NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

pbneu's avatar
pbneu
Aspirant
Jan 17, 2021

LAN access from remote R7000

I continue to have the following entries or similar even if disabled UPNP, DMZ and port forward/triggering...

also the remote management of the router is OFF.

How this is possible ? Any idea to help ? Thanks

 

[LAN access from remote] from 103.145.13.242:47873 to 192.168.1.19:5061, Sunday, Jan 17,2021 20:33:39
[LAN access from remote] from 103.145.13.242:60015 to 192.168.1.19:5061, Sunday, Jan 17,2021 20:18:34

3 Replies

  • antinode's avatar
    antinode
    Guru
    Jan 17, 2021

    > [...] R7000

     

       Firmware version?  Connected to what?

     

    > How this is possible ? [...]

     

       I don't know.  What's at "192.168.1.19"?  My quick Web search
    suggested that port 5061 is used for VoIP.

     

       Lacking any rational explanation, I'd try a settings reset on the
    router, and a manual reconfiguration, making sure (again?) that those
    features are disabled.

     

    > Model: A7000|Nighthawk AC1900 WiFi USB Adapter - USB 3.0

     

       Not a router.

    • pbneu's avatar
      pbneu
      Aspirant
      Jan 17, 2021

       

      Firmware Version
      V1.0.11.110_10.2.100 the last one 

       

      connected to a router(bridge mode) from the ISP (internet service provider)

       

      192.168.1.19 is a VOIP unit, correct.

      But with all closed (double checked UPNP, port trig/forward, DMZ, remote management) there should not be any LAN access

       

      Model R7000, sorry for the mistake...

       

       

       

      • antinode's avatar
        antinode
        Guru
        Jan 17, 2021

        > But with all closed (double checked UPNP, port trig/forward, DMZ,
        > remote management) there should not be any LAN access

         

           I agree.  Now, if only you can persuade the router...

         

           Bugs in Netgear router firmware have been detected in the past.  I
        know nothing, but I'd do the settings reset and reconfiguration without
        the "a VOIP unit" connected, re-verify the no-incoming settings, and
        _then_ connect the "a VOIP unit".  If the router wakes up with UPnP
        enabled, and the "a VOIP unit" is connected, then I can imagine that it
        might gets its dibs in on that port before you can disable UPnP, and,
        once in the table, it might stay in the table.  But what do I know?