Kudos0

Norton Firewall 4 Suspicious Activity

Posted: 26-Dec-2008 | 6:47AM · 3 Replies ·

Hi!

Norton Firewall (from NIS 4 for Mac) reports Suspicious activity from my Airport Extreme  everytime I started my mac. Eg :

- Incomming connection attempt BLOCKED from 10.0.0.1 Port: 0 (Ping remply) Kind: Suspicious Activity

- Incomming connection attempt BLOCKED from 10.0.0.1 Port: 61320 (Unknown service) Kind: Suspicious Activity

- Incomming connection attempt BLOCKED from 10.0.0.1 Port: 55561 (Unknown service) Kind: Suspicious Activity 

My local network is in the trust zone of Firewall Settings/Connection Blocking/Zones. My mac (local) IP address is 10.0.1.2. It's connected to the Airport with a ethernet cable.

Any idea ?

Vincent 

Replies

Kudos0

Re: Norton Firewall 4 Suspicious Activity

Posted: 26-Dec-2008 | 6:47AM · Permalink

Hi!

Norton Firewall (from NIS 4 for Mac) reports Suspicious activity from my Airport Extreme  everytime I started my mac. Eg :

- Incomming connection attempt BLOCKED from 10.0.0.1 Port: 0 (Ping remply) Kind: Suspicious Activity

- Incomming connection attempt BLOCKED from 10.0.0.1 Port: 61320 (Unknown service) Kind: Suspicious Activity

- Incomming connection attempt BLOCKED from 10.0.0.1 Port: 55561 (Unknown service) Kind: Suspicious Activity 

My local network is in the trust zone of Firewall Settings/Connection Blocking/Zones. My mac (local) IP address is 10.0.1.2. It's connected to the Airport with a ethernet cable.

Any idea ?

Vincent 

Kudos0

Re: Norton Firewall 4 Suspicious Activity

Posted: 26-Dec-2008 | 11:58AM · Permalink

I would suggest you to create a firewall rule in Norton Firewall to allow all traffic from the computer 10.0.0.1 for the service Airport.

Refer to this article for detailed steps. In this article, in the step 8, you can select Airport from the services dropdown menu.

--Vinod

Kudos0

Re: Norton Firewall 4 Suspicious Activity

Posted: 07-Jan-2009 | 2:21PM · Permalink

Hi Vincent,

This sounds like a known issue where the IP Address of the Trust Zone is not getting added to the firewall. Look for a fix in an upcoming patch. In the meantime, you can disable Suspicious Activity blocking by going to:

- Firewall Settings Tab

- Connection Blocking

- Configure

- the "Widget" button

- Advanced Settings

Hope that helps, let me know if you have any more questions.

Thanks!

Nick UchidaManager, SQA EngineeringMacintosh Products

This thread is closed from further comment. Please visit the forum to start a new thread.