?
Solved

Several attempts on our firewall on port 113? Is this needed?

Posted on 2008-10-30
6
Medium Priority
?
291 Views
Last Modified: 2013-11-16
I have noticed several connections from external IP addresses attempting to connect to our firewall's main Ip address on port 113. They are all being blocked, but I am wondering what these connections are and why are they being attempted?

Can someone help me with this?
0
Comment
Question by:nichiaiinc
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 32

Accepted Solution

by:
dpk_wal earned 2000 total points
ID: 22856804
Port 113 is used for Authentication Service / Identification Protocol; as the connections are blocked and you do not have any open service you need not bother. If you wish, you can put the IP under blocked site or the port under blocked ports; also you might wish to contact your ISP and blacklist the sender completely.

Thank you.
0
 

Author Comment

by:nichiaiinc
ID: 22860317
thanks again for answering another one of my questions DPK WAL. Is there any possibility that these connections could be legitimate and I should be allowing them through?
0
 
LVL 32

Assisted Solution

by:dpk_wal
dpk_wal earned 2000 total points
ID: 22860409
If you are not hosting any service which needs the incoming session then they cannot be legitimate; if the application needs incoming connection which are part of the session then they would be allowed by the firewall [but not on a different port].

Are you running in any problem where some of the auth service not working properly; if none then I do not think that the connections are legitimate.

Thank you.
0
Automating Your MSP Business

The road to profitability.
Delivering superior services is key to ensuring customer satisfaction and the consequent long-term relationships that enable MSPs to lock in predictable, recurring revenue. What's the best way to deliver superior service? One word: automation.

 
LVL 32

Expert Comment

by:dpk_wal
ID: 22860725
You are welcome; happy I could be of assistance! :)
0
 

Author Comment

by:nichiaiinc
ID: 22860650
thanks DPK WAL!
0
 

Author Closing Comment

by:nichiaiinc
ID: 31511607
Perfect!
0

Featured Post

WatchGuard's M Series Appliances - Miecom Approved

WatchGuard's newest M series appliances were put to the test by Miercom.  We had great results and outperformed all of our competitors in both stateless and stateful traffic throghput scenarios! Ready to see how your UTM appliance stacked up? Download the Miercom Report!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Do you have a windows based Checkpoint SmartCenter for centralized Checkpoint management?  Have you ever backed up the firewall policy residing on the SmartCenter?  If you have then you know the hassles of connecting to the server, doing an upgrade_…
The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…
Have you created a query with information for a calendar? ... and then, abra-cadabra, the calendar is done?! I am going to show you how to make that happen. Visualize your data!  ... really see it To use the code to create a calendar from a q…
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question