Gnutella Forums

Gnutella Forums (https://www.gnutellaforums.com/)
-   Download/Upload Problems (https://www.gnutellaforums.com/download-upload-problems/)
-   -   Norton 2003 (https://www.gnutellaforums.com/download-upload-problems/19694-norton-2003-a.html)

HOLA April 1st, 2003 03:24 PM

Norton 2003
 
I have norton personal firewall 2003, and could it be that Limewire is causing it show Intrusion Attempts with Invalid TCP Flags? I was just wondering why I would get something like that or why someone would be trying to hack me.
TCP Source Port: 6346
TCP Destination Port: 1786
TCP Flags invalid: 0x00000015.
Thats the info it gave me. Are those the ports limewire uses?? Because it could be that when someone tries to connect to me to get something from me, I get a intrusion attempt warning?

trap_jaw April 1st, 2003 03:41 PM

Most personal firewall consider any connection attempt as an intrusion attempt although a simple connection attempt is perfectly harmless. (That's why I don't use that kind of - er - junk).

HOLA April 1st, 2003 03:51 PM

what your sayin, why would it be considered "Invalid TCP Flags"?

trap_jaw April 1st, 2003 11:30 PM

I'm not a TCP expert, but if the TCP flags are truly invalid your operating system will handle the TCP packet accordingly. Why the firewall shows those alerts in its logs I don't know.

By the way, hacking somebody, who is not running a publicly accessible server listening on some port is almost impossible.
Windows, by default, listens on the NetBIOS port, but you can trust that to be relatively secure if you turn off windows shares. If you don't run any other services like an Exchange Server, a ftp server or IIS.

HOLA April 2nd, 2003 01:53 PM

Quote:

Originally posted by trap_jaw
I'm not a TCP expert, but if the TCP flags are truly invalid your operating system will handle the TCP packet accordingly. Why the firewall shows those alerts in its logs I don't know.

By the way, hacking somebody, who is not running a publicly accessible server listening on some port is almost impossible.
Windows, by default, listens on the NetBIOS port, but you can trust that to be relatively secure if you turn off windows shares. If you don't run any other services like an Exchange Server, a ftp server or IIS.

It says that Invalid TCP FLags can be used before hacking to find stuff out. is that true? I am confused big time.

trap_jaw April 2nd, 2003 02:03 PM

Maybe you could find out what kind of server is running on a specific port using those 'invalid TCP flags'. Some port scanners possibly make use of that kind of techniques but that's not really dangerous if your software is secure.


All times are GMT -7. The time now is 02:38 PM.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 ©2011, Crawlability, Inc.

Copyright © 2020 Gnutella Forums.
All Rights Reserved.