Thanks for the answer.
My lan is based on 2 pc: mine has emule configured with 36838 udp port
and 51267 tcp port and the other has no p2p program installed. They are
then behind m0n0wall.
I tried "netstat -a" and there's no host listening on port 1574.
I'm attaching the natstat -a txt file so you can examine by yourself.
Waiting for other helpful hints...
Thanks again, Michele.
Active connections
Proto Local IP External IP State
TCP my-pc:epmap my-pc:0 LISTENING
TCP my-pc:1057 my-pc:0 LISTENING
TCP my-pc:ms-sql-s my-pc:0 LISTENING
TCP my-pc:26000 my-pc:0 LISTENING
TCP my-pc:31038 my-pc:0 LISTENING
TCP my-pc:51267 my-pc:0 LISTENING
TCP my-pc:1042 my-pc:0 LISTENING
TCP my-pc:1058 localhost:26000 ESTABLISHED
TCP my-pc:1291 localhost:12080 ESTABLISHED
TCP my-pc:1419 localhost:12080 ESTABLISHED
TCP my-pc:1444 localhost:12080 ESTABLISHED
TCP my-pc:1706 localhost:1707 ESTABLISHED
TCP my-pc:1707 localhost:1706 ESTABLISHED
TCP my-pc:2000 my-pc:0 LISTENING
TCP my-pc:3509 localhost:3510 ESTABLISHED
TCP my-pc:3510 localhost:3509 ESTABLISHED
TCP my-pc:3514 localhost:3515 ESTABLISHED
TCP my-pc:3515 localhost:3514 ESTABLISHED
TCP my-pc:4001 my-pc:0 LISTENING
TCP my-pc:4623 localhost:12080 ESTABLISHED
TCP my-pc:12080 my-pc:0 LISTENING
TCP my-pc:12080 localhost:1291 ESTABLISHED
TCP my-pc:12080 localhost:1419 ESTABLISHED
TCP my-pc:12080 localhost:1444 ESTABLISHED
TCP my-pc:12080 localhost:4623 ESTABLISHED
TCP my-pc:26000 localhost:1058 ESTABLISHED
TCP my-pc:netbios-ssn my-pc:0 LISTENING
TCP my-pc:netbios-ssn 192.168.0.3:1059 ESTABLISHED
TCP my-pc:1103 62.241.53.17:4242 ESTABLISHED
TCP my-pc:1253 195.226.230.58:http ESTABLISHED
TCP my-pc:1388
host198-124-dynamic.11-87-r.retail.telecomitalia.it:4662 TIME_WAIT
TCP my-pc:1390 host58-121.pool80182.interbusiness.it:4662
TIME_WAIT
TCP my-pc:1391 d83-190-252-217.cust.tele2.it:4662 TIME_WAIT
TCP my-pc:1397
host47-147-dynamic.7-87-r.retail.telecomitalia.it:4662 TIME_WAIT
TCP my-pc:1420 fk-in-f147.google.com:http ESTABLISHED
TCP my-pc:1421 adsl-ull-64-85.49-151.net24.it:1755 TIME_WAIT
TCP my-pc:1422
host4-227-dynamic.59-82-r.retail.telecomitalia.it:4662 TIME_WAIT
TCP my-pc:1428 117-148.2-85.cust.bluewin.ch:4662 TIME_WAIT
TCP my-pc:1436
host205-165.pool8253.interbusiness.it:64171 TIME_WAIT
TCP my-pc:1437
host196-173.pool80180.interbusiness.it:4662 TIME_WAIT
TCP my-pc:1438
host129-107-dynamic.56-82-r.retail.telecomitalia.it:7767 TIME_WAIT
TCP my-pc:1442 c9129.upc-c.chello.nl:4662 TIME_WAIT
TCP my-pc:1445 212.177.111.118:http ESTABLISHED
TCP my-pc:1451
host176-243-dynamic.2-87-r.retail.telecomitalia.it:53036 TIME_WAIT
TCP my-pc:1452 adsl-ull-76-120.50-151.net24.it:4662 TIME_WAIT
TCP my-pc:1455
host44-122-dynamic.0-87-r.retail.telecomitalia.it:10643 TIME_WAIT
TCP my-pc:1461 host34-162.pool8252.interbusiness.it:44556
TIME_WAIT
TCP my-pc:1465
host125-137-dynamic.17-87-r.retail.telecomitalia.it:42774 TIME_WAIT
TCP my-pc:1466
host121-177-dynamic.10-87-r.retail.telecomitalia.it:4662 TIME_WAIT
TCP my-pc:1470 host151-34.pool8251.interbusiness.it:43222
TIME_WAIT
TCP my-pc:1471
host35-122-dynamic.21-87-r.retail.telecomitalia.it:57768 TIME_WAIT
TCP my-pc:1476
host84-20-dynamic.59-82-r.retail.telecomitalia.it:4662 TIME_WAIT
TCP my-pc:1477
host139-125-dynamic.7-87-r.retail.telecomitalia.it:4662 TIME_WAIT
TCP my-pc:1479 host176-35.pool8251.interbusiness.it:160
TIME_WAIT
TCP my-pc:1487
host101-122-dynamic.6-87-r.retail.telecomitalia.it:4662 TIME_WAIT
TCP my-pc:1488 d83-190-160-44.cust.tele2.it:9228 TIME_WAIT
TCP my-pc:1490 151.16.108.96:27410 TIME_WAIT
TCP my-pc:1493
host111-121-dynamic.0-87-r.retail.telecomitalia.it:20271 TIME_WAIT
TCP my-pc:1501
host62-86-dynamic.59-82-r.retail.telecomitalia.it:4662 TIME_WAIT
TCP my-pc:1503
host246-86-dynamic.7-87-r.retail.telecomitalia.it:4662 TIME_WAIT
TCP my-pc:1508
a195.22.198-24.deploy.akamaitechnologies.com:http TIME_WAIT
TCP my-pc:1515
a195.22.198-24.deploy.akamaitechnologies.com:http TIME_WAIT
TCP my-pc:ingreslock
host133-127-dynamic.4-87-r.retail.telecomitalia.it:4662 TIME_WAIT
TCP my-pc:1533 host138-241.pool8290.interbusiness.it:4662
TIME_WAIT
TCP my-pc:1543
host30-71-dynamic.16-87-r.retail.telecomitalia.it:51033 TIME_WAIT
TCP my-pc:1549
host112-185-dynamic.5-87-r.retail.telecomitalia.it:4662 TIME_WAIT
TCP my-pc:1567 adsl-ull-43-240.41-151.net24.it:4662 TIME_WAIT
TCP my-pc:1568
host190-164-dynamic.55-82-r.retail.telecomitalia.it:4662 TIME_WAIT
TCP my-pc:1599
host-84-222-38-206.cust-adsl.tiscali.it:60882 TIME_WAIT
TCP my-pc:1604 151.16.232.241:4662 TIME_WAIT
TCP my-pc:1605 ip-62-35.sn2.eutelia.it:1755 TIME_WAIT
TCP my-pc:1611 adsl-ull-72-187.41-151.net24.it:4662
FIN_WAIT_1
TCP my-pc:1635
host156-86-dynamic.59-82-r.retail.telecomitalia.it:4662 TIME_WAIT
TCP my-pc:1648
host25-43-dynamic.2-87-r.retail.telecomitalia.it:4662 ESTABLISHED
TCP my-pc:1649 host177-32.pool8291.interbusiness.it:4662
ESTABLISHED
TCP my-pc:1650 83.198.38.25:5662 TIME_WAIT
TCP my-pc:1652
ppp-82-84-160-151.cust-adsl.tiscali.it:4662 TIME_WAIT
TCP my-pc:1667
host209-240-dynamic.54-82-r.retail.telecomitalia.it:4662 ESTABLISHED
TCP my-pc:1674
host204-36-dynamic.3-87-r.retail.telecomitalia.it:4662 TIME_WAIT
TCP my-pc:1677 ip-113-56.adsl.cheapnet.it:11112 ESTABLISHED
TCP my-pc:1678 par69-4-82-226-65-212.fbx.proxad.net:4242
ESTABLISHED
TCP my-pc:1680 adsl-ull-51-5.46-151.net24.it:4662 ESTABLISHED
TCP my-pc:1681
host-84-220-44-156.cust-adsl.tiscali.it:4662 ESTABLISHED
TCP my-pc:1682
host8-53-dynamic.1-87-r.retail.telecomitalia.it:4662 ESTABLISHED
TCP my-pc:1683
host201-194-dynamic.11-87-r.retail.telecomitalia.it:4662 ESTABLISHED
TCP my-pc:1686
host171-116-dynamic.11-87-r.retail.telecomitalia.it:29324 ESTABLISHED
TCP my-pc:1687
host43-10-dynamic.0-87-r.retail.telecomitalia.it:13159 ESTABLISHED
TCP my-pc:1688
host132-171-dynamic.0-87-r.retail.telecomitalia.it:4662 ESTABLISHED
TCP my-pc:1689
host30-117-dynamic.54-82-r.retail.telecomitalia.it:4662 ESTABLISHED
TCP my-pc:1690
host188-221-dynamic.4-87-r.retail.telecomitalia.it:44556 ESTABLISHED
TCP my-pc:1691
host191-43.pool80181.interbusiness.it:16588 ESTABLISHED
TCP my-pc:1703 adsl-78-233.37-151.net24.it:26016 ESTABLISHED
TCP my-pc:1717
host243-121-dynamic.14-87-r.retail.telecomitalia.it:4662 ESTABLISHED
TCP my-pc:1728 host23-28.pool8253.interbusiness.it:20475
ESTABLISHED
TCP my-pc:1758 d83-181-176-143.cust.tele2.it:4662 ESTABLISHED
TCP my-pc:1776 t597.greatnet.de:http CLOSE_WAIT
TCP my-pc:1784 host183-98.pool80181.interbusiness.it:4662
ESTABLISHED
TCP my-pc:1785
host128-245-dynamic.18-87-r.retail.telecomitalia.it:4662 ESTABLISHED
TCP my-pc:1789
host223-251-dynamic.8-87-r.retail.telecomitalia.it:26519 ESTABLISHED
TCP my-pc:1790
host217-208-dynamic.15-87-r.retail.telecomitalia.it:4662 ESTABLISHED
TCP my-pc:1793 adsl-ull-145-71.50-151.net24.it:4662
ESTABLISHED
TCP my-pc:1794
host145-177-dynamic.61-82-r.retail.telecomitalia.it:4662 ESTABLISHED
TCP my-pc:1796
host-84-222-19-15.cust-adsl.tiscali.it:4662 ESTABLISHED
TCP my-pc:1797
host33-219-dynamic.54-82-r.retail.telecomitalia.it:4662 ESTABLISHED
TCP my-pc:1798
host206-62-dynamic.21-87-r.retail.telecomitalia.it:4662 ESTABLISHED
TCP my-pc:1799
host176-115-dynamic.56-82-r.retail.telecomitalia.it:4882 ESTABLISHED
TCP my-pc:1800
host224-253-dynamic.1-87-r.retail.telecomitalia.it:4662 ESTABLISHED
TCP my-pc:1802
host111-149.pool8252.interbusiness.it:30862 ESTABLISHED
TCP my-pc:1803
host174-221-dynamic.5-87-r.retail.telecomitalia.it:4462 SYN_SENT
TCP my-pc:2178 by1msg5176510.phx.gbl:1863 ESTABLISHED
TCP my-pc:2726
host165-144-dynamic.14-87-r.retail.telecomitalia.it:8023 ESTABLISHED
TCP my-pc:4202 adsl-ull-204-142.41-151.net24.it:1755
ESTABLISHED
TCP my-pc:4499 p15202001.pureserver.info:36544 ESTABLISHED
TCP my-pc:4698
a195.22.198-61.deploy.akamaitechnologies.com:http TIME_WAIT
TCP my-pc:4699
a195.22.198-61.deploy.akamaitechnologies.com:http TIME_WAIT
TCP my-pc:4733 195.226.230.58:http ESTABLISHED
TCP my-pc:4995 bu-in-f91.google.com:http TIME_WAIT
TCP my-pc:51267 58.241.135.20:64699 ESTABLISHED
TCP my-pc:51267 62-101-126-224.ip.fastwebnet.it:15551
TIME_WAIT
TCP my-pc:51267 STATIC-62-123-49-93.atlanet.it:1376
ESTABLISHED
TCP my-pc:51267 71-215-153-209.ptld.qwest.net:1539 TIME_WAIT
TCP my-pc:51267 ip-228-25-dyn.adsl.intratec.it:32791
ESTABLISHED
TCP my-pc:51267
host231-162-static.104-80-b.business.telecomitalia.it:1339 TIME_WAIT
TCP my-pc:51267
host98-204-static.104-80-b.business.telecomitalia.it:1101 TIME_WAIT
TCP my-pc:51267 host10-164.pool80116.interbusiness.it:3128
TIME_WAIT
TCP my-pc:51267
host207-206.pool80116.interbusiness.it:51948 TIME_WAIT
TCP my-pc:51267 host227-36.pool80117.interbusiness.it:1889
TIME_WAIT
TCP my-pc:51267 host6-188.pool80117.interbusiness.it:4818
ESTABLISHED
TCP my-pc:51267
host122-126.pool80183.interbusiness.it:2820 TIME_WAIT
TCP my-pc:51267 81-208-60-195.ip.fastwebnet.it:6728
ESTABLISHED
TCP my-pc:51267 81-208-74-191.ip.fastwebnet.it:22225 TIME_WAIT
TCP my-pc:51267 81-208-83-249.fastres.net:24074 ESTABLISHED
TCP my-pc:51267 host146-153.pool8248.interbusiness.it:1848
ESTABLISHED
TCP my-pc:51267 host58-185.pool8252.interbusiness.it:4149
ESTABLISHED
TCP my-pc:51267 host94-78.pool8253.interbusiness.it:22390
ESTABLISHED
TCP my-pc:51267 host110-177.pool8253.interbusiness.it:3076
TIME_WAIT
TCP my-pc:51267
host248-112-dynamic.54-82-r.retail.telecomitalia.it:2350 TIME_WAIT
TCP my-pc:51267
host16-109-dynamic.57-82-r.retail.telecomitalia.it:1471 ESTABLISHED
TCP my-pc:51267
host118-117-dynamic.57-82-r.retail.telecomitalia.it:3316 ESTABLISHED
TCP my-pc:51267
host113-11-dynamic.59-82-r.retail.telecomitalia.it:1280 TIME_WAIT
TCP my-pc:51267
host37-76-dynamic.59-82-r.retail.telecomitalia.it:10733 TIME_WAIT
TCP my-pc:51267
host194-80-dynamic.59-82-r.retail.telecomitalia.it:50033 ESTABLISHED
TCP my-pc:51267
host98-143-dynamic.59-82-r.retail.telecomitalia.it:2597 ESTABLISHED
TCP my-pc:51267
host75-41-dynamic.61-82-r.retail.telecomitalia.it:1295 ESTABLISHED
TCP my-pc:51267
host42-173-dynamic.61-82-r.retail.telecomitalia.it:1591 TIME_WAIT
TCP my-pc:51267
ppp-82-84-184-229.cust-adsl.tiscali.it:4405 TIME_WAIT
TCP my-pc:51267
ppp-82-84-195-173.cust-adsl.tiscali.it:2777 ESTABLISHED
TCP my-pc:51267
ppp-82-84-245-137.cust-adsl.tiscali.it:3777 ESTABLISHED
TCP my-pc:51267
DSL01.83.171.153.88.ip-pool.NEFkom.net:65090 ESTABLISHED
TCP my-pc:51267 d83-184-40-217.cust.tele2.it:4180 TIME_WAIT
TCP my-pc:51267 d83-190-236-114.cust.tele2.it:3256 ESTABLISHED
TCP my-pc:51267 ip-162-56.sn2.eutelia.it:1836 ESTABLISHED
TCP my-pc:51267
host-84-220-31-58.cust-adsl.tiscali.it:20874 ESTABLISHED
TCP my-pc:51267
host-84-220-146-170.cust-adsl.tiscali.it:63889 ESTABLISHED
TCP my-pc:51267
host-84-220-202-204.cust-adsl.tiscali.it:3923 ESTABLISHED
TCP my-pc:51267
host-84-221-202-245.cust-adsl.tiscali.it:3613 TIME_WAIT
TCP my-pc:51267
host-84-222-53-31.cust-adsl.tiscali.it:3152 TIME_WAIT
TCP my-pc:51267
host-84-222-138-193.cust-adsl.tiscali.it:2206 ESTABLISHED
TCP my-pc:51267
host-84-222-163-243.cust-adsl.tiscali.it:1908 TIME_WAIT
TCP my-pc:51267
host-84-223-153-66.cust-adsl.tiscali.it:2707 TIME_WAIT
TCP my-pc:51267 84.253.130.9:64861 ESTABLISHED
TCP my-pc:51267 85-18-14-41.fastres.net:6584 ESTABLISHED
TCP my-pc:51267 85-18-136-103.fastres.net:34968 ESTABLISHED
TCP my-pc:51267 85-18-136-107.fastres.net:39965 TIME_WAIT
TCP my-pc:51267 85-18-136-108.fastres.net:36064 TIME_WAIT
TCP my-pc:51267
l85-130-139-144.broadband.actcom.net.il:4631 ESTABLISHED
TCP my-pc:51267
host73-103-dynamic.2-87-r.retail.telecomitalia.it:3483 TIME_WAIT
TCP my-pc:51267
host165-185-dynamic.2-87-r.retail.telecomitalia.it:3247 TIME_WAIT
TCP my-pc:51267
host143-109-dynamic.5-87-r.retail.telecomitalia.it:12768 TIME_WAIT
TCP my-pc:51267
host154-122-dynamic.5-87-r.retail.telecomitalia.it:1282 ESTABLISHED
TCP my-pc:51267
host77-166-dynamic.5-87-r.retail.telecomitalia.it:2954 ESTABLISHED
TCP my-pc:51267
host145-175-dynamic.5-87-r.retail.telecomitalia.it:3177 ESTABLISHED
TCP my-pc:51267
host7-113-dynamic.6-87-r.retail.telecomitalia.it:1658 ESTABLISHED
TCP my-pc:51267
host127-244-dynamic.7-87-r.retail.telecomitalia.it:1936 ESTABLISHED
TCP my-pc:51267
host88-100-dynamic.8-87-r.retail.telecomitalia.it:1870 ESTABLISHED
TCP my-pc:51267
host240-242-dynamic.8-87-r.retail.telecomitalia.it:3257 ESTABLISHED
TCP my-pc:51267
host249-157-dynamic.9-87-r.retail.telecomitalia.it:4319 TIME_WAIT
TCP my-pc:51267
host232-24-dynamic.10-87-r.retail.telecomitalia.it:1873 ESTABLISHED
TCP my-pc:51267
host196-82-dynamic.10-87-r.retail.telecomitalia.it:1961 TIME_WAIT
TCP my-pc:51267
host233-73-dynamic.14-87-r.retail.telecomitalia.it:3895 ESTABLISHED
TCP my-pc:51267
host164-49-dynamic.15-87-r.retail.telecomitalia.it:3590 TIME_WAIT
TCP my-pc:51267
host226-242-dynamic.15-87-r.retail.telecomitalia.it:4066 ESTABLISHED
TCP my-pc:51267
host135-2-dynamic.16-87-r.retail.telecomitalia.it:2454 TIME_WAIT
TCP my-pc:51267
host97-77-dynamic.16-87-r.retail.telecomitalia.it:3543 ESTABLISHED
TCP my-pc:51267
host241-77-dynamic.16-87-r.retail.telecomitalia.it:4951 ESTABLISHED
TCP my-pc:51267
host109-246-dynamic.16-87-r.retail.telecomitalia.it:2222 TIME_WAIT
TCP my-pc:51267
host112-73-dynamic.17-87-r.retail.telecomitalia.it:4975 ESTABLISHED
TCP my-pc:51267
host204-183-dynamic.17-87-r.retail.telecomitalia.it:29043 ESTABLISHED
TCP my-pc:51267
host253-211-dynamic.17-87-r.retail.telecomitalia.it:3750 ESTABLISHED
TCP my-pc:51267
host227-198-static.23-87-b.business.telecomitalia.it:2068 TIME_WAIT
TCP my-pc:51267
host191-243-static.23-87-b.business.telecomitalia.it:3499 ESTABLISHED
TCP my-pc:51267 ip-87-238-3-111.adsl.cheapnet.it:2064
ESTABLISHED
TCP my-pc:51267 87.253.114.156:10977 TIME_WAIT
TCP my-pc:51267 87.253.115.115:62997 TIME_WAIT
TCP my-pc:51267
host234-129-static.35-88-b.business.telecomitalia.it:21927 TIME_WAIT
TCP my-pc:51267
host218-73-static.42-88-b.business.telecomitalia.it:3750 TIME_WAIT
TCP my-pc:51267 dyn-88-122-73-81.ppp.tiscali.fr:2801
ESTABLISHED
TCP my-pc:51267 89-96-232-4.ip14.fastwebnet.it:63909
ESTABLISHED
TCP my-pc:51267 89.148.129.45:36048 ESTABLISHED
TCP my-pc:51267 i59F62A2A.versanet.de:1907 ESTABLISHED
TCP my-pc:51267
ANantes-156-1-146-3.w90-25.abo.wanadoo.fr:1321 TIME_WAIT
TCP my-pc:51267 121.25.130.43:3855 ESTABLISHED
TCP my-pc:51267 121.43.97.74:12883 ESTABLISHED
TCP my-pc:51267 151.23.59.63:1321 ESTABLISHED
TCP my-pc:51267 adsl-146-23.37-151.net24.it:1814 ESTABLISHED
TCP my-pc:51267 adsl-229-25.37-151.net24.it:1053 ESTABLISHED
TCP my-pc:51267 adsl-82-237.37-151.net24.it:1740 ESTABLISHED
TCP my-pc:51267 adsl-ull-151-145.41-151.net24.it:4233
ESTABLISHED
TCP my-pc:51267 adsl-ull-95-187.42-151.net24.it:1577
ESTABLISHED
TCP my-pc:51267 adsl-ull-64-222.42-151.net24.it:2430
ESTABLISHED
TCP my-pc:51267 adsl-ull-9-202.49-151.net24.it:2083
ESTABLISHED
TCP my-pc:51267 151.53.255.219:4568 ESTABLISHED
TCP my-pc:51267 151.57.74.189:54793 ESTABLISHED
TCP my-pc:51267 151.72.114.193:4453 ESTABLISHED
TCP my-pc:51267 151.76.212.198:15787 TIME_WAIT
TCP my-pc:51267 20158055083.user.veloxzone.com.br:2323
ESTABLISHED
TCP my-pc:51267 213-156-52-118.fastres.net:2152 ESTABLISHED
TCP my-pc:51267 213-156-55-142.fastres.net:59493 ESTABLISHED
TCP my-pc:51267 pD950448A.dip0.t-ipconnect.de:63169
ESTABLISHED
TCP my-pc:51267 h217-220-21-254.albacom.net:2036 ESTABLISHED
TCP my-pc:51267 222.84.3.149:55719 FIN_WAIT_1
TCP my-pc:51267 222.117.37.58:1926 ESTABLISHED
UDP my-pc:1102 *:*
UDP my-pc:ms-sql-m *:*
UDP my-pc:2200 *:*
UDP my-pc:36838 *:*
UDP my-pc:1326 *:*
UDP my-pc:discard *:*
UDP my-pc:netbios-ns *:*
UDP my-pc:netbios-dgm *:*
Sven Brill ha scritto:
> Since a lot of the requests come from hosts on the WAN with source
> port 4672/udp, it is very likely that someone on your LAN has
> configured a p2p client, probably eMule/eDonkey with local port 1574.
> What you are seeing is the WAN hosts trying to send traffic back to
> that host, which, of course, fails. try a netstat -a on all your LAN
> hosts to see which one is listening on port 1574. If oyu simply don't
> want to see the messages, turn off logging for the default rule. :)
>
> Sven
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
>
> .
>
| 