Does anything in this log look strange?

http://www.looknstop.com/En/plugin.htm

It is required to view and alter the advanced rules.

 

thank you. I checked and mine look exactly the same as yours. Since disabling them is not going to cause me security issues I will just considered this issue solved and won't bother the LnS peeps

 

You should check the requesting rule now and compare with mine.

 

yes that looks fine for the request rule.


i made a mistake and looked at the same thing for the Rsp rule and I added that information but then erased it when I realized my mistake.

can you tell me how to fix the Rsp rule for it's SPF options?

 

Just see post #24 - https://www.wilderssecurity.com/showpost.php?p=1935704&postcount=24

 

ty, fixed

 

okay, now im getting these

 

These loggings coming after having disabled the NTP requesting rule only? and leaving the response rule in its default enabled state? If that is the case, some reason Look 'n' Stop SPF rules mechanism on your machine is on the fritz.

It is only the NTP rule affected because the response rule is only matching by ethernet type and IP protocol.

 

starting this one over, ill report back

 

good morning or afternoon, Phant0m haha

shall we dive right in again


Rsp looks the same as yours

Req looks good as well

both are green and have no applications associated with them

I am still generating the attached logs..

as you can see, one NTP Rsp is being logged. This is after I rebooted the pc and connected to the net. Should I just disable the Req rule as you recommended earlier?

 

I thought we was going to disable the NTP Req rule by removing the black checkmark in the green box under the first column.

 

Hmm, disabled the NTP Req rule but the log is still is created.

 

Try enabling the request rule and for both NTP rules access the SPF configurations screen and change the 'Reference' number from 17 to 36 and see if anything changes.

 

trying now

 

pretty sure I followed your instructions properly. I rebooted and still received a NTP log but only one, usually it's two I guess but I'm not sure if that matters.

 

Relocate the NTP rules to the very top of the ruleset and 'Apply' it, and test.

 

Are you running Windows 7 x64?

 

yes I am Windows 7 64 bit


also, the fix did not seem to work.

 

I wouldn’t call it a fix, just a test.

You did mention about uninstalling Look ‘n’ Stop, restarting and re-installing Look ‘n’ Stop?

 

I uninstalled and reinstalled LnS a few days ago and then we started working on the issues I was having. But as far as applying changed to the rules, I would simply reboot after applying them each time.

Would you like me to uninstall and reinstall LnS again?

 

If you been seeing the NTP response rule even before the latest uninstall and install of Look 'n' Stop, ... won't make much difference.

 

if it wont put me at risk i guess i wont worry about it. hows that sound to you?

thanks for all the help

 

You and act8192 experiencing the SPF mechanism failure because you both not using the TCP SPF advanced option feature, I’m fairly certain that Frederic hadn’t realized that having TCP SPF turned off also breaks custom SPF rules mechanism. Turn on TCP SPF and re-boot and see if the NTP SPF response rule triggers anymore without seeing also the NTP SPF request rule. If this is the case, you guys should report this to soft4Ever technical support.

 

Yes sir I can confirm that enabling SPF from the advanced panel has stopped any sign of the NTP issue.

 

My troubles were under 008.2 Phant0m regime with SPF most likely not enabled.
Once I enabled SPF in advanced options, I think not until I installed 008.3, those NTP messages stopped for me. Far as I know I haven't seen them since, though I haven't yet tried 008.5.
I presume MrGump is on 008.5 from the beginning.
Lots of work for both of you to get it going! Interesting thread

MrGump, in SeaMonkey (and I suppose Firefox), double click does magnify your itty-bitty screen shot letters. In Opera, even though I have a way to zoom it's not zooming sufficiently. In fact it goes higher then lower. So I suppose Opera owes me some glasses.