//flex table opened by JP

Click to See Complete Forum and Search --> : Need assistance


Commandos
04-28-2002, 02:06 PM
Hi.
I have this problem and I need an assistance please.
I have Norton personal firewall (norton internet security) and norton antivirus installed and they are updated regulary and every couple of days I scan my system for viruses. Scan results show that no viruses at all in my system. But when connecting to the internet ,using a proxy server and i am behing a firewall, Norton internet security alerts me the following:
HIGH RISK: A remote computer is attempting to communicate whith a service on your computer and it was blocked.
Then it gives me the IP of the remote computer.
Sure I choose:Block this communication.
The question is: which service the remote computer is attempting to communicate whith? Note that I use netstat to see active connection and there is nothing strange and I am sure that my system is backdoors or trojans free and I scan it always and I am regulary updated.

SPEEDO
04-28-2002, 02:23 PM
Write down the IP number and go here (http://www.arin.net/whois/index.html) and it will tell you who it was..:D

SPEEDO

tycoonist
04-28-2002, 02:44 PM
It wouldn't be the proxy server would it? I think that proxy servers can ping your computer, which could be causing that problem.

Commandos
04-28-2002, 04:09 PM
I have this program and I have another and I use it to see the origine of the IP. The results are good.But my question is :

"A remote computer is attempting to communicate whith a service on your computer and it was blocked".
which service on my computer that the remote is trying to communicate with?

bassman
04-28-2002, 04:39 PM
How is the remote computer's IP displayed? If it's something like 2xx.1x.1xx.1xx: 21 then you/ll probably be able to detect the service that it's trying to access, because the number that folows the : is the port on your PC on wich the connection attempt occured. For example, if it was on port 21, it's because you're running a FTP server (this is an example, the port numbers can change easily) and someone tryed to connect.

Commandos
04-28-2002, 05:10 PM
Yes the IP is displayed followed by the port .
Thanks guys, I'll keep you posted and meanwhile I'll do my best to stop those intruders :)

Imperion1
04-28-2002, 10:24 PM
A lot of times its just your own ISP pinging your machine to keep your connection alive. Mine does this. Of course, I don't know why, since all they have to do is send a signal to the modem to keep it connected. This is if you're on a cable modem connection.

HRM
04-29-2002, 12:18 AM
The pings are often and annoying and happen all the time..

Aren't you glad you installed the software? Most peopel just have nothing protecting them from the web.

Don't worry about it. I set my computer so it doesn't bother me with all the alerts anymore. Just let the software do it's job...better yet get zone alarm too, or better still buy a router.

That's what I have ..norton...zone alarm..all behind a router.