Sunday, May 6, 2012

UDP UPnP Ports Opening from SVCHOST.EXE NETSVCS (range 50k - 60k)

So, i noticed that one of my computers kept opening a UPnP rule on my firewall(if i kept UPnP on), but the other didn't. Searching with netstat -ano gave me the PID, which was svchost.exe netsvcs. Now, this doesn't say much since a lot of services run on svchost. Searching with the port number, or the services wouldn't give much results as the port was dynamic. After some more google persistance i found out the command to list each service that was running in each PID and the name of the services inside. tasklist /svc
Browser, EapHost, gpsvc, IKEEXT, iphlpsvc, LanmanServer, ProfSvc, Schedule, SENS, ShellHWDetection, Themes, Winmgmt, wuauserv
So now i got something similar to this, and by trial and error i eventually found out that, if i stoped IPHLPSVC, i would stop listening to the port. In the end, when i searched the net with IPHLPSVC i found someone with the same questions i had and with some precious tip that might save me time next time:
http://forums.comodo.com/firewall-help-cis/svchostexe-port-57398-whats-going-on-here-t72975.0.html
http://processhacker.sourceforge.net/
This service is somehow responsible by the horrible teredo and other tunnels that appear in your ipconfig list since they invented IPv6. Somehow i suspected when i checked IKEEXT that this would have to do something to do with IPv6. But why did i have this open in one computer and not in the other?
Anyway, just to make sure, i reenabled the service, but nothing happened nevertheless. The UDP port will only get open when you actually attempt to do a IPv6 connection. It seems the UDP port will try to emulate IPv6 connections even if you're using IPv4. Something to try to understand in the future. For now i am happy that I didn't had a worm somewhere...
PS: If you want you can set it off by using netsh interface teredo / set state disabled (set state default - to reenable)

Wednesday, March 7, 2012

github first time

GitHub is free for open-source projects, so let's try to make the excels / forms i've been using into a web project using VS2010.
Since i'm fairly new with VS2010 i went with the usual Web C# project. Installed Git Extensions and followed:

http://help.github.com/set-your-user-name-email-and-github-token/
http://help.github.com/create-a-repo/

Now i created a VS Project inside that directory and when i tried to push i got an error. "No supported authentication methods available"

So, it ends up you need to create a ppk file and configure putty to use it (if you installed github with putty = the default option).

Go ahead to Remotes -> PuTTY -> Generate or import key. Now, go to Conversions -> Import key. Browse to the .ssh folder, and find 'id_rsa' (it was named exactly that here, WITHOUT an extension). Select it, and press open. Enter the password for your key (this is the key that Git uses to communicate to the GitHub server, as it appears). Then, select Save Private Key, and save it somewhere (I did in the .ssh folder)

Now you have the option select the ppk file when the "No supported authentication methods available" arises, and it should work. (of course, you need the private key, silly!).

http://stackoverflow.com/questions/6138493/unable-to-push-to-repository-using-git-extensions