And could you see why BlackIce saw this as being an attack?
Dirk. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael M. Sent: Monday, August 16, 2004 9:31 PM To: [EMAIL PROTECTED] Subject: RE: [SA-list] SA pings generate alerts in WinXP/SP2 Just an update on this. ISS didn't want to help since I was not current on maintenance. I did, however, find that within BlackIce when the "attack" was indicated, I could right-click on say to "ignore". This ended up being a reasonable solution for me. Mike Thommes -----Original Message----- From: Thommes, Michael M. Sent: Tuesday, August 10, 2004 7:02 AM To: [EMAIL PROTECTED] Subject: RE: [SA-list] SA pings generate alerts in WinXP/SP2 Yep, ping from the command line works fine, no issues. And the SP2 firewall service is still disabled which is how I set it yesterday. Correction to previous post - I am NOT running the latest version of BlackIce; it is Version 3.5.cbf . I have sent off a problem report to ISS (BlackIce). Mike Thommes -----Original Message----- From: Dirk Bulinckx [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 10, 2004 2:53 AM To: [EMAIL PROTECTED] Subject: RE: [SA-list] SA pings generate alerts in WinXP/SP2 Does a ping from the commandline work fine? If so I would still check that the FW of SP2 isn't running and set SA as being a valid app in it. dirk. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Thommes, Michael M. Sent: Tuesday, August 10, 2004 1:38 AM To: [EMAIL PROTECTED] Subject: RE: [SA-list] SA pings generate alerts in WinXP/SP2 Nope. I turned it off. I keep getting this feeling that the new upgraded XP/SP2 system/BlackIce doesn't realize that the SA pings are initiated by the Local System account. Maybe I should really be directing this query to the BlackIce support guys. I know that I am current with the release of BlackIce that I am running but this problem just started with the OS upgrade. Mike Thommes -----Original Message----- From: Jack Lyons [mailto:[EMAIL PROTECTED] Sent: Mon 8/9/2004 5:16 PM To: [EMAIL PROTECTED] Cc: Subject: Re: [SA-list] SA pings generate alerts in WinXP/SP2 XP/SP2 had the personal firewall enabled by default...could that be the problem? Jack ----- Original Message ----- From: "Thommes, Michael M." <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, August 09, 2004 5:48 PM Subject: [SA-list] SA pings generate alerts in WinXP/SP2 Hi, I upgraded my workstation to WinXP/SP2 (just released). I have been running ServersAlive V 4.0.1376 on it. Now I find computers that I have been pinging are now showing up in my BlackIce firewall installation with the alert "Echo reply without request". Is there some setting I can make in SA to make this problem disappear? (It seems like with the XP upgrade, the workstation doesn't realize that it was a legitimate ping. Any help is appreciated! TIA! Mike Thommes ------------------------- [This E-mail scanned for viruses by Declude Virus] To unsubscribe from a list, send a mail message to [EMAIL PROTECTED] With the following in the body of the message: unsubscribe SAlive ------------------------- [This E-mail scanned for viruses by Declude Virus] To unsubscribe from a list, send a mail message to [EMAIL PROTECTED] With the following in the body of the message: unsubscribe SAlive ------------------------- [This E-mail scanned for viruses by Declude Virus] To unsubscribe from a list, send a mail message to [EMAIL PROTECTED] With the following in the body of the message: unsubscribe SAlive ------------------------- [This E-mail scanned for viruses by Declude Virus] To unsubscribe from a list, send a mail message to [EMAIL PROTECTED] With the following in the body of the message: unsubscribe SAlive ------------------------- [This E-mail scanned for viruses by Declude Virus] To unsubscribe from a list, send a mail message to [EMAIL PROTECTED] With the following in the body of the message: unsubscribe SAlive ------------------------- [This E-mail scanned for viruses by Declude Virus] To unsubscribe from a list, send a mail message to [EMAIL PROTECTED] With the following in the body of the message: unsubscribe SAlive
