Monday, September 19, 2011

Blocking WD MyBook Live incoming connections


The MyBook Live allows remote access the the hard drive via the WD 2go iOS app.  One thing I don't like about it is that it pokes a whole via UPnP on my firewall for ports 80 and 443.  And unfortunately on dd-wrt, UPnP port forwarding takes precedence over any other rules on the FORWARD chain.

So, I manually added a rule via Administration->Commands (Save Firewall) in dd-wrt:

iptables -t nat -I PREROUTING -p tcp -i `get_wanface` -m multiport --dport 80,443 -j DROP

"iptables -L" doesn't show prerouting rules.  Instead, do: "iptables -L -t nat".

Since the MyBook Live runs Linux internally, there might be a way to change the ports through some manual unsupported mechanism, but haven't had a chance to check.  Hopefully Western Digital creates a firmware update that allows the port to be changed via a supported mechanism in the web UI.

No comments:

Post a Comment