dns resolution and ssh on wan ip...

hi , i finish to update all my clients to 3.0.1. So i do a ip scan on my range and i found some client i can do dns resolution on their wan ip ... and some have ssh enable or both when i use the antenna in nat mode with pppoe... 

I have a vlan for data and a vlan for managing the radio. No port forwarding at all... 

Hi,

Apologies for not understanding the issue correctly.

I'm not sure if you are mentioning about the SSH access not available on some SMs or about the DNS issue. Couold you please give us more information on this?

Regards,

Sanjay Kumar.

hi sorry for my bad english. What i said is ssh port 22 on some client and port 53 dns are accesible on the wan port.All my client are now on 3.0.1. I make a ip scan of my ip client range. Why the port are not blocked on the wan port... It can be use for bruteforce on ssh and make ddos dns amplification. So is a big concern for me... But is not on all client cpe... What i found strange and they all use the same config...