--- Aleksandar Milivojevic <amilivojevic@xxxxxx> wrote: > Peter Marshall wrote: > > Oct 25 08:58:43 radium kernel: REJECT: frbk-rad IN=eth2 OUT= > > MAC=00:01:02:2f:78:4d:00:01:02:46:85:d6:08:00 SRC=192.168.100.101 > > DST=192.168.100.1 LEN=160 TOS=0x00 PREC=0x00 TTL=1 ID=1464 PROTO=UDP > > SPT=29860 DPT=1900 LEN=140 > > > > I looked on the gys macine for a LONG time .. I can't see why this is > > happening. I know 1900 is the msn port ..... Any ideas ? > > 1900 is Universal Plug-and-Play. It's used by messanger, however > messanger works just fine without it. There's registry entry to disable it: > > Hive: HKEY_LOCAL_MACHINE > Key: Software\Microsoft\DirectPlayNATHelp\DPNHUPnP > Name: UPnPMode > Type: REG_DWORD > Value: 2 disabled > With UPnPMode=2, Universal Plug and Play Network Address Translation > (NAT) traversal discovery does not occur. > > Apperently this is good idea to do. It seems there's more holes in UPnP > than in Swiss cheese. > > -- > Aleksandar Milivojevic <amilivojevic@xxxxxx> Pollard Banknote Limited > Systems Administrator 1499 Buffalo Place > Tel: (204) 474-2323 ext 276 Winnipeg, MB R3T 1L7 > > Agreed... If you are in charge of medium to large network and not all of your users are not as Windows savy to go attempting to insert/remove reg keys. You might send out a memo directing users here http://www.grc.com/default.htm with a note to download and use the "Three Muskateers." These are excelent freeware apps to close off some obvious holes in Windows. They include UPnP, DCOMbobulator, and Shoot the Messenger. Hope this is of use to someone. John ===== In the absence of order there will be chaos. __________________________________ Do you Yahoo!? Yahoo! Mail Address AutoComplete - You start. We finish. http://promotions.yahoo.com/new_mail
