Shields Up Scan

[syscon]

I am in the process of setting up a hard wired router so when christmas comes my son has access to the internet and printer / file sharing. The LAN is set up and fully working both machines now can share files, print and access the internet.

I then done a scan on Shieldsup and port 515 is open, I have no idea why (some thing to do with printer?) now according to Shieldsup there may be a trojan that uses this port (Trojan Sightings: lpdw0rm, Ramen) so obviously I want to try and block it I manually added the port to zone alarm pro and blocked TCP and UDP PORT 515 yet it still shows up as open.

Also I have mapped the shared drive so on boot there assigned a drive letter but if i go into My network places I get the drive showing up under the internet title is this right and how secure are the files once shared on the LAN from the internet



Anyone shed any light on this or offer any pointers.

Cheers

[drdude]

I'm pretty sure UDP port 515 is to do with printer sharing. Block that port in ZoneAlarm Pro for the Internet Zone, and leave it open for your local network and everything should be fine

[syscon]

I'm pretty sure UDP port 515 is to do with printer sharing. Block that port in ZoneAlarm Pro for the Internet Zone, and leave it open for your local network and everything should be fine

Already tried it mate, blocked both udp and tcp port 515 in both zones still has no effect shieldsup reports it as open?

[hxbro]

hmm, the router should be blocking that port from the internet for you unless something strange is going on.

What is handling the printer sharing ?

[destro404]

Is it a Belkin router? I've come across a few instances of them having port 515 open by default.

[syscon]

hmm, the router should be blocking that port from the internet for you unless something strange is going on.

What is handling the printer sharing ?

Sorry if I sound a bit thick mate, simply right clicked on printer and shared it.

Relatively new to networks / file sharing so have a lot to learn.

[syscon]

Is it a Belkin router? I've come across a few instances of them having port 515 open by default.

Yes, Belkin F5D5231-4, I have had a look through the web interface and manual and cant seem to find away of blocking individual ports!

[destro404]

In the "Virtual Servers" section set port 515 to forward to an unused IP address on your internal network like this.

[syscon]

In the "Virtual Servers" section set port 515 to forward to an unused IP address on your internal network like this.

Your a star mate, added that and now the port is stealthed obviously because its forwarding to a non existent PC. K+

Do you know if this forward only effects the internet traffic.

[destro404]

Should be fine and only apply to traffic coming through your router from external sources.

[syscon]

Thanks Again Mate. Much Appreciated.