Help locating origin of outgoing UDP connections

[raimon]

Hello all,

I have a RS3621xs+ NAS doing continous outgoing udp connections that I'm blocking with FW but would like to find the origin, if any installed applications, a service or what is going on...

Any tip would be very appreciated. Thanks in advance and sorry if a newbie question.

 

[Rusty]

These are high range dynamic ports. Let’s start with what you have opened to the Internet in terms of services and take it from there.

 

[Telos]

Shutdown a few packages overnight. Any change? If not, select alternate packages the next night.

 

[raimon]

Thanks @Rusty and @Telos,

After trying with services and packages wasn't related to that and have to go deeper.

I've installed Diagnosis Tool (synogear install) and played with tcpdump.

Now I've seen some machines doing SSDP and my Synology replying so it should be this...

Thanks again!
Rai

 

[Gerard]

Do you have upnp turned on anywhere?

 

[raimon]

Thanks @Gerard things go in that direction.

I'm checking network machines and disabling where I'm able but not having control of all machines.

Is there any way to full disable UPNP, DLNA, SSDP in Sinology DSM so don't reply to network request of this type?

Thanks Rai.

 

[Gerard]

Is there any way to full disable UPNP, DLNA, SSDP in Sinology DSM so don't reply to network request of this type?

Dsm control panel, external access, router configuration : is there anything listed there?

 

[raimon]

@Gerard already looked at that place with no luck but just found where it is!!!

CONTROL PANEL -> FILE SERVICE -> ADVANCED -> SSDP

Thanks again!

 

[Gerard]

Let us know if that resolves the issue in OP

 

[raimon]

Sorry, forgot to add that it worked and solved the issue!!!

Thanks!

 

[Jan Janowski]

For us novices. Was the fix Disabling SSDP?
Remove checkmark?

 

[Gerard]

For us novices. Was the fix Disabling SSDP?
Remove checkmark?

I’d imagine to stop the SSDP traffic, as concerned about in OP, yes you would have to uncheck (turning off) the SSDP option in file services..advanced.

 

[Jan Janowski]

Thanks