how stop port from being logged in norton firewall

Cooloutac · ‎04-21-2009

i use a certain port for utorrent. norton always has 100s of unused port blocking events being logged on this port. Problem is even when u shut down utorrent other computers are still trying to connect to you for al ong while after.

I don't want to forward the port through norton cause that might not be safe... I just want to stop anything on that port from being logged.

how can i do that? or is this not a good idea? should i just forward the port in norton? I don't have any problems downloading or uploading, i think this only occurs after i shut down utorrent.

any help would be appreciated thank you very much.

Cooloutac · ‎04-21-2009

sry couldn't figure out how to edit the thread..... just wanted to add, that it wouldn't be a problem if norton showed the ip addresses and ports on the main firewall log screen.

having to click on each unused port event to see exactly what port it is,, is extremely annoying and time consuming. i don't want to click on each of the 100 events...... to catch that one ip and port scan that has nothing to do with utorrent, and might be malicious or intentional.

ty in advance for all your help.

Cooloutac · ‎04-21-2009

i swear it didn't let me edit.... i just wanted to add.... i even tried exporting the log to a text file... but it doesn't even show the ip addresses or ports blocked!!?! it just says ",,,,,,,,,actitivities.. afer every log making the exported text file pretty much useless. am i doing it with the wrong options set? its not showing the directories or ips or ports in the text file lol.

i'm using a trial version of norton internet security suite 2009. Its absolutely amazing...i'm about to go buy it this weekend. I just got a refund on zonealarm cause it was a huge resource hog. but this whole firewall log is really turning me off on the norton.. theres gotta be a customizeable view or something.

all these programs that are preparing to access the internet" are bloating up the log too.. can i filter those? or recatergorize them out of firewall-activities and put them to something less bloated like norton community watch?? haha something like that? tks for the help.

i know i keep asking alot of questions... to sum it up.... can i modify or change the way the firewall logs events or is displayed in any way?

ty for bearing with me, a link or anything i can search would be most helpful and appreciated.

I'm going to buy the program anyways so i guess i'll ask tech support when i do..

Message Edited by Cooloutac on 04-21-2009 09:17 PM

Message Edited by Cooloutac on 04-21-2009 09:19 PM

Message Edited by Cooloutac on 04-21-2009 09:31 PM

Message Edited by Cooloutac on 04-21-2009 09:32 PM

Message Edited by Cooloutac on 04-21-2009 09:34 PM

Cooloutac · ‎04-21-2009

ok this is my last post on the subject.... i swear.... so i guess I will just assume that unused port blocking would be utorrent on my log, since i think its the only port i have forwarded in the router at the moment? I still would like to be able to filter this out of the log though just for that port.

but I just got another security event. where the local and remote ip adress and port were both displayed in the main view.

so It is only the unused port blocking event logs i would have to manually click on to view which port and ip address. so its not as bad as i thought.

and as far as not being able to see the whole modified directory for certain events. I found out if, i really want to see the whole view i would have to increase my screen resolution.. and then stretch the windows, this is a real pain but at least its possible.

i will get used to it can't wait to buy it at microcenter this weekend.

ChesterK · ‎06-09-2008

Hi Cooloutac,

There is currently no way of preventing this log entry from showing. Also, we will be looking to improve that log message so the summary includes the important information as well.

Thanks,

/Chester

delphinium · ‎11-21-2008

Hi Cooloutac:

You have 1 hour, during which time you can edit your message by looking for the word "Options" at the top right hand side of your post, hidden in the yellow. Click on that, and one of the options is "Edit"

Hope to hear from you again.

Under certain circumstances profanity provides relief denied even to prayer.
Mark Twain

Cooloutac · ‎04-21-2009

oh 1 hour i think that may be the probl the other day i seen a windows 2000 smb alert (i put all the block alerts to log) and i thought i saw an adress on my netowrk... so prolly windows file sharing attempt... i know what it was cause i seen the time real quick... but then a little while longer it was gone from the log!!!

and i kep searching on the search box for it.... going back and forth between the general rules and back... like maybe i was just hallucenatinglol...

but thats prolly what it was... but anyway to make that a little longer then one hour? what a sec i don't think i even understand u correctly, my apologies... 1 hour for what?

oh i'm sorry delphinium. 1 hour to edit the message.. yess.. sry for the confusion... you know what i just realized too on the Z forums they would actually delete my posts. like those 3 replies i did to myself would have been a deletion. tks again guys for the help.

tks ChesterK, it acutally says Symanted Employee under your name! ON the Z security suite forums, I just refunded, they always said we are just users, the Z employees don't use this forum. nice to see u guys care.

Message Edited by Cooloutac on 04-22-2009 04:43 PM

oh i'm sorry delphinium. 1 hour to edit the message.. yess.. sry for the confusion... you know what i just realized too on the Z forums they would actually delete my posts. like those 3 replies i did to myself would have been a deletion. tks again guys for the help.

Message Edited by Cooloutac on 04-22-2009 04:48 PM