Oh look it's a homehub 3. Don't suppose you've tried a ShieldsUp on it have you? I would be interested to see whether ports 161 and 4567 are open on all of them, or just mine. I'm currently in the middle of a bit of a battle with BT trying to get them to explain why these ports can't be closed on my router.
Congrats Borg
brand new today and just set up, i dont know what a shieldsup is so no i havent tried it. whats the issue with the open ports
ShieldsUp is basically a port scan, it detects holes in the firewall. Even the default Windows Firewall manages to stealth all ports, and every router I have ever tested has always passed with flying colours, except the HH3: https://www.grc.com/x/ne.dll?bh0bkyd2
The issue for me specifiically, is port 161. It's used by SNMP and could, within theory at least be used to hijack the router. GRC | Port Authority, for Internet Port 161 BT seem to have a few official lines on this port being open, either it's used for updates, or "to speed up gaming". Personally, I'm more inclined towards the former, as I can't see any reason why it would speed up gaming.
The problem is though, it seems to be accepting any connections, from anywhere. I had a friend, who is on TalkTalk try to connect to my IP on 161 using his web browser, and it accepted the connection and just sat there "waiting" presumably waiting for instructions. I don't like to think what could happen if a SNMP agent was used instead.
that doesnt sound very good ,and presumably there is no way to close those ports
i just ran shields up and saw this result
Attempting connection to your computer. . .
Shields UP! is now attempting to contact the Hidden Internet Server within your PC. It is likely that no one has told you that your own personal computer may now be functioning as an Internet Server with neither your knowledge nor your permission. And that it may be serving up all or many of your personal files for reading, writing, modification and even deletion by anyone, anywhere, on the Internet!Your Internet port 139 does not appear to exist!
One or more ports on this system are operating in FULL STEALTH MODE! Standard Internet behavior requires port connection attempts to be answered with a success or refusal response. Therefore, only an attempt to connect to a nonexistent computer results in no response of either kind. But YOUR computer has DELIBERATELY CHOSEN NOT TO RESPOND (that's very cool!) which represents advanced computer and port stealthing capabilities. A machine configured in this fashion is well hardened to Internet NetBIOS attack and intrusion.
All attempts to get any information from your computer have FAILED. (This is very uncommon for a Windows networking-based PC.) Relative to vulnerabilities from Windows networking, this computer appears to be VERY SECURE since it is NOT exposing ANY of its internal NetBIOS networking protocol over the Internet.
Today I became the Owner of the Supporters Group :) If anyone is a supporter and has not joined then PM or VM Me and I will add you
https://www.sevenforums.com/group.php?groupid=83
