D-Link Forums

The Graveyard - Products No Longer Supported => Routers / COVR => DIR-655 => Topic started by: icf80 on December 04, 2010, 12:19:54 PM

Title: Why my router has smtp and pop3 ports opened?
Post by: icf80 on December 04, 2010, 12:19:54 PM

Hi,

I did a port scan and found that my router has three ports opened
SMTP, pop3 and 80(for admin access).

Why SMTP and pop3?

Title: Re: Why my router has smtp and pop3 ports opened?
Post by: davevt31 on December 04, 2010, 01:17:20 PM

Was your email client open at the time of the port scan?
Even if it is minimized to the task bar it is still running.

Title: Re: Why my router has smtp and pop3 ports opened?
Post by: icf80 on December 04, 2010, 02:08:21 PM

I have no email client opened.
I just did a scan on some IP range, from where my ISP allocates me an IP,
and I see a lots of addresses with SMTP+pop3 opened.

I just did:
netstat -an
there is no port 25 or 110 in the list.
The scanner still reports the ports are opened in the router.

Title: Re: Why my router has smtp and pop3 ports opened?
Post by: davevt31 on December 04, 2010, 04:36:30 PM

Check to see if someone is "borrowing" your wireless connection.
Also, do you have the router setup to email you the router logs?

Title: Re: Why my router has smtp and pop3 ports opened?
Post by: icf80 on December 06, 2010, 08:10:46 AM

Hello again,

I did a new scan (192.168.1.1 - my router inside the network)
with another program nmap (Zenmap) and it reports:
ports 80, 444, 8099, 9393 as opened

The original program that I have used to scan, Advanced Port Scanner v1.3
still reports:
ports 25, 80, 110 as opened.

So i presume the first program that I have used has some problems.

What do you think?

Title: Re: Why my router has smtp and pop3 ports opened?
Post by: davevt31 on December 06, 2010, 10:43:10 AM

Try Gibson's port scan and see what that says.

http://www.grc.com (http://www.grc.com)

You want to run the Shields Up program and do the All Service Ports scan.

What you really want to know is what ports are opened, closed or stealthed on the Public side of the router.