WebmastTroy
04-08-2002, 12:20 AM
I just went to map a network drive for my computer, and noticed an extensive list of IP addresses that are in my PATH pulldown. Example: \\00.00.00.00\C (I removed the IP address). Theres about 20 in my list.
I checked arin to see who some of them belonged to....I have 1/3 of them from Lebanon, 1/3 from Venezuela, and the other 1/3 from my own ISPs network.
Can anyone help me? I have the IPs written down and a screen shot taken for proof (if needed sometime).
Thanks in advanced.
WebmastTroy
04-08-2002, 04:01 PM
OK. Call me stupid, but I just learned that you can connect to someone else's harddrive by mapping it with their IP. I didn't know you could do that before.
Anyway, I have ICQ on my computer. Could that be contributing to the problem with people getting my IP? Why would they have mapped their IP on my computer? Wouldn't they just map it on theirs and then do what they wanted?
I'm confused....:rolleyes: Should I report this to my ISP?
Thanks.
richardparry
04-08-2002, 04:52 PM
There are many programs out there to find the IP for an ICQ User.
I didnt know it was possible to map a drive over an IP.
If it is true then you should take steps to stop it from happening to you.
Make sure you have no guest shares open. If in 9x then you will have to turn off file and print sharing on the network connection (thats if your using DialUp), if you arent then I would say a firewall is the answer.
Either way, I would install a firewall such as ZoneAlarm and run a full virus check to make there are no trojans and stuff running on your box.
Its likely your ISP is going to tell you what I have just told you.
WebmastTroy
04-08-2002, 05:48 PM
I have a DSL line that runs through a "gateway" computer (the one that I use) and I have another NIC in it to share it on the network.
I have a firewall running, but it doesn't protect the gateway computer.
I didn't know you could map with the IP either. I noticed the other day a LARGE amount of inbound and outbound traffic from my computer over my connection, but I didn't have any monitoring program at the time to see who it was going to and what it was. I went to disconnect from my DSL connection, and it totally locked up my computer (I'm guessing it was trying to access a "harddrive" that no longer was responding, so it flipped out).
I have WIN98se and do have file and printer sharing on to share files on the network. I guess now I'll set a password if I want to be able to continue doing that.
Not only were people from other countries accessing my computer, but people from my the same ISP that I'm with where accessing it.
Seems like Microsoft would have a fix for something like this, though.
Oh well....I've formatted that harddrive to get rid of anything that they might have given me, so any viruses I had are gone now.
Thanks for your help.
billyjoe
04-08-2002, 05:52 PM
On your firewall, just block all inbound and outbound Netbios connections (ports 135,137,138,139). There's probably no reason you need to be sending or receiving Netbios traffic from the internet.
WebmastTroy
04-08-2002, 08:05 PM
Originally posted by billyjoe
On your firewall, just block all inbound and outbound Netbios connections (ports 135,137,138,139). There's probably no reason you need to be sending or receiving Netbios traffic from the internet.
Well, my firewall program is on the same computer that the DSL is connected to, so it acts as the gateway for the network.
Would I be able to set my browser and programs to access the Internet using the localhost IP and use the appropriate ports for my firewall program?
Also, what firewall program do you suggest (thats free)? I've used AnalogX Proxy and Proski, and haven't found where you can block (or unblock) ports.
Thanks.
billyjoe
04-08-2002, 08:42 PM
I assume your computer has 2 network cards in it then? One card gets your DSL IP address, the other card has your internal network address (such as 192.168.x.x). Find a firewall that allows you to block specific ports, and block those ports on the DSL address. I'd also suggest unbinding file sharing from TCP/IP completely and bind it to only IPX or NetBeui for your internal network.
bitserve
04-08-2002, 10:02 PM
I'm always amazed at how many people are unknowingly sharing their harddrives with the "world".
http://www.webhostingtalk.com/showthread.php?s=&threadid=34887
http://www.rawlogic.com/products.html