Norton Internet Worm Protection has detected and blocked an intrusion attempt.

Here are the details:

    Intrusion : Portscan.
    Intruder : 192.168.0.1(domain(53)).
    Risk level : medium
    Protocol : UDP
    Attacked IP : USER-COMPUTER(192.168.0.100)
    Attacked port : 1170
 
When I received this alert, Norton (I think) blocks all communication. The only remedy that I have found is to turn off the computer and restart!

I know that when I receive this notice at another client's computer. I discovered that the Internet Worm Protection | Autoblock rules were not turned on.

In this case Internet Worm Protection | Autoblock rules are turned on. I have done several searches and I have found anything really interesting. Any assistance is greatly appreciated!

The computer in question is using XP SP2 with a D-Link router DI-604

Thanks!
LVL 1
Elton BrownAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

j_h_oCommented:
The 'intruder' that Norton has decided to block is your own router.
This is DNS traffic; when your computer goes out and looks up a DNS name, the traffic coming back in is being blocked.

Add the router to your trusted IP list.  Make sure that your 'local network' is defined properly in Norton - it should realise that 192.168.0.1 is an internal IP and not be filtering traffic.

During these outages, try pinging other machines:
Start, run, cmd
ping 192.168.0.1
ping 192.168.0.100-101, etc (if you have other machines in the network.)
Not quite sure if it's blocking all traffic, or just your DNS traffic, thereby stopping your web surfing from working.)
zephyr_hex (Megan)DeveloperCommented:
norton's worm protection stinks.
it randomly alerts on a networked database and application we use... maybe once a month it would kick up an alert and prevent the user from getting to the database.  real pain in the rear.
my best advice is to uninstall it.
you really only need an antivirus, strong realtime antispyware program and firewall (as long as you use safe surfing habits).  if you are in the habit of downloading illegal programs that contain viruses, or opening email attachments from people you don't know, then you may just have to suffer with norton's crapware.
j_h_oCommented:
Agreed =)

I use F-Secure Client Security on the 500+ machines I manage.
Or... nothing at all.

Login as a regular (non-Power, non-Administrator) user, and you really can't do that much damage to your computer, if you're behind a firewall and don't click on stupid links.

Norton is causing you more headaches than it's worth.  You're behind a router already. =)
Protecting & Securing Your Critical Data

Considering 93 percent of companies file for bankruptcy within 12 months of a disaster that blocked access to their data for 10 days or more, planning for the worst is just smart business. Learn how Acronis Backup integrates security at every stage

j_h_oCommented:
Check out my additional comments here:
http://www.experts-exchange.com/Networking/Q_21809005.html
(Yet another user complaining about how Norton has broken their computer.)

I'm pretty sure that 50-60% of headaches that people complain about are caused by bad antivirus packages like Symantec/Norton.
Mac OS X works so much better because it isn't clogged full of junk applications that really stop nothing.

Enough Symantec bashing. =)

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
zephyr_hex (Megan)DeveloperCommented:
i would even recommend just norton antivirus (instead of the bloated internet security stuff).  the antivirus product is good... it's the rest of the junk that causes so many problems.

and i have nothing against norton.  mcafee is the same way.  the antivirus product is good.  the other add-ons stink.
Rob WilliamsCommented:
For the record; we too have had numerous problems with Norton products but specifically with the Internet Worm Protection interfering or blocking legitimate VPN trafic.
Elton BrownAuthor Commented:
I don't find their support {Symantetc) to be very good either. As the Norton subscribtions die on my machines I have been ripping out Norton and installing Avast. So far none of the machines that are currently running Avast are having any problems (knock-on wood). At least the Avast anti-virus software is free.

I refuse to pay for a product and then have to beg for support. ENOUGH Symantec bashing! :( Sorry!

zephyr_hex , this is what makes this situation so sad they are/I was running just Norton Antivirus. OO don't get me started!
Elton BrownAuthor Commented:
What I am going to do is get rid of Norton all together and use Avast. For the past two days I have tried to connect with Norton support - I can't get through via the telephone!
Rob WilliamsCommented:
Thanks cdplayer. Good luck.
--Rob
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Network Analysis

From novice to tech pro — start learning today.