Re:AT&T updates firmware to block access to 1.1.1.1
by lost_vegetable on Wednesday May 02, 2018 @09:28PM
(#16982651)
> What's that saying about not attributing to malice, what is more easily explained as stupidity or incompetence or whatever?
Hanlon's razor: https://en.wikipedia.org/wiki/Hanlon%27s_razor
Re:AT&T updates firmware to block access to 1.1.1.1
by craftkiller on Wednesday May 02, 2018 @10:54PM
(#16983029)
Wouldn't it be possible to use your own router and treat the AT&T router essentially like a modem? I ask because I'm about to move to an address that can get AT&T fiber.
Re:AT&T updates firmware to block access to 1.1.1.1
by djsumdog on Thursday May 03, 2018 @09:27AM
(#16985775)
Sort-of. It has a DMZPlus mode, but all it does is assign the public IP to an specific internal device and uses NAT, as well as forwarding all ports, to make it look like that device is onthe public Internet (even though the modem has the same public IP). You can still plug in other devices and they get private IPv4s or parts of your IPv6 prefix and it NATs (the IPv4) those as well (it's to support their VoIP phones and TV service).
It's a shitty hack and it adds a weird layer of indirection that's kinda buggy and doesn't always flow traffic the way you think it's being flowed. The IPv6 stuff gets confusing as well because the modem is still dishing out public IPv6 address, so if you want to advertise them as well, you've got to start slicing up your prefix.
Re:AT&T updates firmware to block access to 1.1.1.1
by ynniv on Wednesday May 02, 2018 @11:18PM
(#16983110)
Yes: https://www.att.com/Common/storefront/resources/pdf/att_brid...
However, I still can't ping 1.1.1.1.
AT&T routers also don't let you use a 10.x address at home (possibly to prepare for carrier grade NAT, although there is an official 100.x address reserved for that; so fuck you ATT).
I'm so sick of my AT&T router/modem for various other reasons. I hate how you are required to use it for many of their offerings (including Fiber to the home).
There are a number of tools out there for putting their router behind your Linux box. Most of them configure ebtables or use scripts to forward the 802.1q authentication packets to/from the router.