What's listening on port 1780?

Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware
Author Message
spidey3
DD-WRT User


Joined: 22 Jul 2007
Posts: 72

PostPosted: Mon Dec 21, 2009 20:26    Post subject: What's listening on port 1780? Reply with quote
I just upgraded to DD-WRT v24-sp2 (12/18/09) std-nokaid-usb (SVN revision 13491M NEWD Eko) and now notice that something is listening on port 1780:
Code:
tcp        0      0 XXXXXXX.dyn.MYISP.net:1780 0.0.0.0:*               LISTEN
tcp        0      0 myrouter.mydomain.com:1780 0.0.0.0:*               LISTEN

I am set up with:
Code:
Use DNSMasq for DHCP  yes
Use DNSMasq for DNS    yes
DHCP-Authoritative    yes

DHCP Used Domain   LAN & WLAN
LAN Domain   myrouter.mydomain.com

DNSMasq  Enabled
Local DNS Enabled

Any idea what this is?
Why is it listening both on the internal and external IP address?

Spidey!!!
Sponsor
socal87
DD-WRT Guru


Joined: 30 Jun 2009
Posts: 944
Location: Here

PostPosted: Mon Dec 21, 2009 20:28    Post subject: Reply with quote
Google is your friend.

Your mom called, btw, and she wants you to go out and play in the snow like a healthy kid should.

_________________
Click here for Eko beta
Click here for Brainslayer beta

>>>PEACOCK THREAD!<<<

I do NOT offer personal assistance.
Please do not PM me for help.

spidey3
DD-WRT User


Joined: 22 Jul 2007
Posts: 72

PostPosted: Mon Dec 21, 2009 20:40    Post subject: Reply with quote
That was decidedly unhelpful.

If I found a useful answer on Google, do you think I would be posting the question here?

The reference says it is dpkeyserv -- but I cannot for the life of me imagine why a licensing server for kana-kanji convertion software would be running on my router. Nor do I see any such process running. Something else unexpected is listening on that port.

Spidey!!!
spidey3
DD-WRT User


Joined: 22 Jul 2007
Posts: 72

PostPosted: Mon Dec 21, 2009 21:06    Post subject: Reply with quote
Did a little more digging around in /proc and figured out that upnp is listening on this. I don't think it is a security hole right now, since it is not forwarded from outside. Question is, why does upnp listen on a port which according to most databases has a different purpose?

Spidey!!!
lenardg
DD-WRT Novice


Joined: 15 Jan 2010
Posts: 7
Location: Finland

PostPosted: Wed Jan 20, 2010 16:56    Post subject: Reply with quote
I noticed this also when I ran a netstat just now. I have eko build for 13575, big version.

I too would like to know why is there something listening on 1780? I am not that familiar with linux to be able to extract what the listening process is, using /proc?

Is it possible to create an iptables rule that would make sure no connection is accepted from the internet on that port? Or is that port necessary for UPnP?
(if it is possible to close it this way would someone be as kind as to write the iptables command in a response on this thread?)

thanks

-LenardG
oxygenx
DD-WRT Guru


Joined: 11 Nov 2007
Posts: 566

PostPosted: Wed Jan 20, 2010 17:03    Post subject: Reply with quote
The reason why the first answers was bit harsh is probably that he misinterpreted the output of netstat. i guess because he missed the -n he was fooled by the name resolution.
you can check with netstat -nl. upnp is not open to the internet.
Skydiver
DD-WRT User


Joined: 23 Feb 2009
Posts: 298
Location: Germany

PostPosted: Wed Jan 20, 2010 17:06    Post subject: Reply with quote
The upnp daemon in the router is using this port to communicate with my winxp upnp client. It send`s data like tranfered bytes and so on... .
_________________
Netgear WNR834B v2 - Eko build v24-sp2 15943M mini NEWD K2.4 (running MINIUPNPD)
Tested with BS 15943 mini build with my 32/1 line over wireless:
Masterman
DD-WRT Guru


Joined: 24 Aug 2009
Posts: 2070
Location: South Florida

PostPosted: Wed Jan 20, 2010 18:48    Post subject: Reply with quote
That's the SSDP service used by Windows UPnP. It sends a request every 60 seconds.
_________________
Optware, the Right Way
Asus RT-AC68U
Asus RT-N66U
Asus RT-N10
Asus RT-N12
Asus RT-N16 x5
Asus WL520gU
Engenious ECB350
Linksys WRT600Nv1.1
Linksys WRT610Nv1
Linksys E2000
Netgear WNDR3300
SonicWall NSA220W
SonicWall TZ215W
SonicWall TZ205W
SonicWall TZ105W
bers
DD-WRT Novice


Joined: 28 Jun 2012
Posts: 3

PostPosted: Fri Apr 19, 2013 7:34    Post subject: Reply with quote
oxygenx wrote:

you can check with netstat -nl. upnp is not open to the internet.


Hi,
my output to netstat -nl says something like this:

Code:
tcp        0      0 178.203.xxx.xxx:1780     0.0.0.0:*               LISTEN
tcp        0      0 10.0.0.1:1780           0.0.0.0:*               LISTEN


So in may case, it seems that there is an open upnp exposed to the internet, and I am able to telnet to it... Is there a way to prevent this in DD-WRT v24-sp2 (04/15/13) mini, without disabling upnp?

Thanks
bers
painIC
DD-WRT Novice


Joined: 07 Sep 2015
Posts: 1

PostPosted: Mon Sep 07, 2015 23:19    Post subject: Reply with quote
I just registered on this forum to say thank you to everyone except socal87. And socal87, you're a stupid f4ggot and you add nothing but useless garbage to the web.
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum