Re: TPF outgoing alert
From: sponge (mtubi@python.net)Date: 03/11/02
- Next message: Calvin Crumrine: "Re: Sygate 5.0"
- Previous message: chris: "Re: Iptables udp problems"
- In reply to: Bryant: "TPF outgoing alert"
- Next in thread: Bryant: "Re: TPF outgoing alert"
- Reply: Bryant: "Re: TPF outgoing alert"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: mtubi@python.net (sponge) Date: Mon, 11 Mar 2002 21:05:09 GMT
That's normal. Your system is making a request for an IP and/or a
router (gateway). This is done on 255.255.255.255 and issued on port
67 (DHCP). You should be getting replies back on port 68. In any case,
the IP you are talking about 255.255.255.255 is vital to some critical
functions and really sohuldn't be filtered.
Now, you *should* filter the address range 224.0.0.0 to
255.255.255.254 (which part of multicast and other reserved address).
This is used by MS/Amazon.com's Alexa spyware, which you almost
certainly have seeing as you are running XP. You cannot filter this
with a mask; you have to use TPF's range option so that you don't
block 255.255.255.255. Below are some other Microsoft IPs which you
should filter, seeing as you're an XP user and you appear to have
allowed it to connect to the Internet. Use the network/mask option
when creating a rule for the IP ranges below.
207.46.0.0 (use a Mask of 255.255.0.0)
207.68.128.0 (use a Mask of 255.255.128.0)
206.204.0.0 (use a Mask of 255.255.0.0)
BTW, I have no idea of these are all of Microsoft's IPs.-there may be
more. This is just to keep XP from regularly "phoning home".
On Mon, 11 Mar 2002 08:59:34 -0500, "Bryant" <Bryant@bellsouth.net>
wrote:
>I have a home LAN. TPF is reporting that remote 255.255.255.255, port 67 -
>UDP
>Generic Host Process for Win32 Services from your computer wants to send UDP
>datagram to the above IP and port. The details are
>c:\windows\system32\svchost.exe
>
>This is the kind of info I want to look up in some kind of document and
>figure out exactly
>what is going on and why. Is there such a book somewhere?
>Thanks
>Bryant
>
>
>
- Next message: Calvin Crumrine: "Re: Sygate 5.0"
- Previous message: chris: "Re: Iptables udp problems"
- In reply to: Bryant: "TPF outgoing alert"
- Next in thread: Bryant: "Re: TPF outgoing alert"
- Reply: Bryant: "Re: TPF outgoing alert"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|