Tiny PFW

[nomahe]

I just got rid of ZA and installed Tiny. The problem I have is I keep getting popups with this-

Someone from 65.43.212.230, port 137 wants to send UDP datagram to port 137 owned by 'SYSTEM' on your computer


Someone on address 203.66.2.252 wants to send ICMP packet to your machine


I always deny it because I'm not sure what it is, but, I get like 10 of them in a row, just change the IP#'s and it's all the same.
Can anyone tell me what this means and if I should allow it or make a rule etc?

[master7]

I think someone's trying to Nuke ya. Or was that port 139....I can't remember.

ICMP is usually a DOS attack. Log the IP, and report it to the ISP that owns it. Deny it.

[nomahe]

Thanks for your reply master7.
I traced the IP of the ICMP and it's someone from Taipei,Taiwan.
Isn't ICMP just a ping?
To play around a bit, I turned TPF off and installed ZA to see the difference. So far in about an hour or so ZA hasn't had 1 hit.
Does this mean that ZA is missing it, or stopping it and not telling me?
I have to be getting hit I would think, because while I had Tiny on I was getting hammered about every minute or so.
I'm a little confused about the difference between the 2 FW's.

[SoWhat]

Sometimes its your own sevice not that often though rare infact. It can be used to scan if you have windoze machine.

[cyberskye]

Isn't ICMP just a ping

InternetControlMessageProtocol. It's a way for machines to communicate status and the like on a network. Ping is one tool. Often used for DoS as the target will spend so much bandwidth on the administrative messaging that legitimate traffic can't get through. I wouldn't worry unless you see A LOT of hits or hits from A LOT of different sources.

[Storm90]

I use Tiny . All you have to do is Open the rule for Incomeing ICMP Echo Reply and click on deny. Then click on the Set ICMP tab and click on select all. Then click on ok ,Once out of that window click on apply. Plus if you are not Networking with another computer. Make sure under the microsoft network tab everything is unchecked. Also make sure in your network settings in you control panel. That client for micrsoft network. Is not set up. I have used tiny for a long time. This is just one of the setting I use to keep from getting pop up boxes for ICMP and to keep them blocked. ;)