MozillaZine

Internet Access

For discussing the Mozilla Calendar, Sunbird and Lightning projects.
dkon1000
 
Posts: 135
Joined: January 26th, 2005, 4:20 pm

Post Posted March 30th, 2005, 9:39 am

I am using Sunbird 0.2 on Windows XP with Zone Alarm 5 installed. I noticed that Sunbird is regularly making requests to the Internet that are noted in my firewall. What would this be for?

faun
 
Posts: 190
Joined: December 4th, 2003, 11:44 am
Location: Germany

Post Posted March 30th, 2005, 10:30 am

Can you be a little bit more precise? Which Port? TCP/UDP?
Personally, I've never encountered this behaviour. Maybe another program is doing these requests but your firewall thinks it's sunbird (I once had this problem with Apache).

dkon1000
 
Posts: 135
Joined: January 26th, 2005, 4:20 pm

Post Posted March 30th, 2005, 11:39 am

I think you might be right. It would appear at the moment that the initial activity indications are no longer present. I will monitor the situation. Thanks.

dkon1000
 
Posts: 135
Joined: January 26th, 2005, 4:20 pm

Post Posted March 30th, 2005, 5:04 pm

I had another logged entry related to Sunbird in Zone Alarm Pro. It stated "Sunbird was unable to obtain permission for connecting to the internet (127.0.0.1:Port 1025). Any idea what this request would be for?

Rod Whiteley

User avatar
 
Posts: 11480
Joined: December 6th, 2004, 3:41 am
Location: UK

Post Posted March 31st, 2005, 12:59 am

127.0.0.1 is not normally the Internet. That address is reserved for a "loopback" within your own computer. I have seen other software do that, but not Sunbird. I have never seen any explanation, but I think it must be harmless because it is not a connection to another machine.
Rod

greasyfingers
 
Posts: 41
Joined: April 2nd, 2005, 7:47 am

Post Posted April 2nd, 2005, 7:52 am

I get this too from Zone Alarm every time I start Sunbird.

Given that 127.0.0.1 should be my own computer, is it better to 'Allow' or 'Deny' access? Why would it do it at all?

Rod Whiteley

User avatar
 
Posts: 11480
Joined: December 6th, 2004, 3:41 am
Location: UK

Post Posted April 2nd, 2005, 8:24 am

I see something similar now. When I shut down Sunbird, Firefox, Thunderbird or Mozilla Suite, a few bytes are sent between ports on 127.0.0.1 and the same number of bytes sent back. If this is what you are seeing, it must be some quirk of the shared code that interfaces with the operating system's networking APIs. I have no idea why, or even where to ask. I do not block it, and nothing bad has happened yet ;)
Rod

mikeymike

User avatar
 
Posts: 2825
Joined: April 24th, 2003, 6:00 am
Location: UK

Post Posted April 2nd, 2005, 8:27 am

Personally I'd be more concerned about a security tool that claims something is a threat that cannot possibly be, unless the entire OS and the security tool were as well.

127.0.0.1 is loopback only. Unless you had a really horrendously broken TCP/IP stack (and to my knowledge, no stack has had a vulnerability as a result of the loopback address), anything listening on it only cannot be under threat. And in that highly unlikely situation, I would be a lot more concerned about the flawed TCP/IP stack.

Return to Calendar


Who is online

Users browsing this forum: No registered users and 1 guest