Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

UPnP Forwarding Enabled Itself--MSMSGS

Status
Not open for further replies.

pagreen

Technical User
Jun 2, 2003
44
US
I have a Linksys BEFVP41. Until yesterday, I had UPnP enabled. On a whim, I checked the settings for UPnP forwarding. Much to my surprise, I found the following settings filled in and enabled:

Application Ext Protocol Int IP
Name Port Port Addrss
MSMSGS 7167 TCP 16227 xxx.xxx.xxx.121
MSMSGS 51682 UDP 8881 xxx.xxx.xxx.121

I understand that MSMSGS is Microsoft Messenger Service. What I don't understand is how these settings got filled in, and whether this represents a security breach. To make matters worse, there is a possiblity that some external source has somehow utilized our system to forward their spam. At least that seems to be what AOL tells us. If this indeed does represent a security breach, how can I stop it? Obviously, I disabled this forwarding. I also disabled UPnP. What else can I do to make the system secure? Also, how do I keep it from responding to UDP broadcasts?

Any help would be appreciated.
 
This is not the Microsoft Messenger Service.

This is the Windows Messenger client, or the MSN version of the client. Find out who has IP xxx.xxx.xxx.121 on your network and disable the Instant Messenger client.

By the way, this is not technicly even uPnP, but the H.323 service that you are seeing.

 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top