* Home Help Search Login Register  

Welcome, Guest. Please login or register.
October 06, 2008, 11:36:48 AM

Login with username, password and session length

197620 Posts
22751 Topics
54676 Members
Latest Member: si-14

more news...
Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Desktop Security Products
| |-+  Comodo Firewall
| | |-+  Leak Testing/Attacks/Vulnerability Research
| | | |-+  What are these firewall events? (screenshots) 		« previous next »
Pages: [1] 2 3 ... 5 Go Down Print
Author Topic: What are these firewall events? (screenshots)  (Read 4565 times)
LirvA
Comodo's Hero
*****
Offline Offline

Posts: 212
« on: May 02, 2008, 02:22:56 AM »
Do I have the firewall configured wrongly so that it is blocking legitimate activities? I dont understand these events.



Logged
"I hate myself and want to die" - Kurt Cobain
LirvA
Comodo's Hero
*****
Offline Offline

Posts: 212
« Reply #1 on: May 02, 2008, 02:25:37 AM »
god damnit, thats so unclear. Give me a minute here. ........
Logged
"I hate myself and want to die" - Kurt Cobain
LirvA
Comodo's Hero
*****
Offline Offline

Posts: 212
« Reply #2 on: May 02, 2008, 02:32:43 AM »
Trying this .....


Photobucket



Ok, wtf?

Trying this ....


http://i265.photobucket.com/albums/ii231/Factaculus/ComodoFirewallEvents.jpg


Still unclear ....

Trying not enlarging window .....
« Last Edit: May 02, 2008, 02:38:11 AM by LirvA » Logged
"I hate myself and want to die" - Kurt Cobain
LirvA
Comodo's Hero
*****
Offline Offline

Posts: 212
« Reply #3 on: May 02, 2008, 02:42:16 AM »
Ok, that ones good.


So this is basically all I see, every day in the firewall events. This same exact stuff, like, 100 or more a day.

Is this some kind of attack on my windows OS? Is this something (legitimate) my windows OS is trying to do which is being blocked by CFP 3 (which shouldnt be blocked)?

I dont understand these firewall events.

Any help is greatly appreciated.
Logged
"I hate myself and want to die" - Kurt Cobain
LirvA
Comodo's Hero
*****
Offline Offline

Posts: 212
« Reply #4 on: May 04, 2008, 10:08:11 PM »
Someone must know how to figure out what these firewall events mean. Huh
Logged
"I hate myself and want to die" - Kurt Cobain
sded
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 1918
« Reply #5 on: May 04, 2008, 10:20:49 PM »
Looks like internet noise to me. You are the destination, and not behind a router?.  Someone at your ISP (and elsewhere) is a zombie that spends its time looking for recruits.  Using Stealth Ports Wizard to block all incoming should at least keep your log a little cleaner.
Logged
CIS Firewall .411, Vista Ultimate x32 + SP1 - UAC, Avast! 4.8, Windows Defender.  SAS offline.  Acronis True Image just in case.  Wink
LirvA
Comodo's Hero
*****
Offline Offline

Posts: 212
« Reply #6 on: May 04, 2008, 10:27:15 PM »
Correct, I am not behind a router. I just use AOL dial up.

I have it set to block all incoming (steath ports) But everytime I open the steath ports wizard its like I didnt even set it to that setting, is it not keeping the setting?
Logged
"I hate myself and want to die" - Kurt Cobain
sded
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 1918
« Reply #7 on: May 04, 2008, 10:30:52 PM »
Check your global rules.  The stealth port wizard doesn't show your status, it just shows the options you can select.  Your last global rule should be a block all incoming if it worked correctly last time.  And then there should be exceptions above it to allow any incoming you need to use for other purposes.
Logged
CIS Firewall .411, Vista Ultimate x32 + SP1 - UAC, Avast! 4.8, Windows Defender.  SAS offline.  Acronis True Image just in case.  Wink
LirvA
Comodo's Hero
*****
Offline Offline

Posts: 212
« Reply #8 on: May 04, 2008, 10:38:13 PM »
would that be listed under common or advanced? Im not seeing any thing saying "global rules" or something like that.
Logged
"I hate myself and want to die" - Kurt Cobain
salmonela
Computer Security Testing Group
Comodo's Hero
*****
Offline Offline

Posts: 445


Spy...nah...sorry but I am just a bot
« Reply #9 on: May 04, 2008, 10:50:52 PM »
Quote from: LirvA on May 04, 2008, 10:38:13 PM
would that be listed under common or advanced? Im not seeing any thing saying "global rules" or something like that.
You need to add it by yourself (See pic)
« Last Edit: May 04, 2008, 10:57:33 PM by salmonela » Logged
XP Pro SP3, Pentium4-3Ghz, 4×512Mb DDR, Ralink RT61 WLAN PCI adapter, ZyXEL P-660HW-D3 WLAN Router DSL modem
Bad English, I know...
Thanks
PLEASE DO NOT REPLY DUMB QUESTIONS/ANSWERS
LirvA
Comodo's Hero
*****
Offline Offline

Posts: 212
« Reply #10 on: May 04, 2008, 10:57:01 PM »
I think I found the right menu....

Do I need to change these settings?
Logged
"I hate myself and want to die" - Kurt Cobain
salmonela
Computer Security Testing Group
Comodo's Hero
*****
Offline Offline

Posts: 445


Spy...nah...sorry but I am just a bot
« Reply #11 on: May 04, 2008, 11:04:27 PM »
Do you have any outbound requests active now?
Logged
XP Pro SP3, Pentium4-3Ghz, 4×512Mb DDR, Ralink RT61 WLAN PCI adapter, ZyXEL P-660HW-D3 WLAN Router DSL modem
Bad English, I know...
Thanks
PLEASE DO NOT REPLY DUMB QUESTIONS/ANSWERS
Comofo
Guest
« Reply #12 on: May 04, 2008, 11:07:11 PM »
Quote from: LirvA on May 04, 2008, 10:27:15 PM
...everytime I open the steath ports wizard its like I didnt even set it to that setting, is it not keeping the setting?

It just looks as though it has reverted - but only because it's default location is on "Define a new trusted..."

Not to worry there.
Logged
Frosty Port
Comodo Family Member
***
Offline Offline

Posts: 54
« Reply #13 on: May 04, 2008, 11:20:09 PM »
it seems i'm getting the same thing as the other poster but mine are on port 1900 and some times one port 137 & 138 but the rule is in place block ip in and so on is there any other thing that i should block or mod a rule if so can some one post on the steeps to take 
« Last Edit: May 04, 2008, 11:38:59 PM by Frosty Port » Logged
{XP-PRO-SP2} {FireFox}  {Avast-Pro AV}  {Comodo FW pro3}
LirvA
Comodo's Hero
*****
Offline Offline

Posts: 212
« Reply #14 on: May 04, 2008, 11:27:48 PM »
"Do you have any outbound requests active now?"

no, dont think so. You would check that in "view active connections" right?
Logged
"I hate myself and want to die" - Kurt Cobain
Tags: firewall events 
Pages: [1] 2 3 ... 5 Go Up Print 
« previous next »
Jump to:  

SSL Firewall
Page created in 0.454 seconds with 20 queries.
Powered by SMF 1.1.5 | SMF © 2006, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks 		Design by 7dana.com