Port 80 Open - am I at risk 1

[Gavona]

I don't understand much of this, just recognise I have a potential issue! If there is a better forum for this question please let me know.

I ran a Windows onecare.live scan (Vista Beta) and no malware was found. However Port80 is reported as open.
I ran Netstat a few times and found the port to be in TIME-WAIT STATE AND TO HAVE A "FOREIGN ADDRESS" of ComputerName:53??? (the last few numbers vary each time I run the command).
I have run Netstat a few more times and now the port doesn't feature but Onecare still reports it as open.

I normally only access the web for normal internet and webmail useage. I haven't yet used it for online gaming but might in the future play guildwars and the like.
I do play games across my home network.

I have a Linksys WAG354G Router/Gateway. Under "Applications and Gaming" it lists HTTP 80 80 TCP 192.168.1.0 but there is no tick in the "Enabled" column.


Gavin

 

[BadBigBen]

No need to worry, Port 80/TCP is the Hypertext Transfer Protocol (HTTP) port...

this means, it is a needed port for displaying webpages on your browser, with out it you would not be able to read this response at all...

List of TCP and UDP port numbers

http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers

TCP and UDP port

http://en.wikipedia.org/wiki/Network_port

Ben

"If it works don't fix it! If it doesn't use a sledgehammer..."

 

[TheLad]

I have a Linksys router too but I do not have anything configured in "Applications & Gaming" to allow Internet access out from my PC to the world.

I would suggest that this is a connection into your PC and you can test this by disabling the rule, trying your Internet access (and your scan) and if all is well, you can leave the rule disabled.

The only time you may want to enable such a rule is if you are running a webserver on your PC and you want people to connect to it on port 80.

--------------------------------------
"Insert funny comment in here!"
--------------------------------------

 

[smah]

If port 80 is open on your PC, you have some sort of web server running. This could be be a file sharing application or your 'game server' for network gaming.

 

[linney]

If you want to check your firewalling settings this site and the "Shields Up" test is a good way to see how your first line of security stacks up. Any results will be for your Router firewall not any firewall behind the Router.

http://www.grc.com

 

[Gavona]

Shields Up" is very reassuring. Couldn't see me at all. Clearly my router is doing a good job. OneCare Live still reports the port 80 as open. Since this is a laptop and could connect via other routers / wireless connections I want to remove the potential threat.

I don't know how to close a port. Windows firewall shows as exceptions various things including Cyberlink Media Server, Delivery Management Service, Dell Media Direct, remote assistance, remote administration but nothing that is obviously a port.

Task Manager, services includes
netTcpPortSharing but that is shown as "stopped".

Thanks again,

Gavin

 

[smah]

It's open if some application is listening on it. Start with netstat -b to find the executable that's using it. Then (if it's not obvious), google the executable name to find out the application name.

 

[linney]

If you have Port 80 mentioned as opened in the Settings of OneCare Live, and you remove all mention of it from those Settings, does that stop the warning from OneCare Live but not stop your Internet connection?

Have a look at this article it might explain it better, than I can as I don't use OneCare Live.


"Note that port 80 Outbound does *not* need to be added as that is the standard port used for http web browsing".
I must have the following ports opened.

http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=3386524&SiteID=2

OneCare Support

http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=2421771&SiteID=2

 

[Gavona]

I am using the Vista Beta free online scanner:

http://onecare.live.com/site/en-gb/default.htm

Windows Live OneCare safety scanner, Windows Vista beta edition, is a free Web-based service that gives you quick, on-demand PC health and security scans to help you diagnose and solve problems, but it does not proactively protect your PC against new virus infections.

I will try that second link, Linney but

Is technical support available for Windows Live OneCare safety scanner, Windows Vista beta edition? If you have a problem running the scanner, check this FAQ to see whether it addresses your issue. Please note that the safety scanner is a free service, and we're unable to offer additional technical support.

I could install the full version but am not sure about beta versions of software or indeed if this package is well regarded. I am quite happy with AVG Free and Windows Firewall.

What does Windows Live OneCare safety scanner, Windows Vista beta edition, cost?
Nothing. The Windows Live OneCare safety scanner, Windows Vista beta edition, is available to all Windows Vista users, free of charge.
-----
What's new in OneCare
OneCare helps keep your PC safe and secure while making your life easier. From virus scanning, file backups, to automatic printing sharing of all the PCs in your household, OneCare helps manage it all for you. And it's delivered to you in a smooth, hassle-free package.

Even when run from an admin account:

"the requested operation requires elevation"

netstat:
doesn't show anything looking like with .80 in the address

Thanks everyone,

Gavin