Trains.com

Any of you on this forum with firewalls getting intrusion attempts through this site?

857 views
11 replies
1 rating 2 rating 3 rating 4 rating 5 rating
  • Member since
    February 2004
  • From: Rolesville, NC
  • 15,416 posts
Any of you on this forum with firewalls getting intrusion attempts through this site?
Posted by ChiefEagles on Friday, January 21, 2005 9:41 AM
My Norton 2004 with firewall has blocked two. One yesterday AM and another this AM. Had several attempts last spring that were blocked. Trace them down and they are coming from this site. [?][?] When Notrton blocks one, it prevents any communication with that site for 30 minutes.

 God bless TCA 05-58541   Benefactor Member of the NRA,  Member of the American Legion,   Retired Boss Hog of Roseyville Laugh,   KC&D QualifiedCowboy       

              

  • Member since
    December 2004
  • From: The great state of Texas
  • 1,084 posts
Posted by TurboOne on Friday, January 21, 2005 9:52 AM
No blocks, but just got weird color screen and the coffee shop didn't exist. I see it now upon returning.

Good thing, I need that Joe.


Tim
WWJD
  • Member since
    July 2003
  • From: North Texas
  • 5,707 posts
Posted by wrmcclellan on Friday, January 21, 2005 10:06 AM
Chief,

Nope. Never in my time on the forum. I have Norton's firewall.

Roy

Regards, Roy

  • Member since
    January 2001
  • From: US
  • 1,431 posts
Posted by Bergie on Friday, January 21, 2005 10:17 AM
I too use Norton on my home computer (when I'm at home keeping an eye on you guys [:D] ). I've never had any similar attempts.

Here's my speculation as to what it might be... again, just a guess. Almost every day of the week, I get spam that has a bogus sender's name that includes @trains.com. For example, hillary@trains.com (there's no Hillary working here). The e-mail is blank and it includes a text document that's been deleted by our Spam-blocking software. Long story short, I would guess that someone is using our domain name to mask their attempt on your computer. Makes you happy you paid for Norton's services, doesn't it? I've had friends tell me about the computer problem they're having. I always ask if they have a firewall and if they use something like Norton to keep things clean. They say no... and I start a lecture. Yes, it's a bummer you have to pay for such services, but think about the piece of mind you get in the end.

I'll bounce this off someone in our IS department just to make sure.

Erik
Erik Bergstrom
  • Member since
    July 2003
  • From: Crystal Lake, IL
  • 8,059 posts
Posted by cnw1995 on Friday, January 21, 2005 10:21 AM
As Bergie notes, the same thing happens here with the domains I oversee - lots of spoofing that is killed by firewalls. By the way, you ought to be able to adjust the wait time in Norton.

Doug Murphy 'We few, we happy few, we band of brothers...' Henry V.

  • Member since
    April 2003
  • From: Willoughby, Ohio
  • 5,231 posts
Posted by spankybird on Friday, January 21, 2005 10:24 AM
We have a very high tech firewall here at work and I have not seen any problems here or at home. Maybe, it’s just one of those Rebel things.

I am a person with a very active inner child. This is why my wife loves me so. Willoughby, Ohio - the home of the CP & E RR. OTTS Founder www.spankybird.shutterfly.com 

  • Member since
    March 2004
  • From: Jelloway Creek, OH - Elv. 1100
  • 7,578 posts
Posted by Buckeye Riveter on Friday, January 21, 2005 10:33 AM
I had something like this happen last week at home and my McAffee firewall and/or virus protection killed it.

Now if I could only get it to recognize trashy messages from North Carolinia it would be perfect.

Celebrating 18 years on the CTT Forum. Smile, Wink & Grin

Buckeye Riveter......... OTTS Charter Member, a Roseyville Raider and a member of the CTT Forum since 2004..

Jelloway Creek, OH - ELV 1,100 - Home of the Baltimore, Ohio & Wabash RR

TCA 09-64284

  • Member since
    April 2003
  • 305,205 posts
Posted by Anonymous on Friday, January 21, 2005 11:13 AM
I remember this had been brought up before, vaguely mind you, but I do remember.

Site Administrator:: Norton Internet Security blocked this site at 6:58 AM// Trojan Horse attempt.

Are you still drinking soda and not pop? [;)]

Seriously, I think it's most likely either a false positive or the "Some ISPs use the same ports as Trojans" item posted on the Symantec site. Other than that, I honestly don't know what to tell you. We have virus scanners active on our webservers, firewalls, and so on. For trains.com, those servers are actually hosted off site and monitored by the facility. And when I say monitored, I mean it -- we've gotten phone calls and emails from them for even minor trivial things. If there was something that wasn't supposed to be on those servers causing trouble, we would have been notified by them.

I've seen similar messages from Norton in the past (for other sites), but once they've come up a couple time, I usually hit check the box so that it doesn't tell me about it again. I'm confident it's doing it's job and don't need to be constantly reminded.
  • Member since
    February 2004
  • From: Rolesville, NC
  • 15,416 posts
Posted by ChiefEagles on Friday, January 21, 2005 11:48 AM
Thanks David, thought maybe someone was "hacking" into your site. Sounds like you have it covered.

 God bless TCA 05-58541   Benefactor Member of the NRA,  Member of the American Legion,   Retired Boss Hog of Roseyville Laugh,   KC&D QualifiedCowboy       

              

  • Member since
    October 2004
  • From: Millersburg, Pa.
  • 7,607 posts
Posted by laz 57 on Friday, January 21, 2005 11:50 AM
I keep getting some type of pop up to log on for some passport.
Laz57
  There's a race of men that don't fit in, A race that can't stay still; Robert Service. TCA 03-55991
  • Member since
    January 2005
  • 1,991 posts
Posted by Frank53 on Friday, January 21, 2005 11:57 AM
I have a netgear firewall running a home network and use norton internet security.

Lately, when I visit this forum and open a topice, I get a pop up message to configure my Net Passport (MSN Messanger).

I have never run it on this computer, nor do I ever intend to. Only when opening topices on this forum does it happen.
  • Member since
    March 2004
  • From: Jelloway Creek, OH - Elv. 1100
  • 7,578 posts
Posted by Buckeye Riveter on Friday, January 21, 2005 2:57 PM
QUOTE: Originally posted by Frank53

I have a netgear firewall running a home network and use norton internet security.

Lately, when I visit this forum and open a topice, I get a pop up message to configure my Net Passport (MSN Messanger).

I have never run it on this computer, nor do I ever intend to. Only when opening topices on this forum does it happen.


That is exaclty what happened to me, too! I have never used MSN Messenger. [:0]

Celebrating 18 years on the CTT Forum. Smile, Wink & Grin

Buckeye Riveter......... OTTS Charter Member, a Roseyville Raider and a member of the CTT Forum since 2004..

Jelloway Creek, OH - ELV 1,100 - Home of the Baltimore, Ohio & Wabash RR

TCA 09-64284

Join our Community!

Our community is FREE to join. To participate you must either login or register for an account.

Search the Community

FREE EMAIL NEWSLETTER

Get the Classic Toy Trains newsletter delivered to your inbox twice a month