I have been using webroot firewall for a while and logged this: 5:02:18 PM 12/11/2007 Out *.*.*.*:2967 *.*.*.*:3576 TCP (6) Didi this mean my firewall responded to this person's attempt? Webroot doesn't say it blocked it or not - I know the port 2967 is used by Symantec Antivirus corportate edition. Has my security been comprimised in any way?