Security Basics mailing list archives

Question about GoToMyPc services


From: "Ms. Judith Taylor" <jtaylor () acvna org>
Date: Mon, 08 Aug 2005 17:04:59 -0400

Greetings all,

I finally have a question that warrants more input than I can find on my own. Being a long-time lurker on this list, I have been slowly learning more about security and since having switched to a Linksys Broadband Firewall Router, looking at the logs for both incoming and outgoing traffic.

One of the machines here has GoToMyPc on it (at the request of the software vendor - it's a dedicated machine). Of late I've been noticing quite a bit of outgoing traffic from its IP address. The traffic is all TCP, but what I'm curious about is that it seems to be sending requests/pings/something by going through all its own ports.

example from logviewer:
10.xxx.xxx.xxx:1740  66.151.158.177:8200
10.xxx.xxx.xxx:1741  66.151.158.177:8200
10.xxx.xxx.xxx:1742  66.151.158.177:8200
10.xxx.xxx.xxx:1748  66.151.158.177:8200
10.xxx.xxx.xxx:1749  66.151.158.177:8200
10.xxx.xxx.xxx:1752  66.151.158.177:8200
10.xxx.xxx.xxx:1759  216.115.217.254:8200

My first thought is that it is simply "checking in" with the GoToMyPc service to see if someone is trying to connect, but I haven't been able to suss this out on their website to ascertain if this is truly the case and not something to worry about. Is what I'm seeing simply the normal behavior of the program/service?

Can anyone make any recommendations for a more secure method of remote access for a Win2K Pro machine?

Thanks.
Judith


Current thread: