Firewall Config: Outbound UDP port 10053 -> to 11110

(1/2) > >>

Busthead:
Hello,

I've configured my firewall as recommended here:

http://www.obihai.com/FAQ.html#ports-to-keep-open-on-my-router

and my Obi110 appears to be functioning perfectly.

That said, I am seeing many of these dropped packets in my firewall logs:

UDP    192.168.0.225 (OBi110) : 10053 → 54.241.160.4 : 11110
len=138    ttl=79    tos=0x00

What is the purpose/function of this traffic? Is this a trojan?

Thanks!

gderf:
What happens if you don't follow those firewall recommendations at all?

Busthead:
Not sure what you're asking.

My default rules are deny all outbound and deny all inbound. If I don't explicitly allow traffic, it is blocked.

Thanks

giqcass:
It doesn't look unusual to me.  The ports you opened up are for initial communication.  Other ports may be used in addition to the defined ports after the call starts.  Log in to your local Obi admin page next time you make a call.  You can check out call status in real time to see more info on a particular call.  That IP address appears to be associated with Amazon aws servers.

Busthead:
Sorry, I should have included additional information:

This traffic occurs when neither my land-line nor VoIP services are in use. i.e. when the OBi110 is suppose to be idle, it's communicating out to the aforementioned ip addr at port 11110.

Also, these packets occur every 1 - 33 seconds so it's fairly chatty and definitely clogging up my firewall logs.

Thanks

Navigation

[0] Message Index

[#] Next page