Sunday 23 November 2008

How to stop a Belkin Router blocking webpages

Sometimes Belkin routers can wrongly blacklist webpages. If you can't get through to a webpage, but suspect the router is blocking it, log into the router using your browser of choice, and check the Security Log. If you see something like...

Nov.23.2008 17:34:43 security:752802.541 Blocked Prot=6, 65.54.153.254:80 > 36.168.14.24:3694, AS Seq=442762075, Ack=474151315 -Black List Defense

Then the chances are your router is blocking the page. Run an nslookup on the website that's being blocked - if the same IP address shows up in the security log, that's what's happening.

Fix:

telnet to the router (here it's 192.168.0.1, but more usually it'll be 192.168.2.1)
$ telnet 192.168.0.1
Trying 192.168.0.1...
Connected to 192.168.0.1.
Escape character is '^]'.

,vvvdP9P???^ ,,,
vvd###P^`^ vvvvv v
vv#####?^ ????####vv,
vv####?? ,vvvdP???^ ,,, ??##^
v#####? ,vvd##P?^ #?#v#vvv
v#####? v###P^ ,vvv, '?#?,
######? ####?^ ,vd#P?^ `???##
#####? v#### ,d##P^ ''
###### v#### ]###L _ _ _ ___
#####? v#### ]##L / / \ |\ | |_ \/ /\ |\ | |
###### #### ]###L \_ \_/ | \| |_ /\ /--\ | \| |
?#####v ####v ]##h, ,,
?##### ?###h, `9#hv, ,vv###
###### #####L ]###L ,v#v'
?#####vv ?9##hv, ,,vvvv###'
?#####vv `??9P\vv, ^ vv##,
###### #######L
??###hvv, ,vvv#?##?????
`????9hdhvv,

Login: admin
Password: ****************
Login successful
--> firewall set IDS blacklist disable
-->


And that's that. Unfortunately, if you reset the router (and with a Belkin router? You're going to reset it a lot) - then you'll need to do this again.

No comments: