Shots Across The Bow

Firewalls and stuff

Firewalls and stuff My new computer came with firewall software. I didn't think I needed it, but installed it anyway. Folks, I couldn't believe the number of programs trying to access my omputer while I was on line, including several Trojans which were automatically blocked by the system. (What condoms have to do with computers is beyond me.) Here's just a small portion of the log:

4/26/2002 20:10:13 NDIS Filter Rule "Default Block NetBus Trojan" blocked (valuedcu,NetBus). Details:
Inbound TCP connection
Local address,service is (valuedcu,NetBus)
Remote address,service is (63.75.191.36,1300)
Process name is "N/A"
4/26/2002 20:10:13 NDIS Filter Rule "Default Block Backdoor/SubSeven Trojan" blocked (valuedcu,27374). Details:
Inbound TCP connection
Local address,service is (valuedcu,27374)
Remote address,service is (63.75.191.36,1299)
Process name is "N/A"
4/26/2002 20:10:01 NDIS Filter Rule "Default Block NetBus Trojan" blocked (valuedcu,NetBus). Details:
Inbound TCP connection
Local address,service is (valuedcu,NetBus)
Remote address,service is (63.75.191.36,1300)
Process name is "N/A"
4/26/2002 20:10:01 NDIS Filter Rule "Default Block Backdoor/SubSeven Trojan" blocked (valuedcu,27374). Details:
Inbound TCP connection
Local address,service is (valuedcu,27374)
Remote address,service is (63.75.191.36,1299)
Process name is "N/A"
4/26/2002 20:09:55 NDIS Filter Rule "Default Block NetBus Trojan" blocked (valuedcu,NetBus). Details:
Inbound TCP connection
Local address,service is (valuedcu,NetBus)
Remote address,service is (63.75.191.36,1300)
Process name is "N/A"
4/26/2002 20:09:55 NDIS Filter Rule "Default Block Backdoor/SubSeven Trojan" blocked (valuedcu,27374). Details:
Inbound TCP connection
Local address,service is (valuedcu,27374)
Remote address,service is (63.75.191.36,1299)
Process name is "N/A"
4/26/2002 20:09:52 NDIS Filter Rule "Default Block NetBus Trojan" blocked (valuedcu,NetBus). Details:
Inbound TCP connection
Local address,service is (valuedcu,NetBus)
Remote address,service is (63.75.191.36,1300)
Process name is "N/A"
4/26/2002 20:09:52 NDIS Filter Rule "Default Block Backdoor/SubSeven Trojan" blocked (valuedcu,27374). Details:
Inbound TCP connection
Local address,service is (valuedcu,27374)
Remote address,service is (63.75.191.36,1299)
Process name is "N/A"
Alert 4/26/2002 18:50:54 NDIS Filter Unused port blocking has blocked communications. Details:
Inbound TCP connection
Remote address,local service is (61.129.64.108,22)
Alert 4/26/2002 18:50:51 NDIS Filter Unused port blocking has blocked communications. Details:
Inbound TCP connection
Remote address,local service is (61.129.64.108,22)
4/26/2002 18:49:44 NDIS Filter Rule "Default Block Bla Trojan" blocked (216.78.30.189,1042). Details:
Inbound UDP packet
Local address,service is (216.78.30.189,1042)
Remote address,service is (eqlogin1.989studios.com,15900)
Process name is "N/A"
4/26/2002 18:49:44 NDIS Filter Rule "Default Block Bla Trojan" blocked (216.78.30.189,1042). Details:
Inbound UDP packet
Local address,service is (216.78.30.189,1042)
Remote address,service is (eqlogin1.989studios.com,15900)
Process name is "N/A"
4/26/2002 18:49:43 NDIS Filter Rule "Default Block Bla Trojan" blocked (216.78.30.189,1042). Details:
Inbound UDP packet
Local address,service is (216.78.30.189,1042)
Remote address,service is (eqlogin1.989studios.com,15900)
Process name is "N/A"

Why post all of this? Just to let you know that while you are online, you are exposed, and there are folks that will take advantage of that.