症状客户对网络进行安全扫描时,发现理光MFP机器开启了2049端口,但在机器的Web页中未找到相关的设置。
维修过程在智能面板与MFP控制器进行通讯时使用了一些端口,同时对外部网络开放,造成进行安全扫描时出现警告。出于安全原因,可以关闭这些端口。
使用的端口包括:- 111/tcp- 1022/tcp- 1023/tcp- 2049/tcp- 18315/tcp- 54080/tcp- 54443/tcp- 65000/tcp1- 65001/tcp1- 111/udp1,2- 1022/udp- 1023/udp1 这些端口预计在之后的固件中进行修复;2 端口111/udp 今在以下机型中出现:D219/D220/D214/D196/D236, D259, M0B0/D0A0
要关闭这些端口,需要确认并升级固件;
| | Phase 1 | Phase 2 | | Model M0B1/M0B2 | Network Support v17.21 | Fix not required. Ports 111(UDP), 65000(TCP), and 65001(TCP) are already closed. | | Model D0BX/D0BY/D0BZ | Fix implemented from 1st mass production. | Network Support v17.29 | | Model M0CL/M0CM | Fix implemented from 1st mass production. | Network Support v17.29 | | Model D255/D256 | Network Support v15.67 | Network Support v15.67 | | Model D0BT/D0BV/D0BW | Fix implemented from 1st mass production. | Fix implemented from 1st mass production. | | Model D0B4 | Fix implemented from 1st mass production. | CTL System v1.04 | | Model D257/D258 | Network Support v16.53 | Network Support v16.54 | | Model D260/D261 | Network Support v16.53 | Network Support v16.54 | | Model D0CM/D0CN | Fix implemented from 1st mass production. | Fix implemented from 1st mass production. | | Model D0CP/D0CQ | Fix implemented from 1st mass production. | Fix implemented from 1st mass production. | | Model D0C5/D0C6/D0C4/D0AP | Network Support v17.28 | Network Support v17.28 | | Model D284/D290/D285/D291/D286/D292/D287/D293/D288/D294/D289/D295 | Network Support v16.54 | Network Support v16.54 | | Model M0AN | TBD | TBD | | Model M0A0 | Network Support v16.39 | Network Support v16.39 | | Model D219/D220/D214/D196/D236 | Network Support v15.32.1 | Network Support v15.32.1 | | Model D298/D297/D299/D296 | Network Support v16.60 | Network Support v16.61 | | Model D0CA/D0C9/D0C8/D0CB | Fix implemented from 1st mass production. | Fix implemented from 1st mass production. | | Model D259 | Network Support v15.46.1 | Network Support v15.46.1 | | Model D223/D224/D225 | Network Support v16.43 | Network Support v16.44 | | Model D238/D239/D240/D241/D242/D243/D244 | Network Support v15.73 | Network Support v15.76 | | Model D0AC/D0AS/D0AD/D0AT/D0AH/D0AX/D0AJ/D0AY/D0AE/D0AV/D0AF/D0AG/D0AW | Network Support v15.72 | Network Support v15.75 | | Model D0BL/D0BM/D0BJ/D0BK/D0BN/D0BP/D0BQ/D0D7/D0D8 | Package(ALL) v1.03.1 | Package(ALL) v1.03.1 | | Model M0AJ/M0AL | Network Support v15.77 | Network Support v15.77 | | Model D262 | Network Support v15.31 | TBD | | Model D0A5/D0AK/D0AL/D0AM/D0BG | Network Support v17.22 | Fix not required. Ports 111(UDP), 65000(TCP), and 65001(TCP) are already closed. | | Model M0BH/M0BJ/M0BK/M0BL/M0CN | Network Support v17.21 | Fix not required. Ports 111(UDP), 65000(TCP), and 65001(TCP) are already closed. | | Model D0A0/D0AA/D0AB | CTL System v1.10 | CTL System v1.10 |
使用telnet命令关闭端口;telnet 机器的ip地址;登录管理员后输入以下命令;nat_ui port_filter onnat_ui port_filter_cats off 注:该命令用于关闭18315/tcp端口logout,输入yes退出系统

同样可以在MFP网页中进行设置。将以下2项设置为有效。

相关的机型:Black&WhiteMultifunctionIM2500,3000,3500,4000,5000,6000IM2702IM430FIM7000,8000,9000MP305+SPMP2555SP,3055SP,3555SPMP4055SP,5055SP,6055SPMP6503SP,7503SP,9003SPColorMultifunctionIMC400FIMC2000,C2500IMC3000,C3500IMC4500,C6000IMC6500,C8000MC2001MPC406ZSPMPC407SPMPC2004SP,C2504SPMPC2004ex,C2504exMPC3004SP,C3504SPMPC3004ex,C3504exMPC4504SP,C6004SPMPC4504ex,C6004exMPC6503SP,C8003SPSPC360SFNw |