Interesting event happened yesterday
(My computer) issued to the Internet 224.0.0.2 (all routers) request which my firewall blocked.
This is the first time this has happened
I do not have my routers hooked up to the net
I run console cable not Ethernet cable to my routers
This may be right in front of my nose but I am stumped
Does any one have a clue -
Thanks

__________________
"We judge ourselves by what we feel capable of doing / Others judge us by what we have already done"
"A thought which does not result in action is nothing much, and an action which does not proceed from a thought is nothing at all"
"When the earth was young, and the Internet was but a gleam in some amphibian's eye"

Report this post to a moderator

RouterA#sh x25
X.25 software, Version 3.0.0.
0 configurations supporting 0 active contexts
VCs allocated, freed and in use: 0 - 0 = 0
VCs active and idle: 0, 0
XOT software, Version 2.0.0.
not configured

I DID NOT ACTIVATE X 25 on my router.
There is no one here other than me who knows anything anout Cisco
Something (application) activated this

HELP???????

__________________
"We judge ourselves by what we feel capable of doing / Others judge us by what we have already done"
"A thought which does not result in action is nothing much, and an action which does not proceed from a thought is nothing at all"
"When the earth was young, and the Internet was but a gleam in some amphibian's eye"

Report this post to a moderator

I'm not sure what you mean by "(My computer) issued to the Internet 224.0.0.2"... As for "sh x25" I believe you don't need to activate X.25 in order to see that output. AFAICS there's nothing out of ordinary here.

Report this post to a moderator

My computer issued the multicast request, my firewall block the request (224.0.0.2) out to the internet or my local network. (This means that an application tried to hook to, or get information from routers that are in the network. "Zone Alert has block access to the Internet from multicast 224.0.0.2 from your computer (ICMP)" It is not unusual to see " Gator client (172.1.2.2) was denied access to the Internet" but I have not seen
a class D address denied to or from the firewall.

I have not started studying for remote access, I do not know if X25 is on by default. Strange I see it (x25) in the 'sh run' on router A, but it is not on the 'sh run' on router B, yet when I do the 'sh x25' on B, the output is the same as A.

__________________
"We judge ourselves by what we feel capable of doing / Others judge us by what we have already done"
"A thought which does not result in action is nothing much, and an action which does not proceed from a thought is nothing at all"
"When the earth was young, and the Internet was but a gleam in some amphibian's eye"

Report this post to a moderator

I can't figure out what your talking about. What is the problem or the question. X.25 is not enabled by default.

Report this post to a moderator

Problem #1
I have a firewall (zone alarm) that blocked an all router multicast FROM my computer. Its not supposed to do this. Here is an example of what Zone Alarm does
The firewall has blocked Internet access to your computer (HTTP) from 213.97.74.18 (TCP Port 3768) [TCP Flags: S].
Time: 4/16/02 10:32:46 AM

In the case I am talking about, 224.0.0.2 was blocked FROM my computer TO the Internet

Problem #2
On my routers x25 is enabled, I didn't enable it.

Solution
This may be a virus but I do not know where to start

__________________
"We judge ourselves by what we feel capable of doing / Others judge us by what we have already done"
"A thought which does not result in action is nothing much, and an action which does not proceed from a thought is nothing at all"
"When the earth was young, and the Internet was but a gleam in some amphibian's eye"

Report this post to a moderator

Freaking weird, on router A, x25 is not in the sh run any more???????????

__________________
"We judge ourselves by what we feel capable of doing / Others judge us by what we have already done"
"A thought which does not result in action is nothing much, and an action which does not proceed from a thought is nothing at all"
"When the earth was young, and the Internet was but a gleam in some amphibian's eye"

Report this post to a moderator

The reason Zone alarm blocked your access is because it was a HTTP packet. Check your settings on zone alarm

Report this post to a moderator

Sorry, I didn't see the second line. I guess it wasn't. Check your settings, I don't know why it blocked it.

Report this post to a moderator

Thanks kbani

I checked the "applications" on ZA to find out if there was a new app installed recently, did not find one.

Why would my computer arbitrarily send out a multicast?
Why did my router have x25 in the running config when I did not enable it?

__________________
"We judge ourselves by what we feel capable of doing / Others judge us by what we have already done"
"A thought which does not result in action is nothing much, and an action which does not proceed from a thought is nothing at all"
"When the earth was young, and the Internet was but a gleam in some amphibian's eye"

Report this post to a moderator