On alternate to uninstalling are deactivating not used stuff on startup and on on other points of device offered menus pe. like the follow:
- Depend on misconfiguration by default of startup configuration are allays active the follow services, not depend on you are really configured by gui as i like to use it:
- openvpn client and server
- one other vpn client and server
- ssh dropebear (AND ITS ACTIVE ON WAN SIDE by default !!!
- IPV4 and IPV6 are active on WAN side by default, IPV6 show still traffic if you disable by IPV6 menu item …
You can see, they are some potential for a easy improvement the security, also if you not like to uninstall not used software parts.
A it can be uninstalling are on the end the better way, because, if you fix this part of security related misconfiguration, you will lost your work of fixing this after the next firmware update. Because, gl are setting by this way the by user fixed misconfiguration bac to the unsecure and energy unfriendly gl misconfiguration.
You can find this and other since long time open bugs on the follow and some older bug-lists which are created, since gl deleted the own bugtracer:
See forward.
1 Like