Blocked by Firewall (n00b allert)

Simian · 28 Jul 2006 at 15:03

I've just dug out a copy of Sygate Personal Firewall v5.6 and installed it!, as i don't like ZoneAlarm and I don't want to rely on SP2's Firewall now I'm on Broadband!...

Anyhew, I keep getting this pop up telling me that 'ntoskrnl.exe" has been blocked (looking at the log its incoming 1894 attempts) Do I need to allow this to access (out or in!?!) as the pop-up is starting to annoy me! (the reason I don't like Zone-Alarm).. :confused:

Thanks
Sim

Ricochet J · 28 Jul 2006 at 16:23

If a .exe is trying to come in nuke it from orbit or whatever. Unknown .exe's trying to come into your system will eat your computer.

Simian · 28 Jul 2006 at 17:04

I got fed up and went over to the dark side!... I un-installed Sygate and installed Zone Alarm ( :eek:

), At least thats got support still!!!...

I'll just have to put up with the inane pop-ups!...

One question I have now about ZA is...

I seem to have an extrodinary amount of intrusion alerts!... the counter is currently at about 4000 and is climing at a stupid rate!... should it be doing this!?!?!.. :confused:

LoadsaMoney · 28 Jul 2006 at 22:46

Simian said:
One question I have now about ZA is...

I seem to have an extrodinary amount of intrusion alerts!... the counter is currently at about 4000 and is climing at a stupid rate!... should it be doing this!?!?!..

Yup thats normal.

bitslice · 28 Jul 2006 at 22:53

Simian said:
Anyhew, I keep getting this pop up telling me that 'ntoskrnl.exe" has been blocked (looking at the log its incoming 1894 attempts)

this should answer your question...
http://forums.sygate.com/vb/showthread.php?s=&threadid=14890

it's OK if you are on a LAN, otherwise block it.

hth

.

RobH · 28 Jul 2006 at 23:28

All of the blocked stuff is normal, you are not actually being intruded when it shows an attempt, it's more "background noise" than hackers. Things like unpatched windows 98/ME machines infected with worms sitting on the Internet somewhere probing random IP ranges looking for open ports. Look up Microsoft's "Honey Monkey" project, it's quite interesting.

If you have a NAT router then your firewall will hush up as the router simply says "I have no request for this traffic so I'll drop it". With a NAT router your firewall will probably only become noisy when there is a real threat such as an intrusion through an open port.