-=PCTechTalk=- Re: Firewall Alert

  • From: Dan Chisolm <d0ct0rdan@xxxxxxxxxxx>
  • To: <pctechtalk@xxxxxxxxxxxxx>
  • Date: Mon, 8 Jun 2009 19:53:30 -0400

Periodically, I also get similar alerts.  These alerts originate from other 
computers in my house . . . one originates from a wired computer and the other 
from a wireless laptop.  

This is rather interesting, considering that both computers from which the 
alerts originate are on the same workgroup; however, the wired computer on 
which the alert appears is on a different workgroup.  Both workgroups use the 
same router, however.  Also, I notice that the alert from the wired computer 
always always attempt to connect via UDP Port 138; while the wireless computer 
attempts via UDP Port 137.  I don't understand the significance of UDP.

The alerts are generated and denied by CA Security Suite, which automatically 
denies connection, without any known consequences.  I do wonder what would 
happen if I did not have the Security Suite.  IOW, would the WinXP firewall 
have blocked the connection?

Thanks.

~ Dan

> From: gman.pctt@xxxxxxxxx
> To: pctechtalk@xxxxxxxxxxxxx
> Subject: -=PCTechTalk=- Re: Firewall Alert
> Date: Fri, 5 Jun 2009 20:58:05 -0400
> 
> They are.  It looks like the first one is at the far end of your network 
> addresses (1.255), so it may indicate/implicate a part of your router 
> itself.  The router should have some sort of running log which may or may 
> not give you more info on just what was being attempted there.
> 
> Did denying it cause any issues?
> 
> Peace,
> Gman
> 
> http://www.thevenusproject.com/index.php
> 
> "The only dumb questions are the ones we fail to ask"
> 
> ----- Original Message ----- 
> From: "Don" 
> To: 
> Sent: Friday, June 05, 2009 8:41 PM
> Subject: -=PCTechTalk=- Firewall Alert
> 
> 
>> Just got this alert from my firewall:
>>
>> Program:  Application
>> Path: System
>> Time: 6/5/09/ 6:19:51 PM
>> Events: 1
>>
>> Access was denied
>>
>> Someone is trying to access your computer over the internet.  Remote
>> address 192.168.1.255 (UDP Port 138) from 192.168.1.113 (Port 138)
>>
>>
>> What does all that mean?  I thought that 192.168.1.x were all local
>> addresses.
>>
>> Don 

_________________________________________________________________
Insert movie times and more without leaving Hotmail®. 
http://windowslive.com/Tutorial/Hotmail/QuickAdd?ocid=TXT_TAGLM_WL_HM_Tutorial_QuickAdd_062009---------------------------------------------------------------
Please remember to trim your replies (including this sentence and everything 
below it) and adjust the subject line as necessary.

To subscribe, unsubscribe or modify your email settings:
//www.freelists.org/webpage/pctechtalk
OR
To subscribe to the mailing list, send an email to 
pctechtalk-request@xxxxxxxxxxxxx with "subscribe" in the Subject. To 
unsubscribe send email to pctechtalk-request@xxxxxxxxxxxxx with "unsubscribe" 
in the Subject.

To access our Archives:
http://groups.yahoo.com/group/PCTechTalk/messages/
//www.freelists.org/archives/pctechtalk/

To contact only the PCTT Mod Squad, write to:
pctechtalk-moderators@xxxxxxxxxxxxx

To join our separate PCTableTalk off-topic group, send a blank email to:
pctabletalk+subscribe@xxxxxxxxxxxxxxxx
---------------------------------------------------------------

Other related posts: