Look at my firewall!!!

[Martoch]

WTF is going on? This has been happening for several days now...



I've never been hit so many times before...and as you can see several of them are coming up as critical. Should I be concerned about this at all?

Thanks!
Mike

[Droppyale]

wow... what port???

[DanGrease]

Yes, I think you should be concerned. What you could do is enter Symantec.com and do that security response test to see if you have any ports opened or just to check out how your firewall is working. Scary stuff.

dan

[Martoch]

Hmmm...I just ran the Stealth Scan here:
http://scan.sygate.com/stealthscan.html

Every single port was blocked/stealthed.

[vass0922]

Wouldn't happen to have a menacing "Friend" that knows your IP would you?

Other options are somebody is sniffing traffic somewhere and sees your IP as alive.

[Uncle Bob]

Originally posted by Martoch
WTF is going on? This has been happening for several days now...



I've never been hit so many times before...and as you can see several of them are coming up as critical. Should I be concerned about this at all?

Thanks!
Mike

I just looked at my firewall log. Must have been a dozen pages
if I were to print it out. That's just three days worth.
how do you do those screen shots?

[Martoch]

Open your firewall log, hold hit alt-print screen (captures screen to your clipboard)...then open an imaging program (paint works fine), and paste it in, save as .jpg.

[SpookyEddy]

This should give you something of a clue....

Inbound DCE BIND to potentially vulnerable RPC DCOM interface attempt detected

I would suggest that you are probably seeing connection attempts from machines infected with some form of Blaster variant (or anything else that relies on exploiting RPC DCOM stuff).

Regards

ed

[davidamarkley]

Originally posted by Uncle Bob

I just looked at my firewall log. Must have been a dozen pages
if I were to print it out. That's just three days worth.
how do you do those screen shots?

Just do "Prt Scr" (Print Screen) and then Paste into a paint/graphics program.

If you do Alt + Prt Scr, then it will only capture the focused/active window.

Dave

EDIT: WOW!! Two posts in the time that I wrote this. It only took like 30 seconds too!!!

[Uncle Bob]

Thank you.