Hi Dirk,
As I mentioned in my original post, BlackIce indicated a "Echo reply
without request" condition. I even put "serversalive.exe" in the
exception list. This morning I came across the following MS
Knowledgebase article that some of you might be interested in:
http://support.microsoft.com/default.aspx?kbid=842242 .
Mike Thommes
-----Original Message-----
From: Dirk Bulinckx [mailto:[EMAIL PROTECTED]
Sent: Monday, August 16, 2004 2:36 PM
To: [EMAIL PROTECTED]
Subject: RE: [SA-list] SA pings generate alerts in WinXP/SP2
And could you see why BlackIce saw this as being an attack?
Dirk.
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Thommes, Michael M.
Sent: Monday, August 16, 2004 9:31 PM
To: [EMAIL PROTECTED]
Subject: RE: [SA-list] SA pings generate alerts in WinXP/SP2
Just an update on this. ISS didn't want to help since I was not current
on maintenance. I did, however, find that within BlackIce when the
"attack" was indicated, I could right-click on say to "ignore". This
ended up being a reasonable solution for me.
Mike Thommes
-----Original Message-----
From: Thommes, Michael M.
Sent: Tuesday, August 10, 2004 7:02 AM
To: [EMAIL PROTECTED]
Subject: RE: [SA-list] SA pings generate alerts in WinXP/SP2
Yep, ping from the command line works fine, no issues. And the SP2
firewall service is still disabled which is how I set it yesterday.
Correction to previous post - I am NOT running the latest version of
BlackIce; it is Version 3.5.cbf . I have sent off a problem report to
ISS (BlackIce).
Mike Thommes
-----Original Message-----
From: Dirk Bulinckx [mailto:[EMAIL PROTECTED]
Sent: Tuesday, August 10, 2004 2:53 AM
To: [EMAIL PROTECTED]
Subject: RE: [SA-list] SA pings generate alerts in WinXP/SP2
Does a ping from the commandline work fine?
If so I would still check that the FW of SP2 isn't running and set SA as
being a valid app in it.
dirk.
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Behalf Of Thommes, Michael M.
Sent: Tuesday, August 10, 2004 1:38 AM
To: [EMAIL PROTECTED]
Subject: RE: [SA-list] SA pings generate alerts in WinXP/SP2
Nope. I turned it off. I keep getting this feeling that the new
upgraded XP/SP2 system/BlackIce doesn't realize that the SA pings are
initiated by the Local System account. Maybe I should really be
directing this query to the BlackIce support guys. I know that I am
current with the release of BlackIce that I am running but this problem
just started with the OS upgrade.
Mike Thommes
-----Original Message-----
From: Jack Lyons [mailto:[EMAIL PROTECTED]
Sent: Mon 8/9/2004 5:16 PM
To: [EMAIL PROTECTED]
Cc:
Subject: Re: [SA-list] SA pings generate alerts in WinXP/SP2
XP/SP2 had the personal firewall enabled by default...could that
be the
problem?
Jack
----- Original Message -----
From: "Thommes, Michael M." <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, August 09, 2004 5:48 PM
Subject: [SA-list] SA pings generate alerts in WinXP/SP2
Hi,
I upgraded my workstation to WinXP/SP2 (just released). I
have
been running ServersAlive V 4.0.1376 on it. Now I find
computers that I
have been pinging are now showing up in my BlackIce firewall
installation with the alert "Echo reply without request". Is
there some
setting I can make in SA to make this problem disappear? (It
seems like
with the XP upgrade, the workstation doesn't realize that it was
a
legitimate ping. Any help is appreciated! TIA!
Mike Thommes
-------------------------
[This E-mail scanned for viruses by Declude Virus]
To unsubscribe from a list, send a mail message to
[EMAIL PROTECTED]
With the following in the body of the message:
unsubscribe SAlive
-------------------------
[This E-mail scanned for viruses by Declude Virus]
To unsubscribe from a list, send a mail message to [EMAIL PROTECTED]
With the following in the body of the message:
unsubscribe SAlive
-------------------------
[This E-mail scanned for viruses by Declude Virus]
To unsubscribe from a list, send a mail message to [EMAIL PROTECTED]
With the following in the body of the message:
unsubscribe SAlive
-------------------------
[This E-mail scanned for viruses by Declude Virus]
To unsubscribe from a list, send a mail message to [EMAIL PROTECTED]
With the following in the body of the message:
unsubscribe SAlive
-------------------------
[This E-mail scanned for viruses by Declude Virus]
To unsubscribe from a list, send a mail message to [EMAIL PROTECTED]
With the following in the body of the message:
unsubscribe SAlive
-------------------------
[This E-mail scanned for viruses by Declude Virus]
To unsubscribe from a list, send a mail message to [EMAIL PROTECTED]
With the following in the body of the message:
unsubscribe SAlive
-------------------------
[This E-mail scanned for viruses by Declude Virus]
To unsubscribe from a list, send a mail message to [EMAIL PROTECTED]
With the following in the body of the message:
unsubscribe SAlive
