//flex table opened by JP

Click to See Complete Forum and Search --> : Keep getting booted offline


jad1097
01-17-2000, 03:06 PM
I keep getting booted offline. I am not sure if this is my ISP or not. After about 20 minutes or so my browser will start giving my no connection errors. I reboot and all is fine for another 20 mins. or so.
I am running windows millenium and Ie 5.5 ( same thing with any browser). I installed the latest upadates for millennium before this started to happen. Also I was attacked with a TCP ACK ping and port scan before this started to happen. And I mean I was attacked for like 15 minutes with the ACK ping. They kept trying over and over again.I can not find out the ISP of this person who did this. I ended up turning off the computer and disconecting the nic card.
I know the ACK ping is to find a way through a firewall, according to BlackIce's site. Is it possible that this person knows when I am online and pings me so I can not view the web? ARe there any files I should look for that NAV does not see? Late last night I was online for two hours and had no problem. This has been going on for three days now and has pissed me off.
Please help me with this ! Am I overlooking something?

user0005
01-17-2000, 05:57 PM
First I would like to say that Win2K is a mistake. From everyone that has Win2K, all I heard was complains about it. I suggest you get Win98se and also contact your ISP to find out if they have problems with their servers.

jad1097
01-17-2000, 09:55 PM
Excuse me I am sorry but I am not running WIn2KI! I am running the beta 2 of Windows Millennnium!
The replacment for windows 98. And no I will not put win98se on my system. It is a downright ripoff! Why would I want to pay someone $80 just to fix their product?


[This message has been edited by jad1097 (edited 01-19-2000).]

Legoboy
01-17-2000, 10:08 PM
I suggest that if you cannot or will not offer jad help, you refrain from posting in this thread. -socalgal

[This message has been edited by socalgal (edited 01-17-2000).]

[This message has been edited by Legoboy (edited 01-17-2000).]

Legoboy
01-17-2000, 10:35 PM
~edit~I apologise to the forum.~end edit~

Legoboy

[This message has been edited by Legoboy (edited 01-17-2000).]

jad1097
01-17-2000, 10:56 PM
It may not have been correct for me to snap at this person they way I did. But
if he had taken the time to read my original post he may have understood my
problem. He did not seem to understand what o/s I am using and offered some
really BAD advice. I am also sure he has no idea what an TCP ACK ping is, as I
did not until the other day.

I only come to this bbs because I know there are
many intelligent people here who are more than willing to help people such as
myself. I also try to help people when I can. I do not come here to insult
anyone or Flame anyone. I do apologize if I have ever insulted anyone on this
board. This is not my intention. I am a very self centered and egotistic person
so sometimes things do come out wrong.
So than being said if anyone could help
me It would be greatly appreciated.

CMonster
01-18-2000, 03:14 AM
whew! it got hot there for a minute...

Hey There jad1097,

I hope your connection troubles are ironed out by the time you read this.

The first thing I would do would be to see about changing your IP adress if you have a static one.

The second thing I might recommend is that you try going online with another OS or computer, if available, to see if the same problems follow you.

And finally, you might consider reading a book by Cliff Stoll, called "The Cocoo's Egg" Although outdated and non-technical, it is an interesting story about catching a hacker.

You might want to consider setting up a second machine to monitor the network, and then connect up a "dummy" slow-***** serial port connected 386 or something to your ISP as bait - and then let the hacker in...be sure to fill the hard disk with important looking files that are either long usless BS or the latest virus and trojans... JK

Ygor
01-18-2000, 05:00 AM
I'm sure CMonster is of more help in this but... something about that 20 minutes makes me want to ask if your memory/resources are eaten up by that point?
Just thinking that's a clue here that someone else may know more about.
Have you done a virus scan?

[This message has been edited by Ygor (edited 01-18-2000).]

jad1097
01-18-2000, 09:28 AM
Yes I ran a virus scan. The memory/resources are kind of low but it does not seem to affect any other programs. I am only haveing problems staying online.I also did not say I have the same problem with getting my mail.
Cmonster,
I may just set up the 486 to see what happens.SO it would act as a firewall or proxy, right? And I will need another nic card too right? Should I set it up running Linux or Win98?
I have tried to change my IP address,I could not log on at all. I did remove IP address from my network settings and got on but still had the same problems.I will try to contact @home and see if they will give me another one if I can not resolve this soon.
I have heard about that book from many people I will get it when I get a chance.

Axel
01-18-2000, 10:04 AM
My 2 cents worth -
You mention your resources are a little low - how low?
You mention that you don't have the problem getting your mail - two things there - typically the mail server can't be pinged through to get to you and is a different access than a browser uses -
The browser uses GUI and framing which use a lot of resources on a system

Another question I have - how long has it been since you updated your virus definitions? I've seen a few threads about millenium specific viruses which may not be listed in an older virus definition set. - might be worth an update and a scan just to be sure - if you have notron, I posted a link in another thread a few lines up. - Wouldn't hurt just to be sure.

Now - two things have me concerned -

Did your ISP assign you a static I.P.? - Why - most of them use dynamic addressing at log-in to help avoid attacks between users. They can set up their DHCP server to recognize your adapter MAC address and make sure you get assigned the same address each time - This makes you more vulnerable to attack if you p***ed someone off in cyber-land. If that is the case, I'd get the ISP to change that and ask some hard questions about why it was done. I'd also wonder what chat areas you've been running in and who might want to ping your connection dead. Sounds like you got a dedicated vendetta going there - if that's the case.

Then - the resources issue - should you have only a little RAM (32MB or less) and either a very fragmented HD or small HD, or HD with very little room - then your resources become much more important, especially with both an MS beta OS and an MS beta IE. I think this might be your most likely issue. You say the IE version doesn't matter, so I'd be pointing a finger at either the OS or possibly a hacker. I, myself, still prefer IE 4.01 SP2. Have yet to find any problems or conflicts with it - something I definitely cannot say about IE5 and up.
So - back to the OS - It's a MS BETA which historically has meant memory/resource leaks which eventually cause failures.

So - worry about the ISP/IP item - let us know what you mean by low resources ( if you fall below 70%, that's probably the issue, turn some stuff off ) do a virus scan with updated def.s, and a scandisk & defrag of the HD probably wouldn't hurt to possibly clear up a few resources and swap-file space for you.

Then let us know what happens.

Love to hear what the ISP says as well.

Axel
01-18-2000, 10:08 AM
Oh yeah - I'd also check the properties of you dial-up networking connection ( I think Win Mill still has those ) - and see if there is a time-out setting in it as well as what they have you connecting at in there. I've noticed some ISP's crank down their connection speed in the default dial-up connectoid properties to 33.6 so you don't use up all of their band-width. It's a cheap thing for them to do and "educated" users have to go into the connection set-up to check it, even though their modem properties indicate they can connect at 56K or better, the connectoid default will choke it down to 33.6.

jad1097
01-18-2000, 10:51 AM
I meant I do have the same problem with my mail,sorry for the confusion. I only have 32Mb of Sdram right now.Yes the resoures do go below 70%. I have disabled everything exept BlackIce. I will be adding another 64MBs this weekend.
I have a cable modem so that is why I have a static IP. I also run BlackIce as a firewall.
I do not go into any chat rooms. I only come here and to here (http://www.romulus2.com/).
I defraged the hdd this weekend. I also have an up to date virus NAV.still have a few gigs free on the drive.
AS for browsers I have tried IE5.5,Netscape 4.7,Opera3.6,netcaptor5 and finally Katisoft.
As for mail I have tried outlook express and eudora. The newest versions of both mail clients.Also tried the Star Office mail and browser.
As for my ISP they are @home and I really hate to talk to these people. I have come to the point where I am considering going with DSL, ADSL or IDSN.

[This message has been edited by jad1097 (edited 01-18-2000).]

jad1097
01-18-2000, 04:27 PM
Well I may have fixed it we will see. I uninstalloed Millennium. Wait till you see my next thread!

user0005
01-18-2000, 04:28 PM
When did I ever say to go buy it? Ever heard of stealing from stores or getting a friend to burn you a copy? And plus go get yourself that free DSL thing that http://.i.winfire.com offers. Oh yeah, and if you have a problem with some of my comments I suggest you e-mail me and settle it that way, maybe we can fight 1 on 1. http://www.sysopt.com/forum/smile.gif

jad1097
01-18-2000, 04:50 PM
Thankyou Cmonster,Ygor and Alex. It was Windows Millennium causeing the problems due to only haveing 32meg of ram. I have not been booted since I am back running Win98.

user0005,
Would you please just grow up. I am sure you are very proud to be such an immature imbecile with the mentality of a two year old. Just my opinion.


[This message has been edited by jad1097 (edited 01-18-2000).]

user0005
01-18-2000, 07:54 PM
I was looking forward to a fun fight but I guess not, and if you have looked on the other posting I did apologize for my words.

jad1097
01-18-2000, 08:08 PM
Thankyou. I did not mean to insult you ,but you left yourself wide open. No harm ment. Hope we don't go through this anymore.
After all this is not the place for such stuff.

[This message has been edited by jad1097 (edited 01-18-2000).]

Wiz
01-18-2000, 08:38 PM
kumbaya my lord...

user0005
01-18-2000, 09:30 PM
You left me emotionally scarred and I'm suicidal. I only tried to help but there was a misunderstanding. Hope you fixed your problems.

jad1097
01-18-2000, 10:04 PM
yes I fixed them and ruined a drive to boot !
Oh, I could send you some ZOLOFT for the mental problems. It really helps out.

[This message has been edited by jad1097 (edited 01-18-2000).]

CMonster
01-19-2000, 02:14 AM
I hope your drive survives.

When I recommended to change the IP address I meant to have the ISP give you a new one. Axel is right, the only way you are going to get those repeated ping attacks is by having an address some "enemy" can ping.

Axel - great call on the memory thing! I never would have thout of that. I used to surf for hours on only 16MB of RAM with Win95 (oh yeah those were slow days) but I had plenty of disk space. I never thought that having only 32MB of ram could be a serious problem, but you are right. I know many people who still have only 32 and surf all day w/o any problem; but I guess that it really depends on what other programs you are running, how much disk space you have, and definately which operating system.

Thanks for the insights.

[This message has been edited by CMonster (edited 01-19-2000).]

RavenStandsAlone
01-19-2000, 02:43 AM
So, in other words, that A**hole, user0005, was correct on his first reply and you are now doing exactly what he suggested at first, you have returned to Windoze98.
Go figure!

[This message has been edited by RavenStandsAlone (edited 01-19-2000).]

jad1097
01-19-2000, 08:53 AM
Yes returned to win98 Not running win98se and never had win2k on this system. As soon as I get more sdram (and fix my drive)Millenium will be back on here along with BEOS 4.5,Win2k and Linux.
Cmonster I should have known you meant to have my ISP change the IP address. What was I thinking?

[This message has been edited by jad1097 (edited 01-19-2000).]