What to do about Open Ports

satman
satman Member Posts: 9
5 Likes Photogenic First Comment
✭
in Devices & Security #1

I frequently get a Fing warnings about Open ports. They usually refer to dlink or other cameras I have setup with port forwarding so I can see them online when I'm not at home.

My question is: What action should I take, if anything, when I get these Open Port warnings.

My router is an Asus GT-AC5300 with 1 Mesh addition

Tagged:
VioletChepil

Comments

  • VioletChepil
    VioletChepil Member Posts: 2,471
    100 Answers 500 Likes 1000 Comments 250 Awesomes
    ✭✭✭✭✭✭
    #2
    We've had a similar thread posted here: (though related to Apple). 
    https://community.fing.com/discussion/624/open-ports-apple-airport-router 
    Perhaps these are very similar and I could merge them. What do you think?

    Community Manager at Fing

  • MDavide
    MDavide Member Posts: 53
    Second Anniversary 25 Likes 10 Comments First Answer
    ✭✭✭
    edited September 11, 2019 #3
    satman said:

    They usually refer to dlink

    Hello @satman I don't need port forwarding with my dlink cameras, simply use dlink's app and you can see them when you're out of home.
    Cheers,
    Davide
  • satman
    satman Member Posts: 9
    5 Likes Photogenic First Comment
    ✭
    #4
    Thanks for the advice.  I have a mix of WiFi cameras, (dlink, TP-Link, VivoTek, Sricam, Foscam & Nest) so the dlink app doesn't cover my needs.  I use IP Cam Viewer on the Android platform and I'm using a DYN address for all my cameras.  Therefor port forwarding is essential.
    I'm able to view them all on one screen in that application and utilizing the Bluestacks Emulator I can use Android apps on my Windows Desktop.
    For my NVRs I use Dahua's SMART PSS, Q-SEE View and HikConnect.  Lots of different cameras at different locations!
    I also monitor a location with WYZE cameras.  They provide very good video but not multiple live video and there is no Desktop application for WYZE cameras.   
    MDavideVioletChepil
  • kltaylor
    kltaylor Member, Beta Tester Posts: 1,231
    1000 Comments 500 Likes 50 Answers 100 Awesomes
    ✭✭✭✭✭✭
    #5
    satman said:

    I frequently get a Fing warnings about Open ports. They usually refer to dlink or other cameras I have setup with port forwarding so I can see them online when I'm not at home.

    My question is: What action should I take, if anything, when I get these Open Port warnings.

    My router is an Asus GT-AC5300 with 1 Mesh addition

    Is there a way to 'remember my decision' when you receive an alert to not alert you to that port again?
    On the flip-side of that, I think that I would rather have the alerts so that I am continuously aware of my network neighborhood if you will.
    I have an ASUS router as well with 1 node connected.  The only difference between your setup and mine is the addition of a Synology NAS, which comes with Surveillance Station.  It allows me to set up and record from those cameras 24/7 while only needing the main desktop access port to be open.
    This way, there is an additional layer of security in that.  Something to consider.
    "There's a fine line between audacity and idiocy."
    -Warden Anastasia Luccio, Captain
    Marc
  • Lusu
    Lusu Member Posts: 8
    5 Likes First Comment
    ✭
    #6
    I agree with the flip side of continuous alerts. If they suddenly stop, you’ll know you need to investigate further.

    kltaylorVioletChepil
  • VioletChepil
    VioletChepil Member Posts: 2,471
    100 Answers 500 Likes 1000 Comments 250 Awesomes
    ✭✭✭✭✭✭
    #7
    @satman just checking internally if there is anything we can add to help on this one. Any other IP camera experts feel free to help us too? @Pooh @Marc @Hronos @MDavide @Mirekmal @nexusnet @Manny_Cavalier @RickT49 :) 

    Community Manager at Fing

  • Marc
    Marc Moderator, Beta Tester Posts: 3,187
    250 Answers 1,000 Likes 2500 Comments 250 Awesomes
    ✭✭✭✭✭✭✭
    #8
    I also like to err on the side of caution and receive them, though I use gmail and set up rules so they don't clutter the inbox...
    Thats Daphnee, she's a good dog...
    kltaylor
  • Mirekmal
    Mirekmal Member, Beta Tester Posts: 69
    Third Anniversary 25 Agrees 25 Likes 10 Comments
    ✭✭✭
    #9
    Well, that was discussed elsewhere already, including @Rbin comment about principles oh handling of open ports.
    My view: 
    - You have open ports that you are aware of, because you consciously opened these on router for some services running inside your network, that you need to have access to from Internet. Example: 8123 used as standard to access home assistant. In such scenario you should be able to mark such port as open/known to you and we should not get notification. Apparently it is possible from application, but I did not foud it intuitive. If I understood this well, you can delete the port from the list of ports to be scanned, but at the same time you miss track of what the port is used for. Either I do not get the idea or this is potential area for improvement.
    MDavide said; you can access network using dlink app... but this is because dlink router is opening port to your LAN using UPnP without you knowing about (I assume)!
    kltaylorHronos
  • Manny_Cavalier
    Manny_Cavalier Member, Beta Tester Posts: 19
    10 Comments First Anniversary 5 Likes Photogenic
    ✭✭
    #10
    If you see an open port(s) that you are not familiar with, then blocked them from your main router (or firewall, just in case you have one).  Anyway, most SOHO routers do have these features/settings.  These lists of TCP/UDP ports may come in handy in case you need a reference - https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers


    VioletChepilkltaylor
  • VioletChepil
    VioletChepil Member Posts: 2,471
    100 Answers 500 Likes 1000 Comments 250 Awesomes
    ✭✭✭✭✭✭
    #11
    Thanks @Manny_Cavalier that helps a lot. 
    @satman to give more information from the DEV team. It’s a warning by Fingbox because having a port opened to the external is always something to be reported from a security point of view.
    If it’s intentional behaviour, configured by you, you can definitely ignore them.

    Community Manager at Fing

    kltaylor
  • satman
    satman Member Posts: 9
    5 Likes Photogenic First Comment
    ✭
    #12

    Thank you. That gives me some peace of mind since the Open Ports always refers to one of my cameras.

    VioletChepilkltaylor
  • VioletChepil
    VioletChepil Member Posts: 2,471
    100 Answers 500 Likes 1000 Comments 250 Awesomes
    ✭✭✭✭✭✭
    #13
    Great news @satman glad you have piece of mind now! One of Fingbox main goals :) 

    Community Manager at Fing

    kltaylorHronos

Categories