Show destination IP of application which seeks to access Internet

Discussion in 'LnS English Forum' started by Pigitus, Jun 15, 2005.

Thread Status:
Not open for further replies.
  1. Pigitus

    Pigitus Registered Member

    Joined:
    Jun 29, 2004
    Posts:
    97
    Location:
    USA
    A suggestion and request to the LnS t5eam:

    When an application or DLL requests permission to go the Internet please have LnS ALSO announce the destination IP. I think this should be possible because ZoneAlarm does it.

    Today I just installed Win Xp Pro Sp2 on a reformated machine. SVCHOST.EXE requested that WINHTTP.DLL access the internet. Figuring Windows was still unpolluted, I authorized. Then, the shocker: the destination was 62.189.127.222, which belongs to a strange company : Leadon Ltd of London with this rather small authorized IP range: 62.189.127.192 - 62.189.127.223. Why would this particular Windows, sold for and installed in the USA, want to go an obscure place in London?

    The point is : if the IP is not announced at authorization time, the user who is about to authorize is just gambling. Even if the user traces the connection as I did, it's already too late.

    Thanks for considering this suggestion.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.