HP3000-L Archives

October 2001, Week 5

HP3000-L@RAVEN.UTC.EDU

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Arthur Frank <[log in to unmask]>
Reply To:
Arthur Frank <[log in to unmask]>
Date:
Mon, 29 Oct 2001 08:20:18 -0800
Content-Type:
text/plain
Parts/Attachments:
text/plain (42 lines)
Jeff,

You might want to install Zone Alarm, if you haven't already.  This program should give you a pretty good idea what traffic is coming and going to your Windows box.

Art Frank
Manager of Information Systems
OHSU Foundation
[log in to unmask] 
(503) 220-8320


>>> Jeff Kell <[log in to unmask]> 10/27/01 02:57AM >>>
Sorry for off-topic post, but I hoped this might ring a bell with
someone and save me some trouble before dragging a sniffer home...

My ISDN router is setup to auto-dial on "interesting" traffic so that
it won't stay up 24x7 (which makes my ISP upset).  Currently, traffic
that matches the following profile will initiate a call:

> access-list 100 deny   ip any host 255.255.255.255
> access-list 100 deny   eigrp any any
> access-list 100 deny   tcp any any eq 135
> access-list 100 deny   tcp any any eq 139
> access-list 100 deny   udp any any eq 135
> access-list 100 deny   udp any any eq netbios-ns
> access-list 100 deny   udp any any eq netbios-dgm
> access-list 100 deny   udp any any eq ntp
> access-list 100 permit ip any any

Unfortunately, it appears to be dialing out about once every 2 hours.
The above service list worked fine with Win95, but I suspect 2000 is
doing some more traffic (it is certainly listening on more ports).  Any
idea what (and what ports) this could be?

Jeff Kell <[log in to unmask]>

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *

ATOM RSS1 RSS2