That’s just how UPnP works - it trusts all requests coming from within your local network.ĭNSSEC is supposed to provide additional security, but it’s no panacea here. Even if UPnP isn’t vulnerable on your router, a piece of malware running somewhere inside your local network can use UPnP to change your DNS server. Turn Off UPnP: UPnP has been particularly vulnerable.

Change the Password: Change the password to the router’s web-based administration interface so attackers can’t just get in with the default one.

Disable Remote Access: Disable remote access to the router’s web-based administration pages.

This at least ensures you’re protected from any flaws that have been patched. Enable automatic firmware updates if the router offers it - unfortunately, most routers don’t.

Install Firmware Updates: E nsure the latest firmware for your router is installed.

If the router has security holes the manufacturer hasn’t patched, you can’t completely secure it. You can certainly harden your router against these attacks - somewhat.

RELATED: Secure Your Wireless Router: 8 Things You Can Do Right Now Then, use the tricks below to help secure the router against further attacks. If there is a malicious DNS server entered here, you may want to wipe all your router’s settings and factory-reset it before setting it back up again - just to be safe. If there is a malicious DNS server configured here, you can disable it and tell your router to use the automatic DNS server from your ISP or enter the addresses of legitimate DNS servers like Google DNS or OpenDNS here.

Router security scan