What's port 27275 used for?

[cooby]

1. I updated free Avast! v6 to 7.0.1426 yesterday and see avast service listening on port 27275. What's it doing? it's a new one for me.
2. When I had some cloud features enabled, avast was eating up several dozen of ports and not releasing them, they were sitting forever in Close_Wait state. I've never seen that sort of thing before. So I disabled those mysterious cloud things in GUI since I don't understand what it's doing and I'm back to a normal port activity.

Can someone, please, explain both questions? Thanks in advance.

Windows XP-SP3

[marc-d-l]

The server_launcher uses UDP port 27275 to check for updates and each server sends game data over the next available UDP port (eg 27276, 27277, etc). You can customize these ports using the server_configurator. You must ensure that all of these ports are open and properly forwarded on your router and firewall.

[cooby]

I don't think so.  It's just TCP localhost:27275, not changing and I don't do any games and see no reason for port forwarding. It seems to be a new proxy port that got  added in this version.
I dont know what server configurator is.

[Stoo42]

I know this topic is a bit old now, but I've seen seeing the same thing.

Inspecting some of the packets on this port reveals that it appears to be WebReputation traffic.

If I had to guess, Avast has a separate component that looks after web reputation, and this port is used by one part of Avast to talk to another part of Avast, whenever you browser the web. Its just checking to see if the pages you're going to have been reported as dodgy or not.

It only appears to be listening on localhost, so no traffic will actually get in or out of any network interface. It just seems to be using TCP as a method to communicate internally with its various components. Its not chewing up ports that your computer would otherwise use for network communication. Nothing to worry about IMO.

All of the above is speculation of course, based on very limited research :-P

:-)

[igor]

You are right.
This is how avast! browser plugins communicate with avast! program.
I am not sure if the reputation requests in particular are going this way (more likely the other features like SiteCorrect or maybe Phishing protection) - but it's also used for the browser plugins to check for avast! program settings (whether the particular options are actually enabled etc.).

[cooby]

Interesting.
Igor, what browser plugin? I see no Avast plugin in Opera, probably not needed anyway. Just for IE?

In the current version 7.0.1456, I haven't disabled a thing. Cloud runs, Webrep runs, sandbox runs (forgets to ASK even though is set to ask). And I don't see that port anymore these days. I completely forgot about posting this thread, so am glad to see it got answered.

OOOPS! I lied. Avast service is listening 27275. And I'm in Opera.

[igor]

No, not just IE - wherever the browsed pages should be changed (e.g. to include those WebRep colored icons), a plugin/extension is needed.
Sandbox is an external thing handled by the drivers, so it works anyway, but WebRep, SiteCorrect, Phishing protection... they need a plugin. I certainly have one installed in Opera.

Are you saying you don't have anything in Tools / Extensions / Manage Extensions in Opera, yet you still see WebRep icons in pages?

[cooby]

Thanks! Finally explained
Darn, It's not a plugin in the opera:config list of plugins. It's under Extensions. It's active. No wonder I couldn't find it.

Hmmm, I wonder where will I find my old Outlook plugin. May be in Contacts or someplace. Not creative enough to look in where it shouldn't be

Funny and Off-topic:
I clicked on the extension name in Opera (Avast! WebRep) and got this cute thingie: