port 2869 scan

[rewe]

I use xp sp2 and checpoint firewall on on computer with two netxork cards using same ip range. 10.0.0.0

I have a dsl connection on the same range

my firewall logs something like a slow port scan on port 2869 incoming from ip source internal modem adress (high port tcp) destination my ip adress of internet connection.

[CrazyM]

Hi rewe

... and welcome to Wilders :)

{QUOTE-> I use xp sp2 and checpoint firewall on on computer with two netxork cards using same ip range. 10.0.0.0

I have a dsl connection on the same range

my firewall logs something like a slow port scan on port 2869 incoming from ip source internal modem adress (high port tcp) destination my ip adress of internet connection. <-QUOTE}
SSDP Discovery Service (UPnP) event notification starting with XP SP2 will also use TCP port 2869 in addition to TCP 5000 and UDP 1900. If your modem has this enabled, that could be what you are seeing.

Regards,

CrazyM

[rewe]

I disabled the pnp features on my modem and everything seems to work fine, no more alerts ...Just thank you for your nice advice.

I never could imagine that the modem with à buiilt-in firewall could have pnp enabled by default...

[CrazyM]

{QUOTE-> I disabled the pnp features on my modem and everything seems to work fine, no more alerts ...Just thank you for your nice advice. <-QUOTE}
Good to hear it resolved your issue and your welcome :)

{QUOTE-> I never could imagine that the modem with à buiilt-in firewall could have pnp enabled by default... <-QUOTE}
What is enabled by default in some hardware devices and software always keeps computing interesting ;)

Regards,

CrazyM