Haslett, Andrew
andrew.haslett at ilc.gov.au
Fri Oct 1 01:30:40 CDT 2004
Yeah - UPnP rings a bell -> it could also be one of those 'broadcast' addresses like 224.0.0.0 I often see in the logs. Something to do with broadcasting to the network to let them know you're alive I think.. -----Original Message----- From: Erwin Craps - IT Helps [mailto:Erwin.Craps at ithelps.be] Sent: Friday, 1 October 2004 3:46 PM To: Discussion of Hardware and Software issues Subject: RE: [dba-Tech] Who (or what) is 239.255.255.250 UPNP can also be turned on in your router.... If I'm not mistaking UPNP is used to dynamicly open ports on your router/firewall when a specific local computer asks for it. The ports are closed after usage. Typically usefull for gaming but also other applications. Erwin -----Original Message----- From: dba-tech-bounces at databaseadvisors.com [mailto:dba-tech-bounces at databaseadvisors.com] On Behalf Of Haslett, Andrew Sent: Friday, October 01, 2004 7:31 AM To: 'Discussion of Hardware and Software issues' Subject: RE: [dba-Tech] Who (or what) is 239.255.255.250 I'm pretty sure its some type of internal address, similar to the loopback 127.0.0.1 or something. I do know its not a public address so it shouldn't be anything to worry about. -----Original Message----- From: John W. Colby [mailto:jwcolby at colbyconsulting.com] Sent: Friday, 1 October 2004 2:21 PM To: 'Discussion of Hardware and Software issues' Subject: [dba-Tech] Who (or what) is 239.255.255.250 I am playing with the built in hardware firewalls that comes with the MSI K8 Neo motherboard. This firewall is built in to the NVIDIA chipset used in my A64 motherboard. It supposedly has stateful packet inspection (not that I really understand what that means, just that it is supposed to be good) and other good stuff. So I turned it on. The firewall software is pretty nice, allowing you to set up 5 or 6 "levels" of protection, from off to anti-hacking, or set up custom levels. If you choose custom, then it has "wizards" that can turn on / off things like messenger and other chat programs, Telnet, email (various types) etc. I turned it on and then used the wizards to turn on things like chat clients, email, windows file sharing etc. When I view my log files, the firewall is getting traffic on blocked port, from 192.168.122.1 (my "head" router and DHCP Server that is my NETWORK "firewall" just behind the cable modem. It is sending to 239.255.255.250 UDP port 1900. I googled 239.255.255.250 and get nothing. I googled port 1900 and discovered that it is Windows XP universal PNP NETWORK traffic and supposedly I can turn it off. So I did (in all my XP machines) by stopping the service. I am still seeing these logs though. It just occurred to me that it might be directed at my networked All-in-one brother fax/scanner/printer which I will turn off briefly to see what happens. I turned off the network printer and the traffic (attempts?) didn't stop. I opened my router (Dlink 624 wireless / 4 port) software (browser) and looked for port forwarding on that port but don't see any. Is it the router trying to talk to something on the network? So, does anyone know what is happening here? John W. Colby www.ColbyConsulting.com _______________________________________________ dba-Tech mailing list dba-Tech at databaseadvisors.com http://databaseadvisors.com/mailman/listinfo/dba-tech Website: http://www.databaseadvisors.com IMPORTANT - PLEASE READ ******************** This email and any files transmitted with it are confidential and may contain information protected by law from disclosure. If you have received this message in error, please notify the sender immediately and delete this email from your system. No warranty is given that this email or files, if attached to this email, are free from computer viruses or other defects. They are provided on the basis the user assumes all responsibility for loss, damage or consequence resulting directly or indirectly from their use, whether caused by the negligence of the sender or not. _______________________________________________ dba-Tech mailing list dba-Tech at databaseadvisors.com http://databaseadvisors.com/mailman/listinfo/dba-tech Website: http://www.databaseadvisors.com _______________________________________________ dba-Tech mailing list dba-Tech at databaseadvisors.com http://databaseadvisors.com/mailman/listinfo/dba-tech Website: http://www.databaseadvisors.com IMPORTANT - PLEASE READ ******************** This email and any files transmitted with it are confidential and may contain information protected by law from disclosure. If you have received this message in error, please notify the sender immediately and delete this email from your system. No warranty is given that this email or files, if attached to this email, are free from computer viruses or other defects. They are provided on the basis the user assumes all responsibility for loss, damage or consequence resulting directly or indirectly from their use, whether caused by the negligence of the sender or not.