Firewall caught RecordingService calling.

[martint123]

My firewall has popped up a couple of times in the last day or so saying that the recordingservice is wanting to call outside.

This seems to happen mainly (only??) after config has run - ah no, it call two outside addresses if I stop and restart the RS from the tray icon 84.53.174.25, port 80 and 84.53.174.16, port 80

These seem to be Akamai who serve for a lot of people.

It is only doing it on one machine and not my main server I've run various virus and bot scan with no difference. I've done a repair install of gbpvr and just the same.

The only thing that has changed recently is that I have had to install NET 3.5 so I'm wondering if this is upsetting things?

Any thoughts?

[HtV]

Could it be one of your plugins? Weather or something like that?
http://www.akamai.com/html/customers/index.html

[martint123]

Could it be one of your plugins? Weather or something like that?

Nope, I've stripped it down to the minimum.
Next step later this afternoon is to fire up ethereal to try to see what it's trying to do. Followed by uninstalling Net3.5

I see now the IP address is getting resolved.....

'GB-PVR Recording Service' from your computer wants to connect to a88-221-26-42.deploy.akamaitechnologies.com

[whurlston]

It could be just about anything including something to do with .Net 3.5. Akamai has more than 15,000+ servers around the globe providing content (software downloads, etc) and media (like QuickTime, RealAudio, or Windows Media files) for their customers (the likes of Apple, GM, MTV, Department of Defense, IBM, Microsoft, Monster.com, Yahoo!, Adobe...).

[martint123]

Yes, but the application shown to be calling is the recording service

[sub]

Its not of my doing, but given its trying to connect to Akamai, which is the servers of the big boys, I'm guessing is Microsoft (probably something in .net 3.5). To find out what exactly, you could try running WireShark and monitoring the network exchange. Its on port 80, so it might yeild a URL with useful info.

[martint123]

I knew it wouldn't be your software directly, just wondered if anyone had seen it before.
I uninstalled net3.5 but it made no difference and in the end hit the "permit" key of the firewall software and grabbed data with Ethereal -not of much use, most seemed to be https traffic.

Anyway, permitting it seems to have satisfied whatever it was and the pop up warning doesn't occur anymore. Maybe it was dregs of the net 3.5 install that starting the recording service made it try to finish it off.

That damn man Gates and his software !

[pBS]

yea, considering w release of Vista, M$ started feeling just fine about 'phoning home' whenever it wants to, over 50 circumstances...[without a single ad or pr talking about it]

so apparently it's Company policy nowdays...:eek:
[couldn't let all those xp users go unchecked.now could they? lol]