Spurious firewall message?

charlieheard

Every time I boot up the PC and log on, I get a message from the Sygate firewall saying that one of my processes (which one varies, but appears to be one of 4-5) is trying to reach 224.0.0.22 - always the same IP address.

I've always blocked it, but I'd be interested to know if anyone else gets something similar. I've tried Karen's URL discombobulator which says it belongs to IGMP.MCAST.NET and I've tried pinging it, with no repsonse.

I run adaware, spybot and M$ antispyware regularly so I'm fairly sure its not malicious. I'm just intrigued as it only happens once at logon...

intel

Right click the sygate icon and clcik applications and see if there is anything
that you have a question mark against to see if its always asking for permission
and then choose Remove all then restart PC and then start allowing access again to stuff...

charlieheard

Thanks for the reply,intel. My version has "Ask", "Allow" or "Block", so I'm assuming you mean "Ask". Do you mean "remove all" including blocked and allowed?.

The puzzling thing is that it's usually something that does not use the internet, often a system task. I could just choose "block always", but I'm intrigued what's an apparently random task causing it to try to reach that IP address.

intel

charlieheard wrote:

Thanks for the reply,intel. My version has "Ask", "Allow" or "Block", so I'm assuming you mean "Ask". Do you mean "remove all" including blocked and allowed?.

The puzzling thing is that it's usually something that does not use the internet, often a system task. I could just choose "block always", but I'm intrigued what's an apparently random task causing it to try to reach that IP address.

Yeah just remove all I mean every program that asks for access, just hit the remove all button, and yeah I meant Ask you know wot I mean.....

Maybe summet that needs access like MS Search and you said ask by mistake....that sort of thing is so easy to do...

Darksun

That address is a private multicast address. You can read more about it at http://www.microsoft.com/windows2000/en/advanced/help/default.asp?url=/windows2000/en/advanced/help/sag_tcpip_und_multicasting.htm but the main thing is that there's no need to be worried, the processes arn't connecting to the internet