Open ports? Which ones?

I ran port scan on my AE base station and found the following ports open:
Port Scan has started ...
Port Scanning host: 10.0.1.1
Open TCP Port: 53
Open TCP Port: 5009
Open TCP Port: 10000
Port Scan has completed ...
is this a concern? If so how do I close them / reroute them. Not sure which airport software it's running, but I do software update weekly so it should have the latest.

Port 53 is used by DNS
Port 5009 is used by Airport Admin Utility, Airport Utility, and Airport Express Admin utility. Perhaps this is controlled by the option to permit admin of the AEBS from the WAN port. Didable such option, and have a good password on your AEBS (not the wireless security password).
Port 10000 I don't know, but port numbers > 1023 are not very worrysome.
Nothing to worry about. You can't do anything about it anyway and, I suspect, they don't get past the Airport's WAN interface.

Similar Messages

Open port for one device

Occasionally I need to open a port to one device on my network so a programmer has access to a home automation controller. Previosly I was using the RVS4000 with no problems. I would just put my port number in and tell the router what IP address the automation controller was at. I now have the RV180W and I've tried averything I can think of at this point. Any help would be gretaly appreciated!
Thank in advance

How did you do it on the rvs4000?
Huntsville's Premiere Car and Bike e-magazine: www.huntsvillecarscene.com

Do I need to open ports for NTP?

I just noticed that my hwclock was off by nearly 30 seconds. It's almost certainly due to the recent initscripts update.
As I was looking into resetting the clock, I found out that openntpd is deprecated so I've switched to ntp, configured the daemon, reset the time with ntpd -q, and started the daemon. The time is not accurate again.
I remember back when I first installed Arch I tried to set up ntp but it didn't seem to work, so I tried openntpd and stuck with that. I reached the conclusion that ntp required open ports, which I felt was unnecessary given that openntpd could do the same thing without open ports.
Now that I'm looking at it again, I can't find any definitive answer...
Do I need to open ports for ntp if I only want to sync the system that it's running on?

ISC ntpd (the ntp package) will open UDP 123 on all your interfaces regardless of what you do with it. It will work anyway even if you block this port in iptables, assuming that you're allowing responses to established traffic as usual - your outbound mobilization requests to your chosen servers will be enough to allow the responses, and the same with further traffic sent for the lifetime of ntpd. Using iptables like this is probably the easiest way to secure ntpd.
There's also some defense in depth you can do:
- run ntpd as non-root
- run it chrooted to some safe directory (really only makes sense when doing non-root as well, since root can break out of a chroot)
- apply ntpd's built-in access controls (see examples in ntpd.conf, and full docs in ntp_acc(5))
I accomplish the first two of these by chowning /var/lib/ntp (and any contents) to ntp:ntp (so ntpd can write ntp.drift there when non-root), by using a driftfile path relative to the chroot in ntp.conf, and by setting NTPD_ARGS="-g -i /var/lib/ntp -u ntp:ntp" in /etc/conf.d/ntp-client.conf.
For the third, I chose to not allow any remote traffic to initiate anything with my ntpd, with this /etc/ntp.conf:
server ac-ntp0.net.cmu.edu iburst
server ac-ntp1.net.cmu.edu iburst
server ac-ntp2.net.cmu.edu iburst
server ac-ntp3.net.cmu.edu iburst
server ac-ntp4.net.cmu.edu iburst
restrict default nomodify nopeer noquery
restrict 127.0.0.1
driftfile /ntp.drift
Note the two "restrict" lines. The first shuts out remote access of most kinds, and the second allows the local machine all the access that would also be denied to it as well otherwise by the first rule. Note also the driftfile path, relative to the chroot of /var/lib/ntp/.
With all these security features, ISC ntpd can be just as safe as openntpd.
The use of the "iburst" keyword on the server lines to recover more quickly from out-of-contact conditions is also quite nice, and not rude to the remotes like "burst" would be.
One of the nicest other features of ISC ntpd is that it's smart enough to notice when network state changes occur, like bringing a VPN up/down, changing routes, or switching from wired to wireless and back. openntpd tended to just lose connections in these cases.

In youtube any video gets open for download, I think through an add-on but I have a few of them and i don't know which one

For example, say, I open this youtube page: https://www.youtube.com/watch?v=e-ORhEE9VVg
Firefox opens it and whithin 5 seconds, with no action on my part - no clicking, typing, nothing - transfers me over to:
https://r7---sn-8p85jvh-nv4e.googlevideo.com/videoplayback?mm=31&source=youtube&ratebypass=yes&dur=272.462&mt=1423341461&mv=m&ms=au&fexp=907263%2C924628%2C927622%2C930676%2C943917%2C945098%2C947225%2C948124%2C948909%2C952302%2C952605%2C952612%2C952901%2C955301%2C957201%2C959701&ip=79.100.24.238&upn=3_qYUmHqoVM&id=o-ALB3CMI8PMR7Ylk-0D_a76ghgOzcADyQvQ21B3HCYCCW&sparams=dur%2Cid%2Cinitcwndbps%2Cip%2Cipbits%2Citag%2Cmime%2Cmm%2Cms%2Cmv%2Cpl%2Cratebypass%2Crequiressl%2Csource%2Cupn%2Cexpire&initcwndbps=1272500&expire=1423363109&sver=3&pl=20&requiressl=yes&mime=video%2Fmp4&key=yt5&itag=22&ipbits=0&fallback_host=tc.v7.cache5.googlevideo.com&quality=hd720&signature=D5CA5BD786DB0F73296165DE1C2EDE972A6EAAF353.893EB11517D389BCA3436ADEE89CF0D6C2D60E2420&title=Taylor%20Swift%20-%20Blank%20Space%20%28HD%29
Which sometimes stays in the address bar over a completely blank window, (like in the case stated above) and sometimes opens a download window, with the video in mp4. It suggests I open the file with VLC.
Is this a virus or something - or is it something an add-on would be responsible for?
I have the following add-ons (in the way that they are listed on my toolbar):
Down them all
Download Helper
Flash Video Downloader (which recently got automaitically updated)
Download flash & video (forgot this add-on's name, that's what it says on the tool tip on mouse-over)
FlashGot
and GreasMonkey (but with only 2 scripts, and none of them related to videos, just IMDb fixer and Image enlarger)
I have the VLC Media Player Plug-in, could this be the reason this is happening?
I know what you're gonna say - try disabling them to see which one it is. It's complicated :) but I can't, I've got too many windows open, like 700, and shutting Firefox down or restaring it the normal way is near next to impossible sometimes :)
Another way is for me to save my session file and open a new session, and then disable add-ons one by one to see which one's to blame. It's even possible some of them are maybe incompatible with this version of Firefox.
So f someone can tell me if they're having the same problems, and maybe suggest a solution, I'd be happy to hear all about it.
Thanks in advance :)

Start '''[https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-using-safe-mode Firefox in Safe Mode]''' {web Link} by holding down the '''<Shift ''(Mac Options)'' >''' key, and then starting Firefox. Is the problem still there?

I have a game on my xbox one that is telling me I need to open ports in order to play it I am not all that tech savvy and have no idea how to do this

I have an airport extreme and I am trying to play a new game on my xbox one and it keeps kicking me I have comcast internet that is more than fast enough so I went to the games site and it says I need to either create a static ip or to open ports no idea how to do either of these or what that does any help would be appreciated.

There are heaps of posts here about how to open ports on apple routers specifically for xboxes.
AirPort Extreme and xbox 360

HT1451 If I have two iTunes libraries on one computer, how do I know which one is opening when I click on the iTunes icon on the desktop?

If I have two or more iTunes Libraries on one computer, how do I know which one is opening when I click on the iTunes icon on my desktop?

You cannot.
When you sync to a new library, it will erase the current content.
Use your backup copy of the old computer to copy everything to the new one.

HT204394 How can I expunge my iCloud account which has become contaminated and open a new one?

How can I expunge my iCloud account which has become contaminated and open a new one?

If you want to create a new iCloud account, go to Settings>iCloud, tap Delete Account, then sign back in with a different Apple ID to create the new account. If you have any photo stream photos that you want to keep, save them to your camera roll before deleting the account.

Which one external hard drive is better for my G5's FW800 port?

Hi,
I use a late G5 under 10.4.11. Last two weeks I used two different Western Digital disks, My Book Studio & My Book Studio Edition II but both of them don't operate well with the FW 800. They conflict with my audio interfaces (FW 400 devices). Only at FW 800. At FW 400 and Usb 2.0 they operate fine.
Because of this I have to replace the WD disk and unfortunatelly I have two options from the store I bought it. And here is that I want your help please.
Which one external hard drive from these two is better for my G5's FW800 port?
Lacie Quadra 1TB External HDD by Neil Poulton or Verbatim Quad Interface External Hard Drive 1TB. Formatted HFS+ for Mac OS?
I'll very appreciate any answer. Spyros

Hi-
I think that looking at your other devices is needed.
Check out the Mackie troubleshooting guide for one:
http://www.mackie.com/support/documents/TechFAQno.1.pdf
Page 8 has specific suggestions regarding firewire and chipsets.
The same for the Presonus:
The firewire ports on a Mac (FW400 and FW800) run off the main logic board and share system resources. PreSonus interfaces are designed to be run in series with other firewire peripherals. If you are experiencing erratic performance or pops, clicks, and dropouts, daisy-chain your FW400 peripheral from the secondary firewire port on your PreSonus interface. If you must use a FW800 device, it is recommended to purchase a firewire expansion card for your Mac.
http://support.presonus.com/entries/119100-optimizing-your-computer-for-audio-ma c-osx
It appears to me that both devices require enough resources that the firewire controller of the G5 may be unable to properly support both FW400 and FW800 transfer rates.
It appears that the bandwidth requirements of the devices are forcing the machine to drop FW800 in lieu of supporting FW400.
Both makers suggest use of third party PCI cards for Firewire 800, and it may be that you need additional power to the firewire card to keep up with the I/O and bandwidth demands being placed on the machines by you audio devices.
You mention that someone told you to not use the Oxford chipset, but the best external drives are all those that have the Oxford chipset.
It is important to note that not all WD MyBook drives have the same chipset, and few of the WD drives have the Oxford chipset.
Asrock and VIA are other chipsets for the WD drives.
VIA is notoriously poor as far as Mac compatibility goes.

I am trying to open some *.avi files in quicktime, they are from my security camera at home. It will not open them, would anyone be able to help me? It says I need a plugin but it does not tell me which one.

I am trying to open some *.avi files in quicktime, they are from my security camera at home. It will not open them, would anyone be able to help me? It says I need a plugin but it does not tell me which one.

I am trying to open some *.avi files in quicktime, they are from my security camera at home. It will not open them, would anyone be able to help me? It says I need a plugin but it does not tell me which one.
Basically your player is telling you that you need to install the codecs that will play the compressed data within the AVI file.
AVI is a legacy file container in which the tracks of data are interleaved to maintain synchronization. This data can be encoded using many different audio and video codecs. Your problem is to determine which codecs you need for the player you are trying to use and install them if they are available. Failing that, your will either have to play the files in a different player which has the codec support your require built into the app or convert the content to a compression format that is natively compatible with the player you wish to use.
Since you have not stated what platform, operating system, and particular player you are targeting for playback, it is difficult to provide precise instructions for fixing your specific problem at this point. Suggest you try alternative players compatible with your system and platform to see if they will play the files, use a dedicated media information utility to determine the codecs needed for playback, or post a sample file for analysis.

HT5219 Do you need a Thunderbolt 2 Cable to get the speed out of a Thunderbolt 2 Port? Or is there just one kind of Thunderbolt cable, and its the Thunderbolt 2 port which determines the speed?

Do you need or is there a specific Thunderbolt 2 Cable to get the speed out of a Thunderbolt 2 Port? Or is there just one kind of Thunderbolt cable, and its the Thunderbolt 2 port which determines the speed?

Hi XChip73,
The links below will answer your questions about specific cable needs for Thunderbolt 2 and how the speed is determined.
Apple - Thunderbolt: Next-generation high-speed I/O technology.
Apple Thunderbolt cables and adapters - Apple Support
Cheers,
-Jason

How can I set up a WD My Cloud with my Airport Extreme - I can't get it to open ports 80 and 443?

For remote internet access to the WD My Cloud Mirror, I have been advised that ports 80 and 443 must be open in order to reach the WDMyCloudMirror. My Motorola Gateway (Surfboard SB6141) is connected directly to my Airport Extreme (WAN port) which is in turn connected to the WDMyCloudMirror (all by ethernet cables). I do not have FULL instructions on how to properly manually configure the Airport Extreme to open the ports. I have tried an earlier posting which provides many of the steps, but not all of the required information is included (how to determinge the IP address to be assigned, etc.). I did the best I could with the information given, but the test using "YouGetSignal" showed the ports as still closed and attemps to reach the WDMyCloudMirror by the internet failed as well (of course). The WDMyCloudMirror has enough Apple "stuff" included in it (software, I suspect) that an Apple legal acceptance is required for its set-up, yet Western Digital Tecnical Support is unable (or unwilling?) to help with this aspect of its configuration required to work within the Airport Extreme environment. I have returned the WD My Cloud Mirror to Amazon as "not able to work", but I have not given up the hope that I can eventually get the ports open so that I can get this cloud device, or one similar, to permit remote internet access.

Port Forwarding.....or Port Mapping....as Apple calls it is a difficult and complex configuration method for most users. Because there are so many variables involved in this type of setup, it is not possible to provide a step by step guide that will work for everyone with all devices.
It is possible that a setup guide exists for the the WD drive and AirPort Extreme, but you will have to go looking for it on the Internet. Even if you find one, it may not be tailored to your specific situation or needs.
Sometimes, you can do everything right....at least according to someone's article or "how to" guide, and things still will not work correctly.
In situations like this, when you really don't know what to do, you need to enlist the aid of an IT pro, who will know what to do based on your particular products and unique circumstances. Sometimes....they won't be able to get things working either due to particular circumstances.
But, before you do this, I would strongly recommend that you use a Static IP address for your Internet connection with your ISP. If you do not have this now, contact them to ask them if they offer this type of connection. Expect to pay more for this type of service, of course.

Open port issues with Direct Print functionality

Hi, I have been fighting with HP call support about the Photosmart 7525 printer.
Originally I setup and had performed all the functions to enable both web support and WIFI.
Within an hour the printer would not respond to wireless communication, though it had its wireless indecator showing it was connected.
I was told by HP support that the issue will be resolved in March, as there will be a firmware update to fix the issue.
Now that I had the printer install the new firmware I still get the issue.
Though I found through some sniffing, that there are a number of ports enabled and open that are over and beyond print requirements.
Funny thing I can send my printer into instant lockup with all lights flashing with a simple UDP ping sniff. I would think I can do this with other new HP printers using Eprint functions. I will find HP web based printers that are open for public printing and test my theory that HP Eprinters are open to hacking and denyal of service attempts. My Hp print app on andriod list three in my area, and one is at my local Walmart. This would be cool to find this, as I am usually not the first to point such matters out.
I assume some are for Apple devices to print.
Here is my sniffing report:
Starting Nmap 6.40 ( http://nmap.org ) at 2014-03-21 07:57 Central Daylight TimeNSE: Loaded 110 scripts for scanning.NSE: Script Pre-scanning.Initiating ARP Ping Scan at 07:57Scanning 192.168.223.1 [1 port]Completed ARP Ping Scan at 07:57, 0.23s elapsed (1 total hosts)Initiating Parallel DNS resolution of 1 host. at 07:57Completed Parallel DNS resolution of 1 host. at 07:58, 16.50s elapsedInitiating SYN Stealth Scan at 07:58Scanning 192.168.223.1 [1000 ports]Discovered open port 445/tcp on 192.168.223.1Discovered open port 139/tcp on 192.168.223.1Discovered open port 80/tcp on 192.168.223.1Discovered open port 443/tcp on 192.168.223.1Discovered open port 8080/tcp on 192.168.223.1Discovered open port 9220/tcp on 192.168.223.1Discovered open port 6839/tcp on 192.168.223.1Discovered open port 631/tcp on 192.168.223.1Discovered open port 7435/tcp on 192.168.223.1Discovered open port 8089/tcp on 192.168.223.1Discovered open port 9100/tcp on 192.168.223.1Completed SYN Stealth Scan at 07:58, 1.71s elapsed (1000 total ports)Initiating UDP Scan at 07:58Scanning 192.168.223.1 [1000 ports]Discovered open port 5353/udp on 192.168.223.1Completed UDP Scan at 07:58, 1.82s elapsed (1000 total ports)Initiating Service scan at 07:58Scanning 20 services on 192.168.223.1Discovered open port 161/udp on 192.168.223.1Discovered open|filtered port 161/udp on 192.168.223.1 is actually open
Starting Nmap 6.40 ( http://nmap.org ) at 2014-03-21 07:51 Central Daylight TimeNmap scan report for 192.168.223.1Host is up (0.0025s latency).Not shown: 93 closed portsPORT     STATE SERVICE     VERSION80/tcp   open http        HP Photosmart 7520 series printer http config (Serial TH3AS711XZ05YZ)139/tcp open tcpwrapped443/tcp open ssl/http    HP Photosmart 7520 series printer http config (Serial TH3AS711XZ05YZ)445/tcp open netbios-ssn631/tcp open http        HP Photosmart 7520 series printer http config (Serial TH3AS711XZ05YZ)8080/tcp open http        HP Photosmart 7520 series printer http config (Serial TH3AS711XZ05YZ)9100/tcp open jetdirect?MAC Address: A03:C1:BD:C8:34 (Unknown)Device type: printer|general purposeRunning: HP embedded, Wind River VxWorksOS CPE: cpe:/h:hp:laserjet_cm1415fnw cpe:/h:hp:laserjet_cp1525nw cpe:/h:hp:laserjet_1536dnf cpe:/o:windriver:vxworksOS details: HP LaserJet CM1415fnw, CP1525nw, or 1536dnf printer, VxWorksNetwork Distance: 1 hopService Info: Device: printer; CPE: cpe:/h:hphotosmart_7520OS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .Nmap done: 1 IP address (1 host up) scanned in 34.11 seconds

OK now I am able to run a full scan on TCP ports without causing a lock up of the printer.
I found that having the printer connect to a router that has been setup to use channel 5, 6 or 7 will cause port scanning issues with the printer.
It is obvious that there are 18 ports that are seen as open, whether they are used or not. Two of which are active but have no service connected to them. Some are just dead like port 25, but over half are active enough to recieve data and lock network connectivity within the printer.
As the firmware states some other laser jets may be affected depending on how the configuration can be set.
I moved my routers channel to channel 1 as it is the only other option I have in a highly congested location. It is not as good as channel 6, but the printer seems to have channel 6 locked in for direct printing.
Here is the latest full scan with UDP enabled, it is the furthest and most complete scan I am able to complete, with UDP ports enabled. The TCP port scan has a bit more and I have placed a simple list below the information given here:
Starting Nmap 6.40 ( http://nmap.org ) at 2014-03-21 13:27 Central Daylight Time
NSE: Loaded 110 scripts for scanning.
NSE: Script Pre-scanning.
Initiating ARP Ping Scan at 13:27
Scanning 192.168.1.211 [1 port]
Completed ARP Ping Scan at 13:27, 0.44s elapsed (1 total hosts)
Initiating Parallel DNS resolution of 1 host. at 13:27
Completed Parallel DNS resolution of 1 host. at 13:27, 0.03s elapsed
Initiating SYN Stealth Scan at 13:27
Scanning 192.168.1.211 [1000 ports]
Discovered open port 443/tcp on 192.168.1.211
Discovered open port 80/tcp on 192.168.1.211
Discovered open port 139/tcp on 192.168.1.211
Discovered open port 8080/tcp on 192.168.1.211
Discovered open port 445/tcp on 192.168.1.211
Discovered open port 631/tcp on 192.168.1.211
Discovered open port 9100/tcp on 192.168.1.211
Discovered open port 7435/tcp on 192.168.1.211
Discovered open port 9220/tcp on 192.168.1.211
Discovered open port 6839/tcp on 192.168.1.211
Completed SYN Stealth Scan at 13:27, 5.25s elapsed (1000 total ports)
Initiating UDP Scan at 13:27
Scanning 192.168.1.211 [1000 ports]
Discovered open port 137/udp on 192.168.1.211
Completed UDP Scan at 13:27, 4.46s elapsed (1000 total ports)
Initiating Service scan at 13:27
Scanning 16 services on 192.168.1.211
Discovered open port 161/udp on 192.168.1.211
Discovered open|filtered port 161/udp on 192.168.1.211 is actually open
Completed Service scan at 13:29, 82.51s elapsed (17 services on 1 host)
Initiating OS detection (try #1) against 192.168.1.211
NSE: Script scanning 192.168.1.211.
Initiating NSE at 13:29
Completed NSE at 13:30, 82.29s elapsed
Nmap scan report for 192.168.1.211
Host is up (0.023s latency).
Not shown: 1983 closed ports
PORT     STATE         SERVICE      VERSION
80/tcp   open          http         HP Photosmart 7520 series printer http config (Serial TH3AS711XZ05YZ)
|_http-favicon: Unknown favicon MD5: 76C6E492CB8CC73A2A50D62176F205C9
| http-methods: GET POST PUT DELETE
| Potentially risky methods: PUT DELETE
|_See http://nmap.org/nsedoc/scripts/http-methods.html
|_http-title: Site doesn't have a title (text/html).
139/tcp open          tcpwrapped
443/tcp open          ssl/http     HP Photosmart 7520 series printer http config (Serial TH3AS711XZ05YZ)
|_http-favicon: Unknown favicon MD5: 76C6E492CB8CC73A2A50D62176F205C9
| http-methods: GET POST PUT DELETE
| Potentially risky methods: PUT DELETE
|_See http://nmap.org/nsedoc/scripts/http-methods.html
|_http-title: Site doesn't have a title (text/html).
| ssl-cert: Subject: commonName=HPPS7525/organizationName=HP/stateOrProvinceName=Washington/countryName=US
| Issuer: commonName=HPPS7525/organizationName=HP/stateOrProvinceName=Washington/countryName=US
| Public Key type: rsa
| Public Key bits: 1024
| Not valid before: 2014-02-25T10:12:24+00:00
| Not valid after: 2034-02-20T10:12:24+00:00
| MD5:   9144 ca3b 557e 09cc aba0 8387 2732 2375
|_SHA-1: a6b2 95c0 b72a 7201 578c 32de 662a e6fe b082 48ca
|_ssl-date: 2014-03-21T13:30:09+00:00; -4h59m12s from local time.
445/tcp open          netbios-ssn
631/tcp open          http         HP Photosmart 7520 series printer http config (Serial TH3AS711XZ05YZ)
| http-methods: GET POST PUT DELETE
| Potentially risky methods: PUT DELETE
|_See http://nmap.org/nsedoc/scripts/http-methods.html
6839/tcp open          tcpwrapped
7435/tcp open          tcpwrapped
8080/tcp open          http         HP Photosmart 7520 series printer http config (Serial TH3AS711XZ05YZ)
|_http-favicon: Unknown favicon MD5: 76C6E492CB8CC73A2A50D62176F205C9
| http-methods: GET POST PUT DELETE
| Potentially risky methods: PUT DELETE
|_See http://nmap.org/nsedoc/scripts/http-methods.html
|_http-title: Site doesn't have a title (text/html).
9100/tcp open          jetdirect?
9220/tcp open          hp-gsg       HP Generic Scan Gateway 1.0
137/udp open          netbios-ns   Samba nmbd (workgroup: HPPS7525)
138/udp open|filtered netbios-dgm
161/udp open          snmp         SNMPv1 server (public)
| snmp-hh3c-logins:
|_ baseoid: 1.3.6.1.4.1.25506.2.12.1.1.1
| snmp-interfaces:
|   Wifi0
|     IP address: 192.168.1.211 Netmask: 255.255.255.0
|     MAC address: a0:d3:c1:bd:c8:32 (Unknown)
|     Type: ethernetCsmacd Speed: 10 Mbps
|     Status: up
|_    Traffic stats: 6.16 Mb sent, 3.43 Mb received
| snmp-netstat:
|   TCP 0.0.0.0:7435         0.0.0.0:0
|   TCP 192.168.1.211:56076 15.201.145.52:5222
|   UDP 0.0.0.0:3702         *:*
|   UDP 127.0.0.1:666        *:*
|_ UDP 192.168.223.1:67     *:*
| snmp-sysdescr: HP ETHERNET MULTI-ENVIRONMENT
|_ System uptime: 0 days, 3:34:23.28 (1286328 timeticks)
| snmp-win32-shares:
|_ baseoid: 1.3.6.1.4.1.77.1.2.27
1022/udp open|filtered exp2
1023/udp open|filtered unknown
3702/udp open|filtered ws-discovery
5355/udp open|filtered llmnr
MAC Address: A03:C1:BD:C8:32 (Unknown)
Device type: general purpose
Running: Wind River VxWorks
OS CPE: cpe:/o:windriver:vxworks
OS details: VxWorks
Uptime guess: 0.150 days (since Fri Mar 21 09:55:04 2014)
Network Distance: 1 hop
TCP Sequence Prediction: Difficulty=255 (Good luck!)
IP ID Sequence Generation: Busy server or unknown class
Service Info: Hosts: HPA0D3C1BDC832, HPPS7525; Device: printer; CPE: cpe:/h:hphotosmart_7520
Host script results:
| nbstat:
|   NetBIOS name: HPA0D3C1BDC832, NetBIOS user: <unknown>, NetBIOS MAC: <unknown>
|   Names
|     HPA0D3C1BDC832<00>   Flags: <unique><active><permanent>
|     MSHOME<00>           Flags: <group><active><permanent>
|     HPA0D3C1BDC832<20>   Flags: <unique><active><permanent>
|     HPPS7525<00>         Flags: <unique><active><permanent>
|_    HPPS7525<20>         Flags: <unique><active><permanent>
| smb-security-mode:
|   Account that was used for smb scripts: guest
|   User-level authentication
|   SMB Security: Challenge/response passwords supported
|_ Message signing disabled (dangerous, but default)
TRACEROUTE
HOP RTT      ADDRESS
1   23.26 ms 192.168.1.211
NSE: Script Post-scanning.
Read data files from: F:\Progs\Nmap
OS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 180.90 seconds
           Raw packets sent: 2030 (74.829KB) | Rcvd: 2921 (149.377KB)
+++++++++++++++++++++++++++++++++++++++++++++++++++++===
Full TCP port scan without UDP scanning of all ports, showing up as open... * designates open and active.
192.168.223.1Discovered open port 25/tcp on
*192.168.223.1Discovered open port 80/tcp on
*192.168.223.1Discovered open port 110/tcp on
*192.168.223.1Discovered open port 119/tcp on
*192.168.223.1Discovered open port 139/tcp on
192.168.223.1Discovered open port 143/tcp on
*192.168.223.1Discovered open port 443/tcp on
*192.168.223.1Discovered open port 445/tcp on
192.168.223.1Discovered open port 465/tcp on
192.168.223.1Discovered open port 563/tcp on
192.168.223.1Discovered open port 587/tcp on
*192.168.223.1Discovered open port 631/tcp on
192.168.223.1Discovered open port 993/tcp on
192.168.223.1Discovered open port 995/tcp on
*192.168.223.1Discovered open port 7435/tcp on
*192.168.223.1Discovered open port 6839/tcp on
*192.168.223.1Discovered open port 8080/tcp on
192.168.223.1Discovered open port 8089/tcp on
*192.168.223.1Discovered open port 9100/tcp on
*192.168.223.1Discovered open port 9220/tcp on

How do I open ports on my airport extreme and assign a fixed IP Address for a device connected to my network?

I recently had a security system installed in my house. One of the features is an EPAD which enables me to have a virtual keypad on my iphone, and computer to operate the alarm system. The technician was not familiar with Mac's and Airports. How do I open port 80 to 80 in my airport and assign a fixed IP address for the EPAD? Apparently this is what is needed to make this work.

There are three ranges of "strictly local" IP addresses reserved for local Network use:
192.168.xxx.yyy
172.16.xxx.yyy
10.xxx.yyy.zzz
What your Router does for you is to act as your agent on the Internet.Your requests are packaged up and forwarded on your behalf, and only when a response is expected is the response returned to your local IP address.
Directing Network Traffic to a Specific Computer on Your
Network (Port Mapping)
AirPort Extreme uses Network Address Translation (NAT) to share a single IP address with the computers that join the AirPort Extreme network. To provide Internet access to several computers with one IP address, NAT assigns private IP addresses to each computer on the AirPort Extreme network, and then matches these addresses with port numbers. The wireless device creates a port-to-private IP address table entry when a computer on your AirPort (private) network sends a request for information to the Internet.
If you’re using a web, AppleShare, or FTP server on your AirPort Extreme network, other computers initiate communication with your server. Because the Apple wireless device has no table entries for these requests, it has no way of directing the information to the appropriate computer on your AirPort network.
To ensure that requests are properly routed to your web, AppleShare, or FTP server, you need to establish a permanent IP address for your server and provide inbound port mapping information to your Apple wireless device.
To set up inbound port mapping:
1) Open AirPort Utility, select your wireless device, and then choose Base Station > Manual Setup, or double-click the device icon to open its configuration in a separate window. Enter the password if necessary.
2) Click the Advanced button, and then click Port Mapping.
3) Click the Add button and choose a service, such as Personal File Sharing, from the Service pop-up menu.

Could not open port 3601

Hello,
I installed WEB AS6.40 and all the services are running properly. But when I try to access the j2ee engine thru http://ipaddress:50000/index.html, I get the error connection failed in the browser. The j2ee_engine port is correct. In the default trace i get an error Can't open 3601. Message server is running in this port 3601. What could be the problem ? Kindly help.

Hi Rukmani,
This alerts me some thing.When you have installed WAS 6.40 did you change the default instance number for port.If you have left that as 00 then 50000 should work or else if you have changed that to 01 or 02 you should change the port as 50010 0r 50020 accordingly.
One more possibility is that if you have any other applications running on the same port then either you have to free that particular port which is in use or else choose an another port.
Hope it helps.
Regards,
Guru Subramanian B
p.s :- Reward points for useful answers.

How to open ports 119 and 443 in my Mac?

I've been trying to use the UseNeXT software with my Mac with no success. I called their support and they told me I need to open the ports 119 and 443. I contact Apple support and they told me that is beyond their scope (???).
Can somebody help me with that? I tried to find it online, but all tutorials that i tried didn't work or are outdated.
Thanks

Hi Drew,
It probably depends on the router as to the method used to open the ports.
As I have said elsewhere in the thread the first 1024 ports are open in most router to allow things to work Out of the Box such as Mail (110, 25, 567, 569, 995, 996 and many more ) and web Browsing (port 80 mostly but secure site can use 443) FTP (21 and 22) to name some.
Port Forwarding is one way to open some of the ports for One IP (computer).
Most routers have table for doing this and this can be limited as to the number of ports included.
This Linksys pic shows how to do it for some as it allows groups based on Start and end ports. However it restricts it to one IP
DMZ is a form of Extreme Port Forwarding that opens all 65535 ports to one IP (Computer)
In both the above cases other computers (IP addresses) are excluded from using the ports.
Port Triggering doe allow multiple computers to access the same Port but requires that you know the lead - Trigger - port involved for each app.
It is limited by the table size for your particular router.
Same Router in Trigger ports for iChat 3
Most router come with UPnP nowadays.
It is an ON/Off setting that allows the apps on the computer to say which ports are needed and when.
On some you can reduce the time to live and the Hop amounts.
The ports stay open from a period of normally 30 mins after non use.
This can be changed.
It also tends to list the number of Hops (the number of devices beyond the UPnP device) that it can be heard.
My Sky Hub
I have no other router on my network but I do sometimes use Internet Sharing between two computers hence the 2 Hops.
Every other device is only one Hop away from the the router.
There are concerns that the "Advertisement" is seen upstream (internet side) as well as device downstream.
The Concern is that this could be Up to your ISP and then down to the "next" IP end user on the particular router/server at the ISP end.
I have seen no evidence of this being the case.
Hope this helps.
8:45 pm Monday; May 5, 2014
 iMac 2.5Ghz i5 2011 (Mavericks 10.9)
 G4/1GhzDual MDD (Leopard 10.5.8)
 MacBookPro 2Gb (Snow Leopard 10.6.8)
 Mac OS X (10.6.8),
 Couple of iPhones and an iPad

Open ports? Which ones?

Similar Messages

Maybe you are looking for