Cruising through the forum posts would indicate a couple of
approaches are applied for modem port filtering and I'm
wondering what is the easiest and most effective, or in the
most wide spread use.
Of particular interest would be filters on the ethernet interface
to block rogue DHCP activity such as network printers, NAT
devices wired up incorrectly (backward), and the genius who
thinks it would be cool to set up his own DHCP server. Also
on the e-net side would be filtering for intrusive SNMP activity
on 161 and 162.
Additionally, the 135 - 139 and 445 ports on both the customer
and RF side are desired to be filtered from either direction
(source/destination).
It seems to me that applying such filtering in the modem config
file itself would be the most effective and flexible approach.
That's how I do it now on the old LANcity gear, but that's just
a simple point and click selection process via template with all
the SNMP heavy lifting done in the background. (I have no clue
how it is actually integrated into the config file itself.)
Any thoughts, tips, or pre-config'd filter sets for the above would
be greatly appreciated!
Thanks.
Poge