Eset Firewall problem

Discussion in 'ESET Smart Security' started by noelian14, Oct 29, 2011.

Thread Status:
Not open for further replies.
  1. noelian14

    noelian14 Registered Member

    Joined:
    Oct 29, 2011
    Posts:
    6
    Hello Im New here in the forums :) I'm just wondering if someone can help me with this problem:

    Just a little while i cant access this websites
    dramacrazy.net
    epdrama.com
    aniemfreak.tv
    gmail.com
    hotmail.com

    so was wondering whats blocking it i runned hijackthis and found kaspersky remaining files so i runned kaspersky removal tool and removed it after it required restart but i didn't restarted my pc instead tried to access my sites that wont load then it did load but after restarting my browser (chrome) it wont load again so i tried to access it in firefox same error wont load (chrome says Error 138 (net::ERR_NETWORK_ACCESS_DENIED): Unable to access the network.) (firefox says: Server not found) (IE Diagnostics says: Security setting or firewall blocking it)(i go to internet settings and sites tab restored to default everything so theres no problem in IE blocking all my connections) (cmd prompt ping says General failure to any of this sites)(hosts file in system32 is empty)

    so im suspecting eset is blocking this sites but i tried putting this sites to my exclusion list for web access but it still wont load:( i tried disabling my eset firewall still the same until i gave up and removed it and deleted every trace of it but still the same error after restarting

    can i ask whats the problem :( :'( :'(

    i checked log all connections blocked in eset and tried accessing one of the sites heres what i got


    10/30/2011 9:44:03 AM No application listening on the port 212.36.247.191:3061 110.55.149.55:49296 TCP
    10/30/2011 9:44:01 AM No application listening on the port 27.108.24.170:1513 110.55.149.55:1513 UDP
    10/30/2011 9:44:00 AM Communication denied by rule 169.254.208.128:138 169.254.255.255:138 UDP Block outgoing NETBIOS requests System
    10/30/2011 9:44:00 AM No application listening on the port 212.36.247.191:3061 110.55.149.55:49296 TCP
    10/30/2011 9:43:52 AM No application listening on the port 180.193.86.253:1513 110.55.149.55:1513 UDP
    10/30/2011 9:43:52 AM No application listening on the port 27.108.67.211:16697 110.55.149.55:1513 UDP
    10/30/2011 9:43:52 AM No application listening on the port 121.96.139.12:1366 110.55.149.55:1513 UDP
    10/30/2011 9:43:25 AM Communication denied by rule 169.254.208.128:60172 239.255.255.250:1900 UDP Block outgoing SSDP (UPNP) requests for svchost.exe C:\Windows\System32\svchost.exe NT AUTHORITY\LOCAL SERVICE
    10/30/2011 9:43:25 AM Communication denied by rule 110.55.149.55:60171 239.255.255.250:1900 UDP Block outgoing SSDP (UPNP) requests for svchost.exe C:\Windows\System32\svchost.exe NT AUTHORITY\LOCAL SERVICE
     
  2. SweX

    SweX Registered Member

    Joined:
    Apr 21, 2007
    Posts:
    6,429
    Welcome :)

    FYI. I just tried to access gmail.com and hotmail.com (the only sites I have heard about in your list) and I was able to access just fine. :doubt: Though it doesn't sound like a Firewall problem if you are able to access other websites with your browser/s?
     
    Last edited: Oct 29, 2011
  3. noelian14

    noelian14 Registered Member

    Joined:
    Oct 29, 2011
    Posts:
    6
    Yes Facebook.com and other popular sites can be accessed
    also i tried here
    http://www.websitenotworking.com and inputted gmail.com it says sorry its only down for you (meaning only in me cant access the site :( )
    whats the meaning of those logs i pasted ? :D cause they appear when i load those web pages

    oh and i tried it in my notebook it loads just fine :(
    is there a way to know which one is blocking my sites in my pc ?
    im able to access it using http://tunnelmein.com
    but wont load properly :(
     
    Last edited: Oct 29, 2011
  4. SweX

    SweX Registered Member

    Joined:
    Apr 21, 2007
    Posts:
    6,429
    Did you test with the same browser in the Notebook and with identical settings? :)
     
  5. noelian14

    noelian14 Registered Member

    Joined:
    Oct 29, 2011
    Posts:
    6
    yep finished replicating settings of chrome and eset including internet settings in control panel but in notebook it did load while in pc it wont load :eek:
     
  6. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    To me it looks like that not all firewall log entries pertaining to the issue were copied. Just out of curiosity, does disabling the option "Block unsafe address after attack detection" in the IDS setup make a difference?
     
  7. noelian14

    noelian14 Registered Member

    Joined:
    Oct 29, 2011
    Posts:
    6
    i tried to uncheck what you mentioned Marcos but no difference heres all the log i got from personal firewall category after accessing epdrama.com and dramacrazy.net

    Code:
    10/30/2011 1:58:25 PM	No application listening on the port	74.125.71.100:80	192.168.0.2:11194	TCP			
    10/30/2011 1:58:24 PM	No application listening on the port	74.125.71.100:80	192.168.0.2:11193	TCP			
    10/30/2011 1:58:10 PM	Communication denied by rule	192.168.0.1:1900	239.255.255.250:1900	UDP	Block incoming SSDP (UPNP) requests for svchost.exe	C:\Windows\System32\svchost.exe	NT AUTHORITY\LOCAL SERVICE
    10/30/2011 1:58:10 PM	Communication denied by rule	192.168.0.1:1900	239.255.255.250:1900	UDP	Block incoming SSDP (UPNP) requests for svchost.exe	C:\Windows\System32\svchost.exe	NT AUTHORITY\LOCAL SERVICE
    10/30/2011 1:58:10 PM	Communication denied by rule	192.168.0.1:1900	239.255.255.250:1900	UDP	Block incoming SSDP (UPNP) requests for svchost.exe	C:\Windows\System32\svchost.exe	NT AUTHORITY\LOCAL SERVICE
    10/30/2011 1:58:10 PM	Communication denied by rule	192.168.0.1:1900	239.255.255.250:1900	UDP	Block incoming SSDP (UPNP) requests for svchost.exe	C:\Windows\System32\svchost.exe	NT AUTHORITY\LOCAL SERVICE
    10/30/2011 1:58:10 PM	Communication denied by rule	192.168.0.1:1900	239.255.255.250:1900	UDP	Block incoming SSDP (UPNP) requests for svchost.exe	C:\Windows\System32\svchost.exe	NT AUTHORITY\LOCAL SERVICE
    10/30/2011 1:58:10 PM	Communication denied by rule	192.168.0.1:1900	239.255.255.250:1900	UDP	Block incoming SSDP (UPNP) requests for svchost.exe	C:\Windows\System32\svchost.exe	NT AUTHORITY\LOCAL SERVICE
    10/30/2011 1:58:10 PM	Communication denied by rule	192.168.0.1:1900	239.255.255.250:1900	UDP	Block incoming SSDP (UPNP) requests for svchost.exe	C:\Windows\System32\svchost.exe	NT AUTHORITY\LOCAL SERVICE
    10/30/2011 1:58:10 PM	Communication denied by rule	192.168.0.1:1900	239.255.255.250:1900	UDP	Block incoming SSDP (UPNP) requests for svchost.exe	C:\Windows\System32\svchost.exe	NT AUTHORITY\LOCAL SERVICE
    10/30/2011 1:58:10 PM	Communication denied by rule	192.168.0.1:1900	239.255.255.250:1900	UDP	Block incoming SSDP (UPNP) requests for svchost.exe	C:\Windows\System32\svchost.exe	NT AUTHORITY\LOCAL SERVICE
    10/30/2011 1:58:10 PM	Communication denied by rule	192.168.0.1:1900	239.255.255.250:1900	UDP	Block incoming SSDP (UPNP) requests for svchost.exe	C:\Windows\System32\svchost.exe	NT AUTHORITY\LOCAL SERVICE
    10/30/2011 1:57:57 PM	No application listening on the port	74.125.71.100:80	192.168.0.2:11189	TCP
     
  8. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Do you have the option "Allow UPnP for system services in the Trusted zone" enabled in the IDS setup ?
     
  9. noelian14

    noelian14 Registered Member

    Joined:
    Oct 29, 2011
    Posts:
    6
    yep its enabled now :D but same problem :)
     
  10. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Please paste the current firewall records pertaining to the issue.
     
  11. noelian14

    noelian14 Registered Member

    Joined:
    Oct 29, 2011
    Posts:
    6
    do you mean the logs ? well the logs i've pasted before was the logs created by eset when i access those sites
    if your talking for the something i haven't pasted please teach me how to find it thank you :)
     
Thread Status:
Not open for further replies.