Firewall playing up after limewire closes
 

Okay, i've looked on here and can't find anyone else with this problem.

Once i close Limewire Pro (4.2.6), i constantly get messages from my firewall saying "A remote System is attempting to access your computer", then it lists time, date, IP address of computer trying to get access to the computer, and it gives an option to allow, block or manually configure the access from the computer. This happens about once every three minutes once i've closed Limewire Pro, and never any other time, and it's always from a different IP address, and it's always UDP (inbound) protocol.

I've checked the firewall settings, Limewire has permission, and the port for Limewire is open.

I'm running....

Windows XP Professional with Service Pack 2
The latest version of "Norton Internet Security" (Norton Firewall + Norton Anti-virus).
I have a 256kbps ADSL connection on a Speedtouch 530 external modem (Australian model as far as i know)

It's damn annoying and it only happens after i close Limewire Pro.
I have tried Disconnecting from the network before closing LW Pro, and i've tried pausing all my downloads and cancelling the uploads manually before closing LW pro, but nothing happens.

Norton Internet Security
 

Dear Aussie86

What version of NIS do you have?


UK Bob

As far as i could find, overall the version is "Norton Internet Security 2004"

Individually, the component parts are:
Norton Internet Security version 7.0.6.17
Norton Anti-Virus 10.0.15.13.


Thanks,

Aussie

Did you realise your modem has a NAT firewall? If you're getting uploads then either they're push requests or you've already forwarded a port for LW.

Tools>Options>Shutdown, is yours set for shutdown immediately or after transfers?

Do you run as an Ultrapeer?

Is your XP firewall turned on or off? Did you configure it for LW: http://www.limewire.com/english/content/firewalls.shtml

Do you have spyware & ad-ware eg: http://www.lavasoftusa.com/software/adaware/
Spybot - Search & Destroy: http://www.safer-networking.org/en/mirrors/index.html or
Spy Sweeper: http://www.webroot.com/wb/downloads/index.php

When did this problem start? Was it after you installed any softw?

Norton Personal Firewall
 

Dear Aussie86

I use Norton Personal Firewall 2003 and, coincidentally, a Speedtouch external (330 UK model) modem. And I found that whenever I turned on my PC I would get intrusion alerts from my own default windows IP address.

After an incident, where my son had downloaded something that had disabled my firewall, I checked out the Symantec website for help. Symantec advised that I delete the firewall, using control panel's Add/Remove facility, I kept the firewall's settings during deletion, and then do a reinstall, which I did.

I found that after reinstallation the "start up alerts" stopped and all my installed "rules" worked better. It seems that NPF can get "confused" by all the configuration settings it's asked to perform.

The deletion process cleared up this "confusion/small corruption" problem and set everything straight and pristine again.

Although I have not used NIS 2005, I have a copy and intend to install it when my current subscription runs out, I believe some "small corruptions" have crept into your product. And, possibly, deletion and reinstallation will clear this, but remember to keep your firewall settings.




UK Bob

Okay, i've tried uninstalling NIS and reinstalling it again, but nothing worked. I've tried looking to see if i've got spyware, but i don't.

I just realised that all these blocked intrustions are on port 6346 (the one that Limewire uses). but this is after i've closed Limewire down (hit the X in the top corner, sending it to the taskbar, then right clicking on that icon and clicking "close immediately". So, therefore i guess that somehow, after i've closed Limewire permanently, i'm still somehow connected to the gnutella network. I don't get any of these blocked intrustions when Limewire is running, because it's allowed to use the port, and since limewire is now closed, i'm think the blocked intrusions must be ppl attempting to access uploads through whatever way i'm still connected to the gnutella network, as Limewire is the only thing allowed to access port 63446 and nothing else, and sometnhing else must be trying to access it, or Limewire isn't totally closed down properly.


Any suggestions on how to fix the problem?

I've also tried uninstalling Limewire and installing it again.

Thanks


Aussie

hmmm just a thought check out this link for java: http://www.gnutellaforums.com/showth...hlight=JRE+1.5

which JRE version do you have

Are you running as an Ultrapeer? If yes, then there are people going thru you to help them connect. This is a good thing, but may have a delayed action when closing LW down.

Do you have your LW Shutdown set to shutdown immediately or wait until transfer completes?

in reply:

no i'm not running as an ultrapeer.

I've got Java 1.4.2_06. I'm getting Version 1.5 now. I'll say if that does anything.

General Advice for anyone else who has this problem...


DO NOT UPGRADE TO JAVA 1.5.

I'm now getting blocked intrustion attempts as soon as the computer starts, before i've even gone into LimeWire!!!!!!! and they're all from Port 6346, and i'm getting about two per minute.


in reply to posts:

I've got limewire set to close after transfers are complete, but ususally i close limewire so it's running in the background (taskbar tray icon), and then right click and "Close Immediately"



Aussie