Hi
I am using norton Security 2005 and also use router modem with NAT, i am recieving constant alerts from norton that a remote system is attempting to access my computer, the alert recommends that i allow this remote system to access my PC. I always choose 'block always' as i do not want to take the risk. this happens up to 5 or 6 times within a minute or so and the remote IP changes constantly as does the port number. Can anyone shed some light on why this is happening? Many thanks in advance

Mark

Did you just install Nortons? Or...did you just install/activate the Firewall recently?

If so...you may want to check the option of NOT alerting you every time access is blocked.

There is a lot of "noise" on the Internet these days. Servers / services / etc....pinging everywhere. This noise will set off firewall alerts. Since it is usually not anybody targeting your system specifically....you can just ignore the notices (keep the firewall going....just choose the option to NOT alert you every time).

HOWEVER.....IF......you've had Nortons WITH the firewall installed for quite a while AND you've made NO recent changes to it, your router, or the rest of your network (like adding another computer, etc) AND just very recently started receiving all these alerts...something may be up.

Post back about that and others can follow up ...as needed.

HTH

> PLEASE CONTRIBUTE to Computing.net - Report back which suggestions did/didn't help. <

Hi Kev

I have had norton installed for about 6 mths now and been using my NAT router for about a yr, as far as i know nothing has changed recently in the config of either, I have turned the alerts off now as I have just had about 4 pop up! What would you recommend? Maybe a fresh install?

Thanks mate

Mark

Why not try peer garudian. Most experts on this forum will say its a shady tool used for blocking out RIAA and others for downloading music, but that is not true. Although it is typically used for this purpose, its a great way to block spammers and ad/spyware companies out of your pc. I found it an excellent tool for identifing exactly what companies where looking at my pc. Alot of times, those alerts are ad companies checking your pc for security flaws or holes. I would highly reccommend installing peer gaurdian, and checking the log every few days to see what ad / spam companies where looking on your pc.

http://methlabs.org/

Well...it sounds like your firewall is working fine. It seems to be blocking stuff or you wouldn't be getting the alerts be begin with. But to suddenly start getting a ton of alerts like that seems very odd.

Are you sure that thoe alert pop-up setting did not used to be OFF (meaning the stuff was being blocked but you did not know about it)....and was recently turned back on....making it appear like a sudden onslaught?

If you're sure that that particular setting has not changed...you may want to do a VERY thorough scan of your PC with several bug tools (adaware, spybot, etc) as well as your updated virus software WHILE IN SAFE MODE just to be sure that you have not gotten some trojan that is sending out a "becon" signal to another system somewhere and that system is trying to create a connection.

Also....Just to make sure something fishy has not happended to your Router to open a port somewhere.....you may want to Reset the router (with the little reset button on the back)....to factory settings....apply any updates to the router....then change any of the settings back to what you had (if you had changed any of the settings before).

Those are the only other things I can think of at the moment. But again...it is simply very odd to suddenly start getting all those alerts....that's why you need to make SURE that you did not have the "alert setting" turned off in your firewall before. If it was indeed NOT turned OFF before.....you would have been having periodic alerts before now due to simple "Internet static."

Anyways.....hope these suggestions help.

> PLEASE CONTRIBUTE to Computing.net - Report back which suggestions did/didn't help. <

This is also happening to me too after i was downloading using limewire. I heard some people on this forum say that a remote system is a system located on your area . And said tat if you were using programs like kazaa or limewire programs that are peer to peer ppl would try to connect to you to download music that you have on your computer. Because when you use those programs, it reconize your ip address and it'll leads other to your place to download music.

I'm having the same problem too. Last night was very bad. I had the remote access alert every 10-20 seconds. I couldn't take it any longer, I unplugged the cable modem, and still got two more alerts. I was thinking it was XP's svchost.exe. But, NIS 2005 recommended "Permit Always" as the selection for this remote access. I researched NIS support site with no help, made sure all definitions were updated, and still had this issue.
About a month ago, I had to reset the NIS firewall rules all to default, by using NIS support recommendations (it wouldn't let me change rules for programs) so i ran a script NIS site that set all firewall rules to default. Maybe this had something to do with it. I don't want to uninstall and reinstall, but I may try that tonight. Anyone have the same problem? Found the solution? Plz let us know.