Jump to content

I have firewall set to block inbound connections exceptionless but I still got an alert from MBAM


Recommended Posts

I have this environment:

- router with firewall enabled. SPI is not enabled. I enabled it after the fact.

- host machine running Windows 7 SP1 x64. Firewall set to reject all inbound connections on all profiles (public, private and domain) as I don't transfer data between PCs.

- guest OS Windows XP SP3 running in Virtualbox connected via NAT interface. No ports open in virtual NAT;

- vm firewall also set to ignore exceptions.

Virtual machine is in place to run somewhat risky applications in an attempt to keep my system clean:

- Cool TV Online app is a Sopcast based TV online app. So it is P2P based. It also displays ads from adcash in pop-up everytime you click on something;

- Hola Better Internet VPN extension for Firefox. Another P2P based app.

 

Because both programs are P2P based I am expecting to see outbound connections blocked at host level on Virtualbox.exe which by way it happens sometimes, but inbound connections. This is odd, I'd like someone to explain me how this is possible. The alerts are not frequent, there are days when they don't happen. It mostly depends on how long either of them are running.

 

I have some wild guesses about how this can happen, but I'd like a professional explanation:

- Server to which I was connected informed of an IP change; that new IP is flagged as malicious in MBAM db;

- Server #1 requested that Server #2 to take over (This is a P2P connection, so take overs seams to happen a lot), Server #2 IP is flagged as malicious so it wasn't allowed to check if I am still online.

 

protection-log.txt

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.