TCPIP interface

  • Thread starter Thread starter rich
  • Start date Start date
R

rich

Using Windows 2000:

I have an entry at

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\

with the NameServer 63.93.64.20 63.93.64.21

which is pacwest.com

Is this common to all Win2000 systems?

If I remove it, this entry it is created the next time I dialup.

My reason for removing it is to trace the source of attempted
connecting-out to that IP address. I haven't found a reason for these
attempts.

There was a reference in a forum to swflash.ocx and that IP address, but
no further explanation.

I set up some Firewall rules just to check all outgoing traffic.

In my firewall log:

Rule 'Deny ICMP <> Any': Blocked: Out ICMP [3] Destination Unreachable,
localhost->ns6.mdsg-pacwest.com [63.93.64.21], Owner: Tcpip Kernel
Driver

Rule 'Deny Services and Controller app': Blocked: Out TCP,
localhost:1060->ns6.mdsg-pacwest.com [63.93.64.21:53], Owner:
C:\WINNT\SYSTEM32\SERVICES.EXE


Thanks,

-rich
 
Is your ISP pacwest.com? Do you see the same data when you do an IPCONFIG
/ALL from a command prompt?
 
Richard said:
Is your ISP pacwest.com? Do you see the same data when you do an IPCONFIG
Click to expand...

Thanks for the response.

This is very strange indeed. Below is the IPCONFIG data for my desktop
(Win2000). The DNS servers show pacwest.com but this is wrong. My DNS
servers should be urs2.net (206.170.197.2)

My urs2.net DNS servers are correctly listed in the IPCONFIG data from
my laptop (WinXP) when connected also to urs2.net.

I haven't contacted my ISP yet because evidently something has gotten
configured wrong in my desktop. How can it be connecting to my ISP if
the DNS servers are not correct?

Thanks,

-rich

========Windows 2000 IP Configuration (Desktop Win2000)==============

Host Name . . . . . . . . . . . . : Musike1
Primary DNS Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter LAN:

Media State . . . . . . . . . . . : Cable Disconnected
Description . . . . . . . . . . . : DM9601 USB To Fast Ethernet
Adapter
Physical Address. . . . . . . . . : 00-60-6E-96-01-65

PPP adapter urs2_1:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 63.93.75.247
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . : 63.93.75.247
DNS Servers . . . . . . . . . . . : 63.93.64.20
63.93.64.21
NetBIOS over Tcpip. . . . . . . . : Disabled

==========Windows IP Configuration (Laptop WinXP))============

Host Name . . . . . . . . . . . . : Musike2
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Physical Address. . . . . . . . . : 00-08-0D-8B-6F-D4

Ethernet adapter Local Area Connection:
Media State . . . . . . . . . . . : Media disconnected
Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network
Connection
Physical Address. . . . . . . . . : 00-08-0D-8B-6F-D4

PPP adapter urs2:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 63.93.75.217
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . : 63.93.75.217
DNS Servers . . . . . . . . . . . : 206.170.197.2
206.170.197.13

[notice that the Gateway begins with 63.93.]
======end===============
 
Problem solved. Different configurations: One system selected DNS
automatically; in the other I had entered them manually - each returned
a different DNS server.

All is well.

Richard - I remember you from the Win9x newsgroups days - I used to post
a lot back then. Glad to see you are still contributing!

-rich
 
Ah - if I'd gotten up a bit earlier that would have been my next question.
:-)

Glad you got it figured out - and yep, you can still find me in the Windows
98/Me newsgroups as well as here in the networking newsgroups.
 
Hey rich, a (possible) mutual friend wants to know if your last name might
be Jones? If so, Glen sends his regards as well.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* In fond memory ... Alex, you shall be sorely missed
* http://www.aumha.org/alex.htm



Richard G. Harper said:
Ah - if I'd gotten up a bit earlier that would have been my next question.
:-)

Glad you got it figured out - and yep, you can still find me in the
Windows 98/Me newsgroups as well as here in the networking newsgroups.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* In fond memory ... Alex, you shall be sorely missed
* http://www.aumha.org/alex.htm



rich said:
Problem solved. Different configurations: One system selected DNS
automatically; in the other I had entered them manually - each returned
a different DNS server.

All is well.

Richard - I remember you from the Win9x newsgroups days - I used to post
a lot back then. Glad to see you are still contributing!

-rich
Click to expand...
Click to expand...
 
Hi Richard,

Yes - if it's the Glen I remember, say HI!

BTW - did you receive my email about the original post???

-rich
 
Yeah, just found it. Shouldn't be a big problem IMHO, as IP addresses tend
to change from time to time unless you're on a static IP arrangement.

And yes, it's the same Glen you remember; he thought he recognized your name
and wanted me to pass along his best wishes to you.
 
Back
Top