Security instructions when using a public IP address

When using an public ip address, your network is exposed to access from the Internet. It is therefore essential that you observe the following security instructions so that your network is best protected against cyber attacks and infection by malware.

Safety instructions (security checklist).

• Set a secure password
  Make sure to change the factory default passwords on your network devices and routers and set a secure password.

• Enable firewall
  Secure your accessible network devices against unauthorised access from the Internet by using a firewall.

• Disable unused services
  Deactivate all unnecessary services/servers in your mobile router and the accessible terminals.
  

  Open services / servers
  Opened mDNS-Services	(Port 5353)
  Opened DNS-Resolver	(Port 53)
  Opened SNMP-Server	(Port 161)
  Opened SSDP-Server	(Port 1900)
  Opened Portmapper-Services	(Port 111)
  Services for administration
  SSH	(Port 22)
  Telnet	(Port 23)
  RDP	(Port 3389)

  For more information, please refer to the documentation of your operating system or contact your network administrator.

• Port forwarding only for required ports
  Instead of "forwarding all ports" in your router, it is better to set up Port Forwarding (Forwarding) to the destination device only for the required ports. A description of how to set up port forwarding can usually be found in the manual of the router you are using.
   
• Regular software updates
  New software releases close known security gaps and thus continuously improve protection against possible cyber attacks. Make sure all routers and network devices always have the latest software versions installed.

• Keep your employees informed about threats from the internet
  Make your employees aware of possible dangers from the internet so that they do not open file attachments from unknown senders or download files from unknown internet sites. This reduces the risk of your network devices being infected by Malware (e.g. ransomware malware Locky).

• Encrypt your data transmission
  Data transmission over the internet should be encrypted. Most routers and network devices supported appropriate encryption protocols, such as IPsec.