Hi miteinander!
Ich habe vier dieser Kameras installiert und frage mich
was Suchen externe Domains permanent auf den Kameras am UDP-Port 3628?
Natürlich blockt meine ASA Firewall diese Zugriffe zuverlässig, aber der Traffic (bis sechs-mal/sec) geht mir irgendwie auf den Sack.
Config:
Kamera ID 00EA2162409E
Firmware Version 17.25.2.47
WebUI Version 29.5.2.1
Kameraname kamera-1
Alarm Status Keine
DDNS Status aipcam.com Erfolgreich http://f1468.aipcam.com
UPnP Status Keine Aktion
Port 3628 (registriert bei IANA)
Ports those registered with IANA are shown as official ports. The same port number may be unofficialy used by various services or applications. The official usage are listed separately below its usage may change from time to time.
Port 3628 tcp ept-machine EPT Machine Interface REGISTERED PORT
Port 3628 udp ept-machine EPT Machine Interface REGISTERED PORT
Die Zugriffe kommen überwiegend aus dem Bereich LACNIC, also aus Südamerika
Hier ein kleiner Protokollauszug einer Kamera. (Die inside-IP der Firewall habe ich abgeändert)
2012-10-29 14:39:36 Local4.Warning 192.168.101.210 %ASA-4-106023: Deny udp src outside:181.0.7.128/47977 dst inside:188.16.27.21/3628 by access-group „extern“
2012-10-29 14:39:36 Local4.Warning 192.168.101.210 %ASA-4-106023: Deny udp src outside:190.120.53.90/48530 dst inside:188.16.27.21/3628 by access-group „extern“
2012-10-29 14:39:37 Local4.Warning 192.168.101.210 %ASA-4-106023: Deny udp src outside:78.136.85.32/2690 dst inside:188.16.27.21/3628 by access-group „extern“
2012-10-29 14:39:37 Local4.Warning 192.168.101.210 %ASA-4-106023: Deny udp src outside:99.106.111.40/17160 dst inside:188.16.27.21/3628 by access-group „extern“
2012-10-29 14:39:38 Local4.Warning 192.168.101.210 %ASA-4-106023: Deny udp src outside:190.31.251.230/10060 dst inside:188.16.27.21/3628 by access-group „extern“
2012-10-29 14:39:38 Local4.Warning 192.168.101.210 %ASA-4-106023: Deny udp src outside:190.106.82.193/3523 dst inside:188.16.27.21/3628 by access-group „extern“
2012-10-29 14:39:38 Local4.Warning 192.168.101.210 %ASA-4-106023: Deny udp src outside:189.69.107.2/31203 dst inside:188.16.27.21/3628 by access-group „extern“