Installed Symantec Firewall, now getting errors in Event Log.

I have two machines on my network, both running XP SP2.  I recently installed Symantec Client Firewall on one of the machines.  Now, on that machine I'm getting an event 4321

The name "WORKGROUP        :1d" could not be registered on the Interface with IP address 192.168.1.100. The machine with the IP address 192.168.1.102 did not allow the name to be claimed by this machine.

On the other machine, I was getting an event 8002 but then I made it a trusted IP in the Symantec firewall.

Both machines have static IPs and are wired through a Linksys BEFSX41 router.
Tool_FanAsked:
Who is Participating?
 
GranModConnect With a Mentor Commented:
Closed, 300 points refunded.
GranMod
The Experts Exchange
Community Support Moderator of all Ages
0
 
Jay_Jay70Commented:
Hi Tool_Fan,

why are you using that sw? anything symantec will cause you nothing but grief! you are going to have to scroll through and disable and firewall utils to get this up and working then carefully make the changes you feel you want

my advice - get rid of it
0
 
cdesignerCommented:
check the names of computers and workgroup names. by this message it looks like other machine locked access to the workgroup. maybe you have created domain instead workgroup or something else.
0
Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

 
Tool_FanAuthor Commented:
The names of the computers are fine, and they are apart of the same workgroup.  I tried changing the names and the workgroup name, then switching them back.
0
 
Jay_Jay70Commented:
disable firewall and see if things come back
0
 
Tool_FanAuthor Commented:
Yes.  If I disable the Symantec firewall on my machine, the errors in Event Log stop coming up.

I had an older version of Symantec Client Security about six months ago.  I didn't have that problem then, I don't think.

It has rules set up by default to block incoming and outgoing NetBIOS, NetBIOS Name, Windows file sharing, ICMP, and others.

I have Windows file sharing set to "permit".  Question is what do I change to fix this issue?

I haven't noticed any connection/sharing problems. It's just that I like to check the event log, and it's a hassle to do so when there's hundreds of those 4321 events.
0
 
Jay_Jay70Commented:
hmm along with file sharing you will need to unblock the netbios and netbios name, i would also allow ICMP and anything DNS related
0
 
Tool_FanAuthor Commented:
Oops.  Turns out only Windows filesharing is blocked by default.  All those other rules are overridden by higher up rules that allow those protocols.  I disabled them anyway, but still no luck.

I have raised the point value of this question.
0
 
Jay_Jay70Commented:
hmm i dont have the firewall set up so im not sure exactly where to configure it

http://www.utexas.edu/its/bevoware/security/winsecurity.html
0
 
Tool_FanAuthor Commented:
That document doesn't go into detail about the advanced tab.  Although, I think I may have fixed it after messing with the rules a little.

I'll report back sometime tomorrow.  If I don't get any more system events before then, I'll consider the prolem fixed.
0
 
Jay_Jay70Commented:
what worries me is having rules, and then overriding rules! good luck!
0
 
Tool_FanAuthor Commented:
Well, it is basically like an old school router/firewall config table.  A list of rules, and rules that are higher on the list take precedence.  By default there were duplicates of each rule, one permitting and one denying.  Which ever one was one top was in affect.

If I don't have any more problems then Ill give you credit, Jay_Jay70, since you participated the most in trying to help.
0
 
Jay_Jay70Commented:
only if you want to mate, if you resolved yourself you can get a refund :)
0
 
Jay_Jay70Commented:
no complaints
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.