[Dshield] ad.uk.tangozebra

Neil Richardson neilr at ieee.org
Mon Jul 29 17:28:52 GMT 2002


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

At 07:37 AM 7/29/2002, you wrote:
In view of the number of scans I put the entire ISP space (Intellispace 
Inc) into ZA blocked zone. However since then when I connect and fire up 
IE5.5sp2, I get an ACCESS warning "Your computer was prevented from 
connecting to a restricted site (66.9.53.130:80)" Direction: Outgoing 
(connect). The program is shown as Internet Explorer.

    It sounds like you might have some ad-ware (advertising-based software, 
such as Gator, Go!Zilla, etc.) installed on your system.  In that case, if 
you were to ask the authors they'd say that the software was trying to 
connect to their servers and the "probes" you're seeing are the server 
trying to respond.

    One thing you might try doing is using JunkBuster 
(<http://www.junkbuster.com/>); it's a cookie- and banner-ad filter that 
you run on your machine.  Most importantly, it can be configured to print 
the URL of every outgoing (web-based) connection.  I have my Windows 
"Default Internet Settings" set to go through it so that I can see if any 
programs try to use IE to "silently" connect to the net, and where they 
connect to.  (It also does a bunch of other stuff, but I won't go into that 
here.  :-)  If you need help configuring it, contact me off-list and I'll 
send you my configuration files.


- -Neil R.
- --
Supreme Lord High Commander and Keeper of the Holy Potato
- ----------
Random thought for the day:

    It's not hard to meet expenses: they're everywhere.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6-2 (MingW32)
Comment: For info see http://www.gnupg.org

iEYEARECAAYFAj1Fez0ACgkQKmyYs0c8RZ+CiACfbIlGnQWayY/iK3Qma05Nb0+E
54UAnjHfoTuGaLuFFtLM4OeSmM40xBQE
=+c4G
-----END PGP SIGNATURE-----




More information about the list mailing list