Question About Remote Computers

[Ryan Hayward]

Is there a way to find out who the remote computer is?

For example, I have no idea if its safe to allow the following as I don't know who they are.

Outbound traffic.
Application - Host Process For Windows Services
Publisher - Microsoft Windows
Remote computer - 224.0.0.252
Remote port - 5355 ( llmnr)

[Shankle]

I have the same problem. I have no idea if all these
incoming messages from Microsoft are valid.
For example:
Inbound Traffic
Applications: Host Process for Windows Services
Publisher: Microsoft Windows
Remote Computer: 207.46.232.182
Local Port: 123(ntp)

[Ryan Hayward]

I'v found the solution, buddy.
Use whois.
http://www.coolwhois.com/d/207.46.232.182

Sounds to me that its safe to allow. Mine was safe too.

In future, just bookmark the webpage and all you do is type in the remote computer numbers.

For example, you want to know about 240.45.67.180
It'll be http://www.coolwhois.com/d/240.45.67.180

[Shankle]

Thanks Ryan,
I'm sure others have this same problem and hopefully
this will take the quesswork out of it.
After all the whole purpose of the 2 way firewall was
to stop the nonsense.

[Ryan Hayward]

Something I've picked up on too is that its best to go to advanced options when you recieve a popup.( it'll be on the popup window itself) This way, you will only allow certain ip addresses access to your computer apps and not just any remote address. Makes me feel a lot safer with this kind of control over whats outgoing and ingoing.

[kenw]

This link explains multicast and routers. Don't think it's a danger.

http://www.iana.org/assignments/multicast-addresses

[Ryan Hayward]

Only one address threw me and that was the registar of ip numbers or some bloody thing. I allowed it as it obviously had something to do with assigning ip numbers. All the others related to microsoft, my ISP, ff02::c or my own computer. :D
I have to say I actually quite enjoy the interactive mode as it has me researching and learning...