We have this weird issue since some months and it happened three times now. I made some rules through Winbox like to block Facebook/Youtube in our office through Layer7, and allowed some MAC Addresses to keep the access to Facebook/Youtube.
1st time) The password of router was changed. Many people could access Facebook/Youtube and many can't, especially no one can access whom I have allowed the access to Layer7 rule I created. First time when it happened I thought it's just a one time issue so no worries and I re-setted router with my backup.
2nd time) Again the password of router was changed and same issue as above. Now I also blocked 8291 from remote access. Previously I allowed 8291 access but this time I blocked it, thinking that ISP might be accessing my router through remote connection. I verified that port is blocked through multiple checks.
3rd time) This time password is not changed and I'm sure that password is not with anyone else except me but issue is same as above. When I got to know that one of the person is using Facebook, I immediately accessed my router. Password is not changed, but I see many rules in Filter Rules page which I didn't created myself. As I said 8291 port is blocked. The interesting part is all the names/comment of Rules (those I didn't created) were with the suffix of name of my ISP. So I'm sure they are creating it.
Can anyone tell me if it's possible for ISP to access our router and make changes? Is there any way to stop it? Or according to your expertise what would be causing such issue?