Newly opened ports, should I be worried?



I run the Fing premium Find Open Ports report most days on iOS and there are always 3 open, 443, 80 and 53. This morning it had changed to 80, 443, 5060 Session Initiation Protocol (SIP), and 8080 http-proxy Common HTTP proxy/second web server port. Have contacted BT for Smart Hub help for Full Fibre To House, FTTH, and tried to find out more on Stack Exchange/Wikipedia but no further forward. Also some devices (Sonos speakers) that were working fine can not be found on the network and now instead have a page asking if I have changed my settings, I have not. The only change made in the last 24 hours is upgrading iOS software to 14.4.1.
Best Answers
-
@Rss , first thing to do is to get into your router configuration console and disable upnp. This feature allows anything on your network to request a port opening on your router. While convenient, as you can see it open you up to these types of issues. Once you disable it, reboot your router to clear everything out.
if something needs a port open, you can always open it yourself via your routers admin console or app.
Thats Daphnee, she's a good dog...3 -
Marc said:
@Rss , first thing to do is to get into your router configuration console and disable upnp. This feature allows anything on your network to request a port opening on your router. While convenient, as you can see it open you up to these types of issues. Once you disable it, reboot your router to clear everything out.
if something needs a port open, you can always open it yourself via your routers admin console or app.
Security 101 : NEVER leave that UPNP active!
Best practice for the average (common) setup below. Do NOT do this if you are in separate network segments, VLAN etc. Also: if you use port-forwarding (eg for gaming, server-activities), make sure you have the particulars, so you can add them manually afterwards.
Check your router's manual to what IP-address it will default after a reset - you will need it.
To configure your router, use a CABLED connection with the PC/Laptop you will be working on. Do NOT use a tablet or other mobile device. Use your BROWSER to connect to your router with the IP address the manual is telling you to use.
Fifteen relatively simple steps to make your network safer and more stable:- Switch off all your devices (phones, laptops. PCs, printers. domotica, etc, then any switches and satellites you might have);
- If you have one: Disconnect that FING box from your router;
- Reset your router (eg. via a reset button, check your manual) and wait for it to come up again;
- Leave UPNP active, for now;
- Switch on all your devices (satellites and switches first if you have them, then phones, laptops. PCs, printers. domotica, etc);
- If you have one: Connect that FING box to your router;
- Wait 5-10 mins for your network to settle. Just be patient - have a cuppa;
- In your router (NOT the FING box!), check the list of connected devices (LAN and WAN) and make sure you see them all;
- Disable UPNP in your router;
- Assign ALL your connected devices to a FIXED IP-address (be smart - group them - write it down), using their MAC addresses, that means your switches and satellites AND that FING box as well (modern routers have convenient tools for this). Takes a while, but it's worth the effort;
- Switch all your devices OFF again;
- Reboot your router and wait for it to settle - feed the dog/cat;
- Switch all your devices ON again;
- If necessary, add any port-forwarding you have been using. Make sure to use the proper IP-addresses (assigned by you in step 10, remember?) and commit the changes;
- Have a cup of coffee/tea and enjoy the improved safety and stability.
Your FING box will now flag and block any new device, but only if you ENABLE that option in the settings. Don’t forget that.My tuppence ....
2 -
Rss said:Just to let you know I did what you said and it appears to have worked, when I ran Find Open Ports earlier it’s back to the original 442, 80 and 53 being open, the others are now closed. Have disabled UPNP, it was previously on, and also changed the password from the standard out-of-the box 14 characters to 50!So hopefully job done for the time being - thanks again for your help, without it I would have wasted a lot of time.Btw can anyone recommend a good beginners course for understanding networks, I find it fascinating just incredibly confusing, where do you start to learn about this please?
https://stevessmarthomeguide.com/basic-networking-course/.
Also this one for more generalized information, which you can sign up to receive new articles via email, https://askleo.com/recent-entries/
I hope these sources help!1
Answers
-
Assign ALL your connected devices to a FIXED IP-address (be smart - group them - write it down), using their MAC addresses, that means your switches and satellites AND that FING box as well (modern routers have convenient tools for this). Takes a while, but it's worth the effort;
Setting static addresses on mobile devices in particular is not a good idea as when the user switches (changes to other) networks the device may not be able to connect to that IP address if it is already in use or the network uses a different subnet & hence a different IP address range.
Another “tuppence” spent 😉
0 -
Regarding the fixed IP-Addresses, I should have been a bit more specific.
Of course I did not mean to put a static IP on your individual devices - use the router for that, by assigning IP addresses to the MAC addresses of those devices.
That way, you will always know what’s (and who!) is on your network.
Thanks for the feedback :)
0 -
Just to let you know I did what you said and it appears to have worked, when I ran Find Open Ports earlier it’s back to the original 442, 80 and 53 being open, the others are now closed. Have disabled UPNP, it was previously on, and also changed the password from the standard out-of-the box 14 characters to 50!So hopefully job done for the time being - thanks again for your help, without it I would have wasted a lot of time.Btw can anyone recommend a good beginners course for understanding networks, I find it fascinating just incredibly confusing, where do you start to learn about this please?0
Categories
- 5.6K All Categories
- 2.8K Ask about Connected Technology
- How To...
- 1K Devices & Security
- 1.5K Network Troubleshooting & Connectivity
- 112 General Discussion, Weird & Wonderful
- 42 Network Infrastructure
- 5.2K Ask about Fing
- 531 Fing Account Change Request
- 1.1K Fing Desktop
- 1.3K Fing App
- 1.6K Fingbox
- 485 Announcements, Beta Testing & Release Notes
- 157 Community Updates
- 24 Getting started
- 13 Community User Guides