Firewall gone mad?
26 August 2003, 09:54 PM
#1
Ok, after spending many happy years with a very old version of tiny personal firewall, I upgraded to the latest version, suffice to say it was completly confusing and messed up my system.
Now I have Norton personal firewall, I think I've got the grips of it. But, it keeps notifying alerts of a default rule being violated "Default Block Backdoor/SubSeven Trojan horse" which blocks incomming TCP access to ports 1999, 2773, 54283, 7215, 1243, 6776 and 27374.
This alert is happening on a regular basis from various IP's based from NTL servers to AOL to some canaidan server and somewhere in France.
Just wondering is this really some "attack" or is it just normal net traffic? And are my security settings a bit OTT?
For now I've decided to permanantly ban any IP that sets off the alert even though Norton bans it for 30mins anyway, I usually get another alert from the same IP later on after the ban has expired.
I would appreciate some explaination of the above, as I have'nt a clue what the ports are used for.
Now I have Norton personal firewall, I think I've got the grips of it. But, it keeps notifying alerts of a default rule being violated "Default Block Backdoor/SubSeven Trojan horse" which blocks incomming TCP access to ports 1999, 2773, 54283, 7215, 1243, 6776 and 27374.
This alert is happening on a regular basis from various IP's based from NTL servers to AOL to some canaidan server and somewhere in France.
Just wondering is this really some "attack" or is it just normal net traffic? And are my security settings a bit OTT?
For now I've decided to permanantly ban any IP that sets off the alert even though Norton bans it for 30mins anyway, I usually get another alert from the same IP later on after the ban has expired.
I would appreciate some explaination of the above, as I have'nt a clue what the ports are used for.
Thread
Thread Starter
Forum
Replies
Last Post