thanks guys for answering.
cfitz wrote:Odd. Does Norton have some sort of emergency shutdown rule that it activates if it perceives that the computer is under attack? Is there any chance your system got probed by computers infected with the SQL Slammer worm one too many times, and Norton went into full turtle mode? The timing coincidence is a little bit suspicious.
Since you have found an unexpected change in one of your bastion programs, it would probably be worthwhile to give the system a complete sweep for viruses and trojans.
Norton emergency shutdown - i haven't got a clue.
SQL Slammer worm etc. - what is this? first i've ever heard of it.
i regularly update the Norton Antivirus definitions and sweep the computer - at least once a week. so i belive (and hope!) my system is clean that way.
And since you changed your firewall settings, it would probably also be worthwhile to retest its defenses. I use Steve Gibson's Shields Up!
test at http://grc.com/default.htm
i used to go there quite often. actually, for a time i used to test my shields every time i logged into the net - first thing i would do after i dialed up. for a while everything was OK, all test (shields & ports) were perfect. about half a year ago it started acting up, with various ports open etc. (different ones every time), no consistent behaviour, kept getting reports of a next-level security/privacy threat something to do with a serial number hard-coded into my network card, which i don't have, andn it reported different numbers every time. anyway i figured that maybe sitting behind my university's proxy and firewall messes things up, i just don't trust GRC's shields up! results anymore.
tazdevl wrote:Actually if there was a shift in IP addresses via DHCP lease expiration and you don't approve the new IP as a valid connection, could be part of the problem.
sorry, i don't know what your'e talking about, don't know what DHCP is. however, i do know that i get a different IP from my ISP (my univ) every time i log in, and so far there has been no trouble at all with this. the IPs are in the same range as always (the first 3 groups of numbers are the same, the 4th is in the same range it always had been).
tazdevl wrote:The other thing it could be is program control/permission related. Might want to check and be sure Generic Host Processes for Win32 can connect to the internet otherwise it will shut everything down as you experienced.
Generic Host Processes for Win32 was configured as automatic, which was the usual setting for this program. anyway i've changed it to "Permit All".
i'll consider trying Zone Alarm, i've heard good things about it.
btw, what do you use cftiz?
so, any other suggestions anyone about what the problem could be?
dodecahedron wrote:going to Norton Personal Firewall -> Personal Firewall pane -> Internet Access Control -> Configure button -> System-Wide Settings, i find Rule354. double clicking on it, it appears that this rule:
Blocks Internet access; blocks Connections to and from other comuters; Any computer; TCP and UDP protocols, All types of communications (all ports, local and remote).
any ideas what this Rule354 is? am i correct in my interpretation of it's description that it blocks all
TCP communications altoghether, and so if it's activated i'll have nothing working?
if so, what is it doing in my Firewall settings? how did it get there?
any help much appreciated, TIA!