Re: I have too much firewall activity

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Dennis Lazo (email_at_dennislazo.com)
Date: 08/28/04 

Date: Sun, 29 Aug 2004 00:02:33 +0800

ian,

your activity log shows nothing out of the ordinary. port 445 is basically
the port that other computer checks if you are on a network and is done
basically by other computers on the same network that you are. however, as
some firewalls do not have outbound blocking (like windows firewall), there
will be computers which will be probing port 445 of other computers even
when they are not on the same network.

more info on port 445:
http://grc.com/port_445.htm

hope this helps. 

-- 
Regards,
Dennis Lazo
the email address from where this message has been sent from is unmonitored.
your replies may not be received. replies may be sent at
http://dennislazo.com/email/.
information herein is provided as is with no warranties, and confers no
rights.
"Ian" <ipember@removethisfirst.msn.com> wrote in message 
news:%23dLdvbRjEHA.2764@TK2MSFTNGP11.phx.gbl...
> In my firewall logs, I am getting information sent to my computer every 4 
> secs or so.  I am currently using the new XP SP2 firewall but I also got 
> the similar activity when I used Zonealarm.  The IP addresses vary but 
> tend to start with 81.156, as an example:
>
>
> 2004-08-26 22:08:30 DROP TCP 81.156.185.233 81.156.58.12 4141 445 48 S 
> 3869061011 0 65535 - - - RECEIVE
> 2004-08-26 22:08:36 DROP TCP 81.156.249.172 81.156.58.12 4195 445 48 S 
> 1738999339 0 65535 - - - RECEIVE
> 2004-08-26 22:08:36 DROP TCP 81.156.249.172 81.156.58.12 4199 1433 48 S 
> 1739036499 0 65535 - - - RECEIVE
> 2004-08-26 22:08:39 DROP TCP 81.156.231.115 81.156.58.12 4316 445 48 S 
> 4243233531 0 65535 - - - RECEIVE
> 2004-08-26 22:08:39 DROP TCP 81.156.249.172 81.156.58.12 4195 445 48 S 
> 1738999339 0 65535 - - - RECEIVE
> 2004-08-26 22:08:39 DROP TCP 81.156.249.172 81.156.58.12 4199 1433 48 S 
> 1739036499 0 65535 - - - RECEIVE
>
> I have set my firewall settings to allow echo or ping, but as you can see 
> I still get plenty of activity.   I have AVG antivirus up to date and also 
> use Pandascan antivirus web checker and I run spybot and lavasoft adaware 
> often. can anyone help?
>
>
>
> -- 
>
>
>
>
> Ian
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.745 / Virus Database: 497 - Release Date: 27/08/2004
>

Relevant Pages

  • Re: Simple Printer Sharing/Networking Question
    ... And all 3 desktop computers are running Windows XP Pro ... We have turned on sharing for the network printers (in association with this ... caused by 1) a misconfigured firewall or overlooked firewall (including ...
    (microsoft.public.windowsxp.network_web)
  • Re: Networks : Workgroups and Domains. How Do I Use Them?
    ... in My Network Places, it may take some time for a network resource to show up. ... all of the computers must be on the same subnet. ... it depends on whether you have Simple File Sharing enabled or disabled. ... Problems sharing files between computers on a network are generally caused by 1) a misconfigured firewall or overlooked firewall; or 2) inadvertently running two firewalls such as the built-in Windows Firewall and a third-party firewall; and/or 3) not having identical user accounts and passwords on all Workgroup machines; 4) trying to create shares where the operating system does not permit it. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Sharing a printer
    ... Here are general network troubleshooting steps. ... Problems sharing files between computers on a network are generally caused by 1) a misconfigured firewall or overlooked firewall; or 2) inadvertently running two firewalls such as the built-in Windows Firewall and a third-party firewall; and/or 3) not having identical user accounts and passwords on all Workgroup machines; 4) trying to create shares where the operating system does not permit it. ... On the assumption that you in fact do have a router that connects to the Internet and that your computers then connect to the router, then if you think that you have one IP for multiple computers then you probably are using a website tool such as http://whatismyip.com/ That shows the your public IP address -- the one that the rest of the world sees. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Home Network with Vista & XP
    ... The 3 computers are: 1 laptop running XP Pro, 1 laptop running Vista Home Premium, and 1 desktop running XP Home. ... the vista laptop can see all terminals on the work group but the xp terminals cannot see the vista terminal in the network. ... Problems sharing files between computers on a network are generally caused by 1) a misconfigured firewall or overlooked firewall; or 2) inadvertently running two firewalls such as the built-in Windows Firewall and a third-party firewall; and/or 3) not having identical user accounts and passwords on all Workgroup machines; 4) trying to create shares where the operating system does not permit it. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Networks : Workgroups and Domains. How Do I Use Them?
    ... I think the problem is from my lack of understanding whether these machines are together as a workgroup or domain. ... If I want to configure solely for a workgroup network, then I would think I do not need to provide a domain name, and vice versa for a domain network. ... It's not clear whether any of your computers is running Windows 2000 *Server.* If not, you don't have a "domain" and shouldn't be using domain names. ... Problems sharing files between computers on a network are generally caused by 1) a misconfigured firewall or overlooked firewall; or 2) inadvertently running two firewalls such as the built-in Windows Firewall and a third-party firewall; and/or 3) not having identical user accounts and passwords on all Workgroup machines; 4) trying to create shares where the operating system does not permit it. ...
    (microsoft.public.windowsxp.network_web)