Results 1 to 3 of 3

Thread: What are these security alerts about?

  1. #1
    greenpig Guest

    Default What are these security alerts about?

    I'm running XP Home as a virtual machine under Mac OS 10.5 using VMWare Fusion. Everytime I start it up, I get alerts like this:

    ZoneAlarm Security Alert
    Protected
    The firewall has blocked access to your computer (NetBIOS session) from 172.16.174.1 (TCP Port 52934)[TCP Flags: S]

    The port number changes, though it's always a high one, but the IP address is always the same. Reverse DNS says it can't identity the IP address.

    I will get two of these messages, identical except for the port number, logged about 20 seconds apart. Then about 12 minutes later I get another pair of messages, and 12 minutes later another pair, and so on.

    Anyone have any idea what is causing this?

    Thanks!

    Operating System:Windows XP Home Edition
    Software Version:7.0
    Product Name:ZoneAlarm (Free)

  2. #2
    Join Date
    Dec 2002
    Location
    Mikado Michigan
    Posts
    2,596

    Default Re: What are these security alerts about?

    I would say that the Mac OS is doing a netbios name lookup to the virtual Windows machine. It is a local address so you can add it to the trusted zone. The exact range is 172.16.0.0 - 172.31.255.255 The reason that reverse DNS can't find it is because everyone with a LAN potentially has one. If you want some really boring reading I can give you a link to the RFC for Address Allocation for Private Internets. I guarantee it will put you to sleep though.
    My homes are SpywareHammer.com and DonHoover.net and BleepingComputer.com


    Consumer Security - 2011 & 2012

    Tilting at windmills hurts you more than the windmills.
    -From the Notebooks of Lazarus Long
    Senior of the Howard Families

  3. #3
    greenpig Guest

    Default Re: What are these security alerts about?

    Thank you! I kind of had a feeling it was something internal, given the regularity of the alerts. I'm glad to know it's benign and that I can add these addresses to the Trusted Zone.

    All best,

    Erik

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •