RE: XP

From: Eric K. Johansen (eric.johansen@reliastar.com)
Date: 09/10/01


From: "Eric K. Johansen" <eric.johansen@reliastar.com>
To: "'Eric K. Johansen'" <eric.johansen@reliastar.com>, <brian_carpio@csgsystems.com>, "'John Oliver'" <john.oliver@hosting.com>
Subject: RE: XP
Date: Mon, 10 Sep 2001 15:56:15 -0500
Message-ID: <00ad01c13a3b$07bfb410$98e911ac@sk3tch>

The firewall I am using (on my laptop) is Tiny Personal Firewall
(http://www.tinysoftware.com/pwall.php) - it prompted me on whether or
not I would like to allow it to contact domestic.microsoft.com or not, I
set it to "Deny" and the install completed successfully. Needless to
say I'll keep that rule around until I have problems. :)

-----Original Message-----
From: Eric K. Johansen [mailto:eric.johansen@reliastar.com]
Sent: Monday, September 10, 2001 3:51 PM
To: 'brian_carpio@csgsystems.com'; 'John Oliver'
Cc: 'security-basics@securityfocus.com'
Subject: RE: XP

During my install of the Windows XP Plus! pack on Windows XP
Professional RTM (build 2600) it attempted to contact 207.46.230.220
(www.domestic.microsoft.com) on port 80, the guilty application was
c:\windows\system32\msiexec.exe - so apparently this tool hits M$FT
every time you run one of their (or all?) .msi files?

It attempted this during the install of the OS (I did an upgrade from a
beta copy) but I didn't write the information down at that time (I
should have...doh!) but I do recall it contacting a server on port 80,
and it is likely the same server.

Eric

-----Original Message-----
From: brian_carpio@csgsystems.com [mailto:brian_carpio@csgsystems.com]
Sent: Tuesday, September 04, 2001 1:33 PM
To: John Oliver
Cc: security-basics@securityfocus.com
Subject: Re: XP

So if you don't have web access you can't install and run Microsoft XP??
Also has anyone snooped this transfer and found what port etc.. the data
is going out on? And what IP the data is being sent to.

--------------
Brian Carpio
CSG Systems Inc.
Open Systems Unix System Admin

x3317
--------------

--- Security is a Process NOT a Product ----



Relevant Pages

  • CLOSING: Norton Personal Firewall 2003
    ... go back to NPF2002 because it detects port scans, ... wrong during uninstall, install or setup of rules and programs and what ... Just created a ghost from my present system on my "server" (which is ... I'll think i'll wait for Symantec to respond. ...
    (comp.security.firewalls)
  • Re: Installing WSS3 on remote SQL Server 2005 & Different Internet
    ... Well primarily DNN has been slow in its response time when I request a page. ... installing on should only be a front-end server. ... Not sure about the port. ... I'm attempting to install the recently released Windows Sharepoint Services ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Installing WSS3 on remote SQL Server 2005 & Different Internet
    ... I was going to use DotNetNuke for our intranet, but WSS3 is here, and I'm ... installing on should only be a front-end server. ... Not sure about the port. ... I'm attempting to install the recently released Windows Sharepoint Services ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Installing WSS3 on remote SQL Server 2005 & Different Internet
    ... I haven't extensively checked the WSS team blog. ... installing on should only be a front-end server. ... Not sure about the port. ... I'm attempting to install the recently released Windows Sharepoint Services ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Printing from TS
    ... the printer on the server is to install the driver. ... You should *not* install anything to these ports, ... userB port ... MCSE, CCEA, Microsoft MVP - Terminal Server ...
    (microsoft.public.win2000.termserv.apps)