From: <(E-Mail Removed)>
| I suppose this may be a simple question, but I did a port scan on my
| Linksys router and found about 20 open UDP ports, along with the open
| TCP ports that I configured for port forwarding. My question is, how
| can these UDP ports be open to the outside world if I have not
| specificly given the router permission to forward these ports?
| Theoreticly, if I run FTP(21),SHH(22), & HTTP(80) on a server, but only
| forward port 80, that will be the only open port when doing a port
| scan... even though port 21 & 22 are open and listening on that given
| box. Now, I know my theory is based on TCP ports, and I'm asking about
| UDP ports, but I'm assuming the Linksys router/firewall should be
| blocking everything, and only allowing what I permit.
| I'd appreciate any insight into this matter, and ask that all replies
| be cc: to my personal email.
| Thank you.
|
| Frank Baris
| frank AT clydedevelopment.com
What did you use to perform said port scan against the Linksys Router ?
What Linksys model ?
NAT doesn't automatically "block". Nor is it a full FireWall implementation unless it
specifically adds a FireWall application such as SPI and an extensive set of rules.
However it can act as a simplistic FireWall and does provide many FireWall constructs.
As always I suggest blocking both TCP and UDP ports 135 ~ 139 and 445 on *any* SOHO Router.
On many Linksys Routers this is set at;
http://192.168.1.1/Filters.htm
--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm