2
I have a new Asus RT-AC68U Dual-band Wireless-AC1900 Router.
Under the System Log - Port Forwarding page, I see the following:
Destination Proto. Port range Redirect to Local port
ALL TCP 80 192.168.1.200 80
ALL TCP 443 192.168.1.200 443
ALL UDP 63356 192.168.1.122 63356
ALL UDP 53281 192.168.1.10 53281
192.168.1.200
is a Linux webserver, and I intentionally set these port forwarding rules. 192.168.1.10
is the Windows client I am accessing the router with, and I did not create a port forwarding rule to it. (EDIT. originally, it was just port 53281, but now I see 63356 as well). If I go to the WAN/port forwarding page, this rule does not show up. I've tried logging out of the router on that client, and logged on with another, and the log file still shows port 53281 forward to 192.168.1.10
, and not the new client's IP.
My Linux server has recently been under attach, but I don't think it has been breached.
What is the purpose of this port? Should it be closed, and if so, how?
Rather than looking just at your router, you should check the systems the port is forwarded to. Also, update the router’s firmware and change its password from a known-safe computer. Turn off UPnP port forwarding on your router, because it’s a security issue. – Daniel B – 2014-10-26T15:05:13.097