[Frage] ctlmgr opens TCP port 53344 to the Internet. Why?

frater

Mitglied
Mitglied seit
23 Nov 2008
Beiträge
440
Punkte für Reaktionen
3
Punkte
18
I am still testing my script to see if it is always successful in refreshing the opened port-forwards.
It seems it is.
But whilst checking I suddenly see port 53344 opened to the Internet.

Because I've had some instability issues in the past that turned out to be related to some "removal package" I only had the NAS removed.
For my last flash I unselected the NAS as well.
Only now does this port show up.


[email protected]:/var/mod/root# grep -A6 192.168.178.1.:53344 /proc/kdsld/dsliface/internet/ipmasq/pcp44
MAP TCP [192.168.178.1]:53344 [10.0.0.98]:53344 use 1, lifetime 120 secs, expire in 99 secs
wanted [0.0.0.0]:53344
uniqid 0
nonce 2e4010255e531cdf94c54b5c
desc "argo.TCP.53344"
wanted_lifetime 120 lifetime 120
pid 14488 caddr [192.168.178.1]
[email protected]:/var/mod/root# netstat -lntp | grep 53344
tcp 0 0 :::53344 :::* LISTEN 14509/ctlmgr
 

koyaanisqatsi

IPPF-Urgestein
Mitglied seit
24 Jan 2013
Beiträge
11,294
Punkte für Reaktionen
186
Punkte
63
Hello frater


I guess you have to check if TR-069 is enabled.
If so then this is the "port knocking port" for provider side knocking and if knocked the box will visit the ACS for what ever.

Another possibility is the relative new implementation of AVM ACS.
...but i do know near zero about this.
...even if AVM opens a port knocker for this.

I bet @PeterPawn knows more and share some bytes :D
 
Zuletzt bearbeitet:

frater

Mitglied
Mitglied seit
23 Nov 2008
Beiträge
440
Punkte für Reaktionen
3
Punkte
18
Knock, knock.... this is the NSA
 

koyaanisqatsi

IPPF-Urgestein
Mitglied seit
24 Jan 2013
Beiträge
11,294
Punkte für Reaktionen
186
Punkte
63
This is the meaning of...
"The manufacturer of the device can add custom events that will also make the device connect to the ACS"

My german 1&1 Box ( Branding: avm ) opens...
Screenshot_20190807-132344.png
...if...
Screenshot_20190807-132430.png
 
Zuletzt bearbeitet:

PeterPawn

IPPF-Urgestein
Mitglied seit
10 Mai 2006
Beiträge
12,154
Punkte für Reaktionen
751
Punkte
113
It's the result of enabled vendor/manufacturer service (aka "AVM services" - not to confound with "Provider services") "Diagnosis and Maintenance" - "argo" is AVM's "code name" for this service, where the box sends data to AVM regularly and there it's accessible for AVM, too (via TR-069 interface).

I'm not sure, how AVM translated the german names/sentences to English, maybe there're differences to my names above.
 

frater

Mitglied
Mitglied seit
23 Nov 2008
Beiträge
440
Punkte für Reaktionen
3
Punkte
18
OK...
I have been doing a lot of initial setups and must have flashed this 7490 already some 40 times.
Most of the time I'm unselecting the "Diagnostics" and must have left it on that time...
It confirms again that one should say "no" when permissions are asked.
 

Zurzeit aktive Besucher

3CX PBX - GRATIS
Linux / Win / Cloud

Statistik des Forums

Themen
232,365
Beiträge
2,021,609
Mitglieder
349,943
Neuestes Mitglied
kaelteschutzgebiet