Security

Ask something
Discussion Locked

IP options

0 helpful
5 replies

by shanghai sam

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I maintain a firewall for a large network. Because of warnings about "IP Options" being enabled inside IP packets, I have blocked all packets containing "IP Options" from passing in or out of the network. Recently, I have been getting a fairly large amount of packets with "IP Options" enabled that are destined for Double-Click and Comet. I have a feeling that it may have something to do with the cookies that Double-Click places on computers, however I can't prove anything. Does anyone have any suggestions or comments?

5 replies

by shanghai sam

You are on the right track about the cookies,that you double-click when using the internet,but I too am at a lost as how or what they mean,I use a utility called Tweak IE to view cookies and when I find them in the list I delete them,yet they returnwhen I use the net again.So, I have foung that they are being placed when you visit a site and it basically seems to be advertising sites that keep track to send email spam.

by shanghai sam

It does have something to do with cookies and hit counting,check Internet Options and click on Advanced Tab,go down the list and check the one that has a check in box that enables hit counting,it doubles when you visit the same site in the session.

by mike_mds

If your real curious about exactly what is going out, I would set up a packet capture on the traffic going to the DC and Comet addresses and see what's going out.

by mike_mds

BTW: Comet cursor's program notifies Comet Systems' servers every time one of its cursors appears on a client site. Double Click may be doing the same thing. This is probably the traffic you are seeing.

This discussion is closed to new replies.