A Broadband and ADSL forum. BroadbanterBanter

Welcome to BroadbanterBanter.

You are currently viewing as a guest which gives you limited access to view most discussions and other FREE features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload your own photos and access many other special features. Registration is fast, simple and absolutely free so please, join our community today.

Go Back   Home » BroadbanterBanter forum » Newsgroup Discussions » uk.telecom.broadband (UK broadband)
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

uk.telecom.broadband (UK broadband) (uk.telecom.broadband) Discussion of broadband services, technology and equipment as provided in the UK. Discussions of specific services based on ADSL, cable modems or other broadband technology are also on-topic. Advertising is not allowed.

XP accessing 224.0.0.2 - advice please



 
 
Thread Tools Display Modes
  #1  
Old November 18th 04, 02:57 PM posted to ntl.discussion.broadband.cm,uk.telecom.broadband,comp.security.misc,microsoft.public.windowsxp.security_admin
Mike Scott
external usenet poster
 
Posts: 92
Default XP accessing 224.0.0.2 - advice please

Zarbol Tsar wrote:
Can I ask you specialists for some advice about my home PC.

I run XP Pro with all Microsoft patches except for SP2. I have got
only one PC attached to NTL broadband direct via a cable modem. My
PC is regularly scanned for viruses and for adware.

After booting up, my Sygate personal Firewall has recently been
asking me if I wish to allow these following programs to access
224.0.0.2

C:\windows\explorer.exe
C:\windows\system32\spoolerv.exe
C:\windows\system32\services.exe
C:\WINDOWS\System32\csrss.exe

also my antivirus program:
C:\Program Files\AntiVir PE\AVWIN.EXE

When I look up these program names on Google it seems that they are
probably not viruses.

But why do they want to access 224.0.0.2? And should I let them?


It's to do with IP routing. Block and forget.

  #2  
Old November 18th 04, 05:25 PM posted to ntl.discussion.broadband.cm,uk.telecom.broadband,comp.security.misc,microsoft.public.windowsxp.security_admin
Ivor Jones
external usenet poster
 
Posts: 93
Default XP accessing 224.0.0.2 - advice please

Mike Scott wrote:
Zarbol Tsar wrote:
Can I ask you specialists for some advice about my home PC.

I run XP Pro with all Microsoft patches except for SP2. I have got
only one PC attached to NTL broadband direct via a cable modem. My
PC is regularly scanned for viruses and for adware.

After booting up, my Sygate personal Firewall has recently been
asking me if I wish to allow these following programs to access
224.0.0.2

C:\windows\explorer.exe
C:\windows\system32\spoolerv.exe
C:\windows\system32\services.exe
C:\WINDOWS\System32\csrss.exe

also my antivirus program:
C:\Program Files\AntiVir PE\AVWIN.EXE

When I look up these program names on Google it seems that they are
probably not viruses.

But why do they want to access 224.0.0.2? And should I let them?


It's to do with IP routing. Block and forget.


From grc.com's IDSERVE utility:

Initiating server query ...
Looking up the domain name for IP: 224.0.0.2
The domain name for the IP address is: ALL-ROUTERS.MCAST.NET
Connecting to the server on remote port: 25
[Connected] The remote connection was accepted but the server did not
return a connection greeting.

Ivor


  #3  
Old November 18th 04, 07:47 PM posted to ntl.discussion.broadband.cm,uk.telecom.broadband,comp.security.misc,microsoft.public.windowsxp.security_admin
Steve Wyles
external usenet poster
 
Posts: 22
Default XP accessing 224.0.0.2 - advice please

In uk.telecom.broadband Ivor Jones wrote:
Mike Scott wrote:
Zarbol Tsar wrote:
Can I ask you specialists for some advice about my home PC.

I run XP Pro with all Microsoft patches except for SP2. I have got
only one PC attached to NTL broadband direct via a cable modem. My
PC is regularly scanned for viruses and for adware.

After booting up, my Sygate personal Firewall has recently been
asking me if I wish to allow these following programs to access
224.0.0.2

C:\windows\explorer.exe
C:\windows\system32\spoolerv.exe
C:\windows\system32\services.exe
C:\WINDOWS\System32\csrss.exe

also my antivirus program:
C:\Program Files\AntiVir PE\AVWIN.EXE

When I look up these program names on Google it seems that they are
probably not viruses.

But why do they want to access 224.0.0.2? And should I let them?


It's to do with IP routing. Block and forget.


From grc.com's IDSERVE utility:


Initiating server query ...
Looking up the domain name for IP: 224.0.0.2
The domain name for the IP address is: ALL-ROUTERS.MCAST.NET
Connecting to the server on remote port: 25
[Connected] The remote connection was accepted but the server did not
return a connection greeting.


Which won't give any useful information as addresses in the 224.0.0.0/24
are used for multicasting.

see http://www.cotse.com/CIE/RFC/1700/5.htm

In the original posters situation it is safe to either allow or block it
according to their own preference.

Steve

  #4  
Old November 18th 04, 11:28 PM posted to ntl.discussion.broadband.cm,uk.telecom.broadband,comp.security.misc,microsoft.public.windowsxp.security_admin
T. Sean Weintz
external usenet poster
 
Posts: 1
Default XP accessing 224.0.0.2 - advice please

Ivor Jones wrote:


From grc.com's IDSERVE utility:

Initiating server query ...
Looking up the domain name for IP: 224.0.0.2
The domain name for the IP address is: ALL-ROUTERS.MCAST.NET
Connecting to the server on remote port: 25
[Connected] The remote connection was accepted but the server did not
return a connection greeting.

Ivor


LOL. It's a multicast address, idiot.

The guy who said "It's to do with IP routing. Block and forget." was
correct.

ANY address starting with 224 is not an address for a specific machine -
it's a multicast address. In this case, the multicast address that all
routers that respond to router discovery multicasts will listen for and
respond to.

His windows box is running router discovery. 224.0.0.2 is the "all
routers on this subnet" multicast address.

All IANA assigned multicast addresses can be found he
http://www.iana.org/assignments/multicast-addresses
  #5  
Old November 18th 04, 11:45 PM posted to ntl.discussion.broadband.cm,uk.telecom.broadband,comp.security.misc,microsoft.public.windowsxp.security_admin
Ivor Jones
external usenet poster
 
Posts: 93
Default XP accessing 224.0.0.2 - advice please

T. Sean Weintz wrote:
Ivor Jones wrote:


From grc.com's IDSERVE utility:

Initiating server query ...
Looking up the domain name for IP: 224.0.0.2
The domain name for the IP address is: ALL-ROUTERS.MCAST.NET
Connecting to the server on remote port: 25
[Connected] The remote connection was accepted but the server did
not return a connection greeting.

Ivor


LOL. It's a multicast address, idiot.


Was there any need for that..? I have never heard of multicast until today
so I had no idea what it was. Please don't be offensive.

Ivor


  #6  
Old November 19th 04, 02:15 AM posted to ntl.discussion.broadband.cm,uk.telecom.broadband,comp.security.misc,microsoft.public.windowsxp.security_admin
Steve Wyles
external usenet poster
 
Posts: 22
Default XP accessing 224.0.0.2 - advice please

In uk.telecom.broadband Zarbol Tsar wrote:
On 18 Nov 2004, T. Sean Weintz wrote:


The guy who said "It's to do with IP routing. Block and forget."
was correct.

ANY address starting with 224 is not an address for a specific
machine - it's a multicast address. In this case, the multicast
address that all routers that respond to router discovery
multicasts will listen for and respond to.

His windows box is running router discovery. 224.0.0.2 is the
"all routers on this subnet" multicast address.


I am using a standalone PC (with no LAN) connected to a cable modem.


If I am running this "router discovery" then is it something I should
turn off?


No, you don't need to worry about it in any way. It's just one of those
mickysoft things.

Steve


  #7  
Old November 19th 04, 10:14 PM posted to ntl.discussion.broadband.cm,uk.telecom.broadband,comp.security.misc,microsoft.public.windowsxp.security_admin
cw
external usenet poster
 
Posts: 323
Default XP accessing 224.0.0.2 - advice please

"Ivor Jones" wrote in
:

Was there any need for that..? I have never heard of multicast until
today so I had no idea what it was. Please don't be offensive.


Sounded more like a light hearted jest than an offensive hurl. Idiot ;0)

--
Colin
*Drop DEAD from the email address to reply*
  #8  
Old November 20th 04, 12:26 PM posted to ntl.discussion.broadband.cm,uk.telecom.broadband,comp.security.misc,microsoft.public.windowsxp.security_admin
Ivor Jones
external usenet poster
 
Posts: 93
Default XP accessing 224.0.0.2 - advice please

cw wrote:
"Ivor Jones" wrote in
:

Was there any need for that..? I have never heard of multicast
until today so I had no idea what it was. Please don't be
offensive.


Sounded more like a light hearted jest than an offensive hurl.
Idiot ;0)


Calling someone an idiot just because they've never heard of something is
offensive.

Please don't do it, at least not to me.

Plonk

Ivor


  #9  
Old November 20th 04, 02:24 PM posted to ntl.discussion.broadband.cm,uk.telecom.broadband,comp.security.misc,microsoft.public.windowsxp.security_admin
GreySoul
external usenet poster
 
Posts: 1
Default XP accessing 224.0.0.2 - advice please

On Fri, 19 Nov 2004 01:15:31 +0000 (UTC), Steve Wyles
wrote:

In uk.telecom.broadband Zarbol Tsar wrote:
On 18 Nov 2004, T. Sean Weintz wrote:


The guy who said "It's to do with IP routing. Block and forget."
was correct.

ANY address starting with 224 is not an address for a specific
machine - it's a multicast address. In this case, the multicast
address that all routers that respond to router discovery
multicasts will listen for and respond to.

His windows box is running router discovery. 224.0.0.2 is the
"all routers on this subnet" multicast address.


I am using a standalone PC (with no LAN) connected to a cable modem.


If I am running this "router discovery" then is it something I should
turn off?


No, you don't need to worry about it in any way. It's just one of those
mickysoft things.

Steve



Its not just an MS thing. I've seen other devices, such as wireless
routers, that like to send traffic to multicast addresses.
  #10  
Old November 20th 04, 03:06 PM posted to ntl.discussion.broadband.cm,uk.telecom.broadband,comp.security.misc,microsoft.public.windowsxp.security_admin
Barry Margolin
external usenet poster
 
Posts: 6
Default XP accessing 224.0.0.2 - advice please

In article ,
"Ivor Jones" wrote:

cw wrote:
"Ivor Jones" wrote in
:

Was there any need for that..? I have never heard of multicast
until today so I had no idea what it was. Please don't be
offensive.


Sounded more like a light hearted jest than an offensive hurl.
Idiot ;0)


Calling someone an idiot just because they've never heard of something is
offensive.

Please don't do it, at least not to me.


When you answer questions like these in a technical newsgroup, you're
purporting to have some expertise on the subject. When it comes out
that you don't know a whole lot about the technology, retorts like that
are likely.

If you don't like it, don't post to Usenet, because it happens all the
time.

--
Barry Margolin,
Arlington, MA
 




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Accessing Website Lo Salt uk.telecom.broadband (UK broadband) 3 September 30th 04 12:39 PM
Problems accessing Website Flexi uk.telecom.broadband (UK broadband) 5 May 31st 04 12:24 AM
Accessing newsgroups from BT Midband Oliver Keating uk.telecom.broadband (UK broadband) 5 October 18th 03 09:34 AM


All times are GMT +1. The time now is 01:51 AM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2020, Jelsoft Enterprises Ltd.Content Relevant URLs by vBSEO 2.4.0
Copyright 2004-2020 BroadbanterBanter.
The comments are property of their posters.