Any of you on this forum with firewalls getting intrusion attempts through this site?

[Buckeye Riveter]

QUOTE: Originally posted by Frank53

I have a netgear firewall running a home network and use norton internet security.

Lately, when I visit this forum and open a topice, I get a pop up message to configure my Net Passport (MSN Messanger).

I have never run it on this computer, nor do I ever intend to. Only when opening topices on this forum does it happen.

That is exaclty what happened to me, too! I have never used MSN Messenger. [:0]

[Frank53]

I have a netgear firewall running a home network and use norton internet security.

Lately, when I visit this forum and open a topice, I get a pop up message to configure my Net Passport (MSN Messanger).

I have never run it on this computer, nor do I ever intend to. Only when opening topices on this forum does it happen.

[laz 57]

I keep getting some type of pop up to log on for some passport.
Laz57

[ChiefEagles]

Thanks David, thought maybe someone was "hacking" into your site. Sounds like you have it covered.

[Anonymous]

I remember this had been brought up before, vaguely mind you, but I do remember.

Site Administrator:: Norton Internet Security blocked this site at 6:58 AM// Trojan Horse attempt.

Are you still drinking soda and not pop? [;)]

Seriously, I think it's most likely either a false positive or the "Some ISPs use the same ports as Trojans" item posted on the Symantec site. Other than that, I honestly don't know what to tell you. We have virus scanners active on our webservers, firewalls, and so on. For trains.com, those servers are actually hosted off site and monitored by the facility. And when I say monitored, I mean it -- we've gotten phone calls and emails from them for even minor trivial things. If there was something that wasn't supposed to be on those servers causing trouble, we would have been notified by them.

I've seen similar messages from Norton in the past (for other sites), but once they've come up a couple time, I usually hit check the box so that it doesn't tell me about it again. I'm confident it's doing it's job and don't need to be constantly reminded.

[Buckeye Riveter]

I had something like this happen last week at home and my McAffee firewall and/or virus protection killed it.

Now if I could only get it to recognize trashy messages from North Carolinia it would be perfect.

[spankybird]

We have a very high tech firewall here at work and I have not seen any problems here or at home. Maybe, it’s just one of those Rebel things.

[cnw1995]

As Bergie notes, the same thing happens here with the domains I oversee - lots of spoofing that is killed by firewalls. By the way, you ought to be able to adjust the wait time in Norton.

[Bergie]

I too use Norton on my home computer (when I'm at home keeping an eye on you guys [:D] ). I've never had any similar attempts.

Here's my speculation as to what it might be... again, just a guess. Almost every day of the week, I get spam that has a bogus sender's name that includes @trains.com. For example, [e-mail] (there's no Hillary working here). The e-mail is blank and it includes a text document that's been deleted by our Spam-blocking software. Long story short, I would guess that someone is using our domain name to mask their attempt on your computer. Makes you happy you paid for Norton's services, doesn't it? I've had friends tell me about the computer problem they're having. I always ask if they have a firewall and if they use something like Norton to keep things clean. They say no... and I start a lecture. Yes, it's a bummer you have to pay for such services, but think about the piece of mind you get in the end.

I'll bounce this off someone in our IS department just to make sure.

Erik

[wrmcclellan]

Chief,

Nope. Never in my time on the forum. I have Norton's firewall.

Roy

[TurboOne]

No blocks, but just got weird color screen and the coffee shop didn't exist. I see it now upon returning.

Good thing, I need that Joe.


Tim

[ChiefEagles]

My Norton 2004 with firewall has blocked two. One yesterday AM and another this AM. Had several attempts last spring that were blocked. Trace them down and they are coming from this site. [?][?] When Notrton blocks one, it prevents any communication with that site for 30 minutes.