Need Help Interpreting Firewall Alert (Nort Personal FW 2003)

From: Chris Mohan (chrismo1@__noSpam__yahoo.com)
Date: 12/22/02 

From: "Chris Mohan" <chrismo1@__noSpam__yahoo.com>
Date: Sun, 22 Dec 2002 20:08:50 GMT

Hi,

I recently installed Norton Internet Security 2003 and I'm getting some
firewall alerts that I'm not familliar with (haven't been able to find any
info on the web or newsgroups.) The alerts are from the Norton Personal
Firewall as intrusion detections.

The ALert is:

High Risk
A remote System is attempting to acces your computer
Protocol: UDP (Inbound)
LOcal Address: 255.255.255.255: bootps (67)
Recommended action: Block

They usually occur at about 20 minute intervals in groups of two or three.
My sense is that it may be a harmless and I should allow them (I think they
may relate to my own internet connection's IP tables or something of the
like)

Here are the listings from my fire wall's logs:

This one time, the user has chosen to "block" communications.
Inbound UDP packet
Local address,service is (255.255.255.255,bootps(67))
Remote address,service is (0.0.0.0,bootpc(68))
Process name is "N/A"

This one time, the user has chosen to "block" communications.
Inbound UDP packet
Local address,service is (255.255.255.255,bootps(67))
Remote address,service is (0.0.0.0,bootpc(68))
Process name is "N/A"

This one time, the user has chosen to "block" communications.
Inbound UDP packet
Local address,service is (255.255.255.255,bootps(67))
Remote address,service is (0.0.0.0,bootpc(68))
Process name is "N/A"

Any info/suggestions would be appreciated.

THanks,
-Chris Mohan

Relevant Pages
Quantcast