Jump to content

Suspicious firewall blocking


Go to solution Solved by itman,

Recommended Posts

I looked at this blocking list, can you please explain what and how? Is this some kind of DDoS attack on me? or are these false positives? 192.168.2.111 - my PC from which I view the report
192.168.2.1 - my router

Знімок екрана 2023-12-14 100408.png

Link to comment
Share on other sites

All the blocked entries are for inbound network traffic from svchost.exe. They are also all UDP protocol related.

Have you modified Eset default firewall rules or added new firewall rules?

Link to comment
Share on other sites

I’m not sure to answer, all the changes I made were exceptions for the detection of 2 programs radmin and parsec. In the same window I clicked “unblock”.

Edited by BKab
Link to comment
Share on other sites

Just got home and this is what I see from my home notebook.
192.168.0.102 - my Notebook
192.168.0.101 - my phone
192.168.0.1 - my router

As I understand it, this is all service traffic? Is it safe to unlock?

 

 

bandicam 2023-12-14 18-43-22-641.jpg

bandicam 2023-12-14 18-43-29-372.jpg

Edited by BKab
Link to comment
Share on other sites

  • Solution

Inbound UPnP traffic; i.e. port 1900, UDP, is a security risk; especially if originating from the router. Most ISP issued routers no longer perform that type of network traffic. You can stop this type of traffic by disabling Win SSDP service. I have w/o any subsequent issues occurring. Alternatively, you can disable UDP PnP processing on the router.

Unless you really know what you are doing, I would not override Eset firewall inbound blocking

Edited by itman
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...