瑞星卡卡安全论坛

首页 » 技术交流区 » 系统软件 » 已删除
chunr - 2005-7-12 8:19:00
引用:
【天命主宰的贴子】

不会啊.用其他防火墙测试均正常.scan.sygate.com 进入后选quick scan,显示大部分为关闭.我是ADSL上网,没设路由,从来不用任何外挂.
...........................


用其他防火墙测试均正常?这样说来,你除了瑞星外还安装了其他防火墙,有冲突!
磁通量 - 2005-7-12 8:26:00
我也用http://scan.sygate.com/prequickscan.html
检测过.大部分是closed.没几个是隐藏的.而且我只用瑞星的防火墙.不知楼上的为什么会通过.而我没通过.我也是ADSL上网的.
东东西 - 2005-7-12 8:42:00
我开瑞星和SP2的墙我还用诺顿和天网也是隐藏FTP DATA 20 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
FTP 21 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
SSH 22 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
TELNET 23 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
SMTP 25 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
DNS 53 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
DCC 59 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
FINGER 79 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
WEB 80 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
POP3 110 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
IDENT 113 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
Location Service 135 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
NetBIOS 139 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
HTTPS 443 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
Server Message Block 445 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
SOCKS PROXY 1080 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
UPnP 5000 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
WEB PROXY 8080 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
东东西 - 2005-7-12 8:43:00
Trojan 1243 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
Trojan 1999 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
Trojan 6776 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
Trojan 7789 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
Trojan 12345 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
Trojan 31337 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
Trojan 54320 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
Trojan 54321 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
东东西 - 2005-7-12 8:43:00
ICMP  8  BLOCKED An ICMP ping request is usually used to test Internet access. However, an attacker can use it to determine if your computer is available and what OS you are running. This gives him valuable information when he is determining what type of attack to use against you.
taiying - 2005-7-12 8:45:00
我的测试也是隐藏!!
大连蓝天 - 2005-7-12 8:48:00
在此提示一下:每次规则更新后重新将规则导入覆盖掉原来规则即可.
bluebear - 2005-7-12 8:50:00
我的电脑一直遭受灰鸽子, backdoor ,恶鹰的袭击
东东西 - 2005-7-12 8:51:00
BLOCKED是隐藏的意思吗???
closed是关闭的意思吗????
我英语不好呀!!!
小熊猫 - 2005-7-12 8:59:00
引用:
【东东西的贴子】BLOCKED是隐藏的意思吗???
closed是关闭的意思吗????
我英语不好呀!!!
...........................

是的
东东西 - 2005-7-12 9:04:00
哦 谢谢呀!呵呵
taylor05771 - 2005-7-12 9:38:00
引用:
【我是伊莲娜的贴子】请问楼主只为瑞星防火墙写了规则吗?
若是别的防火墙如天网等可以用二位的规则包吗?
...........................

别的防火墙 暂时不推出
涉及内核匹配问题
taylor05771 - 2005-7-12 9:49:00
对于 某些机子出现的是关闭不是隐藏
其原因有三
一防火墙损坏(卸了重装即可解决)
二 ADSL的猫开了端口映射(某些是本来就开的,有的是为了加快网速开的)
三 可能某些人看过网上加快网速的文章,并实施了
我这边八台机子检测全部是隐藏(也就是blocked)
来自何处 - 2005-7-12 10:32:00
我只有一个端口1026是关闭.别的都是隐藏.不知是怎么回事.请问老师们,怎么样才能隐藏这个1026的端口.谢谢了.
拉风虎 - 2005-7-12 10:34:00
楼主大哥,昨天下午导入了新规则,防火墙报警闪不停,怎么今天上午却如此安静啊,一次警报都没出现过?
天命主宰 - 2005-7-12 10:36:00
引用:
【taylor05771的贴子】对于 某些机子出现的是关闭不是隐藏
其原因有三
一防火墙损坏(卸了重装即可解决)
二 ADSL的猫开了端口映射(某些是本来就开的,有的是为了加快网速开的)
三 可能某些人看过网上加快网速的文章,并实施了
我这边八台机子检测全部是隐藏(也就是blocked)
...........................

防火墙刚刚用升级的方式检查了下.完好没问题.ADSL的猫开了端口映射?这个不清楚.用了快三年了.什么东西都没搞过.如果真的是这样的话.那为什么我把瑞星关了,重新启用windows sp2的墙则通过.关了windows的墙用瑞星通不过.不知道咋回事.
寿宁 - 2005-7-12 11:02:00
引用:
【chunr的贴子】

用其他防火墙测试均正常?这样说来,你除了瑞星外还安装了其他防火墙,有冲突!
...........................


这个问题,你先看看。
cxb5206 - 2005-7-12 11:10:00
我的防火墙不知设置了什么,连网页都没法访问了,老是显示无法开启浏览页,请问是怎么回事?
taylor05771 - 2005-7-12 11:28:00
引用:
【cxb5206的贴子】我的防火墙不知设置了什么,连网页都没法访问了,老是显示无法开启浏览页,请问是怎么回事?
...........................

卸载
重装防火墙
重新导入规则
规则你不要修改
因为规则和内核要匹配的
taylor05771 - 2005-7-12 11:34:00
引用:
【天命主宰的贴子】
防火墙刚刚用升级的方式检查了下.完好没问题.ADSL的猫开了端口映射?这个不清楚.用了快三年了.什么东西都没搞过.如果真的是这样的话.那为什么我把瑞星关了,重新启用windows sp2的墙则通过.关了windows的墙用瑞星通不过.不知道咋回事.
...........................

这样吧 你加我QQ289039676
我远程给你检测
小熊猫 - 2005-7-12 11:50:00
引用:
【天命主宰的贴子】
防火墙刚刚用升级的方式检查了下.完好没问题.ADSL的猫开了端口映射?这个不清楚.用了快三年了.什么东西都没搞过.如果真的是这样的话.那为什么我把瑞星关了,重新启用windows sp2的墙则通过.关了windows的墙用瑞星通不过.不知道咋回事.
...........................

我得也是这样,开启自带防火墙显示隐藏,偶装了木马克星有关系吗?
来自何处 - 2005-7-12 12:18:00
我昨天装好防火墙去检则全是隐藏,今天再检则就有有一个端口1026是关闭.别的都是隐藏.不知是怎么回事.请楼主说一下好吗?我是新手刚接触电脑总想多知道一点,怎么样才能隐藏这个1026的端口.谢谢了.
taylor05771 - 2005-7-12 12:29:00
引用:
【小熊猫的贴子】
我得也是这样,开启自带防火墙显示隐藏,偶装了木马克星有关系吗?
...........................

卸了试试
请说明
你是哪里的 网络
taylor05771 - 2005-7-12 12:29:00
【回复“来自何处”的帖子】
怀疑你本来就有木马
小熊猫 - 2005-7-12 13:29:00
引用:
【taylor05771的贴子】
卸了试试
请说明
你是哪里的 网络
...........................

浙江电信ADSL
寿宁 - 2005-7-12 13:37:00
引用:
【小熊猫的贴子】
我得也是这样,开启自带防火墙显示隐藏,偶装了木马克星有关系吗?
...........................


木马克星,尤其是破解版和试用版,最好不要和瑞星防火墙同时安装,原因:
1、两者都在后台监控,个别代码还要插到PC低层运行,因此两着同时安装(打开),会出现代码命令执行上出现误差。(举个不少人都遇见过的实例:有的用户在使用还原精灵后,系统时常出现莫名其妙的不良情况,但在卸载后,就是格式化了驱动盘还是没有办法重新安装系统,究其原因就是还原精灵接管了PC低层的部分N\FDI代码,在卸载后没有及时更改过来!类似的情况网络里时有介绍。)
2、本规则包以内核中的引擎函数变量和端口互动为匹配原则,因此在加载后,肯定会与木马克星产生冲突(这种冲突表现了对PC端口的控制出错,也就是技术上说的“接管误差”)。因为木马克星的引擎等内核变量设置与瑞星的原理一样!
3、WINDOWS XP(包括SP1和SP2)自带的防火墙与瑞星防火墙的监控原理不同,也就是说监控指令的运行方式、途径不一样,而且瑞星杀软、防火墙的主基码已经通过微软识别论证,两者同时打开可以和平共处。
小熊猫 - 2005-7-12 13:57:00
明白了,谢指教!
swbly - 2005-7-12 14:19:00
引用:
【寿宁的贴子】

木马克星,尤其是破解版和试用版,最好不要和瑞星防火墙同时安装,原因:
1、两者都在后台监控,个别代码还要插到PC低层运行,因此两着同时安装(打开),会出现代码命令执行上出现误差。(举个不少人都遇见过的实例:有的用户在使用还原精灵后,系统时常出现莫名其妙的不良情况,但在卸载后,就是格式化了驱动盘还是没有办法重新安装系统,究其原因就是还原精灵接管了PC低层的部分N\FDI代码,在卸载后没有及时更改过来!类似的情况网络里时有介绍。)
2、本规则包以内核中的引擎函数变量和端口互动为匹配原则,因此在加载后,肯定会与木马克星产生冲突(这种冲突表现了对PC端口的控制出错,也就是技术上说的“接管误差”)。因为木马克星的引擎等内核变量设置与瑞星的原理一样!
3、WINDOWS XP(包括SP1和SP2)自带的防火墙与瑞星防火墙的监控原理不同,也就是说监控指令的运行方式、途径不一样,而且瑞星杀软、防火墙的主基码已经通过微软识别论证,两者同时打开可以和平共处。

...........................


专业 ~~~
现在 能不能帮大家 解决一下
端口 关闭 而非 隐藏的问题呀
具体的步骤是什么样的 谢谢~
来自何处 - 2005-7-12 14:31:00
引用:
【taylor05771的贴子】【回复“来自何处”的帖子】
怀疑你本来就有木马
...........................


出自真心的谢谢楼主对我这个老菜的关心.我用最新版本的瑞星杀毒软件扫完我的电脑,没的发现一个病毒.又把[访问规则优先]改为[IP规则优先]再去测试就成了全部[隐藏]了.可是[IP规则优先]有时会掉线,我才设为[访问规则优先]的.我用的是XP-2全部安全补钉都已打上,是在微软网站直接升级的.除了瑞星的杀毒软件和防火墙外没有任何别的保护软件.是不是哪个1026端口关闭或隐藏与[规则]设制有关呀?另外,我用的是网通的ADSL宽带上网的.
Oberst9023Lee - 2005-7-12 14:49:00
楼主,1楼和2楼有两个RAR文件下载,是不是两个都要啊!
«56789101112»
查看完整版本: 已删除