Need to block ?
Bob Goodwin - W2BOD
bobgoodwin at wildblue.net
Sat Jun 30 15:12:56 UTC 2007
Sam Varshavchik wrote:
> Bob Goodwin - W2BOD writes:
>> Ed Greshko wrote:
>>> Bob Goodwin - W2BOD wrote:
>>>> What is the correct notation for blocking a range of addresses in my
>>>> If I block 22.214.171.124 it simply moves up to 126.96.36.199.
>>>> I thought the proper way to do it was 188.8.131.52/255 but obviously
>>>> wrong or at least doesn't work for me.
>>>> Whatever it is has run my upload data allotment up to 3gigs and I'm
>>>> allowed 5g for 30 days! So this is a panic and I haven't been able to
>>>> find why this is possible?
>>> And your router is? Downstairs in the family room. Only kidding,
>>> it's a Netgear wireless router which I can control from this box.
>> I've set it to block 184.108.40.206/24 and will wait to see what happens
>> since the problem is not manifest at the moment. Since the grandsons
>> have been at camp this week there are only two other computers in
>> use, a Windows XP and a Mac and I'm not sure who's causing the
>> problem but need to stop the bleeding first!
>> I used 255 because it's set up to assign DHCP above 21.
> You do not understand.
> 220.127.116.11/24 represents the IP address range 18.104.22.168 - 22.214.171.124.
I understand now that it has been explained to me. Thanks to all.
> Furthermore, since you claim that you're uploading data there, and
> this range appears to be assigned to Postini's mail servers, it's a
> fairly good bet that your XP box has been hacked, and turned into a
> spam zombie.
I pulled the ethernet cable from that box ... Will see if that helps?
This is what alerted me to the problem:
06/27/2007 04:56:00 1739 12529
06/28/2007 11:51:25 1568 12677
06/29/2007 15:52:31 2765 12510
06/30/2007 05:20:19 3100 12993
The last column is data received by me, the one before it is data sent,
both in gig's. I am limited to 17 and 5 gig's per 30 days so I check it
often. My daughter is a photographer and uploads some large image files
but has not done so during the period considered here.
http://users.wildblue.net/bobgoodwin/Etherapeshot-4.png is a screen shot
of my etherape display when the connection is active.
I really don't need this!
More information about the users