IanWatson

I've got an alaways-on cable modem internet connection - I've finally updated my Zone Alarm firewall - first one since May.....
Since then I've had numerous alerts listing the same IP address.
WIN,2001/07/14,17:41:39 +2:00 GMT,62.108.1.86:0, <myIPaddress>, ICMP (type:3/subtype:3)

I've got no outgoing alerts - so don't think I've got a Trojan.

Any ideas?!

cheers
I

stevem2k

This may help ....

% This is the RIPE Whois server.
% The objects are in RPSL format.
% Please visit

Avi

I'm a bit worried about security at the moment as well.

Can anyone suggest a site that tests how secure my pc is.. or even a program that i can download?

<I><B>Andy A</I></B>

stevem2k

grc.com

( home of sheilds up! )

They do an intrusion test as I recall.


Steve

Steve Williams

Well my security is good

<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:<HR>.
Your Internet port 139 does not appear to exist!
One or more ports on this system are operating in FULL STEALTH MODE! Standard Internet behavior requires port connection attempts to be answered with a success or refusal response. Therefore, only an attempt to connect to a nonexistent computer results in no response of either kind. But YOUR computer has DELIBERATELY CHOSEN NOT TO RESPOND (that's very cool!) which represents advanced computer and port stealthing capabilities. A machine configured in this fashion is well hardened to Internet NetBIOS attack and intrusion.
Unable to connect with NetBIOS to your computer.
All attempts to get any information from your computer have FAILED. (This is very uncommon for a Windows networking-based PC.) Relative to vulnerabilities from Windows networking, this computer appears to be VERY SECURE since it is NOT exposing ANY of its internal NetBIOS networking protocol over the Internet. <HR></BLOCKQUOTE>

For the port probing I got this
<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:<HR>If all of the tested ports were shown to have stealth status, then for all intents and purposes your computer doesn't exist to scanners on the Internet!

It means that either your computer is turned off or disconnected from the Net (which seems unlikely since you must be using it right now!) or an effective stealth firewall is blocking all unauthorized external contact with your computer. This means that it is completely opaque to random scans and direct assault. Even if this machine had previously been scanned and logged by a would-be intruder, a methodical return to this IP address will lead any attacker to believe that your machine is turned off, disconnected, or no longer exists. You couldn't ask for anything better.

There's one additional benefit: scanners are actually hurt by probing this machine! You may have noticed how slowly the probing proceeded. This was caused by your firewall! It was required, since your firewall is discarding the connection-attempt messages sent to your ports. A non-firewalled PC responds immediately that a connection is either refused or accepted, telling a scanner that it's found a live one ... and allowing it to get on with its scanning. But your firewall is acting like a black hole for TCP/IP packets! This means that it's necessary for a scanner to sit around and wait for the maximum round-trip time possible — across the entire Net, into your machine, and back again — before it can safely conclude that there's no computer at the other end. That's very cool. <HR></BLOCKQUOTE>

All I am running is the Norton internet security and firewall program.....

<B>Am very pleased with it</B> when will pc's come with it loaded as standard......

[This message has been edited by Steve Williams (edited 14 July 2001).]

cryptwalk

Got the same as above