Telstra Smart Modem Gen 3: Time to Improve Firewall Settings?

A firewall is the last line of defence against cyber threats, protecting our personal and sensitive information from malicious actors. The Telstra Smart Modem Gen 3 (Technicolor Cobra XH), is a device relied upon by thousands of Australians.

Over the years Telstra has added to its functionality in the background, mainly boosting their ability to monitor the status of your network, filter DNS traffic and assist with fault diagnostics before dispatching a field tech to site. Sure, this helps with proactively identifying faults and shorting the down time for customers but over the years little has been done to improve its the functionality and customisation via the GUI, leaving out features to help small business and families customise their networks.

Telstra's modem's GUI remains limited in its ability to block specific websites network wide, bulk import of domains and provide advanced filtering options. Currently if a user want to block a porn site network wide, they have to block each individual device via MAC address which is tedious to say the least.

We have 1000's of families wanting a safe home network but don't have the time or know how to individually block multiple devices to 1000's of URL's. It's time for Telstra to take a closer look at their modem's firewall capabilities and consider enhancing them to better meet the needs of their customers.

The Limitations of the Cobra XH's Firewall

The Cobra XH's firewall, while a crucial component of the Telstra Smart Modem 3, has several limitations that make it inadequate for modern network security needs.

These limitations include:

Limited rule creation: The Cobra XH's firewall allows users to create only a limited number of rules, making it difficult to block specific websites or services.

No bulk URL blocking: Unlike other router operating systems, the Cobra XH does not allow users to upload a list of URLs to block, making it challenging to protect against known malicious sites.

Benefits of a More Advanced Firewall

A more advanced firewall offers numerous benefits for end users.

Improved online safety: By blocking access to malicious websites and restricting access to certain devices, a more advanced firewall can create a safer online environment for families and individuals.

Reduced online distractions: By blocking access to non-essential websites and services, a more advanced firewall can help users stay focused and productive.

Comparison to Other OS: A Better Alternative?

Telstra customers do have the ability to purchase other routers and use them on their Telstra Internet service. Other router operating systems, such as pfSense, OpenWrt, and Teltonika Networks RUTOS, offer more advanced firewall capabilities and customisation options.

Let's take a closer look at the alternatives:

pfSense: A free, open-source firewall distribution that offers advanced features such as:

• Customisation rules and policies
• Advanced filtering options, including IP blocking and traffic shaping
• Real-time monitoring and logging
• Integration with other security tools and systems

OpenWrt: An open-source router distribution that offers a high degree of customisation and flexibility, I believe that Technicolor would be using a customised version of this but they have not included a lot of features to the customer facing GUI when companies like Teltonika have.

Teltonika Networks RUTOS: A commercial router operating system built off OpenWrt that offers advanced features such as:

• Customisation rules and policies
• Advanced filtering options, including IP blocking and traffic shaping
• Real-time monitoring and logging
• Integration with other security tools and systems

A Proposal to Telstra: Enhance Firewall Capabilities

Based on the limitations of the Cobra XH's firewall and the benefits of a more advanced firewall, I propose that Telstra consider improve their firewall capabilities to provide a more customisation experience for their customers.

Allow users to upload bulk URL block lists: This would enable users to block multiple websites and services at once, improving online safety and reducing the risk of cyber attacks.

Provide advanced filtering options: This would include features such as IP blocking, traffic shaping, and real-time monitoring and logging, allowing users to customise their firewall settings to meet their specific needs.

Offer customisation rules and policies: This would enable users to create custom rules and policies to suit their specific needs.

Telstra's DNS Blocking: A Good Start

Before closing out, I must talk about the work being done by Telstra with their DNS. I am sure you have seen one of their security ads, protecting you while you go about your day. I would bet a lot of the malicious traffic is blocked via their DNS.

Telstra has taken a step in the right direction by blocking known malicious domains via their DNS service. Blocking traffic when users click a bad link or misspell a domain. This is a positive move towards improving online safety and security for their customers. DNS blocking is just one aspect of network security, and it is not a substitute for a customisation firewall.

DNS blocking only protects against known malicious domains: It does not let a family protect against X rated sites or Social Media.

DNS blocking is not a substitute for user education and awareness: Users still need to be aware of the risks and take steps to protect themselves online.

DNS blocking is not a guarantee of online safety: It is just one layer of protection, and users should still be able to take additional steps to secure their online activities.

Options are good

I don't like to be pigeon holed into one option or one way of doing things. Same comes with my home network, I want more flexibility. I shouldn't have to buy an alternative modem just to have more control over my home firewall.

Any updates or changes will be posted here.