Latest Posts:
flame3-15-2025 Three Word Post.....The Next Generation.... (Rep.#19,659) from: GoFastRacerflameflame3-15-2025 The Totally Useless Thread IV (Rep.#229) from: GoFastRacerflameflame3-15-2025 Brrrr (Rep.#15,000) from: GoFastRacerflameflame3-07-2025 Gas price in your area (Rep.#7,313) from: GoFastRacerflameflame2-03-2025 Hello After 20 Years (Rep.#2) from: GoFastRacerflame
No members are browsing this topic
Forum Led by: BigDog, RiverLiver

 

[ Track this topic :: Email this topic :: Print this topic ]
add a reply to this topic create a new topic create a new poll
My Man's Sportin' WoodFemale Offline
Capricorn
HDF Supporter
Hallett Hottie
1,000 post flame1,000 post flame1,000 post flame500 post flame
Flathead Lake Montana/Lake Havasu City
Posts: 3,500
APPD 0.45
Post Rank: 20
Post Icon Posted: April 06 2004,6:50 pm Post # 1 see this member send this member a private message  quote this post in reply

About every five minutes, my firewall (McAfee)notifies me that it intercepted a "SYN port scan attack".  The "package" is always dropped, but what the heck is going on?  I've gotten them occasionally in the past, but within the last day or so, it is very frequent.  Can anyone explain this in layman's terms?
Back to top
| Member # 250 | Joined: 10-17-2003 |
Kim HansonMale Offline
Capricorn
HDF Bronze Supporter
....( . )( . )....
1,000 post flame1,000 post flame
Alberta Canada
Posts: 2,029
APPD 0.25
Post Rank: 32
Post Icon Posted: April 06 2004,6:59 pm Post # 2 see this member send this member a private message  quote this post in reply

Quote (My Man's Sportin' Wood @ April 06 2004,6:50 pm)
About every five minutes, my firewall (McAfee)notifies me that it intercepted a "SYN port scan attack".  The "package" is always dropped, but what the heck is going on?  I've gotten them occasionally in the past, but within the last day or so, it is very frequent.  Can anyone explain this in layman's terms?

Just entertain me and try this and see if it works :good Bottom left hand corner!

Killer


Look at life through the windshield, not the rear-view mirror."
..........................( . )( . )................................
Back to top
website  | Member # 17 | Joined: 12-06-2002 |
GoFastRacerMale Offline
HDF Supporter
V-Driver For Life!
50,000 post flame10,000 post flame1,000 post flame1,000 post flame500 post flame100 post flame100 post flame100 post flame
Big River, Ca
Posts: 62,882
APPD 7.81
Post Rank: 1
Spectra20
Post Icon Posted: April 06 2004,8:13 pm Post # 3 see this member send this member a private message  quote this post in reply

Quote (My Man's Sportin' Wood @ April 06 2004,6:50 pm)
About every five minutes, my firewall (McAfee)notifies me that it intercepted a "SYN port scan attack".  The "package" is always dropped, but what the heck is going on?  I've gotten them occasionally in the past, but within the last day or so, it is very frequent.  Can anyone explain this in layman's terms?

If you go to your options, somewhere there is a an option that you can select whether to be notified or not, just deselect it and it will do it's thing without telling ya about it!.. :D
Back to top
website  | Member # 101 | Joined: 3-03-2003 |
BigBoyToysMale Offline
Pisces
HDF Supporter
Chillin' in the Pacific Northwest
5,000 post flame500 post flame100 post flame100 post flame100 post flame100 post flame
Spokane, WA
Posts: 5,940
APPD 0.74
Post Rank: 12
Post Icon Posted: April 06 2004,8:14 pm Post # 4 see this member send this member a private message  quote this post in reply

Here ya go.
Explanation of SYN scan: 'One problem with port scanning is that it is easily logged by those services listening at the ports. They see an incoming connection, but no data, so they log an error. There exist a number of stealth scan techniques to avoid this. One is the half-open scan that only partially opens a connection, but stops halfway through. This is also known as a SYN scan because it only sends the SYN packet. This stops the service from ever being notified of the incoming connection.'

So...you are under constant or regular port-scanning...which is quite normal these days when you're on broadband - thus connected to the net a lot or all the time... :D   Hope this helps :good




OBAMA=OneBigAssMistakeAmerica
Back to top
website  | Member # 87 | Joined: 2-19-2003 |
My Man's Sportin' WoodFemale Offline
Capricorn
HDF Supporter
Hallett Hottie
1,000 post flame1,000 post flame1,000 post flame500 post flame
Flathead Lake Montana/Lake Havasu City
Posts: 3,500
APPD 0.45
Post Rank: 20
Post Icon Posted: April 06 2004,8:20 pm Post # 5 see this member send this member a private message  quote this post in reply

Thanks guys.  I'll go to my options and change the notification guidelines and, Kim, that "avast!" program is scanning right now, but it's super slow, so it'll be a while.
Back to top
| Member # 250 | Joined: 10-17-2003 |
BigBoyToysMale Offline
Pisces
HDF Supporter
Chillin' in the Pacific Northwest
5,000 post flame500 post flame100 post flame100 post flame100 post flame100 post flame
Spokane, WA
Posts: 5,940
APPD 0.74
Post Rank: 12
Post Icon Posted: April 06 2004,8:22 pm Post # 6 see this member send this member a private message  quote this post in reply

A port scan is not a virus.  I have yet to ever see any antivirus program that will detect an incoming port attack.




OBAMA=OneBigAssMistakeAmerica
Back to top
website  | Member # 87 | Joined: 2-19-2003 |
GoFastRacerMale Offline
HDF Supporter
V-Driver For Life!
50,000 post flame10,000 post flame1,000 post flame1,000 post flame500 post flame100 post flame100 post flame100 post flame
Big River, Ca
Posts: 62,882
APPD 7.81
Post Rank: 1
Spectra20
Post Icon Posted: April 06 2004,8:22 pm Post # 7 see this member send this member a private message  quote this post in reply

Quote (BigBoyToys @ April 06 2004,8:14 pm)
Here ya go.
Explanation of SYN scan: 'One problem with port scanning is that it is easily logged by those services listening at the ports. They see an incoming connection, but no data, so they log an error. There exist a number of stealth scan techniques to avoid this. One is the half-open scan that only partially opens a connection, but stops halfway through. This is also known as a SYN scan because it only sends the SYN packet. This stops the service from ever being notified of the incoming connection.'

So...you are under constant or regular port-scanning...which is quite normal these days when you're on broadband - thus connected to the net a lot or all the time... :D   Hope this helps :good

There ya go with the technical shit again!... :good  :laugh  :laugh  :laugh
Back to top
website  | Member # 101 | Joined: 3-03-2003 |
My Man's Sportin' WoodFemale Offline
Capricorn
HDF Supporter
Hallett Hottie
1,000 post flame1,000 post flame1,000 post flame500 post flame
Flathead Lake Montana/Lake Havasu City
Posts: 3,500
APPD 0.45
Post Rank: 20
Post Icon Posted: April 06 2004,8:30 pm Post # 8 see this member send this member a private message  quote this post in reply

avast! Virus Cleaner Tool - version 1.0.178 Unicode

Creating log file: C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\29HS0XI4\aswclnr[1].log

4/6/2004, 8:05:26 PM
Memory scanning started... No virus body found in memory
Memory scanning finished (49.1s).
----------
Files scanning started...
C:\Documents and Settings\Owner\Local Settings\Temp\~DFC8D2.tmp... file could not be scanned!
No virus body found.
Files scanning finished  (66441 files, 0 infected, 1267.8s).
Drives scanned: C:



Guess it's not a bug.  Whew!! Thanks again.


Edited by My Man's Sportin' Wood on April 06 2004,8:31 pm
Back to top
| Member # 250 | Joined: 10-17-2003 |
BigBoyToysMale Offline
Pisces
HDF Supporter
Chillin' in the Pacific Northwest
5,000 post flame500 post flame100 post flame100 post flame100 post flame100 post flame
Spokane, WA
Posts: 5,940
APPD 0.74
Post Rank: 12
Post Icon Posted: April 06 2004,8:35 pm Post # 9 see this member send this member a private message  quote this post in reply

As long as your firewall is catching the port scans, it's no problem.  It's easy to do a port scan.....the part that you have to worry about is that if you don't have a good firewall, and you do have some open ports, then a hacker can get into your computer.  In today's tech World, since most broadband is on all the time, it's quite common to get "hits" from someone or something doing a port scan on your PC.  All a port scan is doing, is looking for open ports, (Potential holes in security).  There can't be any harm done as long as it's caught, and since yours is logging it. I'd assume that they are catching it.

If you are that worried about it, go here http://www.dslreports.com/scan and run an actual port scan.  If it finds any open ports it will tell you so and provide you with a patch on fixing it so the port(s) is/are closed up. Good luck :comp




OBAMA=OneBigAssMistakeAmerica
Back to top
website  | Member # 87 | Joined: 2-19-2003 |
BigBoyToysMale Offline
Pisces
HDF Supporter
Chillin' in the Pacific Northwest
5,000 post flame500 post flame100 post flame100 post flame100 post flame100 post flame
Spokane, WA
Posts: 5,940
APPD 0.74
Post Rank: 12
Post Icon Posted: April 06 2004,8:36 pm Post # 10 see this member send this member a private message  quote this post in reply

Quote (My Man's Sportin' Wood @ April 06 2004,8:30 pm)
avast! Virus Cleaner Tool - version 1.0.178 Unicode

Creating log file: C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\29HS0XI4\aswclnr[1].log

4/6/2004, 8:05:26 PM
Memory scanning started... No virus body found in memory
Memory scanning finished (49.1s).
----------
Files scanning started...
C:\Documents and Settings\Owner\Local Settings\Temp\~DFC8D2.tmp... file could not be scanned!
No virus body found.
Files scanning finished  (66441 files, 0 infected, 1267.8s).
Drives scanned: C:



Guess it's not a bug.  Whew!! Thanks again.

I could have told ya that those would be your results (I think i did :D ) a port scan IS NOT a virus.




OBAMA=OneBigAssMistakeAmerica
Back to top
website  | Member # 87 | Joined: 2-19-2003 |
My Man's Sportin' WoodFemale Offline
Capricorn
HDF Supporter
Hallett Hottie
1,000 post flame1,000 post flame1,000 post flame500 post flame
Flathead Lake Montana/Lake Havasu City
Posts: 3,500
APPD 0.45
Post Rank: 20
Post Icon Posted: April 06 2004,8:47 pm Post # 11 see this member send this member a private message  quote this post in reply

Ya, but with all the viruses going around, one can never take too many precautions.  Besides, KH needed to be entertained :laugh :drama

Edited by My Man's Sportin' Wood on April 06 2004,8:48 pm
Back to top
| Member # 250 | Joined: 10-17-2003 |
GoFastRacerMale Offline
HDF Supporter
V-Driver For Life!
50,000 post flame10,000 post flame1,000 post flame1,000 post flame500 post flame100 post flame100 post flame100 post flame
Big River, Ca
Posts: 62,882
APPD 7.81
Post Rank: 1
Spectra20
Post Icon Posted: April 06 2004,8:52 pm Post # 12 see this member send this member a private message  quote this post in reply

My cable modem has a firewall and I use ZoneAlarm, my machine runs 24/7 and I get no bugs, viruses, nothing, zippo, nada!. :good  :laugh
Back to top
website  | Member # 101 | Joined: 3-03-2003 |
RIVERRATMIKEMale Offline
Taurus

River House Owner/0 Miles From Havasu!
1,000 post flame1,000 post flame500 post flame100 post flame100 post flame
Lake Havasu City/Parker, AZ
Posts: 2,764
APPD 0.34
Post Rank: 23
1986 28ft Chris Craft Stinger
Post Icon Posted: April 07 2004,1:05 am Post # 13 see this member send this member a private message  quote this post in reply

I never have had a firewall program ever in the two years I've owned this computer and no problems. I do use a Linksys wireless router, wonder if that acts as a firewall??? :stupid


Back to top
website  | Member # 74 | Joined: 1-20-2003 |
BigBoyToysMale Offline
Pisces
HDF Supporter
Chillin' in the Pacific Northwest
5,000 post flame500 post flame100 post flame100 post flame100 post flame100 post flame
Spokane, WA
Posts: 5,940
APPD 0.74
Post Rank: 12
Post Icon Posted: April 07 2004,5:35 am Post # 14 see this member send this member a private message  quote this post in reply

Quote (RIVERRATMIKE @ April 07 2004,1:05 am)
I never have had a firewall program ever in the two years I've owned this computer and no problems. I do use a Linksys wireless router, wonder if that acts as a firewall??? :stupid

Yes, it does.  It is a hardware firewall, not a software firewall.  Personally, I prefer a hardware firewall over a software firewall because simply put, anything that is made by software uses code (Programming Languages) and "code" can be analyzed and tweaked to get through.....if a person really wanted to.
Your Linksys Router more than likely is using NAT, Network Address Translation, and what that does is the actual WAN side, (Wide Area Network....Internet side) of the router uses the real IP (Internet Protocol) address and on the inside of the LAN (Local Area Network) it assigns sort of an "alias" or Private IP address to each computer, yours is probably in the class C range at 192.168.?.?.  So, the PC isn't actually using an IP addres that is viewable to the outside World.  
Did I make that simple enough? :D


Edited by BigBoyToys on April 07 2004,5:38 am




OBAMA=OneBigAssMistakeAmerica
Back to top
website  | Member # 87 | Joined: 2-19-2003 |
GoFastRacerMale Offline
HDF Supporter
V-Driver For Life!
50,000 post flame10,000 post flame1,000 post flame1,000 post flame500 post flame100 post flame100 post flame100 post flame
Big River, Ca
Posts: 62,882
APPD 7.81
Post Rank: 1
Spectra20
Post Icon Posted: April 07 2004,5:40 am Post # 15 see this member send this member a private message  quote this post in reply

Quote (BigBoyToys @ April 07 2004,5:35 am)
Quote (RIVERRATMIKE @ April 07 2004,1:05 am)
I never have had a firewall program ever in the two years I've owned this computer and no problems. I do use a Linksys wireless router, wonder if that acts as a firewall??? :stupid

Yes, it does.  It is a hardware firewall, not a software firewall.  Personally, I prefer a hardware firewall over a software firewall because simply put, anything that is made by software uses code (Programming Languages) and "code" can be analyzed and tweaked to get through.....if a person really wanted to.
Your Linksys Router more than likely is using NAT, Network Address Translation, and what that does is the actual WAN side, (Wide Area Network....Internet side) of the router uses the real IP (Internet Protocol) address and on the inside of the LAN (Local Area Network) it assigns sort of an "alias" or Private IP address to each computer, yours is probably in the class C range at 192.168.?.?.  So, the PC isn't actually using an IP addres that is viewable to the outside World.  
Did I make that simple enough? :D

I knew that!. :D  :laugh
Back to top
website  | Member # 101 | Joined: 3-03-2003 |
BigBoyToysMale Offline
Pisces
HDF Supporter
Chillin' in the Pacific Northwest
5,000 post flame500 post flame100 post flame100 post flame100 post flame100 post flame
Spokane, WA
Posts: 5,940
APPD 0.74
Post Rank: 12
Post Icon Posted: April 07 2004,5:41 am Post # 16 see this member send this member a private message  quote this post in reply

:D  :good  :good  :rotflmao  :rotflmao  I knew ya did ;)




OBAMA=OneBigAssMistakeAmerica
Back to top
website  | Member # 87 | Joined: 2-19-2003 |
GoFastRacerMale Offline
HDF Supporter
V-Driver For Life!
50,000 post flame10,000 post flame1,000 post flame1,000 post flame500 post flame100 post flame100 post flame100 post flame
Big River, Ca
Posts: 62,882
APPD 7.81
Post Rank: 1
Spectra20
Post Icon Posted: April 07 2004,5:46 am Post # 17 see this member send this member a private message  quote this post in reply

Quote (BigBoyToys @ April 07 2004,5:41 am)
:D  :good  :good  :rotflmao  :rotflmao  I knew ya did ;)

:good  :rotflmao  :rotflmao
Back to top
website  | Member # 101 | Joined: 3-03-2003 |
BigBoyToysMale Offline
Pisces
HDF Supporter
Chillin' in the Pacific Northwest
5,000 post flame500 post flame100 post flame100 post flame100 post flame100 post flame
Spokane, WA
Posts: 5,940
APPD 0.74
Post Rank: 12
Post Icon Posted: April 07 2004,5:52 am Post # 18 see this member send this member a private message  quote this post in reply

It's all relative :D




OBAMA=OneBigAssMistakeAmerica
Back to top
website  | Member # 87 | Joined: 2-19-2003 |
GoFastRacerMale Offline
HDF Supporter
V-Driver For Life!
50,000 post flame10,000 post flame1,000 post flame1,000 post flame500 post flame100 post flame100 post flame100 post flame
Big River, Ca
Posts: 62,882
APPD 7.81
Post Rank: 1
Spectra20
Post Icon Posted: April 07 2004,5:52 am Post # 19 see this member send this member a private message  quote this post in reply

Quote (BigBoyToys @ April 07 2004,5:52 am)
It's all relative :D

Yeah no shit!. :laugh
Back to top
website  | Member # 101 | Joined: 3-03-2003 |
BigBoyToysMale Offline
Pisces
HDF Supporter
Chillin' in the Pacific Northwest
5,000 post flame500 post flame100 post flame100 post flame100 post flame100 post flame
Spokane, WA
Posts: 5,940
APPD 0.74
Post Rank: 12
Post Icon Posted: April 07 2004,6:00 am Post # 20 see this member send this member a private message  quote this post in reply

Not sure what I meant by the "relative" comment, but I'm sure that it is since everything comes around full circle.  Oh geez, now I'm getting philosophycal :D  :laugh




OBAMA=OneBigAssMistakeAmerica
Back to top
website  | Member # 87 | Joined: 2-19-2003 |
GoFastRacerMale Offline
HDF Supporter
V-Driver For Life!
50,000 post flame10,000 post flame1,000 post flame1,000 post flame500 post flame100 post flame100 post flame100 post flame
Big River, Ca
Posts: 62,882
APPD 7.81
Post Rank: 1
Spectra20
Post Icon Posted: April 07 2004,6:07 am Post # 21 see this member send this member a private message  quote this post in reply

Quote (BigBoyToys @ April 07 2004,6:00 am)
Not sure what I meant by the "relative" comment, but I'm sure that it is since everything comes around full circle.  Oh geez, now I'm getting philosophycal :D  :laugh

Yep!.. :D  :laugh
Back to top
website  | Member # 101 | Joined: 3-03-2003 |
20 replies since April 06 2004,6:50 pm < Next Oldest | Next Newest >
 

[ Track this topic :: Email this topic :: Print this topic ]
add a reply to this topic create a new topic create a new poll

navbarlogo
The Colorado River WebRing
‹ Prev | Hub | Like | Join | Surprise | Next ›

Please help keep HDF free. If you enjoy this site, feel free to make a donation to keep it running. THANKS!