This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Packet Filter and cdsXX.ewr9.msecn.net

In a previous post I had found that unconfigured browsers could access the internet and bypass AD Auth thru port 80. My bad. THere was a rule in place and I corrected that.

In doing so It blocked Windows Update (which was using port 80). I added a rule for that and and access to llnw.net which is also needed for WinUpdate to work.

BUt now I am seeing the packet filter blocking connections to msecn.net

3 unknown 70.37.129.92 cds87.ewr9.msecn.net 54 3.09
4 unknown 70.37.129.171 cds166.ewr9.msecn.net 45 2.57
5 unknown 70.37.129.18 cds13.ewr9.msecn.net 45 2.57
6 lan 192.168.1.100 n/a 45 2.57
7 unknown 70.37.129.23 cds18.ewr9.msecn.net 42 2.40
8 unknown 70.37.129.91 cds86.ewr9.msecn.net 39 2.23
9 unknown 70.37.129.17 cds12.ewr9.msecn.net 36 2.06
10 unknown 70.37.129.179 cds174.ewr9.msecn.net 30 1.72


Does anyone have a clue what mcecn.net is used for?
Or what application would use it?

Thanks.


This thread was automatically locked due to age.
Parents
  • Oops!  I was not multi-tasking very successfully, was I?

    Still, I don't understand why you would need an explicit PF rule to reject outbound traffic of any kind.  After the Astaro processes all of the "auto" rules, it runs through the explicit PF rules, then, it drops the packet by default.

    I found: Onecare eating 3GB of bandwidth from my computers daily!

    I'm confused by your situation.  Sorry, I don't think I know enough to help.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Oops!  I was not multi-tasking very successfully, was I?

    Still, I don't understand why you would need an explicit PF rule to reject outbound traffic of any kind.  After the Astaro processes all of the "auto" rules, it runs through the explicit PF rules, then, it drops the packet by default.

    I found: Onecare eating 3GB of bandwidth from my computers daily!

    I'm confused by your situation.  Sorry, I don't think I know enough to help.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data