comodo firewall alert - Computer Technical Help

Two Plus Two Forums Other Topics Computer and Technical Help

comodo firewall alert

Post Reply Subscribe

...

04-13-2009 , 04:58 PM

UbinTook

veteran

Join Date: Jan 2007 Posts: 2,745

Today i noticed this firewall alert keeps popping up:

System is trying to receive a connection from the internet. What would you like to do?
Application: System
Remote: 192.168.0.196 - TCP
Port: nbsess (139)

Anyway... in the firewall events dialog the is one particular entry that has been blocked over and over again showing
protocol of UPD
source and destination same as above,
destination is192.168.0.197
source/destination port are both 137
what is it and is this something i should allow?

Last edited by UbinTook; 04-13-2009 at 05:04 PM.

Quote

04-13-2009 , 05:42 PM

Dr. D3tr0it

newbie

Join Date: Oct 2006 Posts: 45

Port 139 is usually used for Windows File & Printer sharing-do you have that turned on?

Quote

04-13-2009 , 05:50 PM

off-peak times

centurion

Join Date: Jan 2009 Posts: 102

keep it blocked. It might grant access to your system.

"remember decision" checked should get rid of the pop ups

Quote

04-13-2009 , 09:21 PM

Low Key

Carpal \'Tunnel

Join Date: Jan 2007 Posts: 33,327

Source/destination of 192.168.*.*...

Oh.. my.. god..

IT'S COMING FROM INSIDE THE NETWORK!

/joke

Are you on a home network? Is that your IP address?

Quote

04-13-2009 , 10:11 PM

UbinTook

veteran

Join Date: Jan 2007 Posts: 2,745

Quote:

Originally Posted by Low Key

Source/destination of 192.168.*.*...

Oh.. my.. god..

IT'S COMING FROM INSIDE THE NETWORK!

/joke

Are you on a home network? Is that your IP address?

The PC that is showing the alert is a desktop hard wired to a netgear router.
That is the desktops IP, but i am wondering why it is identified as an INCOMING attempt.

I have a secured (WPA2) wireless network active, but nothing else connected wirelessly.

Quote

04-13-2009 , 10:20 PM

UbinTook

veteran

Join Date: Jan 2007 Posts: 2,745

Quote:

Originally Posted by Dr. D3tr0it

Port 139 is usually used for Windows File & Printer sharing-do you have that turned on?

It was,( i thought it was off) but now it IS off.

Quote

04-14-2009 , 06:45 PM

LirvA

banned

Join Date: Sep 2007 Posts: 43,574

I believe this is your router.

Quote

04-14-2009 , 09:00 PM

Joseph Hewes

self-banned

Join Date: Aug 2007 Posts: 2,466

I think this is your desktop (that's hardwired to the router) just pinging your computer -- re Windows File & Printer sharing.

From Comodo's forums:

System should be set to Outgoing Only in your firewall rules.
Svchost.exe should also be Outgoing Only.

Firewall -> Advanced -> Network Security Policy
Scroll down and locate 'System'. Select it and click Edit (right side).
Select 'Use Predefined Policy', and select 'Outgoing Only' from the dropdown box.
Click 'Apply'.
Do the same with svchost.exe.
Then click 'Apply' on the Policy window to place the rules into effect.

Quote

04-25-2009 , 05:56 PM

Joseph Hewes

self-banned

Join Date: Aug 2007 Posts: 2,466

See http://forums.comodo.com/firewall_he...6520#msg276520

Quote

04-26-2009 , 06:52 PM

#10

UbinTook

veteran

Join Date: Jan 2007 Posts: 2,745

very good, thanks, set as suggested.

Quote

Post Reply Subscribe

...