Search Archive

RE: RE: Winroute (was BT Anytime thingy)

To: <ukha_d@xxxxxxx>

Subject: RE: RE: Winroute (was BT Anytime thingy)

From: "Kevin Hawkins" <lists@xxxxxxx>

Date: Fri, 7 Sep 2001 00:41:24 +0100

Delivered-to: rich@xxxxxxx

Delivered-to: mailing list ukha_d@xxxxxxx

Mailing-list: list ukha_d@xxxxxxx; contact ukha_d-owner@xxxxxxx

Reply-to: ukha_d@xxxxxxx

Sorry re-read your message and the offending machine is the WinRoute Host I think - I guess it is possible that it is doing a DNS lookup on behalf of a client though - are there other machines on the firewalled network - and does the problem occur if only the gateway is switched on ?

Kevin

-----Original Message-----
From: Kevin Hawkins [mailto:lists@xxxxxxx]
Sent: 07 September 2001 00:36
To: ukha_d@xxxxxxxSubject: RE: [ukha_d] RE: Winroute (was BT Anytime thingy)

I had a similar problem to this - it was caused by Netbios sending solicitation packets by UDP out on ports 137 and 138 - there is a tech note at this address which may shed some light http://www.netopia.com/support/technotes/hardware/NIR_025.html this was to do with the problem in relation to my Netopia router but the background is appropriate to all dial on demand routers. You could block these ports in WinRoute by making sure the bindings were removed on the dial up network adaptor and/or blocking outgoing packets on these two ports in WinRoute.

Do you have Wins enabled and what protocol bindings do you have to the dial up adapter ?

From memory I blocked the above two ports but I also had to disable WINS as it was forcing access to a DNS server. Of course any internet application on any PC that is routing through the gateway and has to resolve any domain name will cause an access to the DNS which will bring up your connection. It is also possible a machine is trying to resolve a domain name for one of your local (intranet) machines if so you can put an entry in the Winroute HOSTS file for each machine on your network and use Winroutes' DNS forwarder.

You should also be able to track it down to a particular PC from the ip address - you need to turn on logging in WinRoutePro and it will show you the full address, source and destination including port number of the packet that raised the connection - the source will be the offending machine. As your link is down until the problem is initiated the log will have this as the first entry.

BTW If you can't resolve it or are still really not happy with WinRoute Pro I will buy your copy off you ! I am just about to buy another copy myself. The dial up triggering is not an issue to me as I am on cable. I am not booted into the correct OS for looking at the config of WinRoute Pro at the moment but if you need a couple of pointers to the port mapping (blocking) or the log enabling I can get them for you.

Kevin

-----Original Message-----
From: Keith Doxey [mailto:ukha@xxxxxxx]
Sent: 06 September 2001 23:35
To: ukha_d@xxxxxxxSubject: RE: [ukha_d] RE: Winroute (was BT Anytime thingy)

Hi Dave,

The only log that has anything in it is the Dial Log

[06/Sep/2001 18:34:22] BT Internet Anytime (BTI Anytime): successfuly connected

[06/Sep/2001 20:24:37] BT Internet Anytime (BTI Anytime): disconnected, connection time 01:50:15

[06/Sep/2001 20:26:22] UDP packet 192.168.0.1:53 -> 192.16.202.11:53 initiated dialing

[06/Sep/2001 20:26:30] BT Internet Anytime (BTI Anytime): successfuly connected

[06/Sep/2001 20:36:36] BT Internet Anytime (BTI Anytime): disconnected, connection time 00:10:06

[06/Sep/2001 20:41:21] UDP packet 192.168.0.1:53 -> 192.16.202.11:53 initiated dialing

[06/Sep/2001 20:56:21] UDP packet 192.168.0.1:53 -> 192.16.202.11:53 initiated dialing

[06/Sep/2001 20:56:32] BT Internet Anytime (BTI Anytime): successfuly connected

[06/Sep/2001 21:06:37] BT Internet Anytime (BTI Anytime): disconnected, connection time 00:10:05

[06/Sep/2001 21:11:19] UDP packet 192.168.0.1:53 -> 192.16.202.11:53 initiated dialing

[06/Sep/2001 21:11:43] BT Internet Anytime (BTI Anytime): successfuly connected

[06/Sep/2001 21:21:46] BT Internet Anytime (BTI Anytime): disconnected, connection time 00:10:03

[06/Sep/2001 21:26:19] UDP packet 192.168.0.1:53 -> 192.16.202.11:53 initiated dialing

[06/Sep/2001 21:26:27] BT Internet Anytime (BTI Anytime): successfuly connected

[06/Sep/2001 21:36:32] BT Internet Anytime (BTI Anytime): disconnected, connection time 00:10:05

[06/Sep/2001 21:41:18] UDP packet 192.168.0.1:53 -> 192.16.202.11:53 initiated dialing

[06/Sep/2001 21:41:28] BT Internet Anytime (BTI Anytime): successfuly connected

[06/Sep/2001 21:51:33] BT Internet Anytime (BTI Anytime): disconnected, connection time 00:10:05

You can see than my machine is contacting 192.16.202.11 which translates to ns.EU.net

Port 53 is DNS.

I have just disabled DNS forwaring to see what happens.

Keith

-----Original Message-----
From: Dave McLaughlin [mailto:dave@xxxxxxx]
Sent: 06 September 2001 23:10
To: ukha_d@xxxxxxxSubject: [ukha_d] RE: Winroute (was BT Anytime thingy)

Hi Keith,

Is there not a log of traffic you can look at. I can't remember the software too well.

Winroute is the reason I junked it. I had the same problem with the other 2 machines causing dial up every 15 minutes. A real pain when you where on the phone.

I eventually found sygate home network (www.sygate.com) and for $55 it is far superior and they even have a free for non-commercial use firewall programme which works a treat.

Good luck
Dave...

At 22:13 06/09/01 +0100, you wrote:

What I'm worried about is Winroute Pro.
When I am not using the PC but it is left idle, one or more of the other machines is causing it to connect to the net. After 10 minutes it disconnects, only to connect again 5 minutes later. Drop after 10, connect after 5 etc. During the 10 minute connection there is virtually no data transfer and the "Traffic Cop" at BTI might see that as unattended connection.

Anyone know what is causing it?

Keith

For more information: http://www.automatedhome.co.uk Post message: ukha_d@xxxxxxx Subscribe: ukha_d-subscribe@xxxxxxx Unsubscribe: ukha_d-unsubscribe@xxxxxxx List owner: ukha_d-owner@xxxxxxx Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.
For more information: http://www.automatedhome.co.uk Post message: ukha_d@xxxxxxx Subscribe: ukha_d-subscribe@xxxxxxx Unsubscribe: ukha_d-unsubscribe@xxxxxxx List owner: ukha_d-owner@xxxxxxx Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.

For more information: http://www.automatedhome.co.uk Post message: ukha_d@xxxxxxx Subscribe: ukha_d-subscribe@xxxxxxx Unsubscribe: ukha_d-unsubscribe@xxxxxxx List owner: ukha_d-owner@xxxxxxx Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.

The UK Home Automation Archive

The UKHA-ARCHIVE IS CEASING OPERATIONS 31 DEC 2024

RE: RE: Winroute (was BT Anytime thingy)