Port 30001 is used by Winpop and e/pop. Because this is a UDP broadcast, I'm guessing that the PCs where Winpop or e/pop are being used are sending broadcast messages to advertise their presence to each other.
I've added a filter to my GNAT Box (actually two - one in Outbound filters and the other in Remote Access) to Block/nolog any traffic to 255.255.255.255. Mike Burden Lynk Systems (616)532-4985 [EMAIL PROTECTED] > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of > mason_landrum > Sent: Friday, July 07, 2000 1:11 PM > To: gb-users > Subject: UDP/Remote Access Filter Blocks > > > --------------------- Attention ----------------------------- > Online GNAT Box User Forum is Now Open > Click the Register link and sign up today > http://www.gnatbox.com/cgi-bin/Ultimate.cgi > ------------------------------------------------------------- > Send postings to: [EMAIL PROTECTED] > Access the list archives at: http://www.gnatbox.com/gb-users/ > ------------------------------------------------------------- > > I am running GB 3.0.1 and in my current configuration I am > denying any traffic > both inbound and outbound except what I am explicitly allowing. I > keep receiving > the following Remote Access filter messages from these two IP > addresses even > though they are within my PRO network. EP0 is my PRO NIC. > > What are they trying to do with 255.255.255.255/30001? > > What is that port? > > Is this something I should open up? > > And why is GB saying these access attempts are Remote Access attempts even > though these IPs are on the PRO network? > > > ------------ SAMPLE --------------- > 17 5 Jul 7 09:51:39 FILTER: Remote access filter blocks: UDP bcast ep0 > [192.168.10.23/30001]->[255.255.255.255/30001] l=12. > 17 5 Jul 7 09:51:55 FILTER: Remote access filter blocks: UDP bcast ep0 > [192.168.10.22/30001]->[255.255.255.255/30001] l=12. > ------------ SAMPLE --------------- > > > Thank you, > Mason Landrum > > > ---------------------------------------------- > To Unsubscribe: send mail to [EMAIL PROTECTED] > with "unsubscribe gb-users your_email_address > in the body of the message
