I'm running VMWare 5 and I have found that when I start up VMWare I see two connections:
TCP 10.100.100.161:55555->as-40816.engx.vmware.com:https (ESTABLISHED) TCP 10.100.100.161:55556->a184-85-99-51.deploy.static.akamaitechnologies.com:https (ESTABLISHED)
However I have set up my firewall to block the first one:
00100 deny ip from 184.108.40.206/20 to any 00200 deny log ip from 220.127.116.11/16 to any 00300 deny log ip from any to 18.104.22.168/16 00400 deny ip from any to 22.214.171.124/22 00500 deny log ip from any to 126.96.36.199/16 00600 deny log ip from any to 188.8.131.52/24 00700 deny log ip from any to 184.108.40.206/17 00800 deny log ip from any to 220.127.116.11/18 00900 deny log ip from any to 18.104.22.168/8 01000 deny log ip from any to 22.214.171.124/14 01100 deny ip from any to 126.96.36.199 01200 deny log ip from any to 188.8.131.52/16 01300 deny log ip from any to 184.108.40.206/24 65535 allow ip from any to any
Am I missing something? How can VMWare establish a connection to 220.127.116.11 or vmware.com (18.104.22.168) and netstat tell me that it is "ESTABLISHED" when my ipfw firewall settings block that specific address from being reached? Or are my setting erroneous?
Thanks for any help.