unexpected dialouts on a soho-router with win95/98

[rabeder]

hi,

we have 4 internetsurfstations in 4 different locations.

these stations are win95 or win98 pc with a 7xx router and a isdn connection.

we saw, that these pc´s make a connection to the internet in times where none has physical access to the stations.

it seems that a win95/98 service sends an ip paket to

the internet - i do not know why ??

this is the reason that we have high isdn costs.

any idea what can cause 95/98 to dial out ???

[lgijssel]

You might have configured broadcast forwarding (ip helper address) for DHCP. This can cause unwanted calls while the windows broadcasts (port 138, 139) are forwarded as well.

On an IOS router you would configure something like:

no ip forward protocol udp 138

to filter these packets. Unfortunamtely I do not know the alternative for the %^&*($ 7xx series.

Still I hope to have given you a hint as where to start searching.

Regards,

Leo

[Craig Norborg]

95/98 can generate quite a bit of traffic that could cause it to dial out. One thing you can do is "debug dialer packets" to figure out what it is considering to be "interesting" traffic that is causing it to dial out.

Another thing you could do is put in time-based ACL's to only allow dialing out during certain hours...

http://www.cisco.com/en/US/customer/tech/tk801/tk133/technologies_configuration_example09186a0080094089.shtml