Who owns the box? If your client bought it outright then you are free to do what ever with the internals. BUt a simpler approach is to just install a pf-Sense box filter everything. Sounds if the ISP in question is either a shoe-string operation or is nefarious. Find another ISP, even decent providers should not be 100% trusted.
1 Like