Firewall Log - need help

Help for v2
#1

Hi. Thanks for any help in advance. I have 3 problems.

Here is an image of my log.

http://img185.imageshack.us/img185/273/logfileis2.png

  1. First problem - why ICMP packets to this address - I just did a recent install so shouldn’t be infected

Description: Outbound Policy Violation (Access Denied, ICMP = PORT UNREACHABLE)
Protocol: ICMP Outgoing
Source: 192.168.1.5
Destination: 67.87.53.86
Message: PORT UNREACHABLE

  1. Second Problem
    Port nbdgram (138)

  2. Third Problem
    Port nbname(137)

I don’t understand the first one at all.
I think the second and third ones have something to do with netbios. I cant see any workgroup computers from my machine currently.

Many thanks for any help. (:KWL)

#2

Hi user_name1234, welcome to the forum :slight_smile:

The address 67.87.53.68 appears to belong to a company called Cablevision (Optimum Online) Is this your ISP?

For the NetBIOS entries, check the properties of you network adapter to ensure NetBIOS over TCP/IP is disabled.

#3

Yep, welcome user_name12345.

An NS Lookup of 67.87.53.86, generates an interesting response…

look 67.87.53.86 ... found
Name    : ool-43573556.dyn.optonline.net  (.NET | Network)
Address : 67.87.53.86

.NET Network? Are you running any .NET services user_name12345?

#4

I am not running any .net services that I am aware.

#5

I turned off netbios and that seemed to cause all of the log entries to stop for now. I see if I can get my workgroup computers to show up now. Thanks for the help. (:WIN)

#6

If your behind a router with a home network, you will probably need to create a new zone and trusted network, to cater for communication between PCs on your LAN.