[dba-Tech] Who (or what) is 239.255.255.250

Haslett, Andrew andrew.haslett at ilc.gov.au
Fri Oct 1 01:30:40 CDT 2004


Yeah - UPnP rings a bell -> it could also be one of those 'broadcast'
addresses like 224.0.0.0 I often see in the logs.  Something to do with
broadcasting to the network to let them know you're alive I think..

-----Original Message-----
From: Erwin Craps - IT Helps [mailto:Erwin.Craps at ithelps.be] 
Sent: Friday, 1 October 2004 3:46 PM
To: Discussion of Hardware and Software issues
Subject: RE: [dba-Tech] Who (or what) is 239.255.255.250

UPNP can also be turned on in your router....
If I'm not mistaking UPNP is used to dynamicly open ports on your
router/firewall when a specific local computer asks for it. The ports are
closed after usage.

Typically usefull for gaming but also other applications.


Erwin 

-----Original Message-----
From: dba-tech-bounces at databaseadvisors.com
[mailto:dba-tech-bounces at databaseadvisors.com] On Behalf Of Haslett, Andrew
Sent: Friday, October 01, 2004 7:31 AM
To: 'Discussion of Hardware and Software issues'
Subject: RE: [dba-Tech] Who (or what) is 239.255.255.250

I'm pretty sure its some type of internal address, similar to the loopback
127.0.0.1 or something.

I do know its not a public address so it shouldn't be anything to worry
about.

-----Original Message-----
From: John W. Colby [mailto:jwcolby at colbyconsulting.com]
Sent: Friday, 1 October 2004 2:21 PM
To: 'Discussion of Hardware and Software issues'
Subject: [dba-Tech] Who (or what) is 239.255.255.250

I am playing with the built in hardware firewalls that comes with the MSI K8
Neo motherboard.  This firewall is built in to the NVIDIA chipset used in my
A64 motherboard.  It supposedly has stateful packet inspection (not that I
really understand what that means, just that it is supposed to be
good) and other good stuff.  So I turned it on.  The firewall software is
pretty nice, allowing you to set up 5 or 6 "levels" of protection, from off
to anti-hacking, or set up custom levels.  If you choose custom, then it has
"wizards" that can turn on / off things like messenger and other chat
programs, Telnet, email (various types) etc.

I turned it on and then used the wizards to turn on things like chat
clients, email, windows file sharing etc.  When I view my log files, the
firewall is getting traffic on blocked port, from 192.168.122.1 (my "head"
router and DHCP Server that is my NETWORK "firewall" just behind the cable
modem.  It is sending to 239.255.255.250 UDP port 1900.  I googled
239.255.255.250 and get nothing.

I googled port 1900 and discovered that it is Windows XP universal PNP
NETWORK traffic and supposedly I can turn it off.  So I did (in all my XP
machines) by stopping the service.  I am still seeing these logs though.
It just occurred to me that it might be directed at my networked All-in-one
brother fax/scanner/printer which I will turn off briefly to see what
happens.

I turned off the network printer and the traffic (attempts?) didn't stop.  

I opened my router (Dlink 624 wireless / 4 port) software (browser) and
looked for port forwarding on that port but don't see any.  Is it the router
trying to talk to something on the network?

So, does anyone know what is happening here?  

John W. Colby
www.ColbyConsulting.com 


_______________________________________________
dba-Tech mailing list
dba-Tech at databaseadvisors.com
http://databaseadvisors.com/mailman/listinfo/dba-tech
Website: http://www.databaseadvisors.com

IMPORTANT - PLEASE READ ******************** This email and any files
transmitted with it are confidential and may contain information protected
by law from disclosure. 
If you have received this message in error, please notify the sender
immediately and delete this email from your system. 
No warranty is given that this email or files, if attached to this email,
are free from computer viruses or other defects. They are provided on the
basis the user assumes all responsibility for loss, damage or consequence
resulting directly or indirectly from their use, whether caused by the
negligence of the sender or not.
_______________________________________________
dba-Tech mailing list
dba-Tech at databaseadvisors.com
http://databaseadvisors.com/mailman/listinfo/dba-tech
Website: http://www.databaseadvisors.com
_______________________________________________
dba-Tech mailing list
dba-Tech at databaseadvisors.com
http://databaseadvisors.com/mailman/listinfo/dba-tech
Website: http://www.databaseadvisors.com

IMPORTANT - PLEASE READ ******************** 
This email and any files transmitted with it are confidential and may 
contain information protected by law from disclosure. 
If you have received this message in error, please notify the sender 
immediately and delete this email from your system. 
No warranty is given that this email or files, if attached to this 
email, are free from computer viruses or other defects. They 
are provided on the basis the user assumes all responsibility for 
loss, damage or consequence resulting directly or indirectly from 
their use, whether caused by the negligence of the sender or not.



More information about the dba-Tech mailing list