What is the 5th number in ip address

Looking at my firewall logs I see that in addition to the 4 sets of numbers
separated by dots, there is a " : " followed by a fifth set of numbers
usually in the thousands.

What are these and are there some I should be concerned about?

Jeff

Jeff wrote:

> Looking at my firewall logs I see that in addition to the 4 sets of
> numbers separated by dots, there is a " : " followed by a fifth set of
> numbers usually in the thousands.
>
> What are these and are there some I should be concerned about?
>
> Jeff

Those are the ports.

http://en.wikipedia.org/wiki/List_of...P_port_numbers

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Malke wrote:
> Jeff wrote:
>
>> Looking at my firewall logs I see that in addition to the 4 sets of
>> numbers separated by dots, there is a " : " followed by a fifth set
>> of numbers usually in the thousands.
>>
>> What are these and are there some I should be concerned about?
>>
>> Jeff
>
> Those are the ports.
>
> http://en.wikipedia.org/wiki/List_of...P_port_numbers
>
> Malke

Wow. A whole new world. Is there a simple rule to differentiate why a
firewall allows some through or not through?

Thank you.

Jeff

Jeff wrote:

> Malke wrote:
>> Jeff wrote:
>>
>>> Looking at my firewall logs I see that in addition to the 4 sets of
>>> numbers separated by dots, there is a " : " followed by a fifth set
>>> of numbers usually in the thousands.
>>>
>>> What are these and are there some I should be concerned about?
>>>
>>> Jeff
>>
>> Those are the ports.
>>
>> http://en.wikipedia.org/wiki/List_of...P_port_numbers
>>
>> Malke
>
> Wow. A whole new world. Is there a simple rule to differentiate why a
> firewall allows some through or not through?

I'm not sure I understand your question. A good firewall (one that
protects both incoming and outgoing, which isn't the one built into XP
SP2) has everything except the necessary ports closed by default. Then
if you want to open a port and/or allow an application, you make a rule
for that.

So I'd have to give your vague question a vague answer - it depends on
the firewall you are using. ZoneAlarm, for instance, will ask you
during the installation process if you want it to preconfigure
permissions. If you say "yes" it will allow the normal stuff -
browsers, email clients, known antivirus programs, etc.

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

"Malke" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> Jeff wrote:
>
>> Malke wrote:
>>> Jeff wrote:
>>>
>>>> Looking at my firewall logs I see that in addition to the 4 sets of
>>>> numbers separated by dots, there is a " : " followed by a fifth set
>>>> of numbers usually in the thousands.
>>>>
>>>> What are these and are there some I should be concerned about?
>>>>
>>>> Jeff
>>>
>>> Those are the ports.
>>>
>>> http://en.wikipedia.org/wiki/List_of...P_port_numbers
>>>
>>> Malke
>>
>> Wow. A whole new world. Is there a simple rule to differentiate why a
>> firewall allows some through or not through?
>
> I'm not sure I understand your question. A good firewall (one that
> protects both incoming and outgoing, which isn't the one built into XP
> SP2) has everything except the necessary ports closed by default. Then
> if you want to open a port and/or allow an application, you make a rule
> for that.
>
> So I'd have to give your vague question a vague answer - it depends on
> the firewall you are using. ZoneAlarm, for instance, will ask you
> during the installation process if you want it to preconfigure
> permissions. If you say "yes" it will allow the normal stuff -
> browsers, email clients, known antivirus programs, etc.
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP Windows - Shell/User

The reason I ask is because of the following (and this has been an annoying
problem for some time now):

I have internet access through a cable modem and a wireless home network.
The home network never fails. I can _always_ access shared files on any of
my networked computers. Internet access however is usually fine and then,
for no reason I can figure out, I lose internet access and then it suddenly
comes back, goes away again and back again. I had the Cox cable tech come
over and he says my connection is just fine. Of course it is an intermittent
problem which does not help.

I therefore have been wondering if it is the firewall that might be causing
me problems. I think that is not really the case because the problem is
intermittent, but the thought came up because I saw that ZA "blocked"
attempts between 2 networked PCs whose ip's are in the trusted zones. For
instance it showed that it had blocked outgoing attempts between
192.168.x.x:2567 to 192.168.x.y:139 when both 192.168.x.x and 192.168.x.y
are pcs on my network whose files I can normally access just fine. Why
would ZoneAlarm block these 2 who are both on my "trusted zone"? I
therefore was wondering if it had anything to do with the numbers that
follow the colon after the ip address. Maybe the PCs are "trusted" but
these were bad ports to allow. Just do not know and trying to solve this
annoying problem.

Next, I will try replacing my cable modem to see if that is the problem
causing my intermittent difficulties.

Jeff

Jeff... I'm going to butt in here, and tell ya, turn off zone alarm... it
sounds like you're behind a router, and a router does exactly what zone
alarm is supposed to do (firewall wise), without tying up resorces on your
computer.
FYI: Port 139 is windows networking, and file sharing. The only thing that
zone alarm is going to stop now since you are behind a router, is
communication outgoing from your computer (trying to access the internet)
and communication between your networked computers.
If you were in public places where you dont know who else is on the local
network I do recommend having a software firewall. (also if you dont have
any security settings on your wireless, wpa etc.)

-James G.




"Jeff" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
>
> "Malke" <(E-Mail Removed)> wrote in message
> news:%(E-Mail Removed)...
>> Jeff wrote:
>>
>>> Malke wrote:
>>>> Jeff wrote:
>>>>
>>>>> Looking at my firewall logs I see that in addition to the 4 sets of
>>>>> numbers separated by dots, there is a " : " followed by a fifth set
>>>>> of numbers usually in the thousands.
>>>>>
>>>>> What are these and are there some I should be concerned about?
>>>>>
>>>>> Jeff
>>>>
>>>> Those are the ports.
>>>>
>>>> http://en.wikipedia.org/wiki/List_of...P_port_numbers
>>>>
>>>> Malke
>>>
>>> Wow. A whole new world. Is there a simple rule to differentiate why a
>>> firewall allows some through or not through?
>>
>> I'm not sure I understand your question. A good firewall (one that
>> protects both incoming and outgoing, which isn't the one built into XP
>> SP2) has everything except the necessary ports closed by default. Then
>> if you want to open a port and/or allow an application, you make a rule
>> for that.
>>
>> So I'd have to give your vague question a vague answer - it depends on
>> the firewall you are using. ZoneAlarm, for instance, will ask you
>> during the installation process if you want it to preconfigure
>> permissions. If you say "yes" it will allow the normal stuff -
>> browsers, email clients, known antivirus programs, etc.
>>
>> Malke
>> --
>> Elephant Boy Computers
>> www.elephantboycomputers.com
>> "Don't Panic!"
>> MS-MVP Windows - Shell/User
>
> The reason I ask is because of the following (and this has been an
> annoying problem for some time now):
>
> I have internet access through a cable modem and a wireless home network.
> The home network never fails. I can _always_ access shared files on any
> of my networked computers. Internet access however is usually fine and
> then, for no reason I can figure out, I lose internet access and then it
> suddenly comes back, goes away again and back again. I had the Cox cable
> tech come over and he says my connection is just fine. Of course it is an
> intermittent problem which does not help.
>
> I therefore have been wondering if it is the firewall that might be
> causing me problems. I think that is not really the case because the
> problem is intermittent, but the thought came up because I saw that ZA
> "blocked" attempts between 2 networked PCs whose ip's are in the trusted
> zones. For instance it showed that it had blocked outgoing attempts
> between
> 192.168.x.x:2567 to 192.168.x.y:139 when both 192.168.x.x and
> 192.168.x.y are pcs on my network whose files I can normally access just
> fine. Why would ZoneAlarm block these 2 who are both on my "trusted
> zone"? I therefore was wondering if it had anything to do with the
> numbers that follow the colon after the ip address. Maybe the PCs are
> "trusted" but these were bad ports to allow. Just do not know and trying
> to solve this annoying problem.
>
> Next, I will try replacing my cable modem to see if that is the problem
> causing my intermittent difficulties.
>
> Jeff
>

"James Gockel" <flibbertigibbet007_at_hotmail_dot_com> wrote:

> Jeff... I'm going to butt in here, and tell ya, turn off zone alarm...
> it sounds like you're behind a router, and a router does exactly what
> zone alarm is supposed to do (firewall wise), without tying up
> resorces on your computer.
> FYI: Port 139 is windows networking, and file sharing. The only thing
> that zone alarm is going to stop now since you are behind a router, is
> communication outgoing from your computer (trying to access the
> internet) and communication between your networked computers.
> If you were in public places where you dont know who else is on the
> local network I do recommend having a software firewall. (also if you
> dont have any security settings on your wireless, wpa etc.)
>

That sounds logical, but isn't actually a good idea. A firewall ties up
very few resources. On a modern, well-maintained computer, you
shouldn't even notice it. It's all very well to say your router is your
firewall - although unless it is more than the usual consumer
off-the-shelf one it isn't a real stateful firewall - but if your
computer or one of the other machines on the lan gets infected, the
router will do nothing to stop malware from "phoning home".

Windows machines should have a software firewall, antivirus, and if on
broadband, a router even if there is only one standalone machine.

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User