Home Network Issues

[MasterTB 8]

I just came back to Eset, I thought I could stay longer than 24 hours this time, but NO, there had to be issues with the network, AGAIN, and it has been like this since version 9.

Everything seems to work fine, I can print on my wifi printer, internet access was fast and with no issues, gaming OK, BUT, when I tried accessing my PC through my Smart TV (which Eset Network Scaner saw and Identified even by brand) I was out of luck.

Only disabling the firewall allowed access. WTF Eset??????

How hard is it to build a firewall that you are the only product that produces this issue, back to Norton, all is well. 

I really would love to come back to Eset but there's got to be a way for this to work out of the box. It's a wired Network, both devices are on the router (TV and PC acting as server for multimedia) and still, the TV can't see the PC with the firewall enabled, and I was using interactive mode to see everything pop up.

[Marcos 5,070]

Without checking your EIS settings and diagnostics logs we can only speculate about what's going on. It could be that the firewall is not configured properly and blocks inbound non-initiated communication as it's supposed to in automatic mode.

Please continue as follows:
- In the advanced setup -> Tools -> Diagnostics enable advanced firewall logging
- Reboot the computer
- Reproduce the problem
- Stop logging
- collect logs with ELC.

Then upload the logs to a safe location (e.g. Dropbox, Onedrive, etc.) and drop me a message with a download link and information about your computer's and TV's IP address.

[MasterTB 8]

https://1drv.ms/u/s!ApwbTG-2ZqDWhalFthG0GzR4YmKvhw

Well, it turns out, uninstalling EIS and reinstalling it with the TV on worked better than troubleshooting, still it would be nice to know what happened and how it was blocked the first time around so, here's the logs.

Also, the TV is on IP 192.168.0.6 and there was a rule blocking traffic on TCP port 2869 incoming, why? I don't know but it was created automatically, and I disabled it manually. You will tell me if that was wrong or not.

My PC is 14 on that same IP block and my wife Notebook is on IP 10, and also has a rule blocking trafick on 2869 TCP but there's more info on that rule so I'll leave it standing, it says "Block incoming ICSLAP (UPNP) requests for System.

So, for now, it seems I'll stay but you will hear me again if I bring another PC or notebook and they cannot communicate with my PC, also, If I end up spreading the Eset love to the Notebook and it causes issues, you will hear from my wife, that's not a pretty thing.

Jokes aside, does this have to be so hard every time you put a device in your network???????? Please follow up on this.

eis_logs.zip

[MasterTB 8]

I put a download link to onedrive with the logs and attached them aswell, sorry for the doubles.

[Marcos 5,070]

The Diagnostics folder is empty. That would happen if you don't enable advanced firewall logging under Tools -> Diagnostics in the advanced setup.

[MasterTB 8]

OOPs, my bad, enabled the wrong loggin. 

https://1drv.ms/u/s!ApwbTG-2ZqDWhalFthG0GzR4YmKvhw

Give it time to finish uploading, it's 160MB

[MasterTB 8]

I also have to point out that it takes ages for the Notebook to see the PC, Eset keeps blocking it, no matter what I do, I have been refreshing the network tab in explorer on the notebook for the past 10 minutes, I just saw the PC again... this is no fun, I use this machines to work too, and files need to be accessible.

The log finished uploading btw..

[itman 1,659]

1 hour ago, MasterTB said:

when I tried accessing my PC through my Smart TV (which Eset Network Scaner saw and Identified even by brand) I was out of luck.

This is going to be problematic. Although you can add the IP address associated with the SMART TV to the Eset firewall Trusted Zone which will resolve the connection issues, the Smart TV is an IoT i.e. Internet of Things device. Those are getting hacked constantly. Personally, I would advise against this.

[MasterTB 8]

Yeah, well, Eset is the only firewall that has given me issues. I have a paid suscription to Norton, (since I stopped using eset from v9 forward) and I have also tried from time to time Bitdefender and Avast, none of them ever gave me issues inside my home newtork be it with the TV or other devices.

Why is it that Eset always does?

I have been toying with the software for 2 days now, every time I try to access this PC (the one with Eset) with any other device it takes the others several minutes to be able to see it and access files on it because Eset's firewall keeps blocking them, they are all clean!!, no hacks, no viruses, no threats.

I understand that Eset is posibly trying it's best to prevent any harm to the PC it's installed on, but, If I have 2 pc's and one can't see the other, what's the point. I'm telling eset that the network it's trusted, that the devices on it are trusted, I have the PC set up to act as a multimedia server on this network and this network alone, all other access is restricted, also any other network would be, why does it have to be so restrictive?

Network file sharing system is enabled, there's also a rule in the firewall to allow Home Network Sharing (introduced in win 7 if I'm not mistaken) and still Eset refuses to cooperate, it doesn't make sense.

Edited February 23, 2018 by MasterTB

[MasterTB 8]

New logs, uploading to one drive, still can't access the PC trhough the Notebook, the TV is fine (because I disabled the rule Eset had created, which I didn't on the Notebook) 

Sorry but this is unacceptable, I need to be able to access my files.

https://1drv.ms/u/s!ApwbTG-2ZqDWhalIRMm9sAWlKPKrIw

forgot to add that I also created and sent dumps within eset to your servers via the app.

Edited February 23, 2018 by MasterTB

[Marcos 5,070]

Not sure which of these blocked communications could cause the issues. Will pass it to developers for investigations.

[MasterTB 8]

Thanks Marcos, will wait and see, in the meantime, still no connection from the notebook to the PC, TV is working fine

[Marcos 5,070]

Is 192.168.1.10 the IP address of your notebook?

[MasterTB 8]

192.168.0.10 is the Notebook.

Here's the map as seen by EIS

There are 2 chromecasts (1Ccast2 and 1Ccast Ultra), an Epson L395 Wifi Printer, the HP Notebook, my TV, the Router and my PC (Ryzenx) the other 2 are my wife's cell and My Pixel 2 XL

What I'm not sure about is that 192.168.0.254 intel device.... I also added a picture of the router DHCP client table, and that device is NOT there. Will reboot the router and report back.

 

Edited February 23, 2018 by MasterTB

[MasterTB 8]

To make the story short, EIS is seeing a ghost device. The 192.168.0.254 device you see there in the Network explorer does not exist, it is NOT connected to the router and I have no other device at home, no neighbours nearby that can access the wifi (and even if they could my pasword is 18 characters long so...)

I'm posting a detailed list of devices in my router, and the ghost device. Sorry for the multiple edits, forgot to mention that my DHCP range starts at 3 and has a max of 100 spaces so, a device in 254 cannot exist......

Edited February 23, 2018 by MasterTB

[peteyt 393]

Not sure if it will help but in setup - network protection there is a firewall troubleshooter that shows you the latest blocked stuff and allows you to unblock them if you need to

[MasterTB 8]

Yes, I saw that, random stuff, none of which I would allow anyway. Don't think the issue is there. I'm worried about the Ghost device Eset is seeing in 192.168.0.254 (my DHCP range isn't that long) and the fact that just now, it blocked comunications from an ip that has no assignment within the router, literally, it blocked traffic from 192.168.0.3 which the router does not list as a device, it is not online because that's the ip assigned to the Killer LAN on my PC wich is disabled and has no cable attached to it... so.... wieird sh...t

Edited February 23, 2018 by MasterTB

[itman 1,659]

As far as 192.168.0.254,  appears to be perhaps a device, set top box maybe, associated with your TV cable provider: https://www.cablevisionfibertel.com.ar/ ?

[itman 1,659]

As far as the network communication between the desktop and notebook, I suspect the problem might lie in the notebook network connections. It appears you don't have Eset installed on that?

Edited February 23, 2018 by itman

[MasterTB 8]

No, that notebook runs pure Win10 x64, so, why would it have problems?? But I'll check again, even though disabling Eset makes the issue go away.

The boxes are not connected to the router, they only have the cable from the TV provider, if they are indeed broadcasting I don't know how that can be because they don't even have wifi or anything, I'll check that too, but there should be 2 devices cause I have 2 TV cable boxes

Edited February 23, 2018 by MasterTB

[itman 1,659]

13 minutes ago, MasterTB said:

I'll check that too, but there should be 2 devices cause I have 2 TV cable boxes

Do they both have coax cable or fiber connections? The second box could be Wi-Fi receiving its transmissions from the coax/fiber connected box. This is how my three ATT U-Verse boxes work. One is Ethernet connected to the router, but the other two boxes are Wi-Fi.

Edited February 23, 2018 by itman

[MasterTB 8]

They only have the coax connection, no fiber here, sadly. One is a Motorola box and the other is Arris. I unplugged them and did a network exploration with EIS, it still sees the device even though the boxes are off.

I also did search about the router, it seems some brands broadcast the admin login over 192.168.0.254, Technicolor is not among them, but that could be it too.

[itman 1,659]

1 minute ago, MasterTB said:

I also did search about the router, it seems some brands broadcast the admin login over 192.168.0.254, Technicolor is not among them, but that could be it too.

Did the cable company provide your router?

[MasterTB 8]

Yes, and it's the only one in the house. It has 4 lan port (gigabit) and 2 wifi signals, one at 2.4 and another at 5.8

[itman 1,659]

Think I figured it out, do you have a WAP which I suspect is connected to the router? If so, that is what 192.168.0.254 is.