Thousands of Blocked UDP *events* listed in Firewall Log for...

Comodo Internet Security - CIS Firewall Help - CIS
1

I posted the below in another forum https://forums.comodo.com/feedbackcommentsannouncementsnews_cis/thousands_of_blocked_udp_events_listed_in_firewall_log_for-t47167.0.html but I think it was the wrong forum and this is probably the correct one since I’m not getting any replies in that other forum, although it hasn’t been very long either so I’m not sure.

Subject: Thousands of Blocked UDP events listed in Firewall Log for Windows Operating System and Yahoo Messenger (mostly)

I guess I have something set wrong. I have Windows XP-Home on desktop with Linksys wireless USB modem with wireless connection to Linksys Wireless Router WRT54G. I keep losing wireless connection and Linksys says it is due to UDP being blocked or something to that effect.

I did a search of the forums but didn’t see anything about this particular issue.

Below my sig is a copy/paste of recent log events.

Thanks in advance for any help.

I saw this reply in another thread about a similar situation so I am posting the question and my reply here in my original post.

I am running in Safe Mode and have posted an actual list of the log events.

Lenny V.

COMODO Internet Security Logs
Table : Firewall Logs
Date Created : 11/3/2009 8:10:46 AM
Log Scope : All The Times
Records count : 10768
(START SNIP)
11/2/2009 9:52:13 PM Windows Operating System Blocked 192.168.3.102 138 192.168.3.255 138 UDP
11/2/2009 9:53:08 PM C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe Blocked 68.142.226.71 5000 192.168.3.101 5000 UDP
11/2/2009 9:53:42 PM Windows Operating System Blocked 192.168.3.100 138 192.168.3.255 138 UDP
11/2/2009 9:54:08 PM C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe Blocked 68.142.226.71 5000 192.168.3.101 5000 UDP
11/2/2009 9:55:09 PM C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe Blocked 68.142.226.71 5000 192.168.3.101 5000 UDP
11/2/2009 9:56:08 PM C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe Blocked 68.142.226.71 5000 192.168.3.101 5000 UDP
11/2/2009 9:57:09 PM C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe Blocked 68.142.226.71 5000 192.168.3.101 5000 UDP
11/2/2009 9:58:08 PM C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe Blocked 68.142.226.71 5000 192.168.3.101 5000 UDP
11/2/2009 9:59:08 PM C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe Blocked 68.142.226.71 5000 192.168.3.101 5000 UDP
11/2/2009 9:59:21 PM Windows Operating System Blocked 192.168.3.102 138 192.168.3.255 138 UDP
11/2/2009 10:00:08 PM C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe Blocked 68.142.226.71 5000 192.168.3.101 5000 UDP
11/2/2009 10:01:08 PM C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe Blocked 68.142.226.71 5000 192.168.3.101 5000 UDP
11/2/2009 10:02:08 PM C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe Blocked 68.142.226.71 5000 192.168.3.101 5000 UDP
11/2/2009 10:03:40 PM Windows Operating System Blocked 192.168.3.100 138 192.168.3.255 138 UDP
11/2/2009 10:04:13 PM Windows Operating System Blocked 192.168.3.102 138 192.168.3.255 138 UDP
11/2/2009 10:05:42 PM Windows Operating System Blocked 192.168.3.100 138 192.168.3.255 138 UDP
11/2/2009 10:09:57 PM C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe Blocked 68.180.210.152 5000 192.168.3.101 5000 UDP
11/2/2009 10:10:57 PM C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe Blocked 68.180.210.152 5000 192.168.3.101 5000 UDP
11/2/2009 10:11:57 PM C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe Blocked 68.180.210.152 5000 192.168.3.101 5000 UDP
11/2/2009 10:12:57 PM C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe Blocked 68.180.210.152 5000 192.168.3.101 5000 UDP
11/2/2009 10:13:57 PM C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe Blocked 68.180.210.152 5000 192.168.3.101 5000 UDP
11/2/2009 10:14:21 PM Windows Operating System Blocked 192.168.3.102 138 192.168.3.255 138 UDP
11/2/2009 10:14:57 PM C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe Blocked 68.180.210.152 5000 192.168.3.101 5000 UDP
11/2/2009 10:15:57 PM C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe Blocked 68.180.210.152 5000 192.168.3.101 5000 UDP
11/2/2009 10:16:16 PM Windows Operating System Blocked 192.168.3.102 138 192.168.3.255 138 UDP
11/2/2009 10:16:57 PM C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe Blocked 68.180.210.152 5000 192.168.3.101 5000 UDP
11/2/2009 10:17:44 PM Windows Operating System Blocked 192.168.3.100 138 192.168.3.255 138 UDP
11/2/2009 10:17:57 PM C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe Blocked 68.180.210.152 5000 192.168.3.101 5000 UDP
11/2/2009 10:18:40 PM Windows Operating System Blocked 192.168.3.100 138 192.168.3.255 138 UDP
11/2/2009 10:18:57 PM C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe Blocked 68.180.210.152 5000 192.168.3.101 5000 UDP
(END SNIP)
With YM off, this is all that is showing up…
(START SNIP)
11/3/2009 7:16:40 AM Windows Operating System Blocked 192.168.3.100 138 192.168.3.255 138 UDP
11/3/2009 7:17:41 AM Windows Operating System Blocked 192.168.3.102 138 192.168.3.255 138 UDP
11/3/2009 7:19:17 AM Windows Operating System Blocked 192.168.3.102 138 192.168.3.255 138 UDP
11/3/2009 7:21:11 AM Windows Operating System Blocked 0.0.0.0 68 255.255.255.255 67 UDP
11/3/2009 7:21:21 AM Windows Operating System Blocked 192.168.3.100 137 192.168.3.255 137 UDP
11/3/2009 7:21:23 AM Windows Operating System Blocked 192.168.3.100 137 192.168.3.255 137 UDP
11/3/2009 7:21:25 AM Windows Operating System Blocked 192.168.3.100 137 192.168.3.255 137 UDP
11/3/2009 7:21:36 AM Windows Operating System Blocked 192.168.3.100 137 192.168.3.255 137 UDP
11/3/2009 7:21:38 AM Windows Operating System Blocked 192.168.3.100 137 192.168.3.255 137 UDP
11/3/2009 7:22:37 AM Windows Operating System Blocked 192.168.3.100 138 192.168.3.255 138 UDP
11/3/2009 7:23:02 AM Windows Operating System Blocked 192.168.3.100 137 192.168.3.255 137 UDP
11/3/2009 7:23:03 AM Windows Operating System Blocked 192.168.3.100 137 192.168.3.255 137 UDP
11/3/2009 7:23:06 AM Windows Operating System Blocked 192.168.3.100 138 192.168.3.255 138 UDP
11/3/2009 7:23:09 AM Windows Operating System Blocked 192.168.3.100 1034 239.255.255.250 1900 UDP
11/3/2009 7:23:11 AM Windows Operating System Blocked 192.168.3.100 138 192.168.3.255 138 UDP
11/3/2009 7:23:13 AM Windows Operating System Blocked 192.168.3.100 138 192.168.3.255 138 UDP
11/3/2009 7:23:15 AM Windows Operating System Blocked 192.168.3.100 137 192.168.3.255 137 UDP
11/3/2009 7:23:17 AM Windows Operating System Blocked 192.168.3.100 137 192.168.3.255 137 UDP
11/3/2009 7:23:19 AM Windows Operating System Blocked 192.168.3.100 137 192.168.3.255 137 UDP
11/3/2009 7:23:39 AM Windows Operating System Blocked 192.168.3.100 138 192.168.3.255 138 UDP
11/3/2009 7:23:50 AM Windows Operating System Blocked 192.168.3.100 138 192.168.3.255 138 UDP
11/3/2009 7:23:51 AM Windows Operating System Blocked 192.168.3.100 137 192.168.3.255 137 UDP
11/3/2009 7:24:21 AM Windows Operating System Blocked 192.168.3.100 138 192.168.3.255 138 UDP
11/3/2009 7:25:21 AM Windows Operating System Blocked 192.168.3.100 138 192.168.3.255 138 UDP
11/3/2009 7:27:37 AM Windows Operating System Blocked 192.168.3.100 138 192.168.3.255 138 UDP
11/3/2009 7:30:21 AM Windows Operating System Blocked 192.168.3.100 138 192.168.3.255 138 UDP
11/3/2009 7:31:19 AM Windows Operating System Blocked 192.168.3.102 138 192.168.3.255 138 UDP
11/3/2009 7:31:36 AM Windows Operating System Blocked 192.168.3.100 138 192.168.3.255 138 UDP
11/3/2009 7:32:41 AM Windows Operating System Blocked 192.168.3.102 138 192.168.3.255 138 UDP
11/3/2009 7:35:21 AM Windows Operating System Blocked 192.168.3.100 138 192.168.3.255 138 UDP
11/3/2009 7:39:34 AM Windows Operating System Blocked 192.168.3.100 138 192.168.3.255 138 UDP
End of The Report

2

Iam no expert, but it looks ok… unless you are experiencing troubles with YahooMessenger…

Usually blocking something is “ok” as long as you can still do everything you like to do online and there is no problems “updating” windows or your other softwares… If you like to you can post a screen-shot of your “network security policies” so we can see what you allow… Also very rarely is it “ok” or needed with “inbound” traffic on home computers… You can see if you have any active such by looking at CIS>summary>Network Defense…

3

No. I am not having any major problems with either YM or Windows BUT I am having problems with my wireless connection disconnecting frequently on this computer whereas my laptop can be right next to this one and never lose its wireless connection to the same wireless router.

As indicated in my initial post, Linksys tech support mentioned that something is causing this computer to NOT communicate with the wireless router properly. I also previously tried a NetGear USB modem on this same desktop and had similar connection problems which is why I switched to the Linksys USB modem, thinking it would be more easily compatible with a Linksys wireless router connection.

I checked a friends computer who also has CIS on it and connects via a wireless connection and they are not getting all of these thousands of BLOCKED UDP events in their firewall log.

Lenny V.

4

hello yes i1m having thousands UPD blocked too all Windows System blocked(cable connection) the pc has no propblem in the net, as it seems till now… but why does this happen? just blocks unusable connection or even malicious ones? many from china … the thing is comodo is blocking 1 port every second amazing! can someone explain? i’ll turn firewall log off maybe lol ok thnx

5

I would point to: That when you use P2P software, you will receive large numbers of requests from the cloud. If you have shut down your P2P software, then the request are unsolicited, and thus, blocked.

6

yes they are all in vuze port, but even when i close it they continue to come…

7

It takes a couple of hours before the users of the network figured out you are off line.