Re: http connection

My mistake,

I thought they were coming from the outside trying to get in.

If they are coming from the inside you need a to get a virus software
installed on the machines sending these packets. Adware/Spyware would not be
out of the question.


hth
DDS

"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message
news:un2cooxDHHA.4620@xxxxxxxxxxxxxxxxxxxxxxx
"Danny Sanders" <DSanders@xxxxxxxxxxxxxxx> wrote in message
news:eLwp12lDHHA.4956@xxxxxxxxxxxxxxxxxxxxxxx
to tell me what it
is, and how to stop it. all attempts are dropped by firewall, but this
continually happens.

You really can't stop them from knocking but you can stop them from
getting in, which is what happens when the firewall drops the connection.

Be more concerned with what is getting in.


But Danny, the post is about outbound activity.


"Al Smith" <ascssmith@xxxxxxxxx> wrote in message
news:OYnVxzkDHHA.4808@xxxxxxxxxxxxxxxxxxxxxxx
ok, need some direction here, I have (108) stores that are connected
through a wan, that has a private address scheme. none of them are
allowed to go out to the internet. all connections go through checkpoint
FW1. I have numerous connections through the day trying to connect from
each store pc (windows 2000 professional) to unknown.level3.net port
2920 and 2938.

Googling web, I found all kinds of items, that are way out there... :)

but what I need is for someone that has dealt with this, to tell me what
it is, and how to stop it. all attempts are dropped by firewall, but
this continually happens.

Thanks in advance

AL







.

Relevant Pages

  • Re: What is the Pattern here ?
    ... These are all Dialup Connections that I had no connection with at the time. ... It's obviously an enormous security hole, ... > and a real firewall box. ...
    (comp.security.firewalls)
  • Re: Black Ice confesses faulty program!!!
    ... > outgoing connections or traffic except in cases where these connections ... > "dangerous/suspicious" traffic by the BlackICE program. ... > get into your machine then even a PC *without* a firewall is completely ... If you don't think "Spyware" is a problem for computer ...
    (comp.security.firewalls)
  • Re: Port 135
    ... The patch doesn't disable DCOM / RPC, so connections can still be made. ... That's why you need a firewall. ... the patch is not the thing to control ... control over your TCP/IP ports and services, ...
    (microsoft.public.security)
  • Re: Networking/Security Question...
    ... The router itself will be a Cisco 1721. ... >setup is very simple... ... XP sp2 having the firewall on by default. ... > # but deny established connections that don't have a dynamic rule. ...
    (freebsd-net)
  • Re: XPsp2 firewall - bug? - disables on certain networks
    ... Firewall Settings for Microsoft Windows XP with Service Pack 2" document ... Even if the DNS suffix is different, the computer can get a new policy from ... manually enter the DNS server and suffix settings for all connections. ...
    (microsoft.public.windowsxp.security_admin)
Quantcast