 |
 |
Don't know if it helps but, But when I run Tracert on the two IP addresses the last hop before the IP address is a device named xe-0-1-0x26.sfpop-data-gigsw3.mich.net. By the name I am guessing this is a gigabit switch at Merit's Southfield Point of Presence (sfpop) location. bob kriegel Quoting "John Gorentz" <[log in to unmask]>: > Akamai servers, perhaps? > > John Gorentz > > At 12:19 PM 5/20/2009, Gene Willacker wrote: >> No VPN. >> >> I was wondering if it might be related to SSL certificates or CRLs. >> I had to clear port 80 to several addresses at Verisign when I >> couldn't connect between some servers with Verigign SSL certs on >> them. But at least those addresses were in DNS or known to be CRL >> servers. >> >> Gene >> >> on 5/20/2009 11:54 AM Ed Symanzik said the following: >>> VPN? >>> >>> On Wed, 2009-05-20 at 11:31 -0400, Gene Willacker wrote: >>> >>>> Does anyone know why a Windows PC running Symantec security >>>> software would send http packets to addresses on the >>>> 192.122.184.0/24 subnet, which is owned by Merit? I'm trying to >>>> lock down outbound traffic to known and approved addresses, such >>>> as Windows Updates, but I don't know why the PCs are sending port >>>> 80 packets to 192.122.184.89 or 192.122.184.83. Nothing helpful is >>>> found with Google. >>>> >>>> Thanks, Gene > >