Norton Internet Security: Program Control Window

[rizy102]

hiya,
ive got norton Internet Security and a program control window keeps popping up and asking me whether to block permit or manually configure internet access. this comes every 10 secs or so in some cases. i always press block and the "Always use this action" button but it still comes back up again.
anyone know how to stop this alert coming up all the time?
also, when i had sygate it used to block them by itself and i didnt have to keep clicking block to stop it.
please could someone help!
thanks
riz

[craigmodius]

what is the name of the program that keeps trying to access the internet?

[rizy102]

nothing it just says that someone is trying to access ur computer or somat like that.
for example:
ip: xxx.xxx.xxx.xxx
port type:UDP
port no.:4356

this is just an example but ill post a screenshot later.

[meatwad]

nothing it just says that someone is trying to access ur computer or somat like that.
for example:
ip: xxx.xxx.xxx.xxx
port type:UDP
port no.:4356

this is just an example but ill post a screenshot later.

Is it always a different IP address?

[rizy102]

no its always different.
heres a screenshot:

[NooNoo]

is it always port 3199?

[meatwad]

Sounds like NIS is treating each attack as a seperate action. What's so unusual about that?

[NooNoo]

Well its an attack of dmod workspace which is used to transport secure digital media... Quicktime movies for example.

Just for s & g's DNS Results »» Address: 211.143.111.58 «« Resolved to »» IP: XIAOCUI Channel:

So a webtv type service? Do you have a dynamic ip?

[rizy102]

to NooNoo, no its always different
to meatwad, im not saying its unusual, but its irritating thats wat im saying. imagine having a popup evry minute. now how would you feel?
to NooNoo second time, no its a static ip address.

[NooNoo]

A popup every minute is alot of background noise. I know in ZA you could create a rule that just said "deny all on port xxxx" and it would just quietly log them. I don't have Norton.

[craigmodius]

Oh *inbound*, I thought we were talking outbound.

How about this? The part about "How to reduce the number of alerts that you see"

I think you keep seeing the dialog box because it is always either a different port or IP address that is attempting inbound access. I use Zone Alarm and that lets you flat out turn off all incoming alerts (yet still logs them). I wonder if NIS has something similar?

edit: I didn't see whether you had NIS 2003 or 2004 so the directions are on 2003.

[rizy102]

i dont think there is a way to stop the window that keeps popping up. i tried the above but didnt work. it doesnt hide all incoming alerts (i think) like sygate or ZA. looks like back to sygate. NIS 2004 is good but i just cant take that many "OK" s!!
thanks a million.