[dba-Tech] Who (or what) is 239.255.255.250

Erwin Craps - IT Helps Erwin.Craps at ithelps.be
Fri Oct 1 01:16:23 CDT 2004


UPNP can also be turned on in your router....
If I'm not mistaking UPNP is used to dynamicly open ports on your
router/firewall when a specific local computer asks for it. The ports
are closed after usage.

Typically usefull for gaming but also other applications.


Erwin 

-----Original Message-----
From: dba-tech-bounces at databaseadvisors.com
[mailto:dba-tech-bounces at databaseadvisors.com] On Behalf Of Haslett,
Andrew
Sent: Friday, October 01, 2004 7:31 AM
To: 'Discussion of Hardware and Software issues'
Subject: RE: [dba-Tech] Who (or what) is 239.255.255.250

I'm pretty sure its some type of internal address, similar to the
loopback
127.0.0.1 or something.

I do know its not a public address so it shouldn't be anything to worry
about.

-----Original Message-----
From: John W. Colby [mailto:jwcolby at colbyconsulting.com]
Sent: Friday, 1 October 2004 2:21 PM
To: 'Discussion of Hardware and Software issues'
Subject: [dba-Tech] Who (or what) is 239.255.255.250

I am playing with the built in hardware firewalls that comes with the
MSI K8 Neo motherboard.  This firewall is built in to the NVIDIA chipset
used in my
A64 motherboard.  It supposedly has stateful packet inspection (not that
I really understand what that means, just that it is supposed to be
good) and other good stuff.  So I turned it on.  The firewall software
is pretty nice, allowing you to set up 5 or 6 "levels" of protection,
from off to anti-hacking, or set up custom levels.  If you choose
custom, then it has "wizards" that can turn on / off things like
messenger and other chat programs, Telnet, email (various types) etc.

I turned it on and then used the wizards to turn on things like chat
clients, email, windows file sharing etc.  When I view my log files, the
firewall is getting traffic on blocked port, from 192.168.122.1 (my
"head"
router and DHCP Server that is my NETWORK "firewall" just behind the
cable modem.  It is sending to 239.255.255.250 UDP port 1900.  I googled
239.255.255.250 and get nothing.

I googled port 1900 and discovered that it is Windows XP universal PNP
NETWORK traffic and supposedly I can turn it off.  So I did (in all my
XP
machines) by stopping the service.  I am still seeing these logs though.
It just occurred to me that it might be directed at my networked
All-in-one brother fax/scanner/printer which I will turn off briefly to
see what happens.

I turned off the network printer and the traffic (attempts?) didn't
stop.  

I opened my router (Dlink 624 wireless / 4 port) software (browser) and
looked for port forwarding on that port but don't see any.  Is it the
router trying to talk to something on the network?

So, does anyone know what is happening here?  

John W. Colby
www.ColbyConsulting.com 


_______________________________________________
dba-Tech mailing list
dba-Tech at databaseadvisors.com
http://databaseadvisors.com/mailman/listinfo/dba-tech
Website: http://www.databaseadvisors.com

IMPORTANT - PLEASE READ ******************** This email and any files
transmitted with it are confidential and may contain information
protected by law from disclosure. 
If you have received this message in error, please notify the sender
immediately and delete this email from your system. 
No warranty is given that this email or files, if attached to this
email, are free from computer viruses or other defects. They are
provided on the basis the user assumes all responsibility for loss,
damage or consequence resulting directly or indirectly from their use,
whether caused by the negligence of the sender or not.
_______________________________________________
dba-Tech mailing list
dba-Tech at databaseadvisors.com
http://databaseadvisors.com/mailman/listinfo/dba-tech
Website: http://www.databaseadvisors.com



More information about the dba-Tech mailing list