incoming connection: Microsoft_DS ??

Discussion in 'other firewalls' started by kaczor74, Mar 27, 2003.

Thread Status:
Not open for further replies.
  1. kaczor74

    kaczor74 Guest

    I was just trying out the Outpost Firewall and noticed a strange connection:

    Application: SYSTEM
    Local Port: MICROSOFT_DS
    Local Address: LocalHost
    Protocol: TCP
    Remote Port: 2724
    Remote Address: ****.bccexpo.com

    (I masked the first portion of the address)

    I have no idea what this is, but I have seen a similar connection recently but to a totally differente remote address.

    What is Microsoft_DS ?

    Any help would be appreciated...

    Thanks,

    Pawel
     
  2. root

    root Registered Member

    Joined:
    Feb 19, 2002
    Posts:
    1,723
    Location:
    Missouri, USA
    That is local port 445 and you want that blocked to internet traffic.
    That port is rather active for various exploits. Currently it is very active due to Worm DeloderA.
    http://www.wilderssecurity.com/showthread.php?t=7872
    As long as your firewall is blocking it, you're ok. Outpost blocks it by default.
     
  3. the Tester

    the Tester Registered Member

    Joined:
    Jul 28, 2002
    Posts:
    2,854
    Location:
    The Gateway to the Blue Hills,WI.
    Kaczor74.

    Do you have Windows Update set on "automatic"?
    If so, maybe it is Windows Update calling out.

    That's a guess.
    I don't know exactly what Microsoft_DS is.
    Edit**** I just saw Root's reply.He knows firewalls and that activity better than I do.
     
Loading...
Thread Status:
Not open for further replies.