Welcome, Guest. Please login or register.
Did you miss your activation email?
May 22, 2013, 11:51:17 AM

Login with username, password and session length

663582 Posts
70564 Topics
145216 Members

Latest Member: millar

Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Security Products & Services
| |-+  Comodo Internet Security - CIS
| | |-+  Help - CIS
| | | |-+  Firewall Help - CIS
| | | | |-+  What's Port 55419 ?
« previous next »
Pages: [1] Go Down Print
Author Topic: What's Port 55419 ?  (Read 2655 times)
chefo
Newbie
*
Offline Offline

Posts: 7


« on: March 24, 2012, 11:12:04 AM »

Comodo Firewall blocked numerous attempts to connect to a UDP port 55419, from different IP addresses, browser is off when in fact no program is started. Here's an example from log:

2012-03-24 00:00:25 Windows Operating System Blocked In UDP 84.43.161.47 6001 192.168.1.2 55419

Is there cause for concern and what is this port 55419?
Logged
Radaghast
Star Group
Comodo's Hero
*****
Offline Offline

Posts: 4034



« Reply #1 on: March 24, 2012, 03:28:01 PM »

Comodo Firewall blocked numerous attempts to connect to a UDP port 55419, from different IP addresses, browser is off when in fact no program is started. Here's an example from log:

2012-03-24 00:00:25 Windows Operating System Blocked In UDP 84.43.161.47 6001 192.168.1.2 55419

Is there cause for concern and what is this port 55419?

Are you using a p2p application such as utorrent?
Logged

“Don’t worry if it doesn’t work right. If everything did, you’d be out of a job.”
chefo
Newbie
*
Offline Offline

Posts: 7


« Reply #2 on: March 24, 2012, 07:05:21 PM »

yes, i am using such application- bittorent but its closed most of the time
Logged
Radaghast
Star Group
Comodo's Hero
*****
Offline Offline

Posts: 4034



« Reply #3 on: March 24, 2012, 07:21:26 PM »

yes, i am using such application- bittorent but its closed most of the time

The fact that it's closed, unless it's been for quite a long time, won't make a difference to others in the swarm, that you may have been sharing files with. Unfortunately, when you disconnect from a swarm, the others don't know you've disconnected and will continue to ask for parts of the file you may have been sharing. This is just how these applications work.

The connections you're seeing, assuming they are being caused by your p2p application, are the result of your having closed the client, leaving the inbound connections with nowhere to go. Because of this, the connections are being picked-up by Windows Operating System, which is basically just discarding them.

What we need to do now is see if it really is the p2p application causing these. For that, you'll need to check the port your p2p client is using.
Logged

“Don’t worry if it doesn’t work right. If everything did, you’d be out of a job.”
EricJH
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 16695



« Reply #4 on: March 24, 2012, 07:25:03 PM »

Are you behind a router or do you connect directly to the internet?

If you are behind a router then the bitttorrent client did not close the port when it got closed down. You can close them using the Universal Plug and Play interface of Windows (see image) or reboot the router.


* uPnP.png (112.99 KB, 962x790 - viewed 10 times.)
« Last Edit: March 24, 2012, 07:26:45 PM by EricJH » Logged

chefo
Newbie
*
Offline Offline

Posts: 7


« Reply #5 on: March 25, 2012, 01:08:34 AM »

The fact that it's closed, unless it's been for quite a long time, won't make a difference to others in the swarm, that you may have been sharing files with. Unfortunately, when you disconnect from a swarm, the others don't know you've disconnected and will continue to ask for parts of the file you may have been sharing. This is just how these applications work.

The connections you're seeing, assuming they are being caused by your p2p application, are the result of your having closed the client, leaving the inbound connections with nowhere to go. Because of this, the connections are being picked-up by Windows Operating System, which is basically just discarding them.

What we need to do now is see if it really is the p2p application causing these. For that, you'll need to check the port your p2p client is using.

Listening port for incoming connections is different - 59640. Both options are checked also- Enable UPnP port mapping , Enable NAT-PMP port mapping

Logged
chefo
Newbie
*
Offline Offline

Posts: 7


« Reply #6 on: March 25, 2012, 01:17:34 AM »

Are you behind a router or do you connect directly to the internet?

If you are behind a router then the bitttorrent client did not close the port when it got closed down. You can close them using the Universal Plug and Play interface of Windows (see image) or reboot the router.

Yes, i am behind a router, but do i need to close them everytime i close bittorent? and is there any option to set this be done automaticaly, i am on XP if that matters. For me isnt a problem to let these connections be blocked, i just didnt knew before where the coming from and if there are harmfull or not.
Logged
EricJH
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 16695



« Reply #7 on: March 25, 2012, 04:24:10 PM »

The traffic in its self is not harmful. It just fills up the firewall logs.

If uTorrent is not causing it it could be Live Messenger f.e..
Logged

Radaghast
Star Group
Comodo's Hero
*****
Offline Offline

Posts: 4034



« Reply #8 on: March 25, 2012, 05:10:11 PM »

If you're running Windows 7,  they could still be indirectly related to p2p. However, as I mentioned earlier, when Windows Operating System is picking up inbound connections in this way, they're basically being dropped. If they persist, you could always create an application firewall rule for Windows Operating system to block with out logging, then you won't fill your logs...
Logged

“Don’t worry if it doesn’t work right. If everything did, you’d be out of a job.”
chefo
Newbie
*
Offline Offline

Posts: 7


« Reply #9 on: March 26, 2012, 02:00:58 AM »

ok, Thanks !
Logged
chefo
Newbie
*
Offline Offline

Posts: 7


« Reply #10 on: March 26, 2012, 04:15:04 AM »

If they persist, you could always create an application firewall rule for Windows Operating system to block with out logging, then you won't fill your logs...

Actually 55419 was port for Skype, how can i define such a firewall rule for this to block without logging?
Logged
Radaghast
Star Group
Comodo's Hero
*****
Offline Offline

Posts: 4034



« Reply #11 on: March 26, 2012, 05:05:22 AM »

Actually 55419 was port for Skype, how can i define such a firewall rule for this to block without logging?

Take a look at the images below. Basically you'll create an application firewall rule. Once created, place the rule below the rule for Skype.


* a.jpg (57.71 KB, 1056x176 - viewed 11 times.)

* c.jpg (92.52 KB, 883x401 - viewed 15 times.)
Logged

“Don’t worry if it doesn’t work right. If everything did, you’d be out of a job.”
chefo
Newbie
*
Offline Offline

Posts: 7


« Reply #12 on: March 26, 2012, 08:09:58 AM »

Take a look at the images below. Basically you'll create an application firewall rule. Once created, place the rule below the rule for Skype.
Works perfect,  Thumb Up  thanks!
Logged
Tags:
Pages: [1] Go Up Print 
« previous next »
Jump to:  

SSL Certificate Free Virus Removal Firewall
Page created in 0.142 seconds with 23 queries.
Powered by SMF 1.1.18 | SMF © 2006, Simple Machines Design by 7dana.com