forums sending requests to port 2980?

[darksky]

From my firewall:

'Mozilla' from your computer wants to connect to 24-158-15-50.mazo.wi.charter.com [24.158.15.50], port 2980

What's up with this? Seems to happen when I post or am just reading posts. Also, the host (I believe) for the forums is not that address!

>nslookup www.f-body.com
Server: ns6.attbi.com
Address: 63.240.76.4

Non-authoritative answer:
Name: web2.moltensystems.com
Address: 67.52.217.23
Aliases: www.f-body.com

[DJ Taso]

Are you using Zone Alarm?

[darksky]

No, ZA blows. Kerio is what I'm using. ...why does that matter?

[WICKED LT1]

That address is a Windows 2000 server running IIS 5.0. Most likely what is happening is that you are getting someone's avatar, or banner in their sig. All of these images do not reside on this board's server. They run on whatever the owner has them hosted on.

When you set up avatars it askes you for the link to that image. Well it does not go get that image, the board loads it inline when the client (Your browser) goes there. Makes the personal firewall a little nervous. Most boards work this way, it keeps them low maintenance for the admins. No pic storage to worry about. Hope that helps


-Paul

[darksky]

Could be man, but why the non-standard port? Shouldn't it use 80?

[WICKED LT1]

Could be man, but why the non-standard port? Shouldn't it use 80?

By the looks of the address, I suspect that this is a 'home' web server and the user is trying to get around their ISP's dislike for users running their own web servers.
Some ISP's even go so far as to block some of these ports so that people cannot serve on usual ports.
Some people believe that they are more secure by running a service on a non-standard port. This is usually not the case, as any good port scanner does not use the port number as a service type determination.

-Paul

[darksky]

I see... oh well, my browser is only allowed to use standard ports so I guess I won't be seeing anyone's pic

[TraceZ]

It is my posts causing your error.

My ISP is Charter.net, and that is my IP address.

I redirect my port 80 traffic to port 2980 because Charter blocks port 80 to prevent people from using residential service to host a website.

Sorry it confused you!

[darksky]

No problem man... just wanted to raise the question. Seems like worms are getting more and more difficult to detect, so I think that limiting one's browser to standard ports (80,443) is a good practice!