Author Topic: Avast Firewall  (Read 2117 times)

0 Members and 1 Guest are viewing this topic.

Offline Yash Khan

  • Jr. Member
  • **
  • Posts: 91
Avast Firewall
« on: April 24, 2015, 04:23:10 PM »
I am running latest AIS.

I use direct connection, wired router & wireless (only my wireless connection)
I keep on checking grc.com & Avast always stealth all the ports.

But only 1 prob & this prob happens only with Avast Firewall. I have never seen this prob with Comodo FW & Windows 7 FW.

On my routers page, WAN IP mostly starts with 203.x.x.x & think 192.x.x.x & with Avast FW installed, grc.com shows all ports stealth. This is fine.

But with Avast FW installed, I have noticed sometimes WAN IP shows 195.195.x.x & when this IP is shown, grc.com shows 2 ports stealth, rest closed & 80 & 443 open always. Avast Home Network scan also reports this prob when WAN IP shows this IP.

Any info?

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31345
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Avast Firewall
« Reply #1 on: April 24, 2015, 04:31:17 PM »
80 is the standard http port
443 is used for secure webbrowsing

If you want to scan for open/closed ports, never do it from the same system/network that you want to scan.
Results will not be reliable.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 36684
Re: Avast Firewall
« Reply #2 on: April 24, 2015, 04:44:16 PM »
notice, when runing shields up probe scan, it is the first firewall that is tested. So if you are behind a router/ISP box with hardware firewall then that is the one tested

Quote
ISP port blocking can be easily tested, often quite rapidly, by arranging to allow the ShieldsUP! probe to have access to an unprotected computer. Since all non-stealth machines will respond to every open request — either affirmatively or negatively — ports appearing as STEALTH will be those blocked by your ISP, corporate firewall, or other external agency.

   If your system is unprotected, without any personal firewall or NAT router, any ports showing as stealth  are being blocked somewhere between your computer and the public Internet. This is probably being done by your ISP. Internet traffic directed to your computer at the stealth ports will be dropped before reaching your machine.

you find this info below the scan result after testing   ;)


I can't pass a firewall test, what should I do?  http://ask-leo.com/i_cant_pass_a_firewall_test_what_should_i_do.html





Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40631
  • Dragons by Sasha
    • Malware fixes
Re: Avast Firewall
« Reply #3 on: April 24, 2015, 04:59:24 PM »
Do you have a wireless printer ?

Offline Yash Khan

  • Jr. Member
  • **
  • Posts: 91
Re: Avast Firewall
« Reply #4 on: April 24, 2015, 05:17:46 PM »
Thanxx replying guys.
I know the things you have mentioned.

No wireless printer.

Why WAN IP on routers page shows sometimes IP 195.195.x.x?
This WAN IP I see sometime only when Avast FW is installed.
Dont see it with any other firewall installed.

Offline Yash Khan

  • Jr. Member
  • **
  • Posts: 91
Re: Avast Firewall
« Reply #5 on: April 29, 2015, 05:16:00 AM »
I was wrong. The prob is not due to Avast FW.

I have seen 3 types of IP in WAN IP in router page.
1. Starts with 203.x.x.x
2. Starts with 192.x.x.x
Ports are always stealthed with the above starting IP.

3. 195.195.x.x

Whenever WAN IP shows IP starting with 195.195.x.x then always 2 ports stealth, rest closed & 80 & 443 always open.
I dont understand why this happens with IP starting with 195.195.x.x?
Are IP starting with 195.195.x.x. normal for home users?

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31345
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Avast Firewall
« Reply #6 on: April 29, 2015, 06:18:20 PM »
There are three blocks for private use:
24-bit block (/8 prefix, 1 × A)   10.0.0.0   10 - 255.255.255
20-bit block (/12 prefix, 16 × B)   172.16.0.0 - 172.31.255.255
16-bit block (/16 prefix, 256 × C)   192.168.0.0 - 192.168.255.255

More information:
http://en.wikipedia.org/wiki/IP_address

All other IP adresses are external/Internet addresses.

It seems to me the 195.x.x.x address is the DNS that you are using.

Offline Yash Khan

  • Jr. Member
  • **
  • Posts: 91
Re: Avast Firewall
« Reply #7 on: April 30, 2015, 02:41:59 PM »
Its not DNS. I know my DNS.

Its IP.
When this IP is shown in WAN IP router page, ipconfig /all shows this IP as IPv4.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31345
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Avast Firewall
« Reply #8 on: April 30, 2015, 03:44:33 PM »
A DNS is also a IP ;)

Offline Yash Khan

  • Jr. Member
  • **
  • Posts: 91
Re: Avast Firewall
« Reply #9 on: April 30, 2015, 06:20:13 PM »
Ok, but its not DNS.