|
|
| Sea Dragon 2002-04-15, 2:11 pm |
| Interesting event happened yesterday
(My computer) issued to the Internet 224.0.0.2 (all routers) request which my firewall blocked.
This is the first time this has happened
I do not have my routers hooked up to the net
I run console cable not Ethernet cable to my routers
This may be right in front of my nose but I am stumped
Does any one have a clue -
Thanks | |
| Sea Dragon 2002-04-15, 2:29 pm |
| RouterA#sh x25
X.25 software, Version 3.0.0.
0 configurations supporting 0 active contexts
VCs allocated, freed and in use: 0 - 0 = 0
VCs active and idle: 0, 0
XOT software, Version 2.0.0.
not configured
I DID NOT ACTIVATE X 25 on my router.
There is no one here other than me who knows anything anout Cisco
Something (application) activated this
HELP??????? | |
| dmaftei 2002-04-15, 3:15 pm |
| I'm not sure what you mean by "(My computer) issued to the Internet 224.0.0.2"... As for "sh x25" I believe you don't need to activate X.25 in order to see that output. AFAICS there's nothing out of ordinary here. | |
| Sea Dragon 2002-04-15, 8:31 pm |
| My computer issued the multicast request, my firewall block the request (224.0.0.2) out to the internet or my local network. (This means that an application tried to hook to, or get information from routers that are in the network. "Zone Alert has block access to the Internet from multicast 224.0.0.2 from your computer (ICMP)" It is not unusual to see " Gator client (172.1.2.2) was denied access to the Internet" but I have not seen
a class D address denied to or from the firewall.
I have not started studying for remote access, I do not know if X25 is on by default. Strange I see it (x25) in the 'sh run' on router A, but it is not on the 'sh run' on router B, yet when I do the 'sh x25' on B, the output is the same as A. | |
|
| I can't figure out what your talking about. What is the problem or the question. X.25 is not enabled by default. | |
| Sea Dragon 2002-04-16, 10:44 am |
| Problem #1
I have a firewall (zone alarm) that blocked an all router multicast FROM my computer. Its not supposed to do this. Here is an example of what Zone Alarm does
The firewall has blocked Internet access to your computer (HTTP) from 213.97.74.18 (TCP Port 3768) [TCP Flags: S].
Time: 4/16/02 10:32:46 AM
In the case I am talking about, 224.0.0.2 was blocked FROM my computer TO the Internet
Problem #2
On my routers x25 is enabled, I didn't enable it.
Solution
This may be a virus but I do not know where to start | |
| Sea Dragon 2002-04-16, 11:09 am |
| Freaking weird, on router A, x25 is not in the sh run any more??????????? | |
| kbani 2002-04-16, 11:14 am |
| The reason Zone alarm blocked your access is because it was a HTTP packet. Check your settings on zone alarm | |
| kbani 2002-04-16, 11:15 am |
| Sorry, I didn't see the second line. I guess it wasn't. Check your settings, I don't know why it blocked it. | |
| Sea Dragon 2002-04-16, 11:50 am |
| Thanks kbani
I checked the "applications" on ZA to find out if there was a new app installed recently, did not find one.
Why would my computer arbitrarily send out a multicast?
Why did my router have x25 in the running config when I did not enable it? | |
| guitarjim 2002-04-17, 10:06 am |
| The last line on your show x25 does state that its "not configured" yet. To find your encapsulation do a show interface , it should show HDLC as the encapsulation.
I don't know how to resolve the other problem your having with ZoneAlarm. What does it do when ZoneAlarm isn't on? | |
| Sea Dragon 2002-04-17, 10:27 am |
| Router runs fine
last night I caught it
here it is
The firewall has blocked Internet access to the all routers multicast address (224.0.0.2) (ICMP Router Solicit) from your computer.
Time: 4/17/02 5:26:04 AM |
|
|
|