PDA

View Full Version : Sygate Firewall


razorsharp013
10-14-2003, 08:13 PM
I've been getting this all day......

Application NT Kernal & System has been blocked,
file name is ntoskrnl.exe

Anyone know what that is? I don't have it blocked in applications.
And I did a Whois on it and got this..........

OrgName: Internet Assigned Numbers Authority
OrgID: IANA
Address: 4676 Admiralty Way, Suite 330
City: Marina del Rey
StateProv: CA
PostalCode: 90292-6695
Country: US

NetRange: 10.0.0.0 - 10.255.255.255
CIDR: 10.0.0.0/8
NetName: RESERVED-10
NetHandle: NET-10-0-0-0-1
Parent:
NetType: IANA Special Use
NameServer: BLACKHOLE-1.IANA.ORG
NameServer: BLACKHOLE-2.IANA.ORG
Comment: This block is reserved for special purposes.
Comment: Please see RFC 1918 for additional information.
Comment:
RegDate:
Updated: 2002-09-12

OrgAbuseHandle: IANA-IP-ARIN
OrgAbuseName: Internet Corporation for Assigned Names and Number
OrgAbusePhone: +1-310-301-5820
OrgAbuseEmail: [email protected]

OrgTechHandle: IANA-IP-ARIN
OrgTechName: Internet Corporation for Assigned Names and Number
OrgTechPhone: +1-310-301-5820
OrgTechEmail: [email protected]

# ARIN WHOIS database, last updated 2003-10-13 19:15
# Enter ? for additional hints on searching ARIN's WHOIS database.

Any idea?
ultimatejester
10-14-2003, 08:30 PM
http://soho.sygate.com/alerts/XP_default_TCP445_open.htm

i think you shud read this
razorsharp013
10-14-2003, 08:33 PM
Originally posted by ultimatejester@14 October 2003 - 15:30
http://soho.sygate.com/alerts/XP_default_TCP445_open.htm

i think you shud read this
Oh, I see. So as long as it's being blocked I'm ok right? It's just annoying is all, like every ten minutes.

edit: I've been using Sygate for a while now and know it pretty well, and I have never gotten this warning until today, all day.
ultimatejester
10-14-2003, 08:43 PM
yes, u r safe as long as you block it but NTOSKRNL.EXE is windows NT kernel. this is a low level communication tool that allows Windows to function. disabling this may prevent Internet access and file print share. if u c ne negative effects then u mite have to unblock it
razorsharp013
10-14-2003, 08:45 PM
Originally posted by ultimatejester@14 October 2003 - 15:43
yes, u r safe as long as you block it but NTOSKRNL.EXE is windows NT kernel. this is a low level communication tool that allows Windows to function. disabling this may prevent Internet access and file print share. if u c ne negative effects then u mite have to unblock it
Well my net access is fine, I've been on all day with no problem. And I'm not sharing anything on any network so I guess I'm fine huh?
ultimatejester
10-14-2003, 08:51 PM
thts gud. if things dont work out just unblock it and i think this file mite be in
C:\winnt\system32\ntosknrl.exe (for windows 2000). i am not sure abt xp.
razorsharp013
10-14-2003, 08:55 PM
Originally posted by ultimatejester@14 October 2003 - 15:51
thts gud. if things dont work out just unblock it and i think this file mite be in
C:\winnt\system32\ntosknrl.exe (for windows 2000). i am not sure abt xp.
That's the weord thing though, I checked my apps in Sygate and I only have a few blocked and that's not one of them.
ultimatejester
10-14-2003, 08:57 PM
What OS are you on?
razorsharp013
10-14-2003, 08:58 PM
XP
ultimatejester
10-14-2003, 09:07 PM
go in c:\windows\system32\ntoskrnl.exe. there u will find it for xp
razorsharp013
10-14-2003, 09:09 PM
Originally posted by ultimatejester@14 October 2003 - 16:07
go in c:\windows\system32\ntoskrnl.exe. there u will find it for xp
Ok, well now that I found it, what do I do with it?
ultimatejester
10-14-2003, 09:15 PM
u dont have to do anything with it, just make sure that file is blocked by sygate and it cant access the internet (Dont DELETE it)
razorsharp013
10-14-2003, 09:15 PM
Originally posted by ultimatejester@14 October 2003 - 16:15
u dont have to do anything with it, just make sure that file is blocked by sygate and it cant access the internet (Dont DELETE it)
Ok then, thanks! :D