Child Item

Site Totals

61246 Questions Answered 267 Categories

Who enabled xlive port forwarding on my FIOS router?

I logged into my (secure?) FIOS router this morning and found that xlive port forwarding has been enabled to all of my (firewalled?) home computers.

How did this happen? Did Verizon enable it? Did my kid's game enable it? If so, how could it enable it without knowing my admin password to the router? If I forcefully disable it (uncheck), is it going to re-enable itself?

Comments

viafax999

@user4321 wrote:
I logged into my (secure?) FIOS router this morning and found that xlive port forwarding has been enabled to all of my (firewalled?) home computers.
How did this happen? Did Verizon enable it? Did my kid's game enable it? If so, how could it enable it without knowing my admin password to the router? If I forcefully disable it (uncheck), is it going to re-enable itself?

What is "xlive" ?? do you mean Xbox?

There is no way that I know of to to port forward the same port to multiple destinations. If you attempt to do it you will get an error saying there is a port conflict.

A picture of your port forwarding setting might help.

Why bother unchecking them, if you can, why not just delete them, again if you can.

Typically anything added by Verizon is marked as Verizon Fios Service and is to do with the STBs, there is no way to uncheck or delete those entries short of issuing a router reset to defaults.

smith6612

I'm pretty sure the OP means Xbox Live. Do you by any chance own an Xbox 360? If so, it's possible the Xbox 360 created the Port Forwarding rules itself if you have UPnP enabled in the ActionTec. Otherwise, it's possible the kids may have created the Port Forwarding rules so that their games may work correctly. Verizon will not create port forwarding entries out of the blue for you.

If this is the case, what I do suggest doing is configuring the Xbox 360 to use a Static IP address on the network. You should do this either by configuring the Xbox manually, or by using DHCP Reservation to ensure the Xbox will obtain the same IP address every time on the network. From there, if you wish to disable UPnP so that Port Forwards are not automatically created as applications request them, you can do so from the ActionTec's "Advanced" menu. Lastly, the Xbox 360 should have the needed ports forwarded to it so that Xbox Live and games work with little issue if any.

RLutwk

We don't own an Xbox, but the kids do play video games on their PC. I suspect that this is the problem but my question is "how could an application on the PC create a port-forwarding rule on the router? The router admin account is password protected and neither the kids nor the PC know this password.

Do applications have a backdoor to the router configuration? If I delete the rules, will the app recreate them?

Is there a setting somewhere in the router that allows apps to modfiy the port forwarding rules? I can't find one.

lasagna

It's called UPnP (or Universal Plug and Play)

It's a protocol which allows devices behind a router to advertise the "services" they support and for which the router should configure a port forward pointed to them to service. There are a number of inherent security risks with UPnP amongst them the ability for rogue devices inside a network to potentially map a backdoor entry (or redirect legimate inbound traffic).

You can turn UPnP on/off by logging into the router, going to the Advanced tab, and then selecting Universal Plug and Play and disabling the ability to allow network users to control wireless broadband network features.

viafax999

@lasagna wrote:
It's called UPnP (or Universal Plug and Play)
It's a protocol which allows devices behind a router to advertise the "services" they support and for which the router should configure a port forward pointed to them to service. There are a number of inherent security risks with UPnP amongst them the ability for rogue devices inside a network to potentially map a backdoor entry (or redirect legimate inbound traffic).
You can turn UPnP on/off by logging into the router, going to the Advanced tab, and then selecting Universal Plug and Play and disabling the ability to allow network users to control wireless broadband network features.

I agree that turning of upnp would be a good thing, that being said I've never done it and have never had any issues

However
Why would upnp set up port forwarding rules for XboxLive for the OP when the OP doesn't have such a device in hisnetwork?

and

How could it set up such port forwarding rules to every machine in his network without creating conflicting errors in the rules?

Doesn't this rather point out that the user may have a virus of some sort in his network that has opened some back door access into his network and that maybe he should be looking at his machines to find a listener on the ports defined in the port forwarding rules?

Child Item