S3 Internet Protocol/Port

[CraigHB]

I need to configure my firewall for the TiVo to do its service connection via internet. Can Anybody tell me what port(s) and protocols the TiVo uses for this? My guess is that it uses http on port 80, but need to know for sure. It would save me the trouble of scanning my firewall logs for packet rejections.

Thanks,

- Craig

[RandyinVA]

Craig -

I don't have enough posts to put the URL here, but there is an article in TiVo Support that explains what ports to open. Title of the article is "What Network Ports Do I Need Open When Using My TiVo DVR?" and the article reference number is 14-21-01.

Hope that helps.

[CraigHB]

Yes, I saw that article, but it only states what ports are required for connection to a PC. I would like to know what ports are required for connection via internet to the TiVo server. I did see this one;

Outbound to the Internet, you should allow connections to TCP ports 80 and 8080 and UDP port 123.

I assume that's outgoing to the mentioned ports from 1024:65535 and incoming from those ports to 1024:65535. I'm using a Linux firewall on my personal network that's pretty strict. I've been using rules that are very specific. I want to open stuff up as little as possible. Worse comes to worst, I'll just check the packet logs. Hopefully, I'll find the TiVo a firewall friendly device.

[ThreeSoFar]

Originally Posted by CraigHB

Yes, I saw that article, but it only states what ports are required for connection to a PC. I would like to know what ports are required for connection via internet to the TiVo server. I did see this one;

Outbound to the Internet, you should allow connections to TCP ports 80 and 8080 and UDP port 123.

I assume that's outgoing to the mentioned ports from 1024:65535 and incoming from those ports to 1024:65535. I'm using a Linux firewall on my personal network that's pretty strict. I've been using rules that are very specific. I want to open stuff up as little as possible. Worse comes to worst, I'll just check the packet logs. Hopefully, I'll find the TiVo a firewall friendly device.

Inbound ports should not matter for the tcp. Allow outbound SESSIONS to 80 and 8080. Then your Linux firewall should be disallowing inbound from those ports UNLESS they're from an established session.

[CraigHB]

It matters because I'm filtering packets in both directions by port range and type. This is to prevent trojans and the like from communicating on high unprivelaged ports. Not that I expect to ever have a problem with a trojan, but better safe than sorry. Most end-user firewalls don't filter (by default) outbound packets attempting to establish a connection from a high numbered port to another high numbered port. That's a commonly exploited security hole. Rootkits (unix trojans) always use those ports to transmit keylogger data.