Home security for beginners

[vt15]

Hi,

With the default settings on an orbi router I see my PC which is running mcafee firewall is detecting and blocking connection attempts on various tcp ports.

Is there any way to block more connection attempts at the router level?   like port scans etc?

Many thanks in advance!

[CrimpOn]

My Orbi, set up as a router (the default) logs many internet attacks.  Check the Orbi web interface, Advanced Tab, Administration, Logs.

Perhaps you can compare the attempts that Orbi logs against the McAfee firewall reports?

The way I understand things, when the Orbi logs an attempt, that means it did not allow the attempt to penetrate the Orbi system.

Something is "definitely strange" in this situation.

[vt15]

Hello,

Thanks for your reply.

I compared the orbi logs and there is no entry at this time in those logs.

So I have events like this coming through to my PC:

The PC x.x.x.x tried to connect to TCP port 55026 on your PC without your permission

Various IP addresses are listed like:

49163, 49164, 49166, 49167, 49168, 49169

[CrimpOn]

Interesting. Did the report give an actual IP address? (not "x. X. X. X")
The other numbers do not look like IP addresses. They appear to be TCP port numbers.

[vt15]

Yes, I have about 10-20 events, and each lists IP address.

[CrimpOn]

Are these IP addresses from the LAN or public addresses?

[CrimpOn]

Are these IP addresses from the LAN or public addresses?

[vt15]

For some reason my earlier post (post #8) on the previous thread is not appearing after numerous attempts to post it, so I started a new thread.

> CrimpOn said:
> Are these IP addresses from the LAN or public addresses?

My answer:

I ignore the LAN attempts but not so happy about the smart TV ones!

Other than that I have several WAN attempts:

52.18.245.183 amazon cloud tcp 65519, 64132

54.199.212.212 amazon cloud tcp 65514, 64154

54.64.120.121 tcp port 49163, 49164, 49166, 49167, 49168, 49169

210.138.249.114 internet initiative japan 64054

54.71.95.145 tcp port 55026

Just wanted to know how to block these at the router level.
The above is connection attempt logging from McAfee running on a PC.

Not sure what my Mac does about them...