port 162

[chris@pascoeengineering]

My Wingate computer is connected to the internet via a Linksys BEFSR41 router. We use Verizon DSL. My issue is that the router (fixed IP) continues to try to connect to the computer's port 162 from multiple port locations. Wingate's firewall blocks these attempts. The router's incomming log shows IP addresses that cannot be traced ;show no date, time etc. ; and do not match up with the connection attempts. Is there a reason for the computer and router to behave this way?

[adrien]

Hi

Sorry to take so long to respond to this.

Would you be able to send me a copy of your system log file?

Adrien

[chris@pascoeengineering]

Adrian:
Which log do you want, and where should I go to find it? most of the logging features are currently turned off.

[adrien]

It should be in the directory

[WinGate install dir]\Logs\System\System.log

This file contains all the info on the firewall hits.

send it to adrien at qbik dot com

Adrien

[adrien]

Hi

thanks for the log. Unfortunately it doesn't show the details, since you appear to be running a version prior to 5.0.8

However, I looked up port 162 UDP. It is SNMP-trap.

What this means is that the SNMP agent on your router is sending updates/traps (SNMP events) to your machine.

This could be for several reasons.

I would check:

a) are you running the SNMP service. or any SNMP management software on this computer that would have requested updates from the router. If so, you could probably just open port 162 UDP on this interface.
b) is the router configured to send SNMP updates to your machine.

I note that the IP addresses are all private, so I assume the router performs NAT (Network Address Translation - a form of internet connections sharing)? If so, you are probably fairly safe behind it anyway.

Adrien