Re: Ports getting hammered?

SHRED wrote on Mon, 02 Jan 2006 09:33:57 -0800:

> Duane Arnold wrote:
>> "SHRED" <noone@xxxxxxxxxxx> wrote in message news:vLcuf.6541$JT.5496@xxxxxxxxxxxxx
>>
>>> I no very little about firewalls.
>>> My setup:
>>>
>>> Cable access
>>> 4 port SMC Barricade Router
>>> 2 computers
>>>
>>> I recently installed ZoneAlarm and it is blocking attempts at port
>>> access.
>>
>> And you know this is happening with WAN Internet IP(s) or LAN IP(s) -
>> your machines behind the router?
>>
>>> I thought that having a physical firewall, like the SMC, stopped that at
>>> the router?
>>>
>> You may have something else happeing like some kind of mis-config of the
>> router and there are ports open or something like that or it's LAN
>> traffic that ZA is blocking.
>>
>> Duane :)
> These were pings from WAN.
> Both computers are behind the SMC.
>
> I did have "Virtual Server" settings, in the SMC Firewall, with service
> ports 6881-6991 "enabled".
> I just unchecked/disabled them. I think I had them that way a long time
> ago for online gaming.
>
> Would that make a difference?
>

Are you sure you didn't run BitTorrent for a while? If so, that's the likely
reason - your current IP is being listed somewhere in a BT tracker, and
those connection attempts you're seeing are other BT clients trying to
connect to your IP to download files that were being shared. If you didn't
run BT, then you managed to pick a port range that includes ports common to
BT clients, and your public IP has changed to one that was recently used by
someone running BT to share files.

Dan


.

Relevant Pages

  • Re: Routers Firewall
    ... I ask him do you have a firewall and he says yes. ... I still have an IDS/firewall on all my machines behind the router. ... > to connect to a port your public IP address the router would reject the ... > An open port on the router could be connected to a service running on the ...
    (comp.security.firewalls)
  • Re: Possible Mail Relay or just new usages of returned mail by spammers
    ... If you have ANY type of firewall, be it a NAT router or true firewall ... ISA can be used in conjunction with the router/firewall, but if you do, you ... to be done twice...once in ISA, and once in the router to port forward to ...
    (microsoft.public.windows.server.sbs)
  • Re: Home firewall Hits
    ... >Port 162 with a UDP message. ... than theres nothing blocking access from the internet to your router. ... >Subject: Home firewall Hits ... >simplify the management and deployment of PGP and reduce overall PGP costs ...
    (Security-Basics)
  • Re: Routers Firewall
    ... > indicates that it has firewall technology, then the router doesn't have a ... What your router does have is NAT. ... ZA is a fine product which will protect a computer ... Port 80 is the WEB access port and port 21 is the FTP ...
    (comp.security.firewalls)
  • Re: Bypassing the firewall
    ... Firewall in the router but i think it comes with Zone Alarm. ... >> The one thing you MUST remember is that an open port is an open port no ... >> So start your game and then start TCPview to see the ports the game is ...
    (comp.security.firewalls)
Loading