Persistent Port Forwarding

G

Guest

Guest
Archived from groups: microsoft.public.broadbandnet.hardware (More info?)

Have had MUCHO problems lately, so I'm looking for
possible sources of problems.

Win XP Pro, MN500 router, home use, only 1 computer now
Nothing like a server or remote use going on here.

Persistent port forwarding had 12 entries
I don't remember seeing any at all before, I have not
entered anything here.

Descriptions of all 12 entries were like:
msmsgs (192.168.2.18:10324)61162UDP
msmsgs (192.168.2.18:12000)23276TCP
with corresponding port entries

I cleared the enable box for all, apply, log out
Login again, the last 2 were checked, a UDP & TCP
Cleared out all entries, apply, log out
Log in again, 2 new similar entries existed.

I'll paste a portion of the base station log below.
The log shows port assignment activity.
Log portion is at the time I cleared all the entries,
with a NOTE IN CAPS marking that time.

? Is this normal?
? What program or process makes these mappings?

Thanks, Granny
- - - - - - - - - - - -
PORTION OF BASE STATION LOG

2004/05/05 09:29:36 AddPortMapping: ExternalPort:8925,
UDP, InternalPort:8088, InternalClient:192.168.2.18
2004/05/05 09:29:36 AddPortMapping: ExternalPort:5885,
TCP, InternalPort:16300, InternalClient:192.168.2.18
2004/05/05 09:30:36 DHCP Client : Send Request, Request
IP = 24.18.52.8
2004/05/05 09:30:36 DHCP Client : Receive Ack from
12.242.16.34, Lease time = 7200
2004/05/05 09:31:38 DeletePortMapping:
ExternalPort:5885, TCP
2004/05/05 09:31:38 DeletePortMapping:
ExternalPort:8925, UDP
2004/05/05 09:31:40 AddPortMapping: ExternalPort:61680,
UDP, InternalPort:12874, InternalClient:192.168.2.18
2004/05/05 09:31:40 AddPortMapping: ExternalPort:30964,
TCP, InternalPort:14018, InternalClient:192.168.2.18
2004/05/05 09:33:43 DeletePortMapping:
ExternalPort:30964, TCP
2004/05/05 09:33:43 DeletePortMapping:
ExternalPort:61680, UDP
2004/05/05 09:33:45 AddPortMapping: ExternalPort:49890,
UDP, InternalPort:8312, InternalClient:192.168.2.18
2004/05/05 09:33:45 AddPortMapping: ExternalPort:41952,
TCP, InternalPort:8729, InternalClient:192.168.2.18
2004/05/05 09:35:45 DeletePortMapping:
ExternalPort:41952, TCP
2004/05/05 09:35:45 DeletePortMapping:
ExternalPort:49890, UDP
2004/05/05 09:35:47 AddPortMapping: ExternalPort:36333,
UDP, InternalPort:12087, InternalClient:192.168.2.18
2004/05/05 09:35:47 AddPortMapping: ExternalPort:10214,
TCP, InternalPort:9373, InternalClient:192.168.2.18
2004/05/05 09:36:42 Address 192.168.2.18 was assigned to
client 1:0x0010b5eef1ed
>> NOTE - HERE I CLEARED ALL FIELDS ON PERSISTENT PORT
FORWARD PAGE, THEN APPLY, THEN LOGOUT
2004/05/05 09:36:45 192.168.2.18 logout
2004/05/05 09:36:55 192.168.2.18 login successful
2004/05/05 09:37:46 AddPortMapping: ExternalPort:50937,
UDP, InternalPort:15228, InternalClient:192.168.2.18
2004/05/05 09:37:46 AddPortMapping: ExternalPort:18676,
TCP, InternalPort:14066, InternalClient:192.168.2.18
2004/05/05 09:38:28 Connection attempt to base station
from WAN blocked -- src:<65.71.236.22:4549>
dst:<24.18.52.8:80>
2004/05/05 09:38:31 Connection attempt to base station
from WAN blocked -- src:<65.71.236.22:4549>
dst:<24.18.52.8:80>
2004/05/05 09:38:37 Connection attempt to base station
from WAN blocked -- src:<65.71.236.22:4549>
dst:<24.18.52.8:80>
2004/05/05 09:39:29 Connection attempt to base station
from WAN blocked -- src:<24.13.247.229:2913>
dst:<24.18.52.8:2535>
2004/05/05 09:39:32 Connection attempt to base station
from WAN blocked -- src:<24.13.247.229:2913>
dst:<24.18.52.8:2535>
2004/05/05 09:39:38 Connection attempt to base station
from WAN blocked -- src:<24.13.247.229:2913>
dst:<24.18.52.8:2535>
2004/05/05 09:39:52 DeletePortMapping:
ExternalPort:18676, TCP
2004/05/05 09:39:52 DeletePortMapping:
ExternalPort:50937, UDP
2004/05/05 09:39:54 AddPortMapping: ExternalPort:61162,
UDP, InternalPort:10324, InternalClient:192.168.2.18
2004/05/05 09:39:54 AddPortMapping: ExternalPort:23276,
TCP, InternalPort:12000, InternalClient:192.168.2.18
 
G

Guest

Guest
Archived from groups: microsoft.public.broadbandnet.hardware (More info?)

Older versions of Windows Messenger didn't remove port entries that it
created.

Windows Messenger 5 fixes this issue.
You can get Windows messenger 5 here

http://www.microsoft.com/downloads/details.aspx?FamilyID=77c3799f-6388-4193-8002-be55584c1ac1&DisplayLang=en


--
Jason Tsang - Microsoft MVP

Find out about the MS MVP Program -
http://mvp.support.microsoft.com/default.aspx

"Granny" <anonymous@discussions.microsoft.com> wrote in message
news:8d6901c432c9$da9d6560$a101280a@phx.gbl...
> Have had MUCHO problems lately, so I'm looking for
> possible sources of problems.
>
> Win XP Pro, MN500 router, home use, only 1 computer now
> Nothing like a server or remote use going on here.
>
> Persistent port forwarding had 12 entries
> I don't remember seeing any at all before, I have not
> entered anything here.
>
> Descriptions of all 12 entries were like:
> msmsgs (192.168.2.18:10324)61162UDP
> msmsgs (192.168.2.18:12000)23276TCP
> with corresponding port entries
>
> I cleared the enable box for all, apply, log out
> Login again, the last 2 were checked, a UDP & TCP
> Cleared out all entries, apply, log out
> Log in again, 2 new similar entries existed.
>
> I'll paste a portion of the base station log below.
> The log shows port assignment activity.
> Log portion is at the time I cleared all the entries,
> with a NOTE IN CAPS marking that time.
>
> ? Is this normal?
> ? What program or process makes these mappings?
>
> Thanks, Granny
> - - - - - - - - - - - -
> PORTION OF BASE STATION LOG
>
> 2004/05/05 09:29:36 AddPortMapping: ExternalPort:8925,
> UDP, InternalPort:8088, InternalClient:192.168.2.18
> 2004/05/05 09:29:36 AddPortMapping: ExternalPort:5885,
> TCP, InternalPort:16300, InternalClient:192.168.2.18
> 2004/05/05 09:30:36 DHCP Client : Send Request, Request
> IP = 24.18.52.8
> 2004/05/05 09:30:36 DHCP Client : Receive Ack from
> 12.242.16.34, Lease time = 7200
> 2004/05/05 09:31:38 DeletePortMapping:
> ExternalPort:5885, TCP
> 2004/05/05 09:31:38 DeletePortMapping:
> ExternalPort:8925, UDP
> 2004/05/05 09:31:40 AddPortMapping: ExternalPort:61680,
> UDP, InternalPort:12874, InternalClient:192.168.2.18
> 2004/05/05 09:31:40 AddPortMapping: ExternalPort:30964,
> TCP, InternalPort:14018, InternalClient:192.168.2.18
> 2004/05/05 09:33:43 DeletePortMapping:
> ExternalPort:30964, TCP
> 2004/05/05 09:33:43 DeletePortMapping:
> ExternalPort:61680, UDP
> 2004/05/05 09:33:45 AddPortMapping: ExternalPort:49890,
> UDP, InternalPort:8312, InternalClient:192.168.2.18
> 2004/05/05 09:33:45 AddPortMapping: ExternalPort:41952,
> TCP, InternalPort:8729, InternalClient:192.168.2.18
> 2004/05/05 09:35:45 DeletePortMapping:
> ExternalPort:41952, TCP
> 2004/05/05 09:35:45 DeletePortMapping:
> ExternalPort:49890, UDP
> 2004/05/05 09:35:47 AddPortMapping: ExternalPort:36333,
> UDP, InternalPort:12087, InternalClient:192.168.2.18
> 2004/05/05 09:35:47 AddPortMapping: ExternalPort:10214,
> TCP, InternalPort:9373, InternalClient:192.168.2.18
> 2004/05/05 09:36:42 Address 192.168.2.18 was assigned to
> client 1:0x0010b5eef1ed
> >> NOTE - HERE I CLEARED ALL FIELDS ON PERSISTENT PORT
> FORWARD PAGE, THEN APPLY, THEN LOGOUT
> 2004/05/05 09:36:45 192.168.2.18 logout
> 2004/05/05 09:36:55 192.168.2.18 login successful
> 2004/05/05 09:37:46 AddPortMapping: ExternalPort:50937,
> UDP, InternalPort:15228, InternalClient:192.168.2.18
> 2004/05/05 09:37:46 AddPortMapping: ExternalPort:18676,
> TCP, InternalPort:14066, InternalClient:192.168.2.18
> 2004/05/05 09:38:28 Connection attempt to base station
> from WAN blocked -- src:<65.71.236.22:4549>
> dst:<24.18.52.8:80>
> 2004/05/05 09:38:31 Connection attempt to base station
> from WAN blocked -- src:<65.71.236.22:4549>
> dst:<24.18.52.8:80>
> 2004/05/05 09:38:37 Connection attempt to base station
> from WAN blocked -- src:<65.71.236.22:4549>
> dst:<24.18.52.8:80>
> 2004/05/05 09:39:29 Connection attempt to base station
> from WAN blocked -- src:<24.13.247.229:2913>
> dst:<24.18.52.8:2535>
> 2004/05/05 09:39:32 Connection attempt to base station
> from WAN blocked -- src:<24.13.247.229:2913>
> dst:<24.18.52.8:2535>
> 2004/05/05 09:39:38 Connection attempt to base station
> from WAN blocked -- src:<24.13.247.229:2913>
> dst:<24.18.52.8:2535>
> 2004/05/05 09:39:52 DeletePortMapping:
> ExternalPort:18676, TCP
> 2004/05/05 09:39:52 DeletePortMapping:
> ExternalPort:50937, UDP
> 2004/05/05 09:39:54 AddPortMapping: ExternalPort:61162,
> UDP, InternalPort:10324, InternalClient:192.168.2.18
> 2004/05/05 09:39:54 AddPortMapping: ExternalPort:23276,
> TCP, InternalPort:12000, InternalClient:192.168.2.18
 
G

Guest

Guest
Archived from groups: microsoft.public.broadbandnet.hardware (More info?)

Thanks Jason.
Another mystery item unveiled.
Granny
 

joker

Distinguished
Apr 12, 2004
1,064
0
19,280
Archived from groups: microsoft.public.broadbandnet.hardware (More info?)

That's Windows Messenger.

Granny wrote:

> Have had MUCHO problems lately, so I'm looking for
> possible sources of problems.
>
> Win XP Pro, MN500 router, home use, only 1 computer now
> Nothing like a server or remote use going on here.
>
> Persistent port forwarding had 12 entries
> I don't remember seeing any at all before, I have not
> entered anything here.
>
> Descriptions of all 12 entries were like:
> msmsgs (192.168.2.18:10324)61162UDP
> msmsgs (192.168.2.18:12000)23276TCP
> with corresponding port entries
>
> I cleared the enable box for all, apply, log out
> Login again, the last 2 were checked, a UDP & TCP
> Cleared out all entries, apply, log out
> Log in again, 2 new similar entries existed.
>
> I'll paste a portion of the base station log below.
> The log shows port assignment activity.
> Log portion is at the time I cleared all the entries,
> with a NOTE IN CAPS marking that time.
>
> ? Is this normal?
> ? What program or process makes these mappings?
>
> Thanks, Granny
> - - - - - - - - - - - -
> PORTION OF BASE STATION LOG
>
> 2004/05/05 09:29:36 AddPortMapping: ExternalPort:8925,
> UDP, InternalPort:8088, InternalClient:192.168.2.18
> 2004/05/05 09:29:36 AddPortMapping: ExternalPort:5885,
> TCP, InternalPort:16300, InternalClient:192.168.2.18
> 2004/05/05 09:30:36 DHCP Client : Send Request, Request
> IP = 24.18.52.8
> 2004/05/05 09:30:36 DHCP Client : Receive Ack from
> 12.242.16.34, Lease time = 7200
> 2004/05/05 09:31:38 DeletePortMapping:
> ExternalPort:5885, TCP
> 2004/05/05 09:31:38 DeletePortMapping:
> ExternalPort:8925, UDP
> 2004/05/05 09:31:40 AddPortMapping: ExternalPort:61680,
> UDP, InternalPort:12874, InternalClient:192.168.2.18
> 2004/05/05 09:31:40 AddPortMapping: ExternalPort:30964,
> TCP, InternalPort:14018, InternalClient:192.168.2.18
> 2004/05/05 09:33:43 DeletePortMapping:
> ExternalPort:30964, TCP
> 2004/05/05 09:33:43 DeletePortMapping:
> ExternalPort:61680, UDP
> 2004/05/05 09:33:45 AddPortMapping: ExternalPort:49890,
> UDP, InternalPort:8312, InternalClient:192.168.2.18
> 2004/05/05 09:33:45 AddPortMapping: ExternalPort:41952,
> TCP, InternalPort:8729, InternalClient:192.168.2.18
> 2004/05/05 09:35:45 DeletePortMapping:
> ExternalPort:41952, TCP
> 2004/05/05 09:35:45 DeletePortMapping:
> ExternalPort:49890, UDP
> 2004/05/05 09:35:47 AddPortMapping: ExternalPort:36333,
> UDP, InternalPort:12087, InternalClient:192.168.2.18
> 2004/05/05 09:35:47 AddPortMapping: ExternalPort:10214,
> TCP, InternalPort:9373, InternalClient:192.168.2.18
> 2004/05/05 09:36:42 Address 192.168.2.18 was assigned to
> client 1:0x0010b5eef1ed
>
>>>NOTE - HERE I CLEARED ALL FIELDS ON PERSISTENT PORT
>
> FORWARD PAGE, THEN APPLY, THEN LOGOUT
> 2004/05/05 09:36:45 192.168.2.18 logout
> 2004/05/05 09:36:55 192.168.2.18 login successful
> 2004/05/05 09:37:46 AddPortMapping: ExternalPort:50937,
> UDP, InternalPort:15228, InternalClient:192.168.2.18
> 2004/05/05 09:37:46 AddPortMapping: ExternalPort:18676,
> TCP, InternalPort:14066, InternalClient:192.168.2.18
> 2004/05/05 09:38:28 Connection attempt to base station
> from WAN blocked -- src:<65.71.236.22:4549>
> dst:<24.18.52.8:80>
> 2004/05/05 09:38:31 Connection attempt to base station
> from WAN blocked -- src:<65.71.236.22:4549>
> dst:<24.18.52.8:80>
> 2004/05/05 09:38:37 Connection attempt to base station
> from WAN blocked -- src:<65.71.236.22:4549>
> dst:<24.18.52.8:80>
> 2004/05/05 09:39:29 Connection attempt to base station
> from WAN blocked -- src:<24.13.247.229:2913>
> dst:<24.18.52.8:2535>
> 2004/05/05 09:39:32 Connection attempt to base station
> from WAN blocked -- src:<24.13.247.229:2913>
> dst:<24.18.52.8:2535>
> 2004/05/05 09:39:38 Connection attempt to base station
> from WAN blocked -- src:<24.13.247.229:2913>
> dst:<24.18.52.8:2535>
> 2004/05/05 09:39:52 DeletePortMapping:
> ExternalPort:18676, TCP
> 2004/05/05 09:39:52 DeletePortMapping:
> ExternalPort:50937, UDP
> 2004/05/05 09:39:54 AddPortMapping: ExternalPort:61162,
> UDP, InternalPort:10324, InternalClient:192.168.2.18
> 2004/05/05 09:39:54 AddPortMapping: ExternalPort:23276,
> TCP, InternalPort:12000, InternalClient:192.168.2.18