Wilders Security Forums  

Go Back   Wilders Security Forums > Security Software > other firewalls
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old December 22nd, 2004, 10:34 PM
rewe rewe is offline
Infrequent Poster
 
Join Date: Dec 2004
Posts: 2
Default port 2869 scan

I use xp sp2 and checpoint firewall on on computer with two netxork cards using same ip range. 10.0.0.0

I have a dsl connection on the same range

my firewall logs something like a slow port scan on port 2869 incoming from ip source internal modem adress (high port tcp) destination my ip adress of internet connection.
  #2  
Old December 22nd, 2004, 11:38 PM
CrazyM's Avatar
CrazyM CrazyM is offline
Firewall Moderator
 
Join Date: Feb 2002
Location: BC, Canada
Posts: 2,439
Default Re: port 2869 scan

Hi rewe

... and welcome to Wilders

Quote:
I use xp sp2 and checpoint firewall on on computer with two netxork cards using same ip range. 10.0.0.0

I have a dsl connection on the same range

my firewall logs something like a slow port scan on port 2869 incoming from ip source internal modem adress (high port tcp) destination my ip adress of internet connection.
SSDP Discovery Service (UPnP) event notification starting with XP SP2 will also use TCP port 2869 in addition to TCP 5000 and UDP 1900. If your modem has this enabled, that could be what you are seeing.

Regards,

CrazyM
__________________
"The best thing we can do in cyberspace is exactly what we do in the real world: do our best to manage the risks."
- Bruce Schneier
  #3  
Old December 23rd, 2004, 05:04 PM
rewe rewe is offline
Infrequent Poster
 
Join Date: Dec 2004
Posts: 2
Wink Re: port 2869 scan

I disabled the pnp features on my modem and everything seems to work fine, no more alerts ...Just thank you for your nice advice.

I never could imagine that the modem with à buiilt-in firewall could have pnp enabled by default...
  #4  
Old December 23rd, 2004, 05:23 PM
CrazyM's Avatar
CrazyM CrazyM is offline
Firewall Moderator
 
Join Date: Feb 2002
Location: BC, Canada
Posts: 2,439
Default Re: port 2869 scan

Quote:
Originally Posted by rewe
I disabled the pnp features on my modem and everything seems to work fine, no more alerts ...Just thank you for your nice advice.
Good to hear it resolved your issue and your welcome

Quote:
I never could imagine that the modem with à buiilt-in firewall could have pnp enabled by default...
What is enabled by default in some hardware devices and software always keeps computing interesting

Regards,

CrazyM
__________________
"The best thing we can do in cyberspace is exactly what we do in the real world: do our best to manage the risks."
- Bruce Schneier
 

Wilders Security Forums > Security Software > other firewalls « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -5. The time now is 07:52 AM.


Powered by vBulletin® Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2009, Wilders Security Forums