1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

How to get rid of Blackhole IANA requests

Discussion in 'Networking (Hardware & Software)' started by RexB, 2005/12/20.

  1. 2005/12/20
    RexB Lifetime Subscription

    RexB groundskeeper Thread Starter

    Joined:
    2002/02/07
    Messages:
    168
    Likes Received:
    1
    I have continual traffic to/from 192.168.1.1, which is the harmless IANA Blackhole.
    [​IMG]

    Have read that i should configure my network to stop this traffic so as to give IANA a break, but the regedit in this article, http://support.microsoft.com/default.aspx?scid=kb;EN-US;q259922 , is not what i have. (I know that ".isi.edu" is the old name.)

    I am using the onboard nVidia Networking Controller, how can i stop, or 'loop', these requests so that these traffic attempts stop?

    http://www.iana.org/faqs/abuse-faq.htm
     
    RexB,
    #1
  2. 2005/12/21
    ReggieB

    ReggieB Inactive Alumni

    Joined:
    2004/05/12
    Messages:
    2,786
    Likes Received:
    2
    I'm a little confused. Why is this traffic affecting IANA. The analysis you've posted shows a highlighted line with traffic from 192.168.1.33 (based on the remote MAC address) to 192.168.1.1. This traffic won't get past your router as it won't pass broadcast traffic (192.168.1.255).
     

  3. to hide this advert.

  4. 2005/12/21
    RexB Lifetime Subscription

    RexB groundskeeper Thread Starter

    Joined:
    2002/02/07
    Messages:
    168
    Likes Received:
    1
    The highlighted entry is just where the cursor ended up when opening the Sygate traffic page and scrolling the traffic log, sori ... that log page is representative of the continual unnecessary traffic with IANA's so-called 'blackhole' (URL Who Is?) ref'd in the links.

    My modem/router panel and firewall log shows the repetitive, continual allowed traffic.

    Millions of unneeded exchanges with IANA from thousands of machines like mine is wasting my and the web's time and said to one day endanger overloading IANA with useless "pings" or whatever they may be called.

    I just want to stop this unneeded traffic, whatever it is; the MS KB regedit fix does not reflect exactly what is in my registry, and i wanted to be sure to make the correct fix.

    I don't know much about Network configuration, is there a FAQ for this particular item, or a correct Regedit ?
     
    Last edited: 2005/12/21
    RexB,
    #3
  5. 2005/12/21
    TonyT

    TonyT SuperGeek Staff

    Joined:
    2002/01/18
    Messages:
    9,072
    Likes Received:
    400
    Odds are that there is a setting in Sygate to do reverse lookups on addresses that it blocks.

    Unless you are running a server operating system with a LOCAL dns server then there's nothing to configure in your windows system (dns settings). It does not sound like you are running your own dns server.

    Therefore, there is some dns client on your system that is sending local ip address lookups to ianna and ianna is responding with "address does not exist ", which is what is seen in your firewall & router logs.

    That "some dns clinet" could be a software firewall, an email client, ftp client, antivirus or antispyware app, proxy server, annonymizer surfing app, in short ANY app that uses the internet. Or it could be a virus or trojan that is being blocked by the firewall.

    You should not see these ianna items in your logs unless you are running your own dns server.
     
  6. 2005/12/21
    RexB Lifetime Subscription

    RexB groundskeeper Thread Starter

    Joined:
    2002/02/07
    Messages:
    168
    Likes Received:
    1
    K, thanks for the info, when i first saw this traffic happening i reviewed my handwritten logs (gasp) of installations and changes made. Nothing tracked down as the cause, but who knows what it might be.

    i'll poke, prod & snoop to see if something bites.
     
    RexB,
    #5
  7. 2005/12/22
    TonyT

    TonyT SuperGeek Staff

    Joined:
    2002/01/18
    Messages:
    9,072
    Likes Received:
    400
    note:
    a hosts file could also be redirecting requests for some sites to the ianna servers.
     
  8. 2005/12/22
    RexB Lifetime Subscription

    RexB groundskeeper Thread Starter

    Joined:
    2002/02/07
    Messages:
    168
    Likes Received:
    1
    That sounds a good reason...here is my current Task Mgr while the unwanted traffic continues. I have been unable to see a rhyme or reason to the traffic in relation to what apps are open. And the timing varies from a hit every few seconds, to hits just every ~15 minutes.
    http://premium1.uploadit.org/owlscreech//TaskMgr_IANA_Ping_Search_22DEC05.jpg

    Like now while typing, the hits are happening every 3 secs up to 7 minutes for the past hour while online, and the apps are just the normal ones needed for XP, IE, and Folding.

    The utilities/apps like Babylon, AVG, Sygate, and MWSnap (a screenshot) identify themselves on the traffic log...

    The googles for "..blackhole..iana..192.168.1.1" reveal there may be a network configuration setting or Regedit to do that will stop or "loop" the traffic, though those solutions don't quite match what I see here. I don't want to muck up the connection :~)

    An action that may relate to the prob: While OC'ng a month ago, my onboard network controllers took a hike after a couple of the CMOS resets, and i reloaded the onboard drivers. I noticed this IANA traffic about week later...

    Am using the onboard nVidia Networking Controller, and have not set up a DNS server, so i don't get it :confused:
     
    RexB,
    #7

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.