View Full Version : [ubuntu] firestarter events
animalprimate
July 6th, 2008, 05:39 AM
I dual-boot windows xp/ubuntu hardy, shared home partition, dos mounted..
time: ETC. port: 23 source: 65.74.45.182 protocall:TCP service:Microsoft-ds
what do I do if firestarters event tab brings up a dangerous connection?, like once i recieved a red telnet.
time: ETC. port: 445 source: 78.163.181.240 protocall:TCP service:Telnet
animalprimate
July 6th, 2008, 05:53 AM
I plan to use notebook PC with Frostwire, and use telnet through a mud client..
I haven't installed and configured Bastille I did on a previous OS install, but I didn't see much reduce in red events listed on my Firestarters tray icon. I understand these red events may not be harm-full, but I would like to stop them, and avoid disabling any wrong ones, that my be needed by may system.
kevdog
July 6th, 2008, 07:06 AM
Do you want to filter the ability to telnet?? for example filter by username, usergroup, source ip address? I'm confused.
animalprimate
July 6th, 2008, 07:14 AM
if the name comes in red, then that connection is attempting to view my files, but i undrestand sometimes these connections are from my own system?
i don't understand port or protocol but i would like to know if there's any of these events types I should let be, or any type that i should recognize as harmfull.
I'm not networked to any other computers, just me and my labtop(and ubuntu)!
animalprimate
July 6th, 2008, 07:22 AM
cause basically when i see a red event i right click then "Disable Events from Source" and disconnect from the net, maybe even log out a second, I don't want to overreact when its not needed, and I don't wish to disable any events that are beneficial or necessary.
what event types to watch out for, and what types are mundane?
kevdog
July 6th, 2008, 02:06 PM
You'd have to post some examples since you are really talking vague here without any specifics.
animalprimate
July 7th, 2008, 02:25 AM
is there any reason not to "Disable Event from Source" every time I see a name that come up in Red??
or is there some "Service" or "ports" that can be considered safe? You could direct me to a good explanation on these terms I know I'm asking lots, and understand little.
I just need to get me feet on solid ground, is there a specifit port, service etc. that is named Red which I shouldn't disable?
vBulletin® v3.7.4, Copyright ©2000-2008, Jelsoft Enterprises Ltd.