Greetings ppl,
I have IS uncapped aDSL at the office - if I portscan any of the public IP's in our /29 from outside, HTTP port 80 and FTP port 21 are shown as open. Noted this with our old firewall, and repeated the exercise after having just upgraded the firewall (MNF -> pfSense 1.2.2) and I still see the same behaviour. Where I do explicitly open ports on my NAT'd DMZ boxes (only FTP, DNS and SMTP so far), they do behave as expected.
It seems it is the aDSL router, not my firewall, which is presenting these ports. Is this default behaviour, or something I can change? The router is locked down and I have no explicit access to it. If I portscan the router itself, it displays a startling array of ports, including a live SSH server. The rest of the ports are shown as open, but if you try to connect to them you don't get anywhere.
Unfortunately I don't have the exact model of the router, but I think it is a Cisco 8xx or similar. I'm intrigued as to why these ports would be presented
, when not explicitly opened on the FW - would appreciate any input.
Cheers amigos,
RatX
I have IS uncapped aDSL at the office - if I portscan any of the public IP's in our /29 from outside, HTTP port 80 and FTP port 21 are shown as open. Noted this with our old firewall, and repeated the exercise after having just upgraded the firewall (MNF -> pfSense 1.2.2) and I still see the same behaviour. Where I do explicitly open ports on my NAT'd DMZ boxes (only FTP, DNS and SMTP so far), they do behave as expected.
It seems it is the aDSL router, not my firewall, which is presenting these ports. Is this default behaviour, or something I can change? The router is locked down and I have no explicit access to it. If I portscan the router itself, it displays a startling array of ports, including a live SSH server. The rest of the ports are shown as open, but if you try to connect to them you don't get anywhere.
Unfortunately I don't have the exact model of the router, but I think it is a Cisco 8xx or similar. I'm intrigued as to why these ports would be presented
, when not explicitly opened on the FW - would appreciate any input.Cheers amigos,
RatX