Firewall Question

[Sudden]

I realise the firewall is doing its job,
i just wondered what else i could do.



Thanks shn/Chewie UK/supersonic
For your replys

[Sudden]

Originally posted by supersonic@5 August 2004 - 01:04
You don't need to contact your own comp., so you can safely block the range.
If you have a static IP, you can block all the IPs of that ISP, except for yours.

And make sure you do either of the following:
1. Block SVHOST, if it caused problems
then
2.

In the SPF GUI, click on Applications, scroll to SVCHOST.EXE, click the Advanced button, and uncheck the "act as server" box.

Cam


source


As shn mentioned, your firewall is doing its job, so you shouldn't worry anyway.

I will try the second option first and see how that goes
thanks again

[Filliz]

I have the exact same problem resulting in 1000's of those Inbound DCE BIND.
It's really fucked up It makes that I can't view webpages after a couple of hours on the net.
All i get is the "page cannot be displayed" message and I have to reboot my comp in order to get it working again.

Weird thing is my connectionstatus says I'm still receiving and sending data (that i'm still connected) and also my messenger stays connected all the time
But no webpages

You should contact your ISP or send it to 'abuse@yourisp' so that they can set it straight.

I think it has something to do with one of the clients on your ISP network that has a bad configured system.

Anyway,I did a backtrace to a lot of the scans I got and it all traced back to one person.
I sent him an email and this is a part of the reply I got:

As responsible for the IP addresses of the major ISP in *******, my name
gets listed for all the addresses in use by our 2 million customers.

Let's say 1% of them have badly configured PC that triggers firewalls all
around the world, that represent 20000 so-called "hacking" attempts per
day !

Funny thing is,he knows about this problem because he had quite an amusing remark to go with the backtrace:

Remarks:
> - I did *not* hack your computer
> - I did *not* sent you SPAM or virus
> - I will *not* read your abuse complaints

[supersonic]

Man!! looks like you've been DDOS'D. They use a nifty proggy to make thousands and thousands of connections per second, so your internet is just fine, but you can't view anything, because the pages time out from connecting.
THe problem is sygate doesn't stop it, but it stops USEFUL information from getting
into the hands of a ######