理光复印机关闭2049等端口

王冬梅

症状

客户对网络进行安全扫描时，发现理光MFP机器开启了2049端口，但在机器的Web页中未找到相关的设置。

维修过程

在智能面板与MFP控制器进行通讯时使用了一些端口，同时对外部网络开放，造成进行安全扫描时出现警告。出于安全原因，可以关闭这些端口。

使用的端口包括：

- 111/tcp

- 1022/tcp

- 1023/tcp

- 2049/tcp

- 18315/tcp

- 54080/tcp

- 54443/tcp

- 65000/tcp1

- 65001/tcp1

- 111/udp1,2

- 1022/udp

- 1023/udp

1  这些端口预计在之后的固件中进行修复；

2  端口111/udp 今在以下机型中出现：D219/D220/D214/D196/D236, D259, M0B0/D0A0

要关闭这些端口，需要确认并升级固件；

	Phase 1	Phase 2
Model M0B1/M0B2	Network Support v17.21	Fix not required. Ports 111(UDP), 65000(TCP), and 65001(TCP) are already closed.
Model D0BX/D0BY/D0BZ	Fix implemented from 1st mass production.	Network Support v17.29
Model M0CL/M0CM	Fix implemented from 1st mass production.	Network Support v17.29
Model D255/D256	Network Support v15.67	Network Support v15.67
Model D0BT/D0BV/D0BW	Fix implemented from 1st mass production.	Fix implemented from 1st mass production.
Model D0B4	Fix implemented from 1st mass production.	CTL System v1.04
Model D257/D258	Network Support v16.53	Network Support v16.54
Model D260/D261	Network Support v16.53	Network Support v16.54
Model D0CM/D0CN	Fix implemented from 1st mass production.	Fix implemented from 1st mass production.
Model D0CP/D0CQ	Fix implemented from 1st mass production.	Fix implemented from 1st mass production.
Model D0C5/D0C6/D0C4/D0AP	Network Support v17.28	Network Support v17.28
Model D284/D290/D285/D291/D286/D292/D287/D293/D288/D294/D289/D295	Network Support v16.54	Network Support v16.54
Model M0AN	TBD	TBD
Model M0A0	Network Support v16.39	Network Support v16.39
Model D219/D220/D214/D196/D236	Network Support v15.32.1	Network Support v15.32.1
Model D298/D297/D299/D296	Network Support v16.60	Network Support v16.61
Model D0CA/D0C9/D0C8/D0CB	Fix implemented from 1st mass production.	Fix implemented from 1st mass production.
Model D259	Network Support v15.46.1	Network Support v15.46.1
Model D223/D224/D225	Network Support v16.43	Network Support v16.44
Model D238/D239/D240/D241/D242/D243/D244	Network Support v15.73	Network Support v15.76
Model D0AC/D0AS/D0AD/D0AT/D0AH/D0AX/D0AJ/D0AY/D0AE/D0AV/D0AF/D0AG/D0AW	Network Support v15.72	Network Support v15.75
Model D0BL/D0BM/D0BJ/D0BK/D0BN/D0BP/D0BQ/D0D7/D0D8	Package(ALL) v1.03.1	Package(ALL) v1.03.1
Model M0AJ/M0AL	Network Support v15.77	Network Support v15.77
Model D262	Network Support v15.31	TBD
Model D0A5/D0AK/D0AL/D0AM/D0BG	Network Support v17.22	Fix not required. Ports 111(UDP), 65000(TCP), and 65001(TCP) are already closed.
Model M0BH/M0BJ/M0BK/M0BL/M0CN	Network Support v17.21	Fix not required. Ports 111(UDP), 65000(TCP), and 65001(TCP) are already closed.
Model D0A0/D0AA/D0AB	CTL System v1.10	CTL System v1.10

使用telnet命令关闭端口；

telnet 机器的ip地址；

登录管理员后输入以下命令；

nat_ui port_filter on

nat_ui port_filter_cats off       注：该命令用于关闭18315/tcp端口

logout，输入yes退出系统

同样可以在MFP网页中进行设置。

将以下2项设置为有效。

相关的机型：

Black&WhiteMultifunction

IM2500,3000,3500,4000,5000,6000

IM2702

IM430F

IM7000,8000,9000

MP305+SP

MP2555SP,3055SP,3555SP

MP4055SP,5055SP,6055SP

MP6503SP,7503SP,9003SP

ColorMultifunction

IMC400F

IMC2000,C2500

IMC3000,C3500

IMC4500,C6000

IMC6500,C8000

MC2001

MPC406ZSP

MPC407SP

MPC2004SP,C2504SP

MPC2004ex,C2504ex

MPC3004SP,C3504SP

MPC3004ex,C3504ex

MPC4504SP,C6004SP

MPC4504ex,C6004ex

MPC6503SP,C8003SP

SPC360SFNw

鸿顺复印部

多谢分享，学习一下