[Frage] ctlmgr opens TCP port 53344 to the Internet. Why?

[frater]

I am still testing my script to see if it is always successful in refreshing the opened port-forwards.
It seems it is.
But whilst checking I suddenly see port 53344 opened to the Internet.

Because I've had some instability issues in the past that turned out to be related to some "removal package" I only had the NAS removed.
For my last flash I unselected the NAS as well.
Only now does this port show up.


root@fritz:/var/mod/root# grep -A6 192.168.178.1.:53344 /proc/kdsld/dsliface/internet/ipmasq/pcp44
MAP TCP [192.168.178.1]:53344 [10.0.0.98]:53344 use 1, lifetime 120 secs, expire in 99 secs
wanted [0.0.0.0]:53344
uniqid 0
nonce 2e4010255e531cdf94c54b5c
desc "argo.TCP.53344"
wanted_lifetime 120 lifetime 120
pid 14488 caddr [192.168.178.1]
root@fritz:/var/mod/root# netstat -lntp | grep 53344
tcp 0 0 :::53344 :::* LISTEN 14509/ctlmgr

 

[koyaanisqatsi]

Hello frater


I guess you have to check if TR-069 is enabled.
If so then this is the "port knocking port" for provider side knocking and if knocked the box will visit the ACS for what ever.

Another possibility is the relative new implementation of AVM ACS.
...but i do know near zero about this.
...even if AVM opens a port knocker for this.

I bet @PeterPawn knows more and share some bytes

 

[frater]

Knock, knock.... this is the NSA

 

[koyaanisqatsi]

This is the meaning of...
"The manufacturer of the device can add custom events that will also make the device connect to the ACS"

My german 1&1 Box ( Branding: avm ) opens...

...if...

 

[PeterPawn]

It's the result of enabled vendor/manufacturer service (aka "AVM services" - not to confound with "Provider services") "Diagnosis and Maintenance" - "argo" is AVM's "code name" for this service, where the box sends data to AVM regularly and there it's accessible for AVM, too (via TR-069 interface).

I'm not sure, how AVM translated the german names/sentences to English, maybe there're differences to my names above.

 

[frater]

OK...
I have been doing a lot of initial setups and must have flashed this 7490 already some 40 times.
Most of the time I'm unselecting the "Diagnostics" and must have left it on that time...
It confirms again that one should say "no" when permissions are asked.