| reply to LowWaterMark
Re: Windows Explorer trying to get out! I don't know if it's UDP because ZA won't give me any details.
Organized Chaos - thanks, that might be it, although, why would it only be going to that IP? |
|
|
|
| said by helppp:
...that might be it, although, why would it only be going to that IP?
If ZAP is blocking it from getting DNS resolved, it can't ever go any further than that. Without resolving whatever name it's attempting to access into its IP address, it has no way to get to wherever it wants to go.
--
Use the most powerful combo Firewall/AV/AT package available - "Common Sense" - It can be upgraded daily! |
|
 BlitzenZeusBurnt Out CynicPremium
join:2000-01-13
kudos:2
 ·Frontier FiOS
| reply to helppp
Would that be an ip of one of your dns servers? In the program winipcfg(9x only, gui based) or ipconfig(NT based systems run it from the command line) you can see your dns servers.
I have also seen the logs show the protocol so it should list it.
--
My hourly rates:
$25 per hour.
$35 per hour if you want to watch.
$45 per hour if you want to help.
$75 per hour if you tried to fix it, and failed. |
|
 helpp
@dsl.bcvloh.ameritech | On ZA - in the log view panel, this is what it looks like under each column header:
Rating: Medium
Date/Time: 2003/09/09 23:32:12
Type: Program Access
Protocol: - this is blank! -
Program: Windows Explorer
Source IP: 63.73.20.40:53
Direction: Outgoing (connect)
Action Taken: Blocked
Count: 402
Source DNS: - empty-
Destination DNS: (my network name)
It's not the same IP as ISP's DNS or Gateway or Subnet or anything, not even in the same range. |
|
| How long has it been doing this? And, has it continued to occur through a reboot of the system? |
|
| It started last night, and I did not download anything nor did I visit any unusual websites.
It will not stop. I've even blocked the exe for Win Explorer, and it still keeps trying to connect to that IP.
I've rebooted many times, no help. |
|
