• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

Firewall

I noticed entries in Norton history yesterday stating that I had made changes to firewall rules (which I hadn’t) and that network resources had been accessed: The following entries appeared

‘you created firewall rules to manage how local security authority process accesses your network resources:

Prog name: local security authority process
Prog path: c:\windows\system32\lsass.exe
default action: no action required
action taken: user configured rule
local computer: 0.0.0.0,49155
traffic destination: inbound TCP port 49155

This is followed by an entry saying ‘you allowed local security authority process to access your network resources (details as above. Local computer ::0, 49155. No action required, action taken: allowed).

There is then another entry saying ‘you created firewall rule to manage how services and controller applications access your network resources.

Prog name: services and controller application
prog path: c:\windows\system32\services.exe
local computer: ::0, 49159
traffic description: inbound tcp, port 49159

And this is again followed by an entry detailing that ‘you allowed services and controller application to access your network resources’. Prog name and path as above, local computer: 0.0.0.0 49159, traffic description as above).

I’m a bit concerned seeing as I didn’t make any changes to Norton’s firewall.  Advice welcome!

NIS 2011. OS: windows 7 home premium service pack 1, 64 bit.

Replies

Kudos2 Stats

Re: Firewall

Please see the following post for an explanation of this 'You created...' message. It appears to be a logging issue that has been around for a long time:

http://community.norton.com/t5/Norton-Internet-Security-Norton/Custom-Program-Rules-A-Couple-More-Questions/m-p/101836/highlight/true#M53446

Kudos0

Re: Firewall

Any of this apply to you?

Technical description for port 49159:

Port 49159 serves the mdnsreponder.exe process that is a part of Bonjour for Windows and is employed by iTunes for sharing music files. Apple developed Bonjour, a general technique for finding out about available services in a network. Bonjour for Windows permits its utilization in the Windows platform although Bonjour is generally utilized by Mac OS X users.

The services of Bonjour are executed at the application level, mostly through TCP/IP calls, instead of in the OS. The full features of Bonjour are available for Windows 2000 to Vista and iChat enables the transfer of files between Windows and Mac OS. Bonjour is usually found in its own folder in the Program Files path and it adjusts the registry entries that are linked to internal network operation and configuration.

This thread is closed from further comment. Please visit the forum to start a new thread.