4 ms·

Here[1] is a 802.1x proxy you can use to hide your incredibly vulnerable residential gateway behind a firewall of your choosing. It allows the eap packets to pa

Here[1] is a 802.1x proxy you can use to hide your incredibly vulnerable residential gateway behind a firewall of your choosing. It allows the eap packets to pass through. I honestly knew this was going to be a problem when I first port-scanned my residential gateway and saw exposed who-knows-what ports, but for symmetrical 1Gb internet for $79.99 a month what can you do? [1] https://github.com/ShadwDrgn/eap_proxy/blob/master/eap_proxy.py https://github.com/ShadwDrgn/eap_proxy/blob/master/eap_proxy...

nmjohn 9y ago
I had the exact same thought after port scanning my own uverse gigapower connection - so seeing real exploits actually be found on it is not surprising in the slightest to me. Though instead of going with the 802.1x proxy approach, it's also possible to spoof the mac address of the RG with your router and swap it in place after 802.1x authentication has occurred. (You have to swap without the link to the ONT going down however, the easiest way to do so being a switch with VLAN support. You put the RG and ONT on one vlan, and then once the connection is up, you swap your router in place of the RG.) Then you can unplug the RG and put it in your closet (until you have a power outage and have to do it again, which is the main drawback to this approach. However since AT&T provides a UPS for the ONT, if you have a UPS for your router you should be good there too.)