Rock
@shawcable.net
|  Has no one ever noticed Shaw Secure always calls home?
I run Protowall in the background on my PC and when ever I turn it one sure enough these lines always pop up constantly..
Packet to "Media Force, MCI Communications Services, Inc. d..." ( 65.200.212.211 ) blocked. [protocol: TCP - src: 1205 / dst: 80]
Packet to "Media Force, MCI Communications Services, Inc. d..." ( 65.200.212.211 ) blocked. [protocol: TCP - src: 1205 / dst: 80]
I look it up and I think it's F-secure. Automatic updates are OFF. So why does it keep calling out and what is it sending? |
|
AnonShawUser
join:2006-06-17
Calgary, AB | It verifies your subscription. I won't say more than that. |
|
Rock
@shawcable.net
| Oh a secret..
Why does it verify my sub 50-500 times an hour 24/7 365?
Packet to "Media Force, MCI Communications Services, Inc. d..." ( 65.200.212.213 ) blocked. [protocol: TCP - src: 1190 / dst: 80]
I just updated to the new version and same thing.. |
|
Rock
@shawcable.net | reply to Rock
A new one! LOL
Packet from "Media Force, MCI Communications Services, Inc. d..." ( 65.200.212.213 ) rejected. [protocol: TCP - src: 80 / dst: 1224] |
|
Rock
@shawcable.net
| reply to Rock
Ok here is a bit better formatted version that makes more sense with some spelling fixed 
I use Shaw Secure which is basically F-secure with Shaw Ad's as most of you know..
»shawsecure.ca/
»www.f-secure.com/en_US/
I Also run Protowall in the background on my PC.
»en.wikipedia.org/wiki/ProtoWall
Whenever Protowall is on sure enough these lines always pop up constantly..
Packet to "Media Force, MCI Communications Services, Inc. d..." (
65.200.212.211 ) blocked. [protocol: TCP - src: 1205 / dst: 80]
Packet from "Media Force, MCI Communications Services, Inc. d..." (
65.200.212.213 ) rejected. [protocol: TCP - src: 80 / dst: 1224]
These packets will be blocked or rejected somtimes 100's of times an hour 24/7
I looked it up and I think it's F-secure's servers. Automatic updates are OFF. So why does it keep calling out and what is it sending?
Anyone smarter than me in these areas can shed some light?
There are alot of people that use Shaw Secure and F-Secure.
If I get a real answer somewhere else I'll post it here.
Thanks |
|
stolen
join:2004-04-12
Calgary, AB | It may very well be checking it's subscription. The fact that your blocking it may be causing it to continually try and reach the servers that you're keeping it from seeing.
Try opening it up and see if it stops trying so much. |
|
Mustafa
join:2006-10-04
1 edit | reply to Rock
Use wireshark to capture what its sending.
Filter out the 2k ARP req per second or you will have a massive list in seconds.
»www.wireshark.org/
I tried Shaw Secure for about two days ,I know people think it’s great but it’s way to much of a resource hog for me. I’ll stick with Dr.Web and online armour or outpost. |
|
capdjq
Carpe Diem
Premium
join:2000-11-01
Vancouver | Every AV and Firewall has pros and cons. Been running Shaw secure for 2 weeks. Seems to be fine. |
|
netwerk007
join:2009-08-09 | reply to Rock
It is probably just trying to update |
|
