![]() |
|
|
|||||||
![]() |
Computer Security - computer probing it's own ports |
|
|
Thread Tools | Search this Thread |
|
|
#1 |
|
When I'm connected to the Internet via dial up this computer probes
the ports on this computer using the P.P.P. - I.P. address causing the firewall to show a HIGH RISK that a remote system is attempting to access my computer. Can someone tell me why it's doing this and tell me how to make it stop? Sowthwest Texan |
|
|
|
|
#2 |
|
Posts: n/a
|
KINKY!!
cyber self-abuse! "Sowthwest Texan" <> wrote in message news:1118268806.bf43314b352b6f01d298b589e49bd859@t eranews... > When I'm connected to the Internet via dial up this computer probes > the ports on this computer using the P.P.P. - I.P. address causing > the firewall to show a HIGH RISK that a remote system is attempting > to access my computer. Can someone tell me why it's doing this and > tell me how to make it stop? > > > > GiveItUp |
|
|
|
#3 |
|
Posts: n/a
|
Sowthwest Texan wrote:
> When I'm connected to the Internet via dial up this computer probes > the ports on this computer using the P.P.P. - I.P. address causing > the firewall to show a HIGH RISK that a remote system is attempting > to access my computer. Can someone tell me why it's doing this and > tell me how to make it stop? > > > > Try adding your DHCP server to your trusted sites in the firewall. You will want to restrict port to 68. Just a guess. You will also need to ensure your DNS port 53 is exposed to your DNS server. Some Firewalls have and application scan function (Symantec, Mcafee, Zone alarm)) that will scan your system to determine what ports are required to be opened for various applications (Note if you do this, be sure you review what it finds and identify what the application is that want to communicate and why you want to allow it to communicate). Some firewalls make you do this explicitly. Without knowing which firewall you are using, it is difficult to provide clearer direction. Winged Winged |
|
|
|
#4 |
|
Posts: n/a
|
In the Usenet newsgroup alt.computer.security, in article
<ea214$42a7b5a2$18d6d929$>, Winged wrote: >Sowthwest Texan wrote: > When I'm connected to the Internet via dial up this computer probes ^^^^^^^^^^^ >> the ports on this computer using the P.P.P. - I.P. address ^^^^^^ >Try adding your DHCP server to your trusted sites in the firewall. 1661 The Point-to-Point Protocol (PPP). W. Simpson, Ed.. July 1994. (Format: TXT=103026 bytes) (Obsoletes RFC154 (Also STD0051) (Status: STANDARD) 1332 The PPP Internet Protocol Control Protocol (IPCP). G. McGregor. May 1992. (Format: TXT=17613 bytes) (Obsoletes RFC1172) (Updated by RFC3241) (Status: PROPOSED STANDARD) ppp has never used the DHCP protocol. Addresses are set using IPCP only, because the protocols are quite different in concept. On Ethernet, your DHCP _client_ requests an address assignment from a DHCP/BOOTP _server_ and that server assigns an address to you - take it or else. ppp is a peer-to-peer protocol, and addresses are determined by one peer asking if it's OK to use "this" address, and the other peer either approving, disapproving, or disapproving but suggesting to ask for "that" address instead. ppp service such as address negotiations don't use ports, because there isn't an IP connection to carry such protocols as TCP or UDP (which do use ports). >You will also need to ensure your DNS port 53 is exposed to your DNS server. Port 53 is used on the server - the client uses a random port number at or above 1024. On a dialup, there is almost no reason to have any port below 1024 open inbound, as there should be nothing running on those ports on the dialin computer. A possible exception is port 113 (ident see RFC1413) which is required by some mail (POP) servers and some chat rooms. Old guy Moe Trin |
|
|
|
#5 |
|
Posts: n/a
|
Moe Trin wrote:
> In the Usenet newsgroup alt.computer.security, in article > <ea214$42a7b5a2$18d6d929$>, Winged wrote: > > >>Sowthwest Texan wrote: > > >>When I'm connected to the Internet via dial up this computer probes > > ^^^^^^^^^^^ > >>>the ports on this computer using the P.P.P. - I.P. address > > ^^^^^^ > > >>Try adding your DHCP server to your trusted sites in the firewall. > > > 1661 The Point-to-Point Protocol (PPP). W. Simpson, Ed.. July 1994. > (Format: TXT=103026 bytes) (Obsoletes RFC154 > (Also STD0051) (Status: STANDARD) > > 1332 The PPP Internet Protocol Control Protocol (IPCP). G. McGregor. > May 1992. (Format: TXT=17613 bytes) (Obsoletes RFC1172) (Updated by > RFC3241) (Status: PROPOSED STANDARD) > > ppp has never used the DHCP protocol. Addresses are set using IPCP only, > because the protocols are quite different in concept. On Ethernet, your > DHCP _client_ requests an address assignment from a DHCP/BOOTP _server_ > and that server assigns an address to you - take it or else. > > ppp is a peer-to-peer protocol, and addresses are determined by one peer > asking if it's OK to use "this" address, and the other peer either > approving, disapproving, or disapproving but suggesting to ask for "that" > address instead. ppp service such as address negotiations don't use ports, > because there isn't an IP connection to carry such protocols as TCP or UDP > (which do use ports). > > >>You will also need to ensure your DNS port 53 is exposed to your DNS server. > > > Port 53 is used on the server - the client uses a random port number at or > above 1024. On a dialup, there is almost no reason to have any port > below 1024 open inbound, as there should be nothing running on those > ports on the dialin computer. A possible exception is port 113 (ident > see RFC1413) which is required by some mail (POP) servers and some chat > rooms. > > Old guy > Ok I goofed again... Winged Winged |
|
|
|
#6 |
|
Posts: n/a
|
In the Usenet newsgroup alt.computer.security, in article
<548f3$42a8d6d5$18d6d929$>, Winged wrote: >Moe Trin wrote: >> ppp has never used the DHCP protocol. Addresses are set using IPCP only, >> because the protocols are quite different in concept. Given the wide spread use of ppp, it's amazing that help desk staff don't even know the difference. >> On a dialup, there is almost no reason to have any port below 1024 open >> inbound, as there should be nothing running on those ports on the dialin >> computer. >Ok I goofed again... Didn't mean to sound harsh - sorry. Old guy Moe Trin |
|
![]() |
| Thread Tools | Search this Thread |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Major Series of Computer Problems... | ROTY | Hardware | 0 | 06-15-2007 05:11 AM |
| Re: USB issue ... some USB 2 ports working only in USB 1 mode | hungsolo2005@yahoo.com | A+ Certification | 0 | 06-14-2006 08:26 PM |
| Re: Turn computer off? Or leave on? | Captain Lon | A+ Certification | 0 | 05-26-2005 02:27 PM |
| Re: Serious Computer Problem | hootnholler | A+ Certification | 1 | 11-24-2003 12:18 PM |
| Re: Serious Computer Problem | Bret | A+ Certification | 0 | 11-19-2003 12:51 AM |