Jump to content

Suspicious firewall blocking


Go to solution Solved by itman,

Recommended Posts

I looked at this blocking list, can you please explain what and how? Is this some kind of DDoS attack on me? or are these false positives? 192.168.2.111 - my PC from which I view the report
192.168.2.1 - my router

Знімок екрана 2023-12-14 100408.png

Link to comment
Share on other sites

All the blocked entries are for inbound network traffic from svchost.exe. They are also all UDP protocol related.

Have you modified Eset default firewall rules or added new firewall rules?

Link to comment
Share on other sites

I’m not sure to answer, all the changes I made were exceptions for the detection of 2 programs radmin and parsec. In the same window I clicked “unblock”.

Edited by BKab
Link to comment
Share on other sites

Just got home and this is what I see from my home notebook.
192.168.0.102 - my Notebook
192.168.0.101 - my phone
192.168.0.1 - my router

As I understand it, this is all service traffic? Is it safe to unlock?

 

 

bandicam 2023-12-14 18-43-22-641.jpg

bandicam 2023-12-14 18-43-29-372.jpg

Edited by BKab
Link to comment
Share on other sites

  • Solution

Inbound UPnP traffic; i.e. port 1900, UDP, is a security risk; especially if originating from the router. Most ISP issued routers no longer perform that type of network traffic. You can stop this type of traffic by disabling Win SSDP service. I have w/o any subsequent issues occurring. Alternatively, you can disable UDP PnP processing on the router.

Unless you really know what you are doing, I would not override Eset firewall inbound blocking

Edited by itman
Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...