Network defence

Comodo Internet Security - CIS Firewall Help - CIS
#1

Could someone please clarify this situation? I am constantly seeing many blocked attempts by the firewall not d+ & its always the same 3 or 4 ips! Thanks

#2

Do you run any P2P software? It may be probes simply seeing if your computer is still offering the files for transfer. They disappear after a while.

#3

No. I have however noticed that they also appear on my homehub linked with private lan, fusion handset.

#4

Can you show us a screenshot of your logs?

#5

I could but how?

#6

When the logs screen is active push Alt+Print screen. This will copy the active window to the clipboard. Then open a program that can edit images (Paint, Paint.net, Gimp ,etc), paste the image from the clipboard in the program and save the image as jpeg, jpg or png image.

When replying use Additional options to add the photo to the post.

#7

No not happening

#8

Then just press Print Screen.

#9

Bit late

[attachment deleted by admin]

#10

Can you post a complete screen?

For now I need to know what computers are on the local IP address 192.168.1.253 and 192.168.1.254?

#11

1st ip is my hub phone possibly the 2nd is my home hub.

[attachment deleted by admin]

#12

Is your home Hub wirelelssly secured?? because 192.168.2. points to your LAN, Its not on the internet side.
But im no security expert.

#13

yes wpa2 enabled I also occasionally use it wired. I do use use two laptops secured wirelessly on this hub both have multiple fw events.

#14

This is router chatter. Nothing to worry about.

To get rid of them follow this to make some trusted network zones under Firewall → Common Tasks → My Network Zones:
Local Area Network
IP in [your network IP Mask (eg 10.0.0.0/255.0.0.0)]
IP 0.0.0.0
IP 255.255.255.255
Internet-wide Multicast
IP in 224.0.1.0-238.255.255.255
Special & Local Multicast
IP in 224.0.0.0-224.0.0.255
IP in 239.0.0.0-239.255.255.255

Then use the Stealth Ports Wizard to add the zones to your Global Rules. Go to Firewall → Common Tasks → Stealth Ports Wizard → choose “Define an new trusted network stealth my ports to everyone else”–> Next → I would like to trust and existing My Network Zone → choose the network zone you want to add from the dropdown box at the bottom → Finish.

Now take a look at the Global Rules and see your zone(s) added. Global Rules are under Firewall → Advanced → Network Security Policy.

The used zones I learned from this post by Gibran.

#15

Thanks done that. Now getting popups about svchost. May revert to previous install.