|
Re: Superhub is nowhere near as bad as people say!
agreed on the panic for sure.
My diagnosis is based on the result of port scanning as that can make it easy to tell if a port is closed by artificial means or if nothing is running on the port. The port returns a RST packet which means something is deliberatly denying a connection rather than a simple timeout if nothing was running there at all. Obvously as you say there is something open WAN side allowing them to change config's at will. I suspect either a knock first for entry system or a ACL that only allows a specific VM ip to access.
|