Re: Weird connection to ads.forbes.com:8081

From: Daniel Crichton (danielc@helio.co.uk)
Date: 03/26/02 

From: "Daniel Crichton" <danielc@helio.co.uk>
Date: Tue, 26 Mar 2002 16:34:02 -0000

"Rubio" <jtnim@hotmail.com> wrote in message
news:edf5a05f.0203260729.5ae82e6e@posting.google.com...
> I was using an old laptop to configure a firewall and noticed that the
> laptop tried to connect to port 8081 on ads.forbes.com (63.240.4.212).
> Does anyone have any idea what application might be doing this and
> what web page this is?

Could be anything ... do you have any IM apps running?

> On a related note, is there an application for WinNT/2000 platform
> that would log all connections including information about what
> application initiated the connection?

Most personal software firewalls have something like this. Get Outpost from
http://www.agnitum.com and set it to allow everything (just so you get a
log of all allowed connections to determine what apps are connecting where).
Then let your machine run for a bit, open up the firewall interface and look
at the Allowed log where you'll see all the applications that have accessed
the network/internet and what the source port and destination ip/port was.
If you enable the rules wizard setting you'll get notified every time an app
tries to make an outgoing connection (like ZoneAlarm does) and you can allow
or deny it, or create a new custom rule (so you can make a more specific
rule for that app than just "allow everything" or "deny everything"). And
once you've got some rules you can go to the rules editing dialog and see
exactly what apps have been seen by Outpost, and get properties like the
full path to the exe file so you know where the program is installed and
investigate further. I prefer Outpost over ZA as I like the ability to
create very narrow rules for applications - coming from a PIX admin
background I'm happy setting all properties of an allowed connection rather
than ZA's "allow everything" (although I never really got to grips with ZA
enough to find out if there was a way of customising the rules that it
created).

Dan

Relevant Pages

  • firewall
    ... Uninstall outpost and use the microsoft built in fire. ... You can configure MS firewall by going to the advanced ... tab of the properties of your ISP connection. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: I am having connectivity problems
    ... firewall and turned ON Windows firewall. ... When I tried to install SP2 I was unable to get it thru Windows Update. ... does the connection problem persist? ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Serious Security Issue in Windows XP SP2s Firewall
    ... Subject: AW: Serious Security Issue in Windows XP SP2's Firewall ... If you update a WinXP SP-1 with enabled Internet ... Connection Firewall ...
    (Focus-Microsoft)
  • RE: Serious Security Issue in Windows XP SP2s Firewall
    ... file and printer sharing is available for network login from any network (I ... Internet Connection Sharing of the PC has to be disabled." ... Serious Security Issue in Windows XP SP2's Firewall ...
    (Focus-Microsoft)
  • Re: Still cant connect to RWW or OWA remotely
    ... No, I don't have a 3rd party firewall, and it's a pretty plain vanilla WinXP ... Connected to the network like the other workstations, ... I could go to any workstation and connect to them just fine. ... match the broadband connection, the two NIC firewall, the remote ...
    (microsoft.public.windows.server.sbs)