Hi, i know what are the problems, but i dont know how to fix them.
Severity :MediumReporter :Network MonitorDescription:Inbound Policy Violation (Access Denied, ICMP = ECHO REQUEST)Protocol:ICMP IncomingSource: 61.94.234.155 Destination:MYIP Message: ECHO REQUEST Reason: Network Control Rule ID = 5
Severity :MediumReporter :Network MonitorDescription:Inbound Policy Violation (Access Denied, ICMP = ECHO REQUEST)Protocol:ICMP IncomingSource: 88.200.138.238 Destination:MYIP Message: ECHO REQUEST Reason: Network Control Rule ID = 5
Severity :MediumReporter :Network MonitorDescription: Inbound Policy Violation (Access Denied, IP = 66.179.120.189, Port = 32000)Protocol: TCP IncomingSource: 66.179.120.189:1760 Destination:MYIP:32000 TCP Flags: SYN Reason: Network Control Rule ID = 5
Severity :MediumReporter :Network MonitorDescription: Inbound Policy Violation (Access Denied, IP = 66.179.120.189, Port = 32000)Protocol: TCP IncomingSource: 66.179.120.189:1760 MYIP:32000
TCP Flags: SYN Reason: Network Control Rule ID = 5
Severity :MediumReporter :Network MonitorDescription: Inbound Policy Violation (Access Denied, IP = 222.49.8.66, Port = ms-sql-name(1434))Protocol: UDP IncomingSource: 222.49.8.66:1098 Destination: MYIP:ms-sql-name(1434) Reason: Network Control Rule ID = 5
Severity :MediumReporter :Network MonitorDescription: Inbound Policy Violation (Access Denied, IP = 203.91.120.141, Port = ssh(22))Protocol: TCP IncomingSource: 203.91.120.141:64340 Destination:MYIP:ssh(22) TCP Flags: SYN Reason: Network Control Rule ID = 5
Severity :MediumReporter :Network MonitorDescription:Inbound Policy Violation (Access Denied, ICMP = ECHO REQUEST)Protocol:ICMP IncomingSource: 203.197.222.159 Destination: MYIPMessage: ECHO REQUEST Reason: Network Control Rule ID = 5
Severity :MediumReporter :Network MonitorDescription: Inbound Policy Violation (Access Denied, IP = 218.237.217.143, Port = 2967)Protocol: TCP IncomingSource: 218.237.217.143:x11(6000) Destination: MYIP:2967 TCP Flags: SYN Reason: Network Control Rule ID = 5
Severity :MediumReporter :Network MonitorDescription: Outbound Policy Violation (Access Denied, Protocol = IGMP)Protocol:IGMP Outgoing Source:MYIP Destination: 224.0.0.22 Reason: Network Control Rule ID = 5
Severity :MediumReporter :Network MonitorDescription: Outbound Policy Violation (Access Denied, Protocol = IGMP)Protocol:IGMP Outgoing Source:179.187.. Destination: 224.0.0.22 Reason: Network Control Rule ID = 5
Severity :MediumReporter :Network MonitorDescription:Outbound Policy Violation (Access Denied, ICMP = ROUTER SOLICITATION)Protocol:ICMP Outgoing Source:179.187.. Destination: 224.0.0.2 Message: ROUTER SOLICITATION Reason: Network Control Rule ID = 5
Severity :MediumReporter :Network MonitorDescription: Inbound Policy Violation (Access Denied, IP = 10.201.., Port = dhcp(68))Protocol: UDP IncomingSource: 10.201.14.:bootp(67) Destination: 255.255.255.255:dhcp(68) Reason: Network Control Rule ID = 5
Severity :MediumReporter :Network MonitorDescription: Inbound Policy Violation (Access Denied, IP = 10.201.19*., Port = dhcp(68))Protocol: UDP IncomingSource: 10.201.19.*:bootp(67) Destination: 255.255.255.255:dhcp(68) Reason: Network Control Rule ID = 5
Severity :HighReporter :Application Behavior AnalysisDescription: Suspicious Behaviour (svchost.exe)Application: C:\WINDOWS\system32\svchost.exeParent: C:\WINDOWS\system32\services.exeProtocol: UDP OutDestination: 239.255.255.250::upnp-mcast(1900)Details: C:\WINDOWS\system32\WgaTray.exe has tried to use C:\WINDOWS\system32\svchost.exe through OLE Automation, which can be used to hijack other applications.
Severity :HighReporter :Application Behavior AnalysisDescription: Suspicious Behaviour (svchost.exe)Application: C:\WINDOWS\system32\svchost.exeParent: C:\WINDOWS\system32\services.exeProtocol: UDP InDestination: 172.24.1**.***::1029Details: C:\WINDOWS\system32\WgaTray.exe has tried to use C:\WINDOWS\system32\svchost.exe through OLE Automation, which can be used to hijack other applications.
Severity :HighReporter :Application Behavior AnalysisDescription: Suspicious Behaviour (iexplore.exe)Application: C:\Program Files\Internet Explorer\iexplore.exeParent: C:\Program Files\Comodo\Firewall\cpf.exeProtocol: TCP OutDestination: 80.239.186.22::http(80)Details: G:\World of Warcraft\Launcher.exe has modified the the User interface of C:\Program Files\Internet Explorer\iexplore.exe by sending special Window messages.
Severity :HighReporter :Application Behavior AnalysisDescription: Suspicious Behaviour (iexplore.exe)Application: C:\Program Files\Internet Explorer\iexplore.exeParent: C:\Program Files\Comodo\Firewall\cpf.exeProtocol: UDP OutDestination: 212.150.49.10::dns(53)
There are too many, i have headack because i have no idea how to configure each rule, every rule is differenet, its a big mess.