What to do about Open Ports

Comments

• VioletChepil London, UKMember Posts: 2,474 admin

  September 11

  We've had a similar thread posted here: (though related to Apple). 
  https://community.fing.com/discussion/624/open-ports-apple-airport-router 
  Perhaps these are very similar and I could merge them. What do you think?
  
  

  Community Manager at Fing

  0
• MDavide Member Posts: 47 ✭✭✭

  September 11 edited September 11

  satman said:

  They usually refer to dlink

  Hello @satman I don't need port forwarding with my dlink cameras, simply use dlink's app and you can see them when you're out of home.
  Cheers,

  Davide

  0
• satman Member Posts: 6 ✭

  September 11

  Thanks for the advice.  I have a mix of WiFi cameras, (dlink, TP-Link, VivoTek, Sricam, Foscam & Nest) so the dlink app doesn't cover my needs.  I use IP Cam Viewer on the Android platform and I'm using a DYN address for all my cameras.  Therefor port forwarding is essential.
  I'm able to view them all on one screen in that application and utilizing the Bluestacks Emulator I can use Android apps on my Windows Desktop.
  For my NVRs I use Dahua's SMART PSS, Q-SEE View and HikConnect.  Lots of different cameras at different locations!
  I also monitor a location with WYZE cameras.  They provide very good video but not multiple live video and there is no Desktop application for WYZE cameras.   

  

  2
• kltaylor Member, Beta Tester Posts: 570 ✭✭✭✭✭

  September 12

  satman said:

  I frequently get a Fing warnings about Open ports. They usually refer to dlink or other cameras I have setup with port forwarding so I can see them online when I'm not at home.

  My question is: What action should I take, if anything, when I get these Open Port warnings.

  My router is an Asus GT-AC5300 with 1 Mesh addition

  Is there a way to 'remember my decision' when you receive an alert to not alert you to that port again?

  On the flip-side of that, I think that I would rather have the alerts so that I am continuously aware of my network neighborhood if you will.

  I have an ASUS router as well with 1 node connected.  The only difference between your setup and mine is the addition of a Synology NAS, which comes with Surveillance Station.  It allows me to set up and record from those cameras 24/7 while only needing the main desktop access port to be open.

  This way, there is an additional layer of security in that.  Something to consider.
  

  "There's a fine line between audacity and idiocy."
  -Warden Anastasia Luccio, Captain
  

  

  1
• Lusu Member Posts: 8 ✭

  September 12

  I agree with the flip side of continuous alerts. If they suddenly stop, you’ll know you need to investigate further.
  
  

  

  2
• VioletChepil London, UKMember Posts: 2,474 admin

  September 13

  @satman just checking internally if there is anything we can add to help on this one. Any other IP camera experts feel free to help us too? @Pooh @Marc @Hronos @MDavide @Mirekmal @nexusnet @Manny_Cavalier @RickT49  

  Community Manager at Fing

  0
• Marc Member, Beta Tester Posts: 485 ✭✭✭✭✭

  September 13

  I also like to err on the side of caution and receive them, though I use gmail and set up rules so they don't clutter the inbox...

  Thats Daphnee, she's a good dog...

  

  1
• Mirekmal Member, Beta Tester Posts: 55 ✭✭✭

  September 13

  Well, that was discussed elsewhere already, including @Rbin comment about principles oh handling of open ports.
  My view: 
  - You have open ports that you are aware of, because you consciously opened these on router for some services running inside your network, that you need to have access to from Internet. Example: 8123 used as standard to access home assistant. In such scenario you should be able to mark such port as open/known to you and we should not get notification. Apparently it is possible from application, but I did not foud it intuitive. If I understood this well, you can delete the port from the list of ports to be scanned, but at the same time you miss track of what the port is used for. Either I do not get the idea or this is potential area for improvement.
  MDavide said; you can access network using dlink app... but this is because dlink router is opening port to your LAN using UPnP without you knowing about (I assume)!
  

  

  2
• Manny_Cavalier Member, Beta Tester Posts: 14 ✭✭

  September 13

  If you see an open port(s) that you are not familiar with, then blocked them from your main router (or firewall, just in case you have one).  Anyway, most SOHO routers do have these features/settings.  These lists of TCP/UDP ports may come in handy in case you need a reference - https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers

  
  

  
  

  

  2
• VioletChepil London, UKMember Posts: 2,474 admin

  September 16

  Thanks @Manny_Cavalier that helps a lot. 
  @satman to give more information from the DEV team. It’s a warning by Fingbox because having a port opened to the external is always something to be reported from a security point of view.
  If it’s intentional behaviour, configured by you, you can definitely ignore them.

  Community Manager at Fing

  

  1
• satman Member Posts: 6 ✭

  September 16

  Thank you. That gives me some peace of mind since the Open Ports always refers to one of my cameras.

  

  2
• VioletChepil London, UKMember Posts: 2,474 admin

  September 16

  Great news @satman glad you have piece of mind now! One of Fingbox main goals  

  Community Manager at Fing

  

  2