|
-
Nov 5th, 2003, 10:13 AM
#1
Thread Starter
Fanatic Member
BlackICE PC Protection... something seriously wrong with it?
Hi All.
I've just installed the new BlackICE PC protection software from www.iss.net.
It's only been installed a few minutes, and already I have nearly 4.9 million hits, most of them being "Queso" and "Gnutella". I fail to believe that this many people are scanning my system in such a short amount of time... so I investigated it!
I've dropped BlackICE and run IPTABLES through Linux... and surprisingly... all the hits stopped, bar a few ping requests 
Now i've dropped the linux box, and restarted BlackICE again... and all the hits have started again! I think this is some conspiracy to gain access to systems via a suppose'd 'good piece of software'.
Anyone else had anything similar?
(I now have 6.3 million hits, and that's while typing this thread!)
-
Nov 6th, 2003, 01:05 PM
#2
Lively Member
Hey VisionIT
I use Black Ice on a lot of boxes, and sometimes it is very sensitive to calls crossing the interface, which you can adjust with in the program itself. The only time I get eleventy billion hits is when I am piped directly to the internet without a router or in the DMZ. and probably 95% of those "alerts" are not valid hack attempts, just broadcasts and descoveries.
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
Click Here to Expand Forum to Full Width
|