New router leaves port 80 open- please help.

[pelikan]

I have a new Belkin 802.11b wireless router/gateway. I did the Shields Up port scan at GRC and it shows port 80 open and port 113 closed (rather than stealth).
I have the router's firewall enabled. I checked and there are no firmware updates available. Do I need to change some of the router's settings?
Thanks. 🙂

 

[mordantmonkey]

I don't now about the belkin router, but on my netgear i can PORT FORWARD. Just simply set up a port forward for port 80 and 113 to an IP that doesn't exist on your network (e.g. 192.168.0.49 for my network). This could be a problem though if you have programs that use these ports. 113 is not really used anymore, but i don't know about 80.

 

[pdo]

wouldn't you need port 80 open to browse the internet?

 

[pelikan]

Thanks for the help.
All the ports should be invisible from outside. With my other router the GRC port scan shows all ports as "stealth." If I disconnect this new router and enable a firewall then all the ports are "stealth." So the firewall on this new Belkin router isn't working (or configured) properly.

 

[Dennis Travis]

What model Belkin is it? I will try to find the manual and help you. Need the model number. I have never used a router that had port 80 open by default. 113 yes.

 

[pelikan]

Belkin F5D6231-4. Thanks a lot.

Edit: Manual.

 

[Nothinman]

113 is not really used anymore, but i don't know about 80.

113 is still used by IRC, it's not required but if it's closed it can increase connection times by a minute or so. 80 is HTTP, and is only necessary inbound if plan on hosting a website.

If I disconnect this new router and enable a firewall then all the ports are "stealth." So the firewall on this new Belkin router isn't working (or configured) properly.

The difference between stealth and closed is minor and not something you should spend a lot of time trying to fix.

 

[Dennis Travis]

In the Firewall tab under Application Gateways are there any ports fowarded there? Most routers by default block all ports unless you foward them with the exception of 113 on some routers like some Netgears. If nothing is fowarded in that menu, I don't see any other options like on my Linksys and Netgear routers. I would then try fowarding 113 and 80 to a non existant port like was already suggested in a message above. Will do some more reading. Again I am shocked that out of the Box Port 80 is open like that.


Opps, missed one, Also check the Virtual Servers tab, and be sure nothing is fowarded there. That is the tab where you can foward to a non existant IP. I don't see any other settings. Every other Router I have used out of the box was blocked and stealth with all ports but 113 on a very few Netgears on GCR. If nothing else works put in two entrys in Virtual Servers, one for 80 and the other for 113. Like was said about 113 really is not that important as long as it's closed and not wide open but I have mine fowarded anyway. Go like this example. Inbound Port 80 Address 192.168.2.55 Just be sure to use a port that is not on your network.

Hope some of this helps.

 

[pelikan]

Thanks mordantmonkey and Dennis Travis. Under "Virtual Servers," I forwarded port 80 and 113 to a non-existent IP. Now all my ports are stealth. 🙂

 

[Dennis Travis]

cool, glad to hear it worked.

 

[JackMDS]

1. Closed is Not Stealth but it is Not Open either.

2. If you do not use Software Firewall use one. Router alone even if it is Stealth is very partial protection.
Link: Basic Protection for Broadband Internet Installation.

3. Do Not forget this maneuver with Port 80, sooner or later something will not work well and might need to open it.

:sun:

 

[JackMDS]

1. Closed is Not Stealth but it is Not Open either.

2. If you do not use Software Firewall use one. Router alone even if it is Stealth is very partial protection.

Link: Basic Protection for Broadband Internet Installation.

3. Do Not forget this maneuver with Port 80, sooner or later something will not work well and might need to open it.

:sun:

 

[mordantmonkey]

no kidding about the software firewall. Not only can people intrude from the outside, but trojans and malware can intrude from the inside. If malware makes contact to an outside source your hardware firewall will see this as a legitimate connection and not to diddley about it.

 

[pelikan]

Thanks everyone.

 

[Dennis Travis]

Agreed completely. If you want to be safe use both. Was glad to see your router has an SPI Firewall also. Do use a good Software fireall also like Jack and others have stated.