Automatic port forwarding on Orcon modem.

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Automatic port forwarding on Orcon modem.

jamie777

16 posts

Geek

#175669 7-Jul-2015 20:03

Hi guys,

I have a NetComm Wireless (white modem supplied by Orcon), with Fibre connection, IP phone etc.

I also have a NAS with some wireless cameras and use a plex media server.

I've noticed that every couple of days ports are getting opened automatically under NAT > Virtual Servers. The ports opened are random high ports, but I've seen 8080 & 443 and point to the IP camera addresses. I've also seen ports opened for games that the kids play on their iPads and the Plex media server.

I've changed the username/password on the modem multiple times but can't figure out why this keeps happening? There's nothing under the 'port triggering' section in the modem either.

Any ideas?

chevrolux

4962 posts

Uber Geek
+1 received by user: 2638
Inactive user

#1338892 7-Jul-2015 20:33

UPnP is a wonderful thing =)

..seriously though, really not a good idea to have it enabled on IP cameras or your NAS.

jamie777

16 posts

Geek

#1338899 7-Jul-2015 20:55

Wow i didn't realise that... So enabling upnp on nas and cameras can automatically open ports on the modem? How does it have permission?

DarkShadow

1647 posts

Uber Geek
+1 received by user: 656

#1338908 7-Jul-2015 20:58

The whole point of UPnP is to open ports so you don't have to do it yourself...

jamie777

16 posts

Geek

#1338942 7-Jul-2015 22:13

Thanks!!

chevrolux

4962 posts

Uber Geek
+1 received by user: 2638
Inactive user

#1338950 7-Jul-2015 22:46

Your router supports UPnP and it is obviously 'enabled' so that is how it has 'permission'. Applications can simply use it to do stuff. If you didn't have it enabled on the router when you go and play Call Of Duty your 'nat type' will show as 'strict' because the xbox is firewalled off from the world. When UPnP is enabled the port forward gets created and you connect to all the other hax0r call of duty dudes around the world.
However, just about all the cheap chinese IP camera makers have put it in to their software too because it makes it easy for joe bloggs to have remote access in to his network and see the cameras. The downside is the rest of the world also can have access and many haven't changed their admin passwords.

What kind of NAS have you got? Most of them have VPN servers built in which is a great secure way to remotely access your home network.

jamie777

16 posts

Geek

#1338961 7-Jul-2015 23:37

That makes perfect sense - and yes it was enabled (by default) on the router. That's pretty rubbish that the dlink cameras do that as well as they're pretty cheap and really popular! I have changed the passwords but surely they can't be that secure, so wasn't too happy about it. It's a synology Nas and also have 2012 domain so have gone down the vpn track as well.. Works well except for from locations where non standard outbound ports are blocked.

Was just getting a bit paranoid how the ports were getting opened so overlooked the simplest thing. Not worried whatsoever about apps getting blocked as I'll just enable when i need to.

As a side note you can also turn upnp off in the camera config, but this didn't fix it.

Thanks so much for your detailed response.