[Dshield] Help!

Tom Liston tliston at premmag.com
Tue Mar 9 15:06:34 GMT 2004


Bert-

I believe that somehow you have the address "1.httpads.com" set to 
127.0.0.1 in your hosts file, perhaps as a means of blocking ads.

Check that out before you go chasing anything else.

-TL

On 8 Mar 2004 at 16:48, Bert Sinclair wrote:

> HI Everyone:
> I did a "netstat -a" and this is what was listed;
> 
>  Proto  Local Address          Foreign Address        State
>   TCP    ITS-BERT:sunrpc        1.httpads.com:0        LISTENING
>   TCP    ITS-BERT:epmap         1.httpads.com:0        LISTENING
>   TCP    ITS-BERT:microsoft-ds  1.httpads.com:0        LISTENING
>   TCP    ITS-BERT:1030          1.httpads.com:0        LISTENING
>   TCP    ITS-BERT:1032          1.httpads.com:0        LISTENING
>   TCP    ITS-BERT:1035          1.httpads.com:0        LISTENING
>   TCP    ITS-BERT:1037          1.httpads.com:0        LISTENING
>   TCP    ITS-BERT:1039          1.httpads.com:0        LISTENING
>   TCP    ITS-BERT:1048          1.httpads.com:0        LISTENING
>   TCP    ITS-BERT:1060          1.httpads.com:0        LISTENING
>   TCP    ITS-BERT:1096          1.httpads.com:0        LISTENING
>   TCP    ITS-BERT:1167          1.httpads.com:0        LISTENING
>   TCP    ITS-BERT:1292          1.httpads.com:0        LISTENING
>   TCP    ITS-BERT:1294          1.httpads.com:0        LISTENING
>   TCP    ITS-BERT:ms-sql-s      1.httpads.com:0        LISTENING
>   TCP    ITS-BERT:6050          1.httpads.com:0        LISTENING
>   TCP    ITS-BERT:6055          1.httpads.com:0        LISTENING
>   TCP    ITS-BERT:6503          1.httpads.com:0        LISTENING
>   TCP    ITS-BERT:6504          1.httpads.com:0        LISTENING
>   TCP    ITS-BERT:427           1.httpads.com:0        LISTENING
> 
> How can, I disable these processes to listen to 1.httpads.com ? I am
> running Win2k Pro SP2.
> 
> Thank you, all.
> <table>
> <tr>
> <td><CENTER><font color="#000080" face="Tahoma" size="2">
> ******************************************************************
> This e-mail and any files transmitted with it are the property of
> Rocky Mountain Information Network (RMIN), are confidential, and
> re intended solely for the use of the individual or entity to
> whom this e-mail is addressed. If you are not one of the named
> recipient(s), or otherwise have reason to believe that you have
> received this message in error, please notify the sender at
> (800) 821-0640 and delete this message immediately from your
> computer.
> ******************************************************************
> </font></CENTER></td></tr></table>
> 
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see:
> http://www.dshield.org/mailman/listinfo/list
> 





More information about the list mailing list