|
Posted by Barry Margolin on January 15, 2006, 5:31 pm
If you were Registered and logged in, you could reply and use other advanced thread options
> This just started a half hour ago. I'm getting repeated alerts
> irregularly spaced but about one per minute:
> "Kaspersky Anti-Virus Personal Pro
> Attention! Your computer has been attacked from the Internet.
> Network attack UDP Port Scan from address 24.94.163.100 has
> been successfully repelled."
>
> The IP address is just that of the DNS server of my ISP, RoadRunner
> http://www.dnsstuff.com/tools/whois.ch?ip=24.94.163.100
> I had some time ago placed this address in the Trusted Zone of
> ZoneAlarm, my firewall.
>
> I realize this is not a big problem, but what's the explanation?
Sounds to me like your firewall is misinterpreting an ordinary DNS
response. Maybe the response took a long time to arrive, and the
application that was waiting for it had already timed out and closed the
socket. Since there was no socket waiting for that return packet, the
firewall assumed it was an unwanted attack rather than an innocent, late
packet.
--
Barry Margolin, barmar@alum.mit.edu
Arlington, MA
*** PLEASE don't copy me on replies, I'll read them in the group ***
| 
XML site map