Firewall port 1105 (FTRANHC) & port 1239 (NMSD) ?

Can someone shed light on this message from Sygate Personal Firewall? Firefox (firefox.exe) is being contacted from a remote machine

formatting link
[66.102.7.104] using local port 1105 (FTRANHC - FTRANHC). Do you want to allow this program to access the network?

  1. I brought up firefox and went to google groups.
  2. Sygate asked me if I wanted to go there at port 80 & I said OK.
  3. Then, Google came back asking to come in on port 1105. Why does Google want to remote initiate at port 1105?

Then I search for port lists and find this URL:

formatting link

When I go to that link, besides the request to go out on port 80 I get another incoming Sygate permission request asking: NDIS User mode I/O Driver (ndisuio.sys) is being contacted from a remote machine

formatting link
[68.178.160.90] using local port 1239 (NMSD - NMSD). Do you want to allow this program to access the network?

I say no, and the web page won't come up.

So I go to

formatting link
to find not much on these two ports.

My confusion lies in why these web sites feel the need to contact me on any port other than the port 80 that I go out to them on.

Can you shed light on what is the normal process here?

Thank you for your guidance, Ellen

read more and respond »

Posted 5 years ago by Ellen Thames in Networking Firewalls

Report misuse

Image for Firewall port 1105 (FTRANHC) & port 1239 (NMSD) ?