Re: Unusual message from firewall
From: Bjorn Randell (Bjorn_at_AlphaMale.me.uk)
Date: 07/24/03
- Previous message: Gianni Mariani: "Sulk story"
- In reply to:(deleted message) Vance Roos: "Unusual message from firewall"
- Next in thread: Vance Roos: "Re: Unusual message from firewall"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 23 Jul 2003 23:01:22 +0100
"Vance Roos" <not__me@mail.com> wrote in message
news:93C0F3733AE7A471AE@130.133.1.4...
> While downloading some Usenet articles from the Ney on my XP Pro
> system, I got the following message from my Sygate Pro firewall
> (version 5.0).
>
>
> --- QUOTE ----
>
> LSA Shell [Export Version] is being connected by the remote machine
> [80.116.234.103] using local port 500 (ISAKMP - Internet Security
> Association and Key Management/IPSEC Key Exchange). Do you want to
> allow this program to access the network?
>
> C\WINDOWS\SYSTEM32\LSASS.EXE
>
> --- END QUOTE ----
>
>
> What was trying to access the net through the firewall? Was it
> legit? Was it spyware?
It was legit, no spyware. Type EXEs name into Google for proof.
The remote machine was trying to see if you would like to talk to it in an
IPSEC encrypted fashion. Check your local security policy and turn off
client-respond if you don't want this to happen in future.
-- Regards, Bjorn Randell Bjorn@AlphaMale.me.uk or ICQ #137732
- Previous message: Gianni Mariani: "Sulk story"
- In reply to:(deleted message) Vance Roos: "Unusual message from firewall"
- Next in thread: Vance Roos: "Re: Unusual message from firewall"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
