Re: TPF outgoing alert

From: sponge (mtubi@python.net)
Date: 03/11/02


From: mtubi@python.net (sponge)
Date: Mon, 11 Mar 2002 21:05:09 GMT


 That's normal. Your system is making a request for an IP and/or a
router (gateway). This is done on 255.255.255.255 and issued on port
67 (DHCP). You should be getting replies back on port 68. In any case,
the IP you are talking about 255.255.255.255 is vital to some critical
functions and really sohuldn't be filtered.
 Now, you *should* filter the address range 224.0.0.0 to
255.255.255.254 (which part of multicast and other reserved address).
This is used by MS/Amazon.com's Alexa spyware, which you almost
certainly have seeing as you are running XP. You cannot filter this
with a mask; you have to use TPF's range option so that you don't
block 255.255.255.255. Below are some other Microsoft IPs which you
should filter, seeing as you're an XP user and you appear to have
allowed it to connect to the Internet. Use the network/mask option
when creating a rule for the IP ranges below.

207.46.0.0 (use a Mask of 255.255.0.0)
207.68.128.0 (use a Mask of 255.255.128.0)
206.204.0.0 (use a Mask of 255.255.0.0)

 BTW, I have no idea of these are all of Microsoft's IPs.-there may be
more. This is just to keep XP from regularly "phoning home".

On Mon, 11 Mar 2002 08:59:34 -0500, "Bryant" <Bryant@bellsouth.net>
wrote:

>I have a home LAN. TPF is reporting that remote 255.255.255.255, port 67 -
>UDP
>Generic Host Process for Win32 Services from your computer wants to send UDP
>datagram to the above IP and port. The details are
>c:\windows\system32\svchost.exe
>
>This is the kind of info I want to look up in some kind of document and
>figure out exactly
>what is going on and why. Is there such a book somewhere?
>Thanks
>Bryant
>
>
>



Relevant Pages

  • Re: Trouble IPSec Packet Filter and Mailserver
    ... Create an entry in the permit rule filter to allow traffic to your dns ... Traffic for dns name resolution normally uses port 53 udp ...
    (microsoft.public.win2000.networking)
  • Re: IPSec Paketfilter für Mailserver (MDaemon)
    ... Filter blockiert wird. ... daß er UDP auf allen ... hat der Mailserver keine Probleme. ... Habe ich irgendeine Möglichkleit festzustellen über welchen Port dieser UDP ...
    (microsoft.public.de.german.win2000.networking)
  • Re: HELP: BizTalk 2004 Direct Port to Message Box - Delivered not consumed
    ... Have to tighten up the filter expression - because once i subscribe to ... Message box direct bound ports, as its name implies, allows you to drop ... bound port set the 'Partner Orchestration Port' property to ... an activating receive shape the subscription will be the message type ...
    (microsoft.public.biztalk.general)
  • Re: Powered Respirator
    ... The outside filter is merely to remove large ... comfortable than a rubber mask. ... One caution about the Triton if you had a curry for lunch and go out ... to continue turning. ...
    (rec.crafts.woodturning)
  • Re: Clay and consequences
    ... clay it should be done with a mask and you and your clothes should be washed ... The "P95" is a fuzzy white particulate filter pad that goes over the ... Efficiency Particulate Air filters. ... Replacement P100 pads are around $5.00 per pair from on-line ...
    (rec.crafts.pottery)