Firewall playing up after limewire closes
 

Okay, i've looked on here and can't find anyone else with this problem.

Once i close Limewire Pro (4.2.6), i constantly get messages from my firewall saying "A remote System is attempting to access your computer", then it lists time, date, IP address of computer trying to get access to the computer, and it gives an option to allow, block or manually configure the access from the computer. This happens about once every three minutes once i've closed Limewire Pro, and never any other time, and it's always from a different IP address, and it's always UDP (inbound) protocol.

I've checked the firewall settings, Limewire has permission, and the port for Limewire is open.

I'm running....

Windows XP Professional with Service Pack 2
The latest version of "Norton Internet Security" (Norton Firewall + Norton Anti-virus).
I have a 256kbps ADSL connection on a Speedtouch 530 external modem (Australian model as far as i know)

It's damn annoying and it only happens after i close Limewire Pro.
I have tried Disconnecting from the network before closing LW Pro, and i've tried pausing all my downloads and cancelling the uploads manually before closing LW pro, but nothing happens.

Norton Internet Security
 

Dear Aussie86

What version of NIS do you have?


UK Bob

As far as i could find, overall the version is "Norton Internet Security 2004"

Individually, the component parts are:
Norton Internet Security version 7.0.6.17
Norton Anti-Virus 10.0.15.13.


Thanks,

Aussie

Did you realise your modem has a NAT firewall? If you're getting uploads then either they're push requests or you've already forwarded a port for LW.

Tools>Options>Shutdown, is yours set for shutdown immediately or after transfers?

Do you run as an Ultrapeer?

Is your XP firewall turned on or off? Did you configure it for LW: http://www.limewire.com/english/content/firewalls.shtml

Do you have spyware & ad-ware eg: http://www.lavasoftusa.com/software/adaware/
Spybot - Search & Destroy: http://www.safer-networking.org/en/mirrors/index.html or
Spy Sweeper: http://www.webroot.com/wb/downloads/index.php

When did this problem start? Was it after you installed any softw?

Norton Personal Firewall
 

Dear Aussie86

I use Norton Personal Firewall 2003 and, coincidentally, a Speedtouch external (330 UK model) modem. And I found that whenever I turned on my PC I would get intrusion alerts from my own default windows IP address.

After an incident, where my son had downloaded something that had disabled my firewall, I checked out the Symantec website for help. Symantec advised that I delete the firewall, using control panel's Add/Remove facility, I kept the firewall's settings during deletion, and then do a reinstall, which I did.

I found that after reinstallation the "start up alerts" stopped and all my installed "rules" worked better. It seems that NPF can get "confused" by all the configuration settings it's asked to perform.

The deletion process cleared up this "confusion/small corruption" problem and set everything straight and pristine again.

Although I have not used NIS 2005, I have a copy and intend to install it when my current subscription runs out, I believe some "small corruptions" have crept into your product. And, possibly, deletion and reinstallation will clear this, but remember to keep your firewall settings.




UK Bob

Okay, i've tried uninstalling NIS and reinstalling it again, but nothing worked. I've tried looking to see if i've got spyware, but i don't.

I just realised that all these blocked intrustions are on port 6346 (the one that Limewire uses). but this is after i've closed Limewire down (hit the X in the top corner, sending it to the taskbar, then right clicking on that icon and clicking "close immediately". So, therefore i guess that somehow, after i've closed Limewire permanently, i'm still somehow connected to the gnutella network. I don't get any of these blocked intrustions when Limewire is running, because it's allowed to use the port, and since limewire is now closed, i'm think the blocked intrusions must be ppl attempting to access uploads through whatever way i'm still connected to the gnutella network, as Limewire is the only thing allowed to access port 63446 and nothing else, and sometnhing else must be trying to access it, or Limewire isn't totally closed down properly.


Any suggestions on how to fix the problem?

I've also tried uninstalling Limewire and installing it again.

Thanks


Aussie

hmmm just a thought check out this link for java: http://www.gnutellaforums.com/showth...hlight=JRE+1.5

which JRE version do you have

Are you running as an Ultrapeer? If yes, then there are people going thru you to help them connect. This is a good thing, but may have a delayed action when closing LW down.

Do you have your LW Shutdown set to shutdown immediately or wait until transfer completes?

in reply:

no i'm not running as an ultrapeer.

I've got Java 1.4.2_06. I'm getting Version 1.5 now. I'll say if that does anything.

General Advice for anyone else who has this problem...


DO NOT UPGRADE TO JAVA 1.5.

I'm now getting blocked intrustion attempts as soon as the computer starts, before i've even gone into LimeWire!!!!!!! and they're all from Port 6346, and i'm getting about two per minute.


in reply to posts:

I've got limewire set to close after transfers are complete, but ususally i close limewire so it's running in the background (taskbar tray icon), and then right click and "Close Immediately"



Aussie

I was just reading ukbobboy01 post above. I also am Running WindowsXP MCE which operates off the windowsXP pro platform. I can load either version. I have NIS 2004 and JRE 1.5. I have LW version 4.3.3 configured as follows for startup. Tool Options advanced system startup run on system startup unchecked. Then Tools, options, connection, connect on startup checked. Try this LimeWire configurtion. I believe it will elimainate your intrusion alerts when you start your system up. It will not allow LimeWire to start until you desire to use the program. Please post back and let us now if this helped.

Silly Question Time
 

Dear Aussie86

You have deleted and reinstalled NIS 2004 to insure that there is no corruption/confusion thats crept into your Norton's App. However, (and here is the silly question) have you set up a "rule" in your firewall to allow any computer access (inbound and outbound) to port 6346?

Although, in your original posting, you said that you have set up LW to access the required port I believe inbound queries come in via this port as well. So you may have to tell NPF 2004 (the firewall portion of NIS 2004) to allow inbound and outbound connections as well. You will find instructions on how to do this on the Symantec Website.

Good Luck.




UK Bob

I fixed the problem, as well as a coupla other problems with the computer...

I made another user profile for Win XP, copied all of "My Documents" to the new profile, kept all the firewall settings exactly the same, and now it's good... i am not getting any intrustion alerts, AND Limewire is downloading at a really really good speed (as opposed to 2KB/s that i was getting on my old profile).

Dunno what this did, but maybe there was some problem that spyware/Antivirus/changing settings couldn't fix?
....

By the way, i had set NPF to allow incomming and outgoing connections via port 6346 and to allow Limewire to use that port only... the problem was that limewire wasn't using the port when i was getting blocked access attempts.

meh... anyway, tis all fixed now.


Thanks to everyone for the help!!!

Aussie

limewire
 

Okay heres the problem: I click on the limewire icon and nothing comes up. I've tried uninstalling and re-installing it but it doesn't work. We have two firewalls one with NIS and another which is the windows one. The NIS firewall is turned off and is set to permit all for limewire. The windows is also set to not block it and is on. Any ideas?