Author Topic: Port Forwarding  (Read 4868 times)

0 Members and 1 Guest are viewing this topic.

Offline Bellzemos

  • Avast Evangelist
  • Poster
  • ***
  • Posts: 621
Port Forwarding
« on: November 23, 2014, 03:46:12 AM »
Hello!

I have a few questions about the Port Forwarding and routers in general. I have changed the actual port numbers on the picture below to maintan privacy and security (but this was probably unnecessary, right?).

As you can see on the picture below, the internal and external UDP and TCP ports have the same number in my router settings for Skype. But in Skype, under the Connections, I have a different port number (6677). Should I change and enter the number that I've found under the UPnP settings of my router to make Skype work better?



I am pretty new to networks but it seems to me that even though the UPnP is enabled in my router Skype didn't get set up properly - as the port numbers differ. Or am I wrong?

Also, why is the number after the IP address :5698 and the port's numbers are 56985 (with the additional number 5)? What's the deal here, which port is opened then, 5698 or 56985?

Would my internet connection be (much) more secure if I would disable the UPnP completely and open the ports for Skype manually (if yes - how & do I have to do it for each computer on the network respectively)?

In general, is it true that one should always open only the ports above 6000 (for Skype and such)?

A little off topic: how can I check which Channel is best for my WiFi broadcast? Is there a (free) utility that would find the best possible channel for my wireless network? Or should I leave it on the Auto setting?

Thank you for your help in advance!
Intel Core i7 Q 740 @ 1.73 GHz, 6 GB RAM, Windows 7 Ultimate x64 SP1, Avast! Free Antivirus, Malwarebytes Anti-Malware (free version) and Sandboxie (paid version).

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Port Forwarding
« Reply #1 on: November 23, 2014, 01:32:31 PM »
http://portforward.com/

Have a look there.
They have about everything if it comes to forwarding ports.

Offline Bellzemos

  • Avast Evangelist
  • Poster
  • ***
  • Posts: 621
Re: Port Forwarding
« Reply #2 on: November 24, 2014, 10:05:59 PM »
Thank you, Eddy! But I would like to hear what the Avast/security exerts opinion is on the matter. :)
Intel Core i7 Q 740 @ 1.73 GHz, 6 GB RAM, Windows 7 Ultimate x64 SP1, Avast! Free Antivirus, Malwarebytes Anti-Malware (free version) and Sandboxie (paid version).

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33897
  • malware fighter
Re: Port Forwarding
« Reply #3 on: November 24, 2014, 10:16:59 PM »
I would stay away from UPnP and disable it when not needed.
Why read here: https://www.grc.com/unpnp/unpnp.htm

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Bellzemos

  • Avast Evangelist
  • Poster
  • ***
  • Posts: 621
Re: Port Forwarding
« Reply #4 on: November 26, 2014, 06:45:14 PM »
I see, thank you polonus. But, is it true that the programs which feature UPnP will open a certain port (or ports) when they need them (when that certain program is used) and then close the ports via UPnP after they are closed (when I quit the program)? So, would it be safer to use the UPnP then or to manually open the needed ports and have them opened at all times?
Intel Core i7 Q 740 @ 1.73 GHz, 6 GB RAM, Windows 7 Ultimate x64 SP1, Avast! Free Antivirus, Malwarebytes Anti-Malware (free version) and Sandboxie (paid version).

Offline Bellzemos

  • Avast Evangelist
  • Poster
  • ***
  • Posts: 621
Re: Port Forwarding
« Reply #5 on: November 26, 2014, 07:05:17 PM »
PS: I've read a bit more about port forwarding and only now realised that when you open a certain port you only open it for a certain computer on the network. Right? We have 3 computers at home connected (one by cable and two wireless) to the router and if I want to open a port for Skype only on my computer I have to set a static IP for my computer. Could this bring me any trouble (security & convinience-wise)? And how do I do that? Thank you!
Intel Core i7 Q 740 @ 1.73 GHz, 6 GB RAM, Windows 7 Ultimate x64 SP1, Avast! Free Antivirus, Malwarebytes Anti-Malware (free version) and Sandboxie (paid version).

Offline FreewheelinFrank

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 4872
  • I'm a GNU
    • Don't Surf in the Nude!
Re: Port Forwarding
« Reply #6 on: November 26, 2014, 10:44:24 PM »
Hello!

I have a few questions about the Port Forwarding and routers in general. I have changed the actual port numbers on the picture below to maintan privacy and security (but this was probably unnecessary, right?).

As you can see on the picture below, the internal and external UDP and TCP ports have the same number in my router settings for Skype. But in Skype, under the Connections, I have a different port number (6677). Should I change and enter the number that I've found under the UPnP settings of my router to make Skype work better?



I am pretty new to networks but it seems to me that even though the UPnP is enabled in my router Skype didn't get set up properly - as the port numbers differ. Or am I wrong?

Also, why is the number after the IP address :5698 and the port's numbers are 56985 (with the additional number 5)? What's the deal here, which port is opened then, 5698 or 56985?

Would my internet connection be (much) more secure if I would disable the UPnP completely and open the ports for Skype manually (if yes - how & do I have to do it for each computer on the network respectively)?

In general, is it true that one should always open only the ports above 6000 (for Skype and such)?

A little off topic: how can I check which Channel is best for my WiFi broadcast? Is there a (free) utility that would find the best possible channel for my wireless network? Or should I leave it on the Auto setting?

Thank you for your help in advance!

Polonus (as usual) is right about UPnP. There was a big security flaw found a few years ago, and you certainly shouldn't use it if your router was made before that date, as it might have the vulnerability.

http://dontsurfinthenude.blogspot.co.uk/search?q=upnp

You haven't enabled UPnP in Skype, which is probably why it is not working.

If you set up port forwarding manually, yes the port numbers have to be the same. Yes, DHCP will mess it up.

Skype only needs UDP incoming: at least that's what I have in port forwarding.

There's a white patch after the port numbers in your image: have you erased that section and lost a digit?
     Bambleweeny 57 sub-meson brain     Don't Surf in the Nude Blog

Offline Bellzemos

  • Avast Evangelist
  • Poster
  • ***
  • Posts: 621
Re: Port Forwarding
« Reply #7 on: November 27, 2014, 09:46:12 PM »
Yes, Polonus was often helpful for me, in the past, much appreciated! And since I'm appreciating I can't appreciate enough all the help I recived on the Avast forums from DavidR. Thank you! This is probably the nicest forum I was ever on, seriously. And thank you too, for helping me. But now I'm getting too off topic. :)

UPnP seems to be disabled in Skype by default, but what opened the supposed Skype ports in my router then? Maybe Skype from another computer?

What do you mean by "DHCP will mess it up"?

What do you mean by "a white patch after the port numbers in your image"? There's a digit missing in my router, I don't know why. Is it a glitch or does it mean something?
Intel Core i7 Q 740 @ 1.73 GHz, 6 GB RAM, Windows 7 Ultimate x64 SP1, Avast! Free Antivirus, Malwarebytes Anti-Malware (free version) and Sandboxie (paid version).

Offline Bellzemos

  • Avast Evangelist
  • Poster
  • ***
  • Posts: 621
Re: Port Forwarding
« Reply #8 on: December 02, 2014, 12:40:33 AM »
I kindly ask you for a reply to my previous post, when you have some time to spare - no hurry. :)
Intel Core i7 Q 740 @ 1.73 GHz, 6 GB RAM, Windows 7 Ultimate x64 SP1, Avast! Free Antivirus, Malwarebytes Anti-Malware (free version) and Sandboxie (paid version).