attack from my own pc (1 Viewer)

Surreybirder

Ken Noble

• Dec 3, 2003

• #1

When I try to change my info on my Yahoogroups 'profile' settings, I get a message saying page not available but at the same time my Norton Internet Security alert warns me of an 'intrusion'
The most recent reads:

Attempted Intrusion "HTTP_ActivePerl_Overflow" from your machine against edit.member.yahoo.com(216.136.xxx.7) was detected and blocked
Intruder: localhost(1201)
Risk Level: Medium
Protocol: TCP
Attacked IP: edit.member.yahoo.com(216.136.xxx.7)
Attacked Port: http(80)

Click to expand...

On previous occasions I've had a different IP address for the 'attacker' and it's turned out to be my own IP address.
Can anyone tell me what's going on. I've got my 'level' of blocking set at the default level (medium).

 

walwyn

Well-known member

• Dec 3, 2003

• #2

A lot of such alerts are normal networky stuff. I turn all alert notifications off. If the firewall blocked it it doesn't matter, if the firewall didn't block it the alert wouldn't be triggered anyway. Personal firewalls don't provide you with real protection anyway.

 

Surreybirder

Ken Noble

• Dec 3, 2003

• #3

Thanks, Walwyn, but is NIS actually stopping me entering data on yahoogroups?

 

Andrew Rowlands

Well-known member

• Dec 3, 2003

• #4

Surreybirder said:

Thanks, Walwyn, but is NIS actually stopping me entering data on yahoogroups?

Click to expand...

Haven't used NIS in a while but turning it off is the quick fix!

There is an option somehere to add a site to your 'trusted' list - the Birdforum server is probably checking your 'credentials'.

Ask Greenfields for help via PM; he's online now http://www.birdforum.net/member.php?u=3 .

Maybe your NIS is 'misreading' the situation........

Andy.

 

Green Fields

Professional Bug Remover

Staff member

• Dec 3, 2003

• #5

satrow said:

the Birdforum server is probably checking your 'credentials'.

Click to expand...

Nothing to do with BF here, Andy - he's talking about Yahoo! Groups.

Having never personally used Y! Groups, I can't really tell exactly what the problem is, but as the originating ip is 'localhost' - which is the computers 'name' for your own computer - I'm going to guess that this is fine.

But, yes. Do check if you can add the site to your 'trusted' zone. Once again, I use ZoneAlarm, and have never used NIS, so you'll have to take a look around for yourself I'm afraid.

Ollie

 

walwyn

Well-known member

• Dec 3, 2003

• #6

You're best bet is to disable NIS whilst you login to yahoo groups. Or check with NIS about why the error is occurring. Yahoo can be a bit flakey at times too though.

 

Andrew Rowlands

Well-known member

• Dec 3, 2003

• #7

Sorry Ollie,

My mistake.

Have checked Yahoo Groups profile settings and all seems ok for me (BlackIce and Panda); looks like it's NIS.

Andy (apologetically).

 

Surreybirder

Ken Noble

• Dec 4, 2003

• #8

I guess there's no harm turning off NIS for a few minutes while I alter my 'profile' on Yahoo!groups?
It's only so I get messages on my new email address.
I'm sure most Birdforum members also belong to at least one yahoogroup? (I subscribe to about 10!) I might even start a thread on this one day... there are some very interesting groups out there!