Hello, I’m experiencing an issue with ROS6 v6.49.19. The problem involves PPP users—such as PPTP, L2TP, and PPPoE—where there are duplicate user entries. After analyzing the issue, I found that an “admin” user had created a firewall rule to allow traffic on ports 1080, 7777, and 8888. There was also an attempt to connect via PPTP using the “admin” user. For additional information, there is no “admin” user listed in the PPP secrets or System Users. Have any of you experienced the same issue?
The answer is easy: you router is compromised and not safe.
1080 is SOCKS port so your device is used as "trampoline" to the world
Netinstal and restore configuration. The best way is to configure it from scratch manually, not with restoring binary backup.
Yep, nuke from orbit (aka netinstall a current ROS version) and start fresh from scratch/export.
Afterwards make sure your management ports are not accessible from the public Internet.
Thank you, sir. I’ll also restore the configuration on my router and upgrade the firmware.