An unauthenticated RouterOS SSH exploit got admin rights on my MikroTik and planted a VPN backdoor in nine seconds. Off-box logging caught it in one. Real logs, what to check on your router, and why the patch matters more than your SSH keys.
Replacing the Bouygues Telecom Bbox with your own router is well documented for internet: a GPON SFP stick with the ONT identity cloned, VLAN 100, DHCP. The TV decoder is a different story.
Once your LAN speaks IPv6, the next itch is obvious: make something on it reachable from the internet over IPv6. The example here is a self-hosted blog running behind nginx in Docker,
Your ISP gives you IPv6. Your MikroTik even pulls a prefix from it without complaint. And yet not a single device on your LAN can reach the IPv6 internet, and test-ipv6.com
