0
I discovered that one of my PCs started to request a lot short-living port forwardings according to my router (Fritz!Box 7490). Windows 10 is running on the device. It began on 25.06.2017. An update for Windows 10 was downloaded (but not installed yet) on the same day.
The PC requested a new port forwarding about every 3 minutes. Each forwarding lived for about 3 to 6 minutes. This continued for multiple hours until I stoped the PC. On the next day, the same happened after every restart for about 30 minutes. However, after this 30 minutes, no further port forwardings were requested until restarting the PC again.
The port forwardings seems to be created by the iphlpsvc service. At least, they refer to ports of this service. I found similar observations here and here (Germann).
Do anyone know the reason for this behavior? I read somewhere that this service is used to automatically create IPv6 over IPv4 tunnels. Since I have native IPv6, can I dissable this service?
JojOatXGME
Posted 2017-06-27T00:01:33.987
Reputation: 151
Do your ISP provide IPv6? If not then you may disable teredo, IPv6to4 and isatap interfaces. – Biswapriyo – 2017-06-27T03:46:26.693
@Biswa Yes, my ISP provides native IPv6. Shouldn't be any tunnel protocol redundant/unnecessary since I have native IPv6. Aren't this protocols designed to obtain IPv6 connectivity when no native IPv6 support is provided by the ISP. – JojOatXGME – 2017-06-27T09:02:04.560
Then you should have a static/dynamic IPv6 private address, isn't it? – Biswapriyo – 2017-06-27T14:34:36.993
@Biswa Yes, my PC has two global IPv6 addresses. The normal one and a temporary address. – JojOatXGME – 2017-06-27T20:13:20.950
So I advice you not to disable/delete iphlpsvc service that provide 6to4, teredo and isatap technologies.
– Biswapriyo – 2017-06-27T20:57:10.263