When i scanned my router with nmap i got this:
25/tcp open smtp
110/tcp open pop3-proxy Avast! anti-virus pop3 proxy (cannot connect to 10.0.0.1)
119/tcp open nntp-proxy Avast! anti-virus NNTP proxy (cannot connect to 10.0.0.1)
143/tcp open imap-proxy Avast! anti-virus IMAP proxy (cannot connect to 10.0.0.1)
465/tcp open tcpwrapped
563/tcp open tcpwrapped
587/tcp open smtp-proxy Avast! anti-virus smtp proxy (cannot connect to 10.0.0.1)
993/tcp open tcpwrapped
995/tcp open tcpwrapped
8291/tcp open winbox MikroTik WinBox
How did those ports got open on my router and how can i close them ?
-
-
gotsprings
Forum Guru
- Posts: 2310
- Joined:
Re: Open Ports
Export your firewall and maybe we can figure it out.
/ip firewall filter export
/ip firewall filter export
Re: Open Ports
Do you scan in inside LAN or on utside WAN?
And post your FW config.
And post your FW config.
Re: Open Ports
i scan from inside LAN...
Can applications on PCs open ports on router ?
Code: Select all
add action=add-src-to-address-list address-list="port scanners" address-list-timeout=2w chain=input comment="Port scanners to list " protocol=tcp psd=21,3s,3,1
add action=accept chain=input comment="Accept Ping" protocol=icmp
add action=accept chain=input comment="VPN Protocol" protocol=gre
add action=drop chain=input comment=SMTP dst-port="" port=25 protocol=tcpCan applications on PCs open ports on router ?
Re: Open Ports
That's not a valid scan. Avast is intercepting the nmap scan and reporting open ports, but almost all of them are not on the router .. they are local to the host.
The "proxy" ones are self evident. Another example .. tcp/563 is the Avast service itself. Google and see what the others are.
The "proxy" ones are self evident. Another example .. tcp/563 is the Avast service itself. Google and see what the others are.
Re: Open Ports
That's not a valid scan. Avast is intercepting the nmap scan and reporting open ports, but almost all of them are not on the router .. they are local to the host.
The "proxy" ones are self evident. Another example .. tcp/563 is the Avast service itself. Google and see what the others are.
i used to scan the network from lan and in results had open just 2 ports (dns for example and mikrotik winbox)
now when i scan the network from inside (im scaning WAN interface btw not LAN) i have tons of open ports....dont have avast installed anywhere tho
and when i try to scan WAN interface from some remote PC with nmap its says that "host seems down. maybe its really up but blocking our ping probes"
-
-
tippenring
Member
- Posts: 304
- Joined:
- Location: St Louis MO
- Contact:
Re: Open Ports
Yes, you have Avast installed somewhere. Probably on the PC you are scanning with is my guess. Avast is responding to a lot of your SYN packets.i used to scan the network from lan and in results had open just 2 ports (dns for example and mikrotik winbox)
now when i scan the network from inside (im scaning WAN interface btw not LAN) i have tons of open ports....dont have avast installed anywhere tho
The IP you are pinging is not responding.and when i try to scan WAN interface from some remote PC with nmap its says that "host seems down. maybe its really up but blocking our ping probes"
Re: Open Ports
As was noted, if you are scanning from a PC within the LAN, the scan is filtered by whats going out to the LAN in accordance with the security apps on your PC and you are scanning your LAN and not the router.
If you want a more valid test of your router (not the litmus test but a reasonable test) go to grc.com.
Click on the Shields Up logo/url then after the next screen scroll down to " New Shields Up Test" (usually right after the Spinrite block).
Select proceed.
Try the file sharing selection first.
Then conduct the Common Ports
If you want you can also select specific ports or all ports (will take awhile).
Have fun!
If you want a more valid test of your router (not the litmus test but a reasonable test) go to grc.com.
Click on the Shields Up logo/url then after the next screen scroll down to " New Shields Up Test" (usually right after the Spinrite block).
Select proceed.
Try the file sharing selection first.
Then conduct the Common Ports
If you want you can also select specific ports or all ports (will take awhile).
Have fun!
Who is online
Users browsing this forum: haedertowfeq, saluki and 31 guests