PDA

View Full Version : incoming connection: Microsoft_DS ??


kaczor74
March 27th, 2003, 09:09 PM
I was just trying out the Outpost Firewall and noticed a strange connection:

Application: SYSTEM
Local Port: MICROSOFT_DS
Local Address: LocalHost
Protocol: TCP
Remote Port: 2724
Remote Address: ****.bccexpo.com

(I masked the first portion of the address)

I have no idea what this is, but I have seen a similar connection recently but to a totally differente remote address.

What is Microsoft_DS ?

Any help would be appreciated...

Thanks,

Pawel

root
March 27th, 2003, 09:29 PM
That is local port 445 and you want that blocked to internet traffic.
That port is rather active for various exploits. Currently it is very active due to Worm DeloderA.
http://www.wilderssecurity.com/showthread.php?t=7872
As long as your firewall is blocking it, you're ok. Outpost blocks it by default.

the Tester
March 27th, 2003, 09:30 PM
Kaczor74.

Do you have Windows Update set on "automatic"?
If so, maybe it is Windows Update calling out.

That's a guess.
I don't know exactly what Microsoft_DS is.
Edit**** I just saw Root's reply.He knows firewalls and that activity better than I do.