and problem was solved.

Hi , i do some work on the side for a small start up ISP and as far as i know there is no way to access a Routers config from the out side world unless you have enabled remote access and told someone your password/user name etc

also a home network can run on the 10.x.x.x IP range you could also have 192.168.X.X or 172.x.x.x  all of the above 3 rangese are ok for use in a standard home network or business network.

... ...