firewall blocking routed traffic from...

U've_been_framed

Every time I go online using my laptop, I get a series of messages stating that "The firewall has blocked routed traffic from . . . " the numbers following vary slightly, but here are some examples:-
"10.91.41.81 (TCP Port 1058) to 213.199.149.36 (HTTP) (TCP Flags: S)"
"10.91.127.87 (UDP Port 1573) to 10.206.65.68 (DNS)"
I am using ZoneAlarm Free.
I have run Malwarebytes, Spybot, Ccleaner without finding anything.

However, I found the following line in the Hijack This log:
017 - HKLM\System\CCS\Services\Tcpip\. . \{0EE92C02-E4A3- 4301-81B9-F264ED7BE413}: Naneserver = 10.203.65.68 10.203.65.68

Could this be the culprit? If it is, can I remove it using regedit? It is getting very tiresome having these messages pop up as many as 7 times in one go.

sharkie

the 10.x.x.x is as a public range and does not route to the outside world. you are using this either in an office, or your home router has a 10.? nat address. I think Zyzel once used the 10. range as default?

What ever you do, do not block the DNS address.

I would not remove any item that metions Tcpip in the registry without thoroughly googling it

elvch01

At a guess, this happens when you open your web browser - and you have MSN as your home page

The HTTP (web) traffic is directed at a Microsoft site (IP address 213.199.149.36 is registered to Microsoft)

and as somebody has already mentioned the 10.x.x.x IP addresses are proivate addresses related to either you or perhaps your ISP. The DNS traffic is a name lookup request rying to find out the IP address of a server - probably the Microsoft one


try changing your home page to Google to see if the HTTP request address changes

U've_been_framed

My home page is the BBC. I've never had MSN.
I sometimes use a wireless vodafone dongle could this have a 10.x.x.x address?

LeeSouthEast

Quite possibly. I get a 172.16.xx.xx address from Three dongle when I rarely use it, which is another 'private' IP range.