• Todas as comunidades
    • Todas as comunidades
    • Fóruns
    • Idéias
    • Blogs
Avançado

O que você está procurando? Pergunte a um especialista!

Kudos0

Default Block All Inbound Windows Services

Hello I'm here with another "block" information. I had a few secs connection problem and when I checked my history I noticed "Default Block All Inbound Windows Services (Public Networks) rejected UDP(17) " And I'm pretty sure my my network is not public

Another thing is "Port bootps(67) and bootpc(68)"

Local IP 255...........

And process svchost.exe

I checked ports 67 and 68 on linklogger and I found:

"Typically this traffic is related to normal DHCP operation and is not an attack on your network.  DHCP (Dynamic Host Configuration Protocol) is how your computer gets its unique IP address.  When a system starts up on a network it must first request an IP address (assume it is not using a static IP address), and it does this by broadcasting a request to the DHCP"...

UDP 0.0.0.0:68 -> 255.255.255.255:67

since the requesting system doesn't have an IP address (why it is asking) it uses 0.0.0.0 and since its new to the network it doesn't know where the DHCP server is, so it broadcasts the request to the entire network (255.255.255.255).  On some networks you will see these requests bounce off of your firewall (depending on your provider's network configuration and if your router/firewall logs these requests), or your firewall/router might log this traffic between it and your providers DHCP server when it is getting or renewing its WAN IP address."

Am I still safe or I should do something?

Or maybe it's normal because I had a tiny connection problem?

Respostas

Kudos0

Re: Default Block All Inbound Windows Services

AxelFrost What is the OS please. If you are running Windows you should be ok as this is normal. However if you are on MAC there could be an issue. And did you see this in a Norton product as an alert in history? Just need to clarify. Thanks in advance.

SoulAsylum

"From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows Server 2016 Essentials / Windows 10 Professional x 64 version 1903 / build 18362.356 / N360 Deluxe 22.19.8.65 / Norton Core v.282 on Android 2.00
Kudos0

Re: Default Block All Inbound Windows Services

Windows 7 and it's information in norton history

But isn't it because with my connection problem it has to be broadcasted (255.255.255.255) as the requesting system doesn't yet have an IP address? And thats why I see it?

Accepted Solution
Kudos0

Re: Default Block All Inbound Windows Services

Hello Axel Looking at this your first thoughts appear to be correct in that your machine was requesting an IP address from your DHCP to port 67 which was then rejected to port 68. Perfectly normal. Please see the article at the link below.

http://www.tcpipguide.com/free/t_BOOTPClientServerMessagingandAddressing-2.htm

Regarding Default Block All Inbound Windows Services (Public Networks) rejected UDP(17) please see this thread also. This refers to network share settings.

https://community.norton.com/en/comment/6081531#comment-6081531

Hope this properly answered your questions.

Cheers

"From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows Server 2016 Essentials / Windows 10 Professional x 64 version 1903 / build 18362.356 / N360 Deluxe 22.19.8.65 / Norton Core v.282 on Android 2.00
Kudos0

Re: Default Block All Inbound Windows Services

Thanks

I seen this thread before my first post but noticed there is a difference because my submission blocked UDP(17) not TCP also I had bad feelings when I noticed my IP 255.... Local service: Port bootps(67) and Remote service Port bootpc(68)

Kudos0

Re: Default Block All Inbound Windows Services

All is normal. Allow Norton to perform its job and don't worry unless of course you are receiving a warning popup from Norton that needs your attention. By all means feel free to ask here on the forums should that happen. You are good to go my friend. Glad we could answer your questions. Please mark the thread as solved if you believe it has, if you'd be so kind. Have a grand day today!!

Cheers

"From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows Server 2016 Essentials / Windows 10 Professional x 64 version 1903 / build 18362.356 / N360 Deluxe 22.19.8.65 / Norton Core v.282 on Android 2.00
Kudos0

Re: Default Block All Inbound Windows Services

Also be aware that a network referred to as "public" means the network is not trusted. Which is what you want unless you are doing something special like sharing a network drive on your LAN.

This thread is closed from further comment. Please visit the forum to start a new thread.