Re: unwanted connections when firefox opens
i tried putting name in '/etc/hosts' file to send them to '127.0.0.1', but this did not work, so i am presuming that what ever is causing connections is doing so by address and not by name lookup. anyone know of above two and what i can do to eliminate them? Something like: -A OUTPUT -d nnn.ip.addr.nnn -p all -j REJECT added to your /etc/sysconfig/iptables file and a restart of iptables ought to block access to the specified IP address. But that's just covering up the root cause. - Bluejay Adametz From change comes tomorrow. NOTICE: This message, including any attachments, is only for the use of the intended recipient(s) and may contain confidential and privileged information, or information otherwise protected from disclosure by law. If the reader of this message is not the intended recipient, you are hereby notified that any use, disclosure, copying, dissemination or distribution of this message or any of its attachments is strictly prohibited. If you received this message in error, please contact the sender immediately by reply email and destroy this message, including all attachments, and any copies thereof.
Re: unwanted connections when firefox opens
On 01/13/2011 12:00 PM, Bluejay Adametz wrote: snip bluejay, thank you for reply; Something like: -A OUTPUT -d nnn.ip.addr.nnn -p all -j REJECT this is true. added to your /etc/sysconfig/iptables file and a restart of iptables ought to block access to the specified IP address. located it with 'locate iptables' just after post of Date: Thu, 13 Jan 2011 01:44:27 + But that's just covering up the root cause. this is most true. after a little 'head scratching' and 'brain smoke', i did some more checking and found that what was going on was 2 of add-ons installed where 'calling home' to see say hello and see what was new. please see post of Date: Thu, 13 Jan 2011 02:43:16 + for what i found. as yet, i have not taken time to track down second url. thanks again. From change comes tomorrow. sunset is the dawn of a new tomorrow. -- peace out. tc.hago, g . in a free world without fences, who needs gates. ** help microsoft stamp out piracy - give linux to a friend today. ** to mess up a linux box, you need to work at it. to mess up an ms windows box, you just need to *look* at it. ** learn linux: 'Rute User's Tutorial and Exposition' http://rute.2038bug.com/index.html 'The Linux Documentation Project' http://www.tldp.org/ 'LDP HOWTO-index' http://www.tldp.org/HOWTO/HOWTO-INDEX/index.html 'HowtoForge' http://howtoforge.com/ signature.asc Description: OpenPGP digital signature
Re: unwanted connections when firefox opens
You can learn enough about iptables to use your firewall for blocking traffic to and from those sites. Maybe you'll then find some image you're used to seeing will vanish. Steven Yellin On Wed, 12 Jan 2011, g wrote: greetings, for some time, i have been noticing network traffic when i open firefox. my 'round to it' finally installed wireshark and i have found that i have data transfers with to sites. #1 - 72.167.239.239 = godaddy.com #2 - 82.103.148.40 = easyspeedy.com i have no firefox add-ons related to above and have never loaded anything that should be causing these connections. i tried putting name in '/etc/hosts' file to send them to '127.0.0.1', but this did not work, so i am presuming that what ever is causing connections is doing so by address and not by name lookup. anyone know of above two and what i can do to eliminate them? any help or advice will be greatly appreciated. tia. -- peace out. tc.hago, g . in a free world without fences, who needs gates. ** help microsoft stamp out piracy - give linux to a friend today. ** to mess up a linux box, you need to work at it. to mess up an ms windows box, you just need to *look* at it. ** learn linux: 'Rute User's Tutorial and Exposition' http://rute.2038bug.com/index.html 'The Linux Documentation Project' http://www.tldp.org/ 'LDP HOWTO-index' http://www.tldp.org/HOWTO/HOWTO-INDEX/index.html 'HowtoForge' http://howtoforge.com/
Re: unwanted connections when firefox opens
On 01/13/2011 12:46 AM, Steven J. Yellin wrote: You can learn enough about iptables to use your firewall for blocking traffic to and from those sites. Maybe you'll then find some image you're used to seeing will vanish. i read/studied 4 good books on operations of ipchains and iptables just after iptables came out and understand what i need to do to block ip addresses with iptables. problems is, i have not found any rpm packages to make modifying iptables easy. so i am now trying to figure out just how and where iptables are set up so that i can block addresses. i was hoping that someone might be familiar with what has been installed/link into firefox so that i could remove it and prevent such from happening again. malware, for want of a better name, usually has ability to make it's own changes to other address blocks and then go back to doing it's dastardly deeds. such malware is prevalent in ms os and there are programs written for removing such. i thank you for taking time to reply. -- peace out. tc.hago, g . in a free world without fences, who needs gates. ** help microsoft stamp out piracy - give linux to a friend today. ** to mess up a linux box, you need to work at it. to mess up an ms windows box, you just need to *look* at it. ** learn linux: 'Rute User's Tutorial and Exposition' http://rute.2038bug.com/index.html 'The Linux Documentation Project' http://www.tldp.org/ 'LDP HOWTO-index' http://www.tldp.org/HOWTO/HOWTO-INDEX/index.html 'HowtoForge' http://howtoforge.com/ signature.asc Description: OpenPGP digital signature
Re: unwanted connections when firefox opens
Have you tried monitoring network traffic with iftop or netstat to determine what exactly is opening connections to those servers? GoDaddy also is a major SSL certificate authority and Firefox may be verifying a certificate from them. On 12 Jan 2011, at 1737, g wrote: greetings, for some time, i have been noticing network traffic when i open firefox. my 'round to it' finally installed wireshark and i have found that i have data transfers with to sites. #1 - 72.167.239.239 = godaddy.com #2 - 82.103.148.40 = easyspeedy.com i have no firefox add-ons related to above and have never loaded anything that should be causing these connections. i tried putting name in '/etc/hosts' file to send them to '127.0.0.1', but this did not work, so i am presuming that what ever is causing connections is doing so by address and not by name lookup. anyone know of above two and what i can do to eliminate them? any help or advice will be greatly appreciated. tia. -- peace out. tc.hago, g . in a free world without fences, who needs gates. ** help microsoft stamp out piracy - give linux to a friend today. ** to mess up a linux box, you need to work at it. to mess up an ms windows box, you just need to *look* at it. ** learn linux: 'Rute User's Tutorial and Exposition' http://rute.2038bug.com/index.html 'The Linux Documentation Project' http://www.tldp.org/ 'LDP HOWTO-index' http://www.tldp.org/HOWTO/HOWTO-INDEX/index.html 'HowtoForge' http://howtoforge.com/ smime.p7s Description: S/MIME cryptographic signature
Re: unwanted connections when firefox opens [SOLVED]
On 01/13/2011 01:58 AM, Phong Nguyen wrote: Have you tried monitoring network traffic with iftop or netstat to determine what exactly is opening connections to those servers? GoDaddy also is a major SSL certificate authority and Firefox may be verifying a certificate from them. thank you for your reply and pointers. as it turns out, godaddy.com and easyspeedy.com are actually hosting sites for the software for 2 add-ons that i have installed and they are checking for updates. 82.103.140.40 is for NoScript, by InformAction, hosted by easyspeedy.com. i have not determined what godaddy.com is hosting. my apoligies to all for burning storage. -- peace out. tc.hago, g . in a free world without fences, who needs gates. ** help microsoft stamp out piracy - give linux to a friend today. ** to mess up a linux box, you need to work at it. to mess up an ms windows box, you just need to *look* at it. ** learn linux: 'Rute User's Tutorial and Exposition' http://rute.2038bug.com/index.html 'The Linux Documentation Project' http://www.tldp.org/ 'LDP HOWTO-index' http://www.tldp.org/HOWTO/HOWTO-INDEX/index.html 'HowtoForge' http://howtoforge.com/ signature.asc Description: OpenPGP digital signature
