Closing Airport Extreme Ports

[rouderon]

We have an HP printer connected to our Airport Extreme via usb port. A couple of days ago I found that port 9100 had been hacked (for further reading see this article) and there was an anti-Semitic propaganda printout in the tray. After much research, I'm still not able to close/block this port in the AE. I've port-forwarded 9100 (both tcp and udp) to a private address outside the range I have set up. Is there something else I'm missing?

[davemchine]

I read your link and several others on the same topic. I can't find anything to indicate the "hack" performed by weev affects routers in any way. All the hacker did was port scan networks to find hp printers with an open port 9100 and then he sent print jobs to it. In other words you, or someone else, would have had to open port 9100 on your Airport extreme for this to work. You should be able to simply delete the port entry to fix the problem.

[rouderon]

That's what I was trying to figure out - can't find anywhere that the port would be open in the AE. I have since removed the printer from the USB port and connected it directly thru Ethernet. I also found that had it as a shared printer on a computer (and promptly unshared it). The only way I could find to *sort of close/block a port by port-mapping it to a port outside of range - which doesn't seem to be working because I can still see the port externally.

[davemchine]

I was listening to Security Now and they talk about HP printers opening ports by themselves using something called UPNP. It is above my head but I thought it might be helpful in your situation. https://overcast.fm/+JQ-szyo