Hello,Good NIght to Everyone!
Please Help me:
Question 1:The options of Internet Security Map are restricted,protected,full trust.And the options of the Firewall Setting are block,allow,minitor.So what's the relationship between the six options and what's the relationshiip between Map an firewall?
Question 2:I have knew that there are many kinds of ARP attacking.How to set the firewall or/and the map to solve all the problem?
Thanks!
Hi HeavenElite,
Actually, the firewall actions are only "block" and "allow" (Monitoring means you are alerted whenever the selected firewall rule is applied to network traffic). Generally, rules are automatically set up to allow only essential traffic. If you share between computers, some protocols will be allowed in order to facilitate this, that might otherwise be blocked if you don't have sharing enabled. When you change the Network Trust Level in the Network Security Map you are essentially telling Norton which firewall rules to apply to traffic coming to your computer from other devices on the Local Area Network. It does not afffect how the firewall handles traffic from the internet. "Full Trust" allows all local traffic into your PC; "Shared" enforces all firewall rules except for those that would block or hinder network sharing; "Protected" applies all firewall rules to local traffic in the same way that they are applied to all internet traffic; and "Restricted" blocks everything, which isolates your computer from all other network devices.
An ARP attack can only be launched from within your local network. Norton protects individual computers, not the network. So your best protection against ARP poisoning is to keep your LAN secure. If you use wireless, you will want to use WPA or WPA2 encryption with a very long, strong pass key to prevent outside access to the network. There are other steps you can take as well, but encryption is the only one that is essential and effective.
Mr.Jive,
Thanks for help me again!
I got the information that Norton can't do the jopl.
Please recommend me a firewall software which not only can deal with the Internet ,but also can solve kinds of LAN problems such as ARP attacking.
Thank you,Best wishes!!
Hi HeavenElite,
You apparently misunderstood what I said. The Norton Smart FIrewall does everything you need a firewall to do. I did not say it doesn't deal with the internet. What I said was that the component you asked about - Network Security Map Trust Levels - apply to LAN traffic, as opposed to internet traffic. The firewall settings themselves control WAN (internet) connections. No software firewall specifically handles ARP spoofing. As I said, an ARP attack can only be launched from within your network. So the best answer is - keep your network secure.
That being said, you can prevent an ARP attack on your PC by setting the Network Security Map Trust Level to "Restricted." thereby blocking all devices on the LAN, even a malious ARP-poisoning one, from being able to connect to your PC. If you don't share with other computers on the network, go ahead and do that. I had suggested only securing the network earlier because there are many reasons to do that, and even if your PC is isolated from an ARP attack, if your network is compromised you have bigger problems than worrying about ARP. Because an attacker needs to be on your network the chances of an ARP poisoning issue on your residential PC are incredibly small. You'll probably be hit simultaneously by a meteor and lightning before one of your neighbors sneaks onto your wi-fi and poisons your ARP cache. It's just not something that you need to spend any more time thinking about. Simply properly secure your network and PC and you will be as safe from all threats as you can be - there is no need to focus on one particular threat (especially one that cannot even be launched from outside of your network).
Sir,What you said are very clear to me now.
I'm a little stupid boy.
However,I have to work in a stupid country named China.I'm trying renting house there.The landlady use a foolish router that you just con't image how it is stupid.She has never give anyone the LAN password or username.And she said she didn't how to set this thing and if the router can set this thing.
There are 6 men using a 2Mbps WAN.Of course I'm one of them.If I set all restricted,I wouldn't get 1 bit of data.Is it ARP poisoning?Do you know why it gose like this?
They just limited me and I con't limit them.They use ARP attacking to limit my speed instead of poisoning me.This is the fact!
I'm sure Norton con't do the job as I did the follwoing efforts:http://community.norton.com/t5/Norton-360/Norton-Firewall-Setting-for-Block-The-Limiter/m-p/712557
No relpaes.
Nobody help me and tell me how to set the **bleep** Norton firewall to surf internet normally,
Nobody help me and tell me how to download my data from the online backup.
SendOf Jive,I thank you to give me light.But I'm still be in touble.Please recommend me some other firewall that can help a stupid boy renting house in a stupid country............
Hi HeavenElite,
If you are on a network that is controlled by others, you should set the Network Trust Level in the Norton Security Map to "Restricted." This will not affect your connection speed - it only blocks communication from other PCs on the network. I don't think ARP is an issue - ARP spoofing would be used to intercept your traffic, not slow it down. It sounds to me like there may just be too many devices using the network for the available bandwidth.
Your Norton firewall will protect you fully in its default setting. If you have made any changes, undo them by going to the Smart FIrewall Advanced Settings and selecting "Reset."
Sorry, but your issue seems to be a network issue and not a computer issue, so there really isn't anything that Norton or your computer can do about it. The network traffic is just like automobile traffic - if someone is driving to meet you they will arrive sooner if they are driving at 60 miles per hour, rather than 30 miles per hour - but there is nothing that YOU can to make them go any faster as you sit there waiting for them to arrive.
Norton is fully protecting your PC - that is not an issue. Whatever problems exist on the network are unrelated to Norton.
My teacher have told me the tool that the chinese hacker was using.She is busy,I con't invite her to my house.
[Removed
The software above is one of the most powerful tools can limit my LAN speed.I sure somebody of my neighbours use it to deal with me.It conrtols network with ARP Tech.
Could you test this in you LAN,and Could you find way to make Norton360 give my speed back?
The software must been licenced,but the link I posted is an official edition.Could you find a craked one without virus?
I have no idea to build a network laboratory with my only laptop.Could test this thing and give me a solution with Norton 360.
Thanks!!
[edit: Please do not link to direct downloads per the Participation Guidelines and Terms of Service.]
You have ignored my efforts.:http://community.norton.com/t5/Norton-360/Norton-Firewall-Setting-for-Block-The-Limiter/m-p/712557
The methord you said never works for a moment.Please tell me whether you can handle the problem or not.
My teacher told me the hacker may use the software :Grabsun provided by http://www.grabsun.com/
I'll test it and solve the problem.Could anyone give me a hand??
You cannot control or modify the local network traffic from your computer. All you can do is allow or block that traffic from entering the PC by configuring the Network Trust Level in the Network Security Map. Unless you have exclusive access to the router settings, you have no control over who is allowed to join the network or what types of traffic they can put on the network. There are so many common reasons why a connection could be slow that I would not even consider the possibility that it is due to an intentional act until I had investigated all of the more likely causes. And, if it is intentional, there isn't anything you could do about it anyway because you have no authority over the network.
I'm sorry but I cannot advise you about the Grabsun program because I am completely unfamiliar with it and wouldn't even know how to determine if it is actually involved with your issue. Since I am not on your network and cannot see what is happening, I can only offer general suggestions as to what I would do in the situation that you describe. Certainly, you are much closer to the situation than I, so you may be aware of things that might not be apparent to someone else half a world away.