Anyone know what this is?

I'm running Jetico and seeing something weird in my logs. Exactly every 4 hours, I see INCOMING packets (2) from source address MY address TO 255.255.255.255, source port 68, destination port 67. The firewall is blocking them without any harm so far.

It looks like dhcp, but instead of outgoing, it's INCOMING. Very odd. My normal dhcp rules are working fine, and my lease is being renewed every 12 hours successfully. I'm using Win2k on a cable connection.

This incoming stuff first occurs immediately after I reboot, and then every 4 hours thereafter.

Anyone know what this is all about?

 

Well, I guess it's not a problem. When I reconfigure Jetico and accept the defaults for the trusted zone, then it goes away, so it's apparently something to do with my ISP or network IPs or something.

 

Hi Kerodo

This will just be your system going through the process of obtaining/renewing it's IP address. It is normal to see these requests/broadcasts prior to the actual lease expiry as systems may poll the server at regular intervals prior to expiry time.

Regards,

CrazyM

 

Thanks CrazyM... I'd never noticed it before except I think I did remember seeing it when I ran Kerio 2 as well. Interesting..