[BewitchingFaerie]

Hello ,

I've read all you have on NMap Null Scan and the xmas one , and it hasn't showed anything here on how to stop it from happening outside of telling people if Norton is blocking it don't worry . That's really disturbing advice , if this thing is still trying to send packets telling someone to ignore it is not a technical solution to a computer trying to hack it's way in. there should be a way to stop it completely from trying to make contact with ones computer . I've been all over the net in different forms and surprisingly , all of them say to handle it the same way . Except for one who suggested windump and winpcap . I'm getting the same things constantly and it is slowing my computer down and freezing it . I am running Norton 2009, I don't want to tell it to not let me know , I want to know what's going on in my computer . the more I know of it the more I want to learn on how to get rid of it so it doesn't keep happening in the future . Please if there is anyone here who knows how to stop this please help . Thank you in advance

[lotuseclat79]

Hi BewitchingFaerie,

Welcome to TSG!

What happens when you visit the web site http://nmap-online.com and scan your computer (Quick, Full and Custom scans)?

The nmap-online.com web site is used to test the web site address given by ip address in the command against various vulnerabilites. To test for the Null and Xmas scans, edit the arguments to specify: -sN -sX
for doing both Null and Xmas scans, or do two separate scans, using only one of the arguments at a time.

If Norton 2009 includes a firewall, you should visit the Norton web site to find out if you don't know, but, my bet is that it would probably detect either type of scan if it does in fact have a firewall rule for either. If Norton 2009 does not include a firewall, then it cannot protect you against either Null or Xmas scans.

Norton AntiVirus 2009 does not have a firewall, Norton Internet Security 2009 has a two-way firewall.

-- Tom

[lunarlander]

To block scans, install a router that has stateful packet inspection firewall ( SPI ). It costs a little more, but its worth it.

[BewitchingFaerie]

Thanks for your reply lotuseclat79, I am running Norton Internet Security and it is blocking it and , no I haven't been to the any sites to get it scanned . As I said before I've been all over the net searching and no one has mentioned a scan or anything like a scan it to find.
But thank you ! I'll go to the mentioned site and do the scans and symantecs to see what's there on it . Much appreciated

[lunarlander]

You can also try the intrusion detection system called Snort. Don't know if it has signatures for scans, but theorectically, you can have a rule that detects scans and send a Reset back to the originator.