[kukicar]

Hi,

My Kerio Personal Firewall 4.0.16 has blocked several incoming connections.
Here are some of them- I have checked these IP's with whois, and they are located in different countries, and belong to some companies or network coordination centres totaly unknown to me:

Direction: incoming
Local Point: , port 8
Adapter: Verat
Remote Point: 79.0.97.1 [79.0.97.1]
Protocol: ICMP
RuleId = 134217749

Direction: outgoing
Local Point:
Adapter: Verat
Remote Point: 224.0.0.22 [224.0.0.22]
Protocol: 2
RuleId = 134217749


Direction: incoming
Local Point: , port 8
Adapter: Verat
Remote Point: dv01.tomasini.de [217.160.187.217]
Protocol: ICMP
RuleId = 469762069


Direction: incoming
Local Point: , port 8
Adapter: Verat
Remote Point: 0x503e2392.arcnxx12.adsl-dhcp.tele.dk [80.62.35.146]
Protocol: ICMP
RuleId = 536870933

Can anyone give me some explanation- why my computer is trying to connect (send or receive) data to these addresses.

Thanks!

Kuk

[MFDnNC]

They are incoming and your firewall is doing its job - ignore what is going on, you can't stop those but you are blocking them - I've had 100,000's attempts - that's why you have a firewall - the bad guys try addresses that are not protected!

[kukicar]

Yes, thanks for that advice.
But some of this connections show up promptly as I connect the network.
Do I have to allow some of them or to block them all??

[MFDnNC]

block all and turn off the notification

[kukicar]

OK.
I was reading that most of these connections may be from windows (updates ...etc), but anyway- everything will work just fine without them...

Thanks!

[hewee]

Run the Shields UP! -- Internet Connection Security Analysis test.
http://www.grc.com/x/ne.dll?bh0bkyd2

If all ports are Stealth then your doing good and "There is NO EVIDENCE WHATSOEVER that a port (or even any computer) exists at this IP address!"

Then if you get a router it will also stop all those hits from getting to your firewall.