Port Scans from vonage?

Posts: 1 · New Forum Member Joined: Nov 11, 2004 Posts: 1

I just started seeing these scans on my firewall, anybody have an idea what these ports are for? (google didnt help much)
Unrecognized access from 216.115.25.139:35774 to UDP port 33449
Unrecognized access from 216.115.25.137:35775 to UDP port 33451
(scans all ports 33449-33456)
Unrecognized access from 216.115.25.138:35773 to UDP port 33455
Unrecognized access from 216.115.25.136:35772 to UDP port 33456

a whois shows
NetRange: 216.115.16.0 - 216.115.31.255
CIDR: 216.115.16.0/20
NetName: DATACENTER
NetHandle: NET-216-115-16-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Assignment
NameServer: NS4.VONAGE.NET
NameServer: NS5.VONAGE.NET

No phone calls during that time of the morning, so its not call related.
I thought the only ports they needed were 5060-5061 and 10000-20000.

Any ideas?

Posts: 28 · Posted: Thu Nov 11, 2004 9:44 pm Post subject:

Yep those are the RTP servers that your device registers to on a constant basis. The ports you need are:

53 dns
69 tftp
123 time
5060-5061 sip
10000-20000 voice traffic (rtp)

If you are seeing scans it is the proxy servers.

Posts: 10 · Vonage Forum Associate Joined: Nov 17, 2004 Posts: 10

I have a similar problem... I want to open my ports and become a happy customer, too, but I can't. I have a Linksys router which I need to network another computer. Does the Linksys router have multiple ports? Or can I run the VT1000 under my Linksys? I'm doing that right now but I can't use port forwarding because my VT1000 is 192.168.102.1 and my Linksys is 192.168.1.1 which has a different number in the third place, there, like in the 192.168.xxx.1 area. See what I mean? Or is there a way to configure my Vonage router to use a different, 192.168.1.xxx address?

C5

Posts: 10 · Vonage Forum Associate Joined: Nov 17, 2004 Posts: 10

I got my Linksys and my Vonage to both use the xxx.xxx.102.xxx addresses last night. But my routing table shows NOTHING for the VT1000. And I can't even log into the admin center when it's configured to run outside my router, now. I turned NAT on the VT1000 off, as I saw recommended in the other post, but ... if I can't touch it, how can I turn it on again, now?

If I could see the router on my LAN, I could forward the necessary ports to it. Anyone have any hints/tips on this?

Monty

Posts: 28 · Posted: Wed Nov 17, 2004 7:53 pm Post subject: MTA behind the router

CAT5 you can do 1 of two things the easiest would be to have your MTAVT1000 behind your Linksys router and have your computer connected to the PC port of the VT1000. This will allow you to ping 192.168.102.1 (mta)
and 192.168.1.1 (linksys) from the PC.

Or you can disable the DHCP server on the linksys and apply a static IP to the WAN interface of the linksys in the DHCP range of the MTA vt1000. (192.168.102.100+)

This will make all devices connected to the linksys get an IP address from the vt1000 and the linksys router will serve as a switch.

There should be no need to forward any ports as traffic that orginates behind the LAN is tagged as 'friendly' on its return path in. (unless you have ports explicitly blocked ouf course).

Hope this helps,

Mole

Posts: 10 · Vonage Forum Associate Joined: Nov 17, 2004 Posts: 10

Hi, Mole,

Thanks a lot for the suggestions. I've spent the past three hours messing around with it. Well, and last night, too. I don't think it worked. But I enjoy learning about this stuff and although I'm able to hit the 'net right now, the Vonage is quite decidedly dead. When I need to use the phone for my business tomorrow, I'll have to rewire things and hope it connects. It connected this AM, so I should be OK.

But still, I'm messing around with this.

I tried your suggestions. Turned off DHCP on the Router. It was in "Gateway" mode the whole time-- is that something to consider? If it's in gateway mode, is it still a switch? Or at all? I hesitated to change that because before your advice I put it on router and I had to reset my router about two bazillion times and config my IP manually and all that to get it to go into "normal" mode where I could hit the 'net.

So... what I did was, change the Linksys so that both are on xxx.xxx.102.xxx, and then changed the router to turn DHCP off, and tried running my PC through the VT which is behind the "switch"... which I left in "gateway" mode... is that OK? Didn't work. What do you recommend?

Should I have my PC's IP address set manually in my configs with your recommendations?

Your help is and has been appreciated!!!

Cheers.
C5

Posts: 28 · Posted: Fri Nov 19, 2004 10:49 pm Post subject: Mole Here

hey catsfive read over what you did. Let me say that the gateway mode is def. a problem. I'll try to recap in this message what you should do step my step as logically as I can. These message boards can be very 'loose' and I don't want you to get confused. Below are my suggestions/instructions.

I. Lets start da heck over! lol
a: MTA VT1000

1)Lets make sure the MTA VT1000 is connected directly from its WAN port to the high speed modem.
2)Next connect a computer to the PC port of the VT1000.
3)Load a web browser and type http://192.168.102.1
4)Once inside click on Advance and verify that DHCP is enabled (has a check mark inside).

------
WE ARE DONE WITH THE MTA VT1000 for now.
PHASE 2
-----
II. Operation "Get that Linksys out of Gateway mode."
I'm sure you know how to do this. Access the default gateway of the router and disable the gateway mode. We want it to act as a router for the meantime.

----
III. TURN ROUTER INTO SWITCH

1.)Ok simply disable the DHCP server capabiliy of the router. Once this is saved do the following.

2.)Remove the physical Ethernet cable from the routers WAN / INTERNET port. We will no longer need anything connected her. What we will need is a CAT5 connection from any LAN port of the router to the PC port of the Vonage adapter.

3.)Connect a physical cable from the Computer to any LAN port on the router. Also connect a CAT5 from any LAN port on the router to the PC port of the VT1000. Done this? Great lets keep moving. . .

4.)THE VT1000 IS NOW THE Reigning supreme DHCP server on your LAN.
Your computer should be set to 'automatically' get an IP address (sure you can assign a static of 192.168.102.10x x being any number) but at this point lets let the network devices converge for us.

5.)Anything and I mean anything that you connect to your 'switch' should get an IP address from the Vonage. (remember we enabled the dhcp server on it above.)

Now you will still be able to access the router admin page by typing in its default gateway...even though this IP address is not a 'valid' one as far as the PC can see. But it will still work.

I highly suggest keeping the LAN IP assignment range of your router totally different that that of your VT1000 (192.168.102.X is used by the MTA ; make sure the router doens't have this network address).

This should serve you well. Let me know how you do.

Mole

Posts: 10 · Vonage Forum Associate Joined: Nov 17, 2004 Posts: 10

Hi, Mole,

Wow, these are great instructions. I think I followed them, but it still doesn't work. Well, it SORT of worked-- the VT1000 dial tone was working with the switch setup, but I can't hit the internet (I had to put things back the plain VT1000 setup in order to send you this message).

Here's what I did:

1) I kept DHCP on the VT1000 turned on. No virtual servers, no DMZ, nothing else. Device IP: 192.168.102.1 (still default, I assume)

2) Turned Linksys into a router and turned off its DHCP. IP: 192.168.102.2. Moved cable modem's Cat5 cable from Linksys WAN port to LAN port on VT1000 as instructed. Plugged PC cable into LAN port 3 on Linksys. Then connected a cable from VT1000 to Linksys port 1.

So... I have this:

Cable Modem > VT1000 LAN port > VT1000 PC port goes to Router > Router C5 cable goes to my PC, which is IP: 192.168.102.103 (Subnet mask is 255.255.255.0).

Is that what you meant?

When I do this without manually assigning a static IP address to my PC the VT1000 does not assign me an IP address as it should. I get 0.0.0.0, and nothing works. I don't recall if the phone worked with that setup or not.

Did I follow your instructions properly? I think the only problem here is that the VT1000's DHCP didn't give me a connection to the 'net! But the phone service is finding its way through, which to me suggests that something's working...

Question: Should the Linksys be on a different EVERYTHING? I tried setting it to 192.168.1.1 but that didn't help.

Your help is appreciated! This is a real challenge. I am learning a lot. Thanks!!!

C5

Posts: 10 · Vonage Forum Associate Joined: Nov 17, 2004 Posts: 10

Hey, Mole,

It worked!

The only thing I did differently was I plugged the C5 from the VT1000 to the *UPLINK* port on the "switch" and now all is copacetic.

Port 4662 and 4672 are now active on my second machine.

Nirvana.

THANK YOU THANK YOU THANK YOU THANK YOU

-C5

Posts: 10 · Vonage Forum Associate Joined: Nov 17, 2004 Posts: 10

Mole,

Hey man, I'm having another problem related to this setup you've helped me with, I think.

After about 15 minutes, my connection dies. I think I have found the problem. I cannot clear my ARP cache. My router still works and stuff but my PC which is feeding off the router cannot hit websites or get email via Outlook. Is there a setting for me to fix in the router? Some sort of pass-thru? If I could get THIS solved, I'd be golden!

Thanks again for sharing your expert knowledge...

C5