How did these ports get opened on my hardware firewall, and what are they?

[Wolfpup]

was just configuring the firewall on my Linksys router, and noticed a whole bunch of ports were getting forwarded.

They weren't there before, and I didn't add them, so how the heck did they get added?

They all say "RTSP_n" where "n" is a number. Here's a screenshot:

http://img254.imageshack.us/my.php?image=portforwardvs3.jpg]

[/URL]

I Googled "RTSP" and it comes up with something about "Real Time Streaming Protocol"...which really tells me nothing.

What's going on? I was I hacked or something?

 

[RebateMonger]

Is UPnP available on your router? If so, an application may have opened up those ports.

 

[Wolfpup]

Good idea!

I just checked, and my router seems to support UPnP, but under the "Administration/Management" section of its configuration screen UPnP is set to "Disabled", and I know I never turned it on.

I checked too, and I've got the newest firmware for my router (a Linksys BEFSX41).

 

[jlazzaro]

even if UPnP was enabled, it wouldnt have manually created entries in your forwarding list...

1762/3: Remote Control Microsoft Systems Management Server

6970: Gate Crasher Trojan Horse

1422: Autodesk License Manager

1423: Essbase Arbor Software

1424: Hybrid Encryption Protocol

do you have a non-default / blank password setup on your router? does anyone else have access to this router?

i would delete them all and run a full system scan...

 

[Wolfpup]

I've got the router password protected, and supposedly it's only accessible from inside my network. I'm the only person who has access to it (well, one other person, but they have trouble remembering whether to single or double click things 😀 )

I deleted off all those extra entries and I'll run scans. This is kind of creepy...

Thanks for the feedback!

 

[RebateMonger]

Are you running any of these RTSP implementations?

 

[Wolfpup]

I've got Realplayer and Quicktime on there, but just the clients (and I've never added any of those entries to my router).