Unsafe and old Modem/Router has its DNS servers changed.

WeskerEnd

Honorable
Oct 17, 2016
31
7
10,545
I'm using the modem/router provided by my ISP about 2 years ago:

D-Link DSL 2730R

Its DNS servers are occasionally being changed by some kind of internet attack. I've tried many safety configurations but it happened again today (DNS servers were changed from Google's to 2 weird ones, on the router). I've tried disabling ACL and IPV6, a strong password, different IP instead of the usual 192.168 etc (and all of them, not only the last number).

It has no newer firmware available, it is not supported by custom firmwares like DDWRT or OpenWRT. I guess the only option is to get a new/better one, security wise.

I am looking into another modem/router, but I wonder:

Am I able to keep using it as modem, and invest on a better router, or would that still be the weak link in my security?
 
Solution
I see, you might be able to use it as a modem only. You should be able to place it into bridge mode and then buy a different router and use PPPoE.

You could also just run 2 router if you do not want to mess with the bridging. Running 2 routers main disadvantage is related to use of game consoles and UPnP. If you do not use port forwarding or use games that need UPnP then you should not even notice.

It is very strange that something could change the DNS from outside your network. There are routers that have bugs but most really bad ones like remote exploits have been patched

WeskerEnd

Honorable
Oct 17, 2016
31
7
10,545
My current is a 2 in one modem/router, I'm not using anything else.

Even with the DNS set manually on windows, anything connected to the router like a smartphone gets the weird DNS. And sometimes the router seems to "crash" with window's DNS and I lose connection for a while (DNS error).
 
I see, you might be able to use it as a modem only. You should be able to place it into bridge mode and then buy a different router and use PPPoE.

You could also just run 2 router if you do not want to mess with the bridging. Running 2 routers main disadvantage is related to use of game consoles and UPnP. If you do not use port forwarding or use games that need UPnP then you should not even notice.

It is very strange that something could change the DNS from outside your network. There are routers that have bugs but most really bad ones like remote exploits have been patched
 
Solution

WeskerEnd

Honorable
Oct 17, 2016
31
7
10,545

Yeah, the latest firmware is from 2013.

By looking at the log, I can see it receives my ISP's DNS servers on connection, which are then masked with my manually set Google DNS by the "dnsmasq".
That does not change my settings though, so that's why I'm pretty sure it's an outside attack capable of changing the values as if I had set them manually.

I'll probably buy another 2in1 modem router.

Thank you.