svchost.exe

Using Windows firewalls makes you paranoid. I've configured my Windows
firewall with the following rules

localhost:*<-->*:53 Permit
localhost:*<-->*:80 Permit
localhost:*<-->localhost:* Permit
localhost:*<-->*:* Deny

I only need a browser and Firefox works like a charm. However, the log is
awash with references to svchost.exe. What is svchost.exe and why is half
the Internet trying to talk to it on ports 1025 and 1026? More
importantly, why is svchost.exe constantly trying to connect to
239.255.255.250:1900?

[john@localhost john]$ whois 239.255.255.250
No whois server is known for this kind of object.

Many thanks,
jwl

The 239.255.255.250:1900 thing is probably this

The Internet Gateway Device Discovery and Control Client Is an Optional
Networking Component in Windows XP Professional Service Pack 1a (SP1a)
http://support.microsoft.com/?id=821980


--

Ken Wickes [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.


"jwl" <jwl@nospam.uk> wrote in message
newsan.2004.05.06.16.19.30.212590@nospam.uk...
> Using Windows firewalls makes you paranoid. I've configured my Windows
> firewall with the following rules
>
> localhost:*<-->*:53 Permit
> localhost:*<-->*:80 Permit
> localhost:*<-->localhost:* Permit
> localhost:*<-->*:* Deny
>
> I only need a browser and Firefox works like a charm. However, the log is
> awash with references to svchost.exe. What is svchost.exe and why is half
> the Internet trying to talk to it on ports 1025 and 1026? More
> importantly, why is svchost.exe constantly trying to connect to
> 239.255.255.250:1900?
>
> [john@localhost john]$ whois 239.255.255.250
> No whois server is known for this kind of object.
>
> Many thanks,
> jwl
>