ipfw is making contact with port 4021

Admin admin at govital.net
Fri Jul 24 02:00:53 UTC 2020

Greetings Ernie,

On 23/07/2020 9:47 pm, Ernie Luzar wrote:
> RW via freebsd-questions wrote:
>> On Thu, 23 Jul 2020 21:11:39 -0400
>> Ernie Luzar wrote:
>>> A firewall should not be making its own contact with any public ip
>>> address. This is a security hole.
>>> I have not played with ipfw since before it was rewritten to become
>>> ipfw2 so I do not know when this internal "call home"  function was
>>> added. pf and ipf are not doing this. I block it to be secure.
>>> Can any one provide any info about this?
>> It might help if you explain what you have actually seen.
> I see log entries in the hosts /var/log/security file for outbound
> packets going to the ip address and port number comming from
> which is the private ip address of the host. sendmail is turned off
> and nothing else is running on the host
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "freebsd-questions-unsubscribe at freebsd.org"
This seems to be probably from a device in your network.

IP address maps to alerts0.envisacor.com

Their home page says:

>   Solutions For The Security and Home Automation Industry Since 2004
>       Envisacor is a premiere ODM to the Security and Home Automation
>       industries.
>       We have designed dozens of products for as many different
>       companies and have a solid track record for innovation and cost
>       effectiveness of design.
>       Our expertise extends into all areas of electronics and design
>       including IP based-products and RF solutions.

Do you have some kind of security or home automation device that's phoning home?

Chris Demers
admin at govital.net

More information about the freebsd-questions mailing list