RE: Non-internet application wants to connect over internet

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Rick Byers [MSFT] (rbyers_at_online.microsoft.com)
Date: 08/31/04


Date: Tue, 31 Aug 2004 17:04:58 GMT

I don't know how Norton Personal Firewall works, but it seems likely that
it would block the network request until you choose to permit or deny the
access. In that case, you should just be able to attach a debugger while
Norton is waiting for a response from you and look through the threads
until you find one thats trying to do some network access. The call statck
should indicate who is responsible. The network access could be from
managed or unmanaged code, so if you don't see it when doing managed-only
debugging, you should try either interop debugging (managed + native in
VStudio), or native only debugging.

If Norton causes the network request to just fail (instead of waiting for a
allow/deny response from you - this seems unlikely to me), then you may not
see any threads doing any network access when you attach. You could still
set breakpoints at common networking functions (eg. WSAConnect), and wait
for them to be hit.

Rick

-- 
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
> I have a little desktop application (it happens to be a Windows Forms 
analog
> clock) that's written in VB.Net (2003). I placed a shortcut in my Startup
> program group to start it up when I log on. I have put no code in the
> application whatsoever to do internet communications, and yet when it 
starts
> up at logon I've begun getting notification dialogs from my software
> firewall that the app wants to connect to the internet. It doesn't happen
> when the app has been freshly rebuilt, but after a few days or so it 
starts
> to try to connect and thereafter tries again each time the app is started
> up.
> 
> Thinking that I might have acquired some new kind of virus that attaches
> itself to .Net executables, I made a note of the file size and the 'last
> modified' date after a fresh build, and then checked it again after the
> executable started wanting to connect to the internet. No changes. Norton
> AntiVirus 2003 with the most recent updates shows a clean scan. I always
> tell the firewall (Norton Personal Firewall 2003) to block the
> communication, and the application continues to execute normally.
> 
> Has anyone else seen similar behavior in non-communications-enabled
> applications, or know of anything that might shed some light on this
> behavior?
> 
> Thanks,
> Tom Dacon
> Dacon Software Consulting
> 
> 
> 
> 


Relevant Pages

  • Re: hardware firewall
    ... > network stack and creates networks within the 127.0.0.x system. ... No, it doesn't, and just because one software firewall you've seen does ... Internet Security and Norton Personal Firewall), for example, provides ... transparent proxy for both HTTP and SMTP. ...
    (comp.security.firewalls)
  • NPF problem
    ... I have Norton Personal Firewall running on my two PC network. ... I can't get the 2nd computer to play nice with the first ...
    (comp.security.firewalls)
  • Unhandled exception on domain network only
    ... stored on a network drive. ... just-in-time debugging instead of this dialog box. ... Win32 Version: 1.1.4322.2032 ... CodeBase: ...
    (microsoft.public.dotnet.general)
  • Re: System Freezes When MBufClust Usages Rises
    ... When it freezes, the number of Kbytes allocated to network is roughly 160,000. ... Are there any other parameters that would help us to allocate more memory to the kernel networking? ... Remember that if you run out of clusters, you may experience network deadlocks that prevent SSH sessions from operating, so direct console access may be required to effectively monitor the system when in an extreme state of low memory in the network stack. ... My advice would be to use a serial console anyway, if possible, when debugging, as it means you can use a second machine to copy and paste DDB output into a file to e-mail out later. ...
    (freebsd-net)
  • Re: Raising the Domain and Forest Mode
    ... LDAP server signing requirements None ... Microsoft network client: Digitally sign communications ... Network access: ... Sharing and security model for local accounts Classic ...
    (microsoft.public.windows.server.active_directory)