CFP FW alert?

Discussion in 'other firewalls' started by aigle, Jan 27, 2008.

Thread Status:
Not open for further replies.
  1. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    What does this alert means? Should I allow. I am running CFP as FW only without Defence+, using learn safe mode for FW, all defualt settings.

    Thanks
     

    Attached Files:

  2. Coolio10

    Coolio10 Registered Member

    Joined:
    Sep 1, 2006
    Posts:
    1,124
    That alert comes if you picked p2p mode on installation which creates alerts for incoming connections (limewire, torrents, IRC etc.....)

    If you are unsure what to pick then deny it but do not remember. This way you can make sure everything still works after denying.

    It is unusual for the alert to come up when you are not using the internet.
    If you do not want these alerts bothering you then go into the firewall settings and pick stealth ports wizard and pick block all incoming connections.
     
  3. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    I was using Opera at that time. FlashGet( classic version) was also running but not downloading anything at that time.

    So what trigerred the alert?
     
  4. Nebulus

    Nebulus Registered Member

    Joined:
    Jan 20, 2007
    Posts:
    1,582
    Location:
    European Union
    Coolio10, incoming UDP on port 137 is part of Netbios protocol. If you do not use netbios you can block it.
     
  5. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    8,696
    Hello,
    Looks like communication between lan machines.
    Mrk
     
  6. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    It,s a single PC. Though another PC shares same DSL modem.
     
  7. Coolio10

    Coolio10 Registered Member

    Joined:
    Sep 1, 2006
    Posts:
    1,124
    Were both computers on at the time?
     
  8. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    May be, not sure though!
     
  9. FadeAway

    FadeAway Registered Member

    Joined:
    Apr 6, 2007
    Posts:
    270
    Location:
    USA
    I run three XP machines off of one router connection using a switch/hub.

    Every now and then, when more than than one machine is running,
    I see the same port 137 entries in the individual firewall logs, as
    blocked packets. (I have a FW rule to block any TCP/UDP on ports 135,
    137-139, 445).

    It seems to happen randomly, so I just guessed that it was coming
    from some app on the system, or perhaps the router itself, but
    it is infrequent enough that I never tried to figure it out.

    Don't know if this applies in your situation.

    edit: I run CHX, not Comodo.
     
    Last edited: Jan 28, 2008
  10. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Just got this alert now when other PC connected to internet/ or the person on other PC started some messenger. So it seems the trigger. I made a block rule for this. Thanks for replies.
     
  11. Eagle Creek

    Eagle Creek Global Moderator

    Joined:
    Jul 27, 2004
    Posts:
    734
    Location:
    The Netherlands
    When you enable file- and printer sharing, UDP137 is added to your Windows Firewall's exception list.
    So it's just 'communicating' with LAN computers. The IP (192.168.1.101) is also a local IP.
    (screenshot)
     
    Last edited: Jan 28, 2008
  12. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Thanks for the explanation.
     
Loading...
Similar Threads
  1. Overkill
    Replies:
    5
    Views:
    727
Thread Status:
Not open for further replies.