CFP FW alert?

[aigle]

What does this alert means? Should I allow. I am running CFP as FW only without Defence+, using learn safe mode for FW, all defualt settings.

Thanks

[Coolio10]

That alert comes if you picked p2p mode on installation which creates alerts for incoming connections (limewire, torrents, IRC etc.....)

If you are unsure what to pick then deny it but do not remember. This way you can make sure everything still works after denying.

It is unusual for the alert to come up when you are not using the internet.
If you do not want these alerts bothering you then go into the firewall settings and pick stealth ports wizard and pick block all incoming connections.

[aigle]

I was using Opera at that time. FlashGet( classic version) was also running but not downloading anything at that time.

So what trigerred the alert?

[Nebulus]

{QUOTE-> That alert comes if you picked p2p mode on installation which creates alerts for incoming connections (limewire, torrents, IRC etc.....)

It is unusual for the alert to come up when you are not using the internet.
If you do not want these alerts bothering you then go into the firewall settings and pick stealth ports wizard and pick block all incoming connections. <-QUOTE}

Coolio10, incoming UDP on port 137 is part of Netbios protocol. If you do not use netbios you can block it.

[Mrkvonic]

Hello,
Looks like communication between lan machines.
Mrk

[aigle]

It,s a single PC. Though another PC shares same DSL modem.

[Coolio10]

{QUOTE-> It,s a single PC. Though another PC shares same DSL modem. <-QUOTE}
Were both computers on at the time?

[aigle]

May be, not sure though!

[FadeAway]

I run three XP machines off of one router connection using a switch/hub.

Every now and then, when more than than one machine is running,
I see the same port 137 entries in the individual firewall logs, as
blocked packets. (I have a FW rule to block any TCP/UDP on ports 135,
137-139, 445).

It seems to happen randomly, so I just guessed that it was coming
from some app on the system, or perhaps the router itself, but
it is infrequent enough that I never tried to figure it out.

Don't know if this applies in your situation.

edit: I run CHX, not Comodo.

[aigle]

Just got this alert now when other PC connected to internet/ or the person on other PC started some messenger. So it seems the trigger. I made a block rule for this. Thanks for replies.

[Eagle Creek]

{QUOTE-> NETBIOS Name Service. A principle rqmt for NetBIOS services on MS hosts (Win9x/ME/NT/Win2000). UDP 137 is used for browsing, logon sequence, pass-thru validations, printing support, trust support, WinNT Secure Channel, and WINS registration. <-QUOTE}

When you enable file- and printer sharing, UDP137 is added to your Windows Firewall's exception list.
So it's just 'communicating' with LAN computers. The IP (192.168.1.101) is also a local IP.
(screenshot (http://www.imgdumper.nl/uploads/479df56f21cb3/udp.PNG))

[aigle]

Thanks for the explanation.