Firewall is blocking the receiver port 22809

[Chris.G]

I have noticed that my Unifi firewall between the WiiM Pro (IoT-Vlan) and the WiiM App (LAN) is blocking the receiver port 22809. Does anyone have any idea what it is?

 

[hoohoohoo]

I don't run Unifi firewall but lots of their routers/switches/WAPs. Assuming that your IOT-VLAN has some ruleset applied, I'd have a close read of these Unifi pages to compare with your setup. You may be triggering some behaviour that is considered helpful, but isn't for your use case.

UniFi Gateway - Advanced Firewall Rules

UniFi Gateways include a powerful Firewall engine to maximum security in your network architecture. For most users, we recommend creating Simple Rules. They provide an intuitive interface that stre...

help.ui.com

How to Implement Network and Client Isolation

UniFi offers a range of features to achieve both network/VLAN and client device isolation. Understanding how these work and how to implement them can significantly enhance the effectiveness of your...

help.ui.com

 

[Chris.G]

I don't run Unifi firewall but lots of their routers/switches/WAPs. Assuming that your IOT-VLAN has some ruleset applied, I'd have a close read of these Unifi pages to compare with your setup. You may be triggering some behaviour that is considered helpful, but isn't for your use case.

UniFi Gateway - Advanced Firewall Rules

UniFi Gateways include a powerful Firewall engine to maximum security in your network architecture. For most users, we recommend creating Simple Rules. They provide an intuitive interface that stre...

help.ui.com

How to Implement Network and Client Isolation

UniFi offers a range of features to achieve both network/VLAN and client device isolation. Understanding how these work and how to implement them can significantly enhance the effectiveness of your...

help.ui.com

That's not the problem, I just wanted to know what port 22809 is for. Because I couldn't find a hint anywhere.

 

[hoohoohoo]

That's not the problem, I just wanted to know what port 22809 is for. Because I couldn't find a hint anywhere.

Ahh...no clue on this either.

Just nmap'ed my WiiM Amp:

PORT      STATE SERVICE
443/tcp   open  https
7000/tcp  open  afs3-fileserver
8008/tcp  open  http
8009/tcp  open  ajp13
8443/tcp  open  https-alt
9000/tcp  open  cslistener
10001/tcp open  scp-config
49152/tcp open  unknown

 

[d6jg]

High number ports are usually the the outgoing connection to something or other e.g. a device might open 22809 temporarily in order to receive something back from 443 (https).

 

[cc_rider]

49152 is the UPnP port

http://<MY_WIIM_IP>:49152/description.xml

 

[hoohoohoo]

High number ports are usually the the outgoing connection to something or other e.g. a device might open 22809 temporarily in order to receive something back from 443 (https).

Good thought. You're probably thinking of dynamic ports which are in the range 49152 to 65535.

22809 would still be a fixed port. So it would have a defined purpose.

 

[d6jg]

Good thought. You're probably thinking of dynamic ports which are in the range 49152 to 65535.

22809 would still be a fixed port. So it would have a defined purpose.

Possibly but I am not aware of 22809 having a known purpose and nor does Google who usually knows.

 

[hoohoohoo]

Possibly but I am not aware of 22809 having a known purpose and nor does Google who usually knows.

Right, but lots of consumer devices have static ports that are custom. It still has a defined purpose but not disclosed. It happens.