Back door in firmware?

**Mark Koshelev** · 22-01-2005, 21:03

I’m using 500g with 1.9.2.7-3b firmware.
Today I looked at port forwarding table and little confused.
Really I have virtual server for ports 4672, 4662, 8000, 5900.
I newer allowed ports 23531 and 50154.
What is the magic?
83.237.36.48 UDP 4672 192.168.0.10
83.237.36.48 TCP 4662 192.168.0.10
83.237.36.48 TCP 8000 192.168.0.10
83.237.36.48 TCP 5900 192.168.0.10
83.237.36.48 TCP 23531 192.168.0.10
83.237.36.48 UDP 50154 192.168.0.10

**Rynno** · 22-01-2005, 21:14

Maybe the ports are opened by uPNP

You can enable/disable this:

IP Config
IP Config - Miscellaneous
Enable UPnP?
Yes/No

**Mark Koshelev** · 23-01-2005, 19:23

Actually UPnP was enabled. I thought that it is the reason of opened ports too.
But after UPnP has been disabled (then save and reboot step) the wrong forwarding ports were still exist.
May Save/Reboot action keep wrong ports?

**Antiloop** · 23-01-2005, 22:09

Originally Posted by Mark Koshelev

Actually UPnP was enabled. I thought that it is the reason of opened ports too.
But after UPnP has been disabled (then save and reboot step) the wrong forwarding ports were still exist.
May Save/Reboot action keep wrong ports?

do a cold boot
or reset to defaults first

**Mark Koshelev** · 24-01-2005, 21:05

Reset to default is undesirable as well as cold reset.
Can I edit something in router configuratin to change forwarding policy?

**Antiloop** · 24-01-2005, 21:19

Originally Posted by Mark Koshelev

Reset to default is undesirable as well as cold reset.
Can I edit something in router configuratin to change forwarding policy?

flush iptables and remove entries from nvram

**Mark Koshelev** · 26-01-2005, 20:14

Thanks, it's working. What is the reason for saving UPnP configured port to nvram?

**Oleg** · 26-01-2005, 20:20

Ask ASUS tech support about this.

Probably to survive reboots.

**phedny** · 03-02-2005, 20:10

Originally Posted by Mark Koshelev

Thanks, it's working. What is the reason for saving UPnP configured port to nvram?

I think it is for the web interface, as it can only fetch dynamic information from nvram (although, that's how far I understand the httpd process).

**barsju** · 09-03-2005, 08:24

flush iptables and remove entries from nvram

Could you please post code on how to do this?

S

PS: Has there been any attempts to change/replace the UPnP service? Would this be possible?

EDIT: Solution can be found here: http://wl500g.info/showthread.php?t=1933

Thread: Back door in firmware?

Thread Tools

Rate This Thread

Display

Back door in firmware?

Similar Threads

Troubles downgrading from WL500b-1.9.2.7-3c back to 1.7.5.9-5

Get my WL500B back to Live

Posting Permissions