05-21-2023
03:11 AM
- last edited on
05-25-2023
12:05 PM
by
Translator
Hi - I did an nmap from outside my local LAN and noticed that the TCP port 1080 was open to the world.. Should I block access to it from outside? Just use an
access list
for it?
Thanks!
Solved! Go to Solution.
05-21-2023
05:26 AM
- last edited on
05-25-2023
01:14 PM
by
Translator
Hello @tkalfaoglu,
https://www.speedguide.net/port.php?port=1080
Port 1080 is commonly used for the SOCKS proxy protocol. By default, this port allows incoming connections, and it's often targeted by attackers looking for open proxies to abuse for various purposes.
If you have identified that TCP port 1080 is "open to the world" and you are not intentionally running a SOCKS proxy service, it is generally recommended to block access to this port from outside your local LAN. This will help prevent potential unauthorized access and mitigate any potential security risks associated with leaving the port open.
To block access to port 1080 from outside your LAN, you can implement an ACL or firewall rule on your network perimeter device, such as a router or firewall. The specific steps for configuring the ACL or firewall rule depend on the device you are using.
Example:
access-list 100 deny tcp any any eq 1080
access-list 100 permit ip any any
--> Apply ACL 100 to the interface facing the external network:
interface <interface_name>
ip access-group 100 in
05-21-2023 03:14 AM
apply the ACL in interface deny udp/tcp ports
do check again and see if it still open or not.
05-21-2023 03:34 AM - edited 05-21-2023 03:38 AM
Hi
which device is it?
If this is a RVXXX device, you can just disable th UPNP service
05-21-2023 06:09 AM
It's a CISCO 3925 actually.. Thanks!
05-21-2023
05:26 AM
- last edited on
05-25-2023
01:14 PM
by
Translator
Hello @tkalfaoglu,
https://www.speedguide.net/port.php?port=1080
Port 1080 is commonly used for the SOCKS proxy protocol. By default, this port allows incoming connections, and it's often targeted by attackers looking for open proxies to abuse for various purposes.
If you have identified that TCP port 1080 is "open to the world" and you are not intentionally running a SOCKS proxy service, it is generally recommended to block access to this port from outside your local LAN. This will help prevent potential unauthorized access and mitigate any potential security risks associated with leaving the port open.
To block access to port 1080 from outside your LAN, you can implement an ACL or firewall rule on your network perimeter device, such as a router or firewall. The specific steps for configuring the ACL or firewall rule depend on the device you are using.
Example:
access-list 100 deny tcp any any eq 1080
access-list 100 permit ip any any
--> Apply ACL 100 to the interface facing the external network:
interface <interface_name>
ip access-group 100 in
05-21-2023 06:07 AM
Many thanks everyone! I just added the ACL line.. this was the Giga interface that's connected to the vdsl2 modem.. So, yes, it's "very open to the world"
Regards, -t
05-21-2023 06:28 AM
You are so welcome
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide