Geekzone: technology news, blogs, forums
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.

16 posts


# 175669 7-Jul-2015 20:03
Send private message

Hi guys,

I have a NetComm Wireless (white modem supplied by Orcon), with Fibre connection, IP phone etc.

I also have a NAS with some wireless cameras and use a plex media server.

I've noticed that every couple of days ports are getting opened automatically under NAT > Virtual Servers.  The ports opened are random high ports, but I've seen 8080 & 443 and point to the IP camera addresses.  I've also seen ports opened for games that the kids play on their iPads and the Plex media server.

I've changed the username/password on the modem multiple times but can't figure out why this keeps happening?  There's nothing under the 'port triggering' section in the modem either.  

Any ideas?

Filter this topic showing only the reply marked as answer Create new topic
4009 posts

Uber Geek
+1 received by user: 1729


  # 1338892 7-Jul-2015 20:33
Send private message

UPnP is a wonderful thing =)

..seriously though, really not a good idea to have it enabled on IP cameras or your NAS.

16 posts


  # 1338899 7-Jul-2015 20:55
Send private message

Wow i didn't realise that... So enabling upnp on nas and cameras can automatically open ports on the modem? How does it have permission?


1605 posts

Uber Geek
+1 received by user: 648

  # 1338908 7-Jul-2015 20:58
Send private message

The whole point of UPnP is to open ports so you don't have to do it yourself...

16 posts


  # 1338942 7-Jul-2015 22:13
Send private message


4009 posts

Uber Geek
+1 received by user: 1729


  # 1338950 7-Jul-2015 22:46
Send private message

Your router supports UPnP and it is obviously 'enabled' so that is how it has 'permission'. Applications can simply use it to do stuff. If you didn't have it enabled on the router when you go and play Call Of Duty your 'nat type' will show as 'strict' because the xbox is firewalled off from the world. When UPnP is enabled the port forward gets created and you connect to all the other hax0r call of duty dudes around the world.
However, just about all the cheap chinese IP camera makers have put it in to their software too because it makes it easy for joe bloggs to have remote access in to his network and see the cameras. The downside is the rest of the world also can have access and many haven't changed their admin passwords.

What kind of NAS have you got? Most of them have VPN servers built in which is a great secure way to remotely access your home network.

16 posts


  # 1338961 7-Jul-2015 23:37
Send private message

That makes perfect sense - and yes it was enabled (by default) on the router. That's pretty rubbish that the dlink cameras do that as well as they're pretty cheap and really popular! I have changed the passwords but surely they can't be that secure, so wasn't too happy about it. It's a synology Nas and also have 2012 domain so have gone down the vpn track as well.. Works well except for from locations where non standard outbound ports are blocked.

Was just getting a bit paranoid how the ports were getting opened so overlooked the simplest thing. Not worried whatsoever about apps getting blocked as I'll just enable when i need to.

As a side note you can also turn upnp off in the camera config, but this didn't fix it.

Thanks so much for your detailed response.

Filter this topic showing only the reply marked as answer Create new topic

Twitter and LinkedIn »

Follow us to receive Twitter updates when new discussions are posted in our forums:

Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:

Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:

News »

New Zealand PC Market declines on the back of high channel inventory, IDC reports
Posted 18-Jun-2019 17:35

Air New Zealand uses drones to inspect aircraft
Posted 17-Jun-2019 15:39

TCL Electronics launches its first-ever 8K TV
Posted 17-Jun-2019 15:18

E-scooter share scheme launches in Wellington
Posted 17-Jun-2019 12:34

Anyone can broadcast with Kordia Pop Up TV
Posted 13-Jun-2019 10:51

Volvo and Uber present production vehicle ready for self-driving
Posted 13-Jun-2019 10:47

100,000 customers connected to fibre broadband network through Enable
Posted 13-Jun-2019 10:35

5G uptake even faster than expected
Posted 12-Jun-2019 10:01

Xbox showcases 60 anticipated games
Posted 10-Jun-2019 20:24

Trend Micro Turns Public Hotspots into Secure Networks with WiFi Protection for Mobile Devices
Posted 5-Jun-2019 13:24

Bold UK spinoff for beauty software company Flossie
Posted 2-Jun-2019 14:10

Amazon Introduces Echo Show 5
Posted 1-Jun-2019 15:32

Epson launches new 4K Pro-UHD projector technology
Posted 1-Jun-2019 15:26

Lenovo and Qualcomm unveil first 5G PC called Project Limitless
Posted 28-May-2019 20:23

Intel introduces new 10th Gen Intel Core Processors and Project Athena
Posted 28-May-2019 19:28

Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.

Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.