New
#1
D-link DIR-635 intrusion
I have a D-link in my summer house and connect to a micro Arduino just to control the heat.
So I set a port forward to the local IP of my micro in D-link.
I have blocked in D-link config all subnet but the one I connect from at my flat in my city living.
Seems ok that a lot of connections from various IP to port 80 is blocked when I check the D-link Log.
It's like 5-10 blocked connections per minute. Guess that's what to be expected .....
Still I find when managing the D-link from WAN and checking current Internet sessions that most of the time I see one EST (established) connection from stocastic IP's not within my subnet from home. With TCP timeout 1sec - 2 hours.
My problem with this is my VERY crude webserver on the Arduino "webserver" get confused when there is multiple active connections to it's port 80. I can connect like for a starter from city home. But after like from 2 hours - 1-2 days I can not connect anymore. So I'm thinking maybe these intruder connections is the problem.
I don't understand how these connections get through my blocking.
I can only guess .... Security problem with the D-link ???
Any idea on this
D-link version (pretty old I think) :
Firmware Version: 2.20EU
Hardware Version: B1