ESET SS4 Firewall Issue at hotel

[MrGump]

I have just connected to me hotel wifi and i am not able to get internet access when ESET firewall is active. I disabled ESET firewall and enabled the Windows firewall and now I have internet. I am still running ESET antivirus but with the Windows firewall.

whats up with this? Would it be better to figure out a way to use ESET's firewall?

Thank you.

I am using Windows 7 Ultimate

[ronjor]

Hello MrGump,

Which mode in the firewall are you using? Automatic, automatic with exceptions, interactive, policy, or learning mode?

I would suggest using the learning mode from a hotel and then switch to the interactive mode when you have made the connections you desire.

http://kb.eset.com/esetkb/index?page=content&id=SOLN2118

[MrGump]

-{ Quote: "Hello MrGump,

Which mode in the firewall are you using? Automatic, automatic with exceptions, interactive, policy, or learning mode?

I would suggest using the learning mode from a hotel and then switch to the interactive mode when you have made the connections you desire.

http://kb.eset.com/esetkb/index?page=content&id=SOLN2118" }-
Thank you for that advice but it did not seem to help.

I disabled windows fireall and started ESET's firewall again. I put ESET's firewall to "interactive mode" and all it did was ask me if i wanted to allow certain programs to run, like AIM and my VPN connection. It did not allow me to access the hotel internet though.

If I can't figure this out, am I safe running Windows Firewall and ESET SS4's antivirus? (and not running ESET's firewall?)

[ronjor]

Does the learning mode work? -{ Quote: "am I safe running Windows Firewall and ESET SS4's antivirus" }-Yes.

[MrGump]

-{ Quote: "Does the learning mode work? Yes." }-


i tried learning mode and that did not work either.

Basically the issue is that with ESET's firewall filtering active, i am able to connect to the hotel wifi, but i can't get the internet from it.

[ronjor]

What do the firewall logs show?

[MrGump]

-{ Quote: "What do the firewall logs show?" }-

i don't really know what that information means.

FYI, i had to connect to the hotel wifi then open my browser which took me to the hotels internet activation page. I entered the user and pass they gave me and then I was able to get internet access. Does that info help?

9/30/2009 8:53:39 AM Identical IP addresses detected in network 192.168.10.1 192.168.10.151 ARP

9/30/2009 8:45:50 AM Identical IP addresses detected in network 192.168.10.1 192.168.10.151 ARP

9/30/2009 12:55:43 AM Detected covert channel exploit in ICMP packet 58.64.60.142 80.224.150.74 ICMP

9/30/2009 12:55:41 AM Detected covert channel exploit in ICMP packet 58.64.60.142 80.224.150.74 ICMP

thats the stuff i see

[ronjor]

-{ Quote: " I entered the user and pass they gave me and then I was able to get internet access. " }-You can connect now they have given you the info?

[MrGump]

-{ Quote: "You can connect now they have given you the info?" }-

o no no, i was just telling you that bow because i forgot to mention it originally and i wasn't sure if it was important.

i am only able to connect now using windows firewall and ESET firewall off.

[ccomputertek]

Emmkay.... So I gather that you don't get a message from ESS saying a new network was detected.It's not detecting it then, so you can't connect via ESS.

[Marcos]

Given that you've mentioned using Windows 7, make sure that you have pre-release updates enabled in the update setup so that the new firewall module with Windows 7 support is installed.

[MrGump]

-{ Quote: "Given that you've mentioned using Windows 7, make sure that you have pre-release updates enabled in the update setup so that the new firewall module with Windows 7 support is installed." }-


how would i do that?

[ronjor]

Open the ESS tray icon, press f5 for advanced setup. On the left side choose personal firewall, update, then advanced update setup, and put a checkmark in Enable pre-release updates.

[MrGump]

-{ Quote: "Open the ESS tray icon, press f5 for advanced setup. On the left side choose personal firewall, update, then advanced update setup, and put a checkmark in Enable pre-release updates." }-


i do not see any "update" option in the personal firewall drop down menu.


i am using the 30 day trial version, is that the cause?

[ronjor]

My error. Look in the antispam module for update.

[MrGump]

-{ Quote: "My error. Look in the antispam module for update." }-


all i see are these options. thank you for your continued help, ronjor

[ronjor]

See the screenshot for the update selection at the bottom.

[MrGump]

-{ Quote: "See the screenshot for the update selection at the bottom." }-


yes i did that, and then i opened the advanced setup and that is the pic i posted. i do not see any pre-release option to tick.

[ronjor]

Your options don't look these? I don't have a trial version to look at.

[MrGump]

-{ Quote: "Your options don't look these?" }-


yes sir they do look like that. but when i click the advanced update setup, i see no option to tick pre-release updates.

my attachment is what i see when i open the advanced update button.

[ronjor]

An ESET moderator will have to confirm that option doesn't exist in the trial version. If you say it's not there, it's not there. :D

[MrGump]

-{ Quote: "An ESET moderator will have to confirm that option doesn't exist in the trial version. If you say it's not there, it's not there. :D" }-


that is what i was thinking, thank you for your help.

do i need to do anything to have an ESET Mod confirm this?

[ronjor]

Enable the test mode as shown in your screenshot. Then do a manual update.

[MrGump]

-{ Quote: "Be patient." }-

will do. thank you, ronjor

[ronjor]

I edited my post. See the post above your post. In the latest version, test mode wording has been changed to enable pre-release updates.

[MrGump]

-{ Quote: "I edited my post. See the post above your post. In the latest version, test mode wording has been changed to enable pre-release updates." }-


i have done as you asked and the update is now downloading.

after ESET updates i will let you know if my issue is solved.

thank you ronjor

[MrGump]

!!UPDATE!!


i have enabled pre-release updates and downloaded and installed them.

I am still only able to access the hotel wifi internet if the ESET SS4 filtering mode is turned off. I have tried switching to learning mode and all the other modes, but none worked.

I am currently using ESET SS4's anti-virus and anti-spam, with Windows Firewall active instead of ESET SS4's firewall.

Not sure what to do now, but thank you for helping. :)

[ronjor]

I suppose you could go to the advanced mode once more, choose IDS and advanced options, once there under troubleshooting, choose log all blocked connections.

I would then check the firewall log for any info.

[ronjor]

Check these settings also. http://kb.eset.com/esetkb/index?page=content&id=SOLN2141 Let's see if ESET has some further suggestions.

[MrGump]

-{ Quote: "Check these settings also. http://kb.eset.com/esetkb/index?page=content&id=SOLN2141 Let's see if ESET has some further suggestions." }-


i did everything that link told me to do before i saw you crossed it out. It did not work.

should I try to go back and put the settings back the way they were? Basically i would go back to the link and just go backwards and un-tick everything i changed. What do you think?


by the way, the issue is not with my VPN, i cant even use the VPN till i can connect to the hotel wifi. I can not connect to the hotel wifi if the ESET firewall filtering is active. Correction, i can connect to the hotel wifi, i just cant get internet access from it if ESET firewall filtering is active.


if ESET firewall filtering is off, i am able to connect to the internet through the hotel wifi and then i am able to connect to my VPN. I just use Windows firewall instead.

[ronjor]

-{ Quote: "should I try to go back and put the settings back the way they were?" }- At this point, yes. Just click default button at the bottom of the IDS window in advanced settings.

[MrGump]

-{ Quote: "At this point, yes. Just click default button at the bottom of the IDS window in advanced settings." }-


done. but i think i hit defualt for all ESET settings instead of just IDS. I hope that's ok.

i am going down to the lobby for a smoke, they don't let me smoke in my room

[Marcos]

Have you already tried enabling logging of blocked connections in the IDS section of the firewall setup and then checking the firewall log for details about the rule that blocked the communication?