Page 1 of 1

control ipv4/ipv6 ports open

Posted: Thu Mar 05, 2020 10:19 pm
by ricka
I would like to "close" some TCP ports
about ipv6, leaving others open, example of my current scenario:
open doors:
Discovered open port 22,80,443, 445,139,8080,631 on / tcp on 2001: db8 :: 1
my desired scenario is open port 22 and 443 only.Today I use external access only for administration and my IPv4 is under CGNAT so there is no risk for this protocol.
QNAP controls only IP but I receive Dynamic IPv6.
Any Ideas? Thank you

Re: control ipv4/ipv6 ports open

Posted: Fri Mar 06, 2020 3:51 am
by OneCD
Hi and welcome to the forum. :)
ricka wrote:
Thu Mar 05, 2020 10:19 pm
I would like to "close" some TCP ports
about ipv6, leaving others open, example of my current scenario:
open doors:
Discovered open port 22,80,443, 445,139,8080,631 on / tcp on 2001: db8 :: 1
If you don't want the services listening on those ports to be accessible, then you can either:
  • ensure your router isn't forwarding incoming requests on those ports to your NAS,
  • kill those services in your NAS.
Pick one.

Re: control ipv4/ipv6 ports open

Posted: Fri Mar 06, 2020 3:59 am
by ricka
In dinamic IPv6, can't control this ports on firewall, but I can define "level" of security.
If I kill smb, I kill server together
Thank you

Re: control ipv4/ipv6 ports open

Posted: Fri Mar 06, 2020 4:08 am
by OneCD
ricka wrote:
Fri Mar 06, 2020 3:59 am
In dinamic IPv6, can't control this ports on firewall, but I can define "level" of security.
If you're dealing with CGNAT, exposed ports shouldn't be a problem anyway. The usual difficulty is trying to get local services exposed via GCNAT.

Re: control ipv4/ipv6 ports open

Posted: Fri Mar 06, 2020 4:26 am
by ricka
I have 2 protocols. Ipv4 under CGNAT and ipv6 dinamic...