unauthorized port access

[bearbizket]

Thank you for taking the time to review and respond to this post,

Okay on occasion I have notice unathorized port access on a couple of my ports. Instead of pulling my power cord to my cable modem, is there anything else I could do.









Thanks Again,
Bearbizket

[SoggyBottom]

You will need to grab yourself a personal firewall and take the time to understand how Firewalls work. As a misconfigured firewall is no better than having no firewall.

Go to www.webattack.com and download a freebie.

Sygate and Tiny are pretty good ones.

[neowarrior]

better yet go to astalavista and get a program called outpost its the best IDS /firewall you can get.

[preacherman481]

Just curious. Which ports are you talking about, and how do you know it was unauthorized access? Did you get a firewall alert? Are you running a firewall now?

[SoggyBottom]

I hate to be pedantic, but it is probably best not to confuse the newbies between FWs and an IDS. They are 2 totally different things.

[jehnx]

I agree with ya Soggy, let's just let him do what he should and read up a bit on protection before any details are thrown.

[Remote_Access_]

It's called Agnitum Outpost and it's available at www.agnitum.com/products/outpost/
If you really think it's a threat you can also purchace a hardware based firewall for your cable.

Remote_Access_

[bearbizket]

thanks for replying... it is appreciated. And not to turn this into a flame session, I am a noob. I have black ice registered version. I do a lot netstats because i am paranoid. So of the foreign i addresses have nothing to do with what i am doing. I have also been getting alot of ICMP Storms . And just came across a ICMP flood. But if I do happen a crossed a unathorized user what can i do.
Thanks for the replies and info,
Bearbizket

[SoggyBottom]

You have to keep in mind that a firewall doesnt CLOSE ports on your machine, it simply blocks them from incoming/outgoing traffic. Simply block incoming ICMP packets on your firewall and you need not worry anymore.

But as I said, installing a firewall is worthless if you dont know how to configure it properly. In my opinion, read up heavily on TCP/IP, Firewalls and Protocols etc.

[bearbizket]

thank for the info SoggyBottoms. I will look into it?