Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have a Debian server with a dyndns hostname and a open 22 port on my router (DLINK DSL-2640B) because i need to remote-ssh my server. The Debian machine itself is extremely secure but some hackers were able to hack into my router , in fact firstly i saw some weird open ports that I did not open , but i thought my colleague opened it so i did not really care about it. Next day i was not able to log in to my router..someone changed the password. My question is...is there a way to enable a maximum number of log-ins in order to prevent brute-force attacks? Interesting thing ..i had captcha enabled..how did they log in??

share|improve this question

migrated from serverfault.com Aug 25 '12 at 12:41

This question came from our site for professional system and network administrators.

    
What router do you have? Remember to include all the relevant details in your question. If we have to ask for them, you're likely to get downvoted or have your question closed. –  Michael Hampton Aug 25 '12 at 7:46
    
Thanks Michael.. DLINK DSL-2640B –  Aaron Aug 25 '12 at 7:47

1 Answer 1

up vote 0 down vote accepted

It is also a good idea to be on the lookout for security breaches/problems with your router, for example this one http://www.exploit-db.com/exploits/18511/. Most routers had some problems in the past, like the recent WPS problems on the Speedport W912V.

share|improve this answer
    
Oh my god unbelievable!! Thanks alot for the website! –  Aaron Aug 25 '12 at 9:21
    
Hopefully d-link releases a new fw..this bug is pretty bad... –  Aaron Aug 25 '12 at 9:31
    
Don't count on it. The product is listed as end of life and has never had a firmware update of any kind. –  Michael Hampton Aug 25 '12 at 9:34
    
@Aaron: Now you just need to figure out which one of your LAN side colleagues is screwing you over. –  Iain Aug 25 '12 at 9:34
    
Don't forget to secure your Wi-Fi connection; that's part of your LAN from the router's perspective and the exploit could be done through Wi-Fi as well. –  Michael Hampton Aug 25 '12 at 9:35

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.