9
awesomeest
121d

I'll post a rant (will be long) soon-ish on the root of the asinine problem...

TL;DR
Anyone got a better suggestion of killing a WLAN router signal than a Faraday Cage?
-----------------------
As to the point as I can manage atm...
My ISP forces a proprietary router/modem for them to script my static IPv4 block (/28, aka 13 usable). Modifying this equipment in any way or using the vast majority of tactics to modify its behaviour = Federal Felony... with my history, it couldn't be construed as mistake/ignorance of this fact, so I'd likely end up working for some branch of the gov to mitigate the costs of standard prison (on both ends... handicapped af = expensive af to comply with base human rights laws... plus I'd be a dangerous prisoner from what I've been told).

I NEED the ipv6 functionality TOTALLY off... I've written this into every kernel and every container config at kernel level.

The issue is, I don't trust their shit device (which "should" also be set to no ipv6 via gui... non-GUI = fed felony).

This horrid device, they apparently made them for home use initially (to be fair it has decent specs and tolerable RAM), so included WiFi... that comes on by itself.
Disable the WiFi!... except I cant (at least not without 'tampering').
Why? Well acc to the GUI it's not enabled in the first place. Acc to the 'tech support' it's apparently a paid feature (yes, nonsense) that I have not paid for (nor would I), meaning on their end's GUI and DBs I also don't have WiFi ability from that dev.

So... Not trusting the other settings and the dev, being something im not allowed to directly config outside of their GUI that doesn't realise it's putting out a usable signal despite registering DHCP on behalf of that non-existent signal. I NEED to kill those signals.

I realise it likely sounds extreme to make and use a Faraday Cage for a router/modem (secondary modem, it parses the initial modem's output, via script, to allow the static block to be accessed). I really dont know any other way that's legal to restrict it.

Oh, in case unclear, I have tried so many ways to get them to just allow me to use any device (pref. mine, but even their's) that i can simply script myself... it's a no-go.

Comments
  • 0
    I'm in a rush so can't write a lot but maybe this can be of help? https://youtu.be/Hi7JMTojT-4/...
  • 3
    Could always leave the ISP
  • 1
    Ok so you don't want ipv6 but only ipv4 and no wifi?
  • 3
    a Faraday cage is just a fancy name for a metal box. Seconding @aviophille, a microwave will probably dampen a lot of the signal. Just... Don't turn it on.
  • 4
    Unless you can do anything with the settings the only way to kill the wifi that comes to mind is a faraday’s cage.

    As for ip6, you could add your own router inside and put all your things behind that, that way your devices will be protected by a device of your choosing while not tampering with theirs.

    Their box is just one more router in their system it just happens to sit in your house.
  • 1
    i'm very curious about what reason exactly you have for _needing_ wifi and ipv6 disabled
  • 0
    If you don't trust that the ISP router is secure, put your own router after the ISP one and use your favourite VPN. That way, you should avoid all risks from it except DOS.
  • 1
    If you really have to deal with this ISP, use their shitbox and don't wanna modify it in any way that the ISP could see, you only have mediocre workarounds. At least if moving is not an option..

    Using your own router behind it is probably a good idea so you can run a proper firewall and stop the shitbox from scanning your network. Downside is double NAT. Tunneling your traffic can be useful if you trust the endpoint more than your ISP & shitbox.
  • 0
    @saucyatom oh im already using my own routers and apparent the last existing managed switch(seriously it was a HUGE pain in the ass to find a basic managed switch).

    The main issue it stopping the asinine wifi signal it puts out -.-

    For the record, it's definitely not that i dont "want" to modify shit... it's the whole federal felony crap.

    The dev actually has good port speed and decent (nothing special) RAM and processors... it's just the damn wifi... which acc to the dev's gui and the ISP isnt even enabled... they also(a scary amount of levels of hierarchy) dont realise that's there's logs generated on the device...

    I don't really have time to deal with their bs... which is from poorly informed and manged levels of 'tech support' not any actual malice just incompetence. Im likely gonna try to get to someone that can understand the core issue. Its in their logs that no one knows exists... in 4½hr time frame (from a tech sup installing it/0% that i touched it) ~13600 x WAN6 error
  • 0
    @saucyatom
    I was being nice by only requesting the 2 months of bill credit that acc to their T&C they owe me regardless. But they just appended a 61$ credit and some comment about me having an issue with 3rd party devices. their own recorded calls even negate that...plus there's the logs on this end... and ofc their own network scripts and logs that no one ive spoken to has access to ofc.

    Im honestly gonna try one more round of this crap then decide which method(s) im going to use to resolve it in a much less friendly nature... it's not hacking if you figure out several names in their hierachy, along with the email address format, then just send all of them their own logs and a brief letter of frustration based in fact... then there's the legal route or just straight media... they dont want either of those, especially because im quite handicapped... it just would look sooo much worse and cost them much more.

    Ive plotted an escape if necessary to a different isp, will be a pain
  • 0
    @ScriptCoded
    No... I'm much more competent at hacking (especially when its more directly internet based)... also VERY well versed in hardware (i mean literally to the bits, driver creation for personally built devices (i dont mean the lego-esq thing people refer to as building a pc) and ive been in networking since "half-duplex" was a frequent topic.

    Im also pretty damn sure they couldn't catch me even if i told them exactly what i was gonna do... but that's still not something i should risk as the one in charge.
  • 0
    @awesomeest Okey... What were you replying to? I didn't quite follow the red line here....
  • 0
    @ScriptCoded the video.

    The ipv4 i have a static block (/28).
    The ipv6 functions(specifically DCHP, or anything needing to query... at least those, likely anything relating to WAN6)of the dev/WAN i need to have off or the dev gets kicked off the network in a loop... so cant use my static block/any internet since the mac id gets banned.

    The WiFi comes from the 'shitbox' despite being apparently(via the degs gui and the isp systems) disabled... so i dont trust it to not decide ipv6 should start working, and i find any dev that i cant directly investigate/script personally, a security risk in general... random WiFi that shouldnt exist, aside from using hardware resources and being dumb in general, concerns me but i cant legally turn it off... so i wanna effectively remove the signal.
    Best i can think of is making a faraday cage around it with just enough of a gap to let the wired eth cables out
  • 0
    @jestdotty not that simple due to location, or wouldve.
  • 0
    I'm still not sure where exactly IPv6 needs to be deactivated. If you have a router behind you can just configure it to not use IPv6 at all. If it's between shitbox and ISP they need to provide working equipment (or let you use your own..).

    (what kind of incompetent ISP gives you a /28 but then forces you to use their half broken hardware?..)
  • 0
    @saucyatom the ipv6 says its disabled on it's hypocrite gui. I have wifi router and lan routing outside its control... but still plugged in (im old school... i manage routers directly... down to nat... i actually like writing NATs) the issue is the wifi signal its giving off. The gui and the isp says its not enabled (apparently wifi is something youre supposed to pay for... no clue why) so i dont trust it for general security def not ipv6 ... ipv6 from that dev triggers queries that conflict with their WAN6 to their network scripts not making essentially the networking equivalent of main calls main until the WAN scripts boot it for spamming queries... second back online ...starts again but with a higher number of dhcpv6 queries that dont ask in batches... kicking it again. So i need the wifi killed.

    The rest i have well under control since i found the issue. Kernel level no ipv6 on everything
    (near 2 months and they couldnt find... or understand when i found it)
  • 0
    @saucyatom yeaaa... this ISP... depending on how my next chat with them goes, I may be much more public about this issue... im making a vid before that chat on monday... just in case.

    For right now it's best to hold onto my cards and not directly name this national isp that has several enterprise clients.
  • 0
    @saucyatom Oh their business only phone tech support also doesnt understand what terms like "gateway" or "broadcast" mean and always start giving the subnet mask after my query about my 13 usable statics and confirning the other shit (i didn't trust that theyd not have had some fuck up, changing basic shit causing the issue) cuz u know its such a mystery what a subnet mask is if you know the network address down to the broadcast -.-
  • 1
    Often the antenna is removable, that should already do the trick. Your own router behind theirs will work. Double nat does suck a bit but no matter how compromised their device is your own router treats it as wan and you will have your own firewall, dhcp, ipv4 only setup.

    Most ISP's (at least here) can also put their crap in bridge mode. Solving the double nat issue.
  • 0
    @hjk101 there is no antenna (externally)
    The issue is specifically the WiFi signal... im not sure how many more times/ways i can make that clear.

    Bridge mode, assuming anyone there was competent enough to even know wtf that is, wouldn't work for several reasons... and incase youre not just a moron but just chose to comment without reading... they dont even know what dhcpv6, wan, or how to check for their own logs ...or existence of wifi. Assuming theyd be able to do anything related to actual networking is unwise.
Add Comment