Jump to content

Eset SS8 goes beserk when using utorrent


Recommended Posts

Recently i noticed that each time that i open u torrent (even with no active uploads or downloads) eset firewall goes nuts blocking ICMP requests, what is going on

 

30/01/2015 00:17:54    Communication denied by rule    80.231.130.xxx    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    Hundreds of log entries like this (different ip's) my hdd making lots of noise writing this nonsense to disk even after to totally unselected IDS packet inspection by rights if this worked as it should then it should have stopped logging /blocking

Link to comment
Share on other sites

 

03/02/2015 23:43:43    Communication denied by rule    1.80.203.225    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:42    Communication denied by rule    95.65.102.144    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:42    Communication denied by rule    188.168.34.221    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:42    Communication denied by rule    112.162.154.140    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:41    Communication denied by rule    188.143.105.215    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:41    Communication denied by rule    151.249.146.209    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:40    Communication denied by rule    86.123.122.157    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:39    Communication denied by rule    109.206.159.230    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:38    Communication denied by rule    110.240.28.4    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:38    Communication denied by rule    116.68.207.78    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:38    Communication denied by rule    110.240.28.4    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:37    Communication denied by rule    86.123.122.157    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:33    Communication denied by rule    122.169.175.0    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:31    Communication denied by rule    110.240.28.4    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:31    Communication denied by rule    110.240.28.4    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:30    Communication denied by rule    110.240.28.4    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:26    Communication denied by rule    178.121.111.0    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:26    Communication denied by rule    94.9.111.0    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:23    Communication denied by rule    136.243.12.57    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:23    Communication denied by rule    46.166.188.195    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:23    Communication denied by rule    71.126.198.132    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:22    Communication denied by rule    46.166.186.249    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:22    Communication denied by rule    77.78.38.4    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:21    Communication denied by rule    179.215.110.46    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:20    Communication denied by rule    37.19.170.54    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:20    Communication denied by rule    78.84.64.12    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:17    Communication denied by rule    162.219.179.234    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:15    Communication denied by rule    60.11.107.191    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:15    Communication denied by rule    212.93.97.120    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:15    Communication denied by rule    212.93.97.120    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:14    Communication denied by rule    188.235.87.159    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:14    Communication denied by rule    60.11.107.191    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:14    Communication denied by rule    178.45.201.112    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:13    Communication denied by rule    60.11.107.191    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:13    Communication denied by rule    84.2.252.163    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:13    Communication denied by rule    212.93.97.120    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:13    Communication denied by rule    85.251.146.50    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

03/02/2015 23:43:12    Communication denied by rule    60.11.107.191    0.0.0.0    ICMP    Apply ICMP filter    C:\Documents and Settings\Admin\Application Data\uTorrent\uTorrent.exe    JHYTR456UY\Admin

 

Why is eset firewall blocking traffic from the internet  this is when utorrent is idle no seeding or downloading going on  has eset gone anti P2P ???  even if i disable IDS and botnet protection  it still continues blocking traffic,  so the off switch clearly doesn't work  if fact the only way to stop this is  to turn off the firewall ,Eset keep updating modules and screwing things up instead of fixing them,  have they not heard the saying if it aint broke, don't fix it?

 

Link to comment
Share on other sites

  • Administrators

ICMP is enabled in the trusted zone only. The reason why you are getting a lot of records in your firewall log is that you probably have logging of blocked connections enabled in the IDS setup. This should only be enabled for a limited time while troubleshooting connection issues. Does disabling logging make a difference?

Link to comment
Share on other sites

yes logging is enabled , and stopped if disabled, but why is eset firewall blocking   them? , also if i happen to have pingplotter pro running  the eset firewall starts log that it's blocking  ip's that are  in the routes being pinged  Which i doubt should be happening ,

Link to comment
Share on other sites

Unless these blocks is causing problems then I see no harm in that the firewall is blocking these connections.

 

If utorrent and all other softwares are working normally and you're not experiencing problems due to the blocks you see in the log then you can disable logging as you have nothing to troubleshoot at the moment.

Same with the HIPS, if you enable logging, you will most likely see blocked operations, and it's normal to see that and not a problem unless the block is breaking software functionality. 

Edited by SweX
Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...