connection issue to port 1025 using Avast Premium Security

[BRIANH]

HARDWARE

- DELL - 64 bit
- INTEL PROCESSOR - 2 GHz
- MEMORY - 6GB
- C DRIVE - 446 GB - AVAILABLE  - 317 UNUSED

MY ENV.

- Win 10 Pro - 64 bit - Ver. 1903 build 18362.720
- SUSE Linux Enterprise 10 - 64 bit - guest O/S on Windows
- VMPlayer - 15.5
- TD Express 15.10

AVAST PREMIUM SECURITY - Ver. 20.1.2397 build 20.1.5069.559


APPLICATION STARTUP HEIRARCHY

- WINDOWS  >> VMPLAYER  >> Linux guest O/S >> Teradata


I was auto upgraded very recently by AVAST from AVAST ANTIVIRUS PRO to AVAST PREMIUM SECURITY.

From that time forward I have been unable to connect to Teradata using port 1025.

FROM WINDOWS - I can ping the Teradata IP OK.
             - I can run a tracert on the Teradata IP OK.
             - I  CAN NOT CONNECT  to the Teradata IP using TELNET (e.g cmd - telnet TeradataIP 1025)

When I temporarily disable the AVAST firewall I can connect OK and its business as usual.

AVAST applications settings for Teradata show:
  - allow outbound access to friends on ports 1025
  - for all other connections Auto-decide 

AVAST applications settings for VMPlayer show:
  - allow outbound access to friends on ports 1025
  - allow connections to all networks
 
So, not being a network guru I have no idea where to look for the issue or how to correct it.
I do know I can not be in the position of not being able to connect to Teradata and disabling
the Avast firewall is not an option..

Any advice / help in how to proceed would be greatly appreciated...as of now I'm stuck......
thanks Brian

[Pondus]

Is your firewall in puplic or private mode?





Setting up Firewall Application Rules in Avast Antivirus
https://support.avast.com/en-eu/article/Antivirus-Firewall-Application-Rules

=================================================================

NOTE:The Network profiles control the settings which determine how strictly Firewall protects your PC.

Private: a lower level of security suitable for when your PC is connected to a trusted network such as your home or work network.
This profile enables better connectivity, and permits all communication within the network.

Public: a higher level of security suitable for when your PC is connected to a public network such as in a cafe or airport.
Because public networks present greater security risks, no incoming communication is permitted when this profile is set.

=================================================================

also see post here from  BWhit   https://forum.avast.com/index.php?topic=227130.msg1505540#msg1505540

[BRIANH]

Not sure how to answer your Q. I use Bell for internet access and the Firewall profile is set to Public Network.  I changed the application to Friends in/out with
 ports = 'ALL'. However I'm not sure this will change anything since I can not TELNET to application (Teradata) IP..

[bob3160]

Not sure how to answer your Q. I use Bell for internet access and the Firewall profile is set to Public Network.  I changed the application to Friends in/out with
 ports = 'ALL'. However I'm not sure this will change anything since I can not TELNET to application (Teradata) IP..

Not your router. Your setting in Avast
Protection > Firewall

[BRIANH]

When I indicated PUBLIC I was referring to to the AVAST setting... I do not have a router... One additional point, the IP I can not TELNET to is setup by VMPlayer during start up and is an ETH0 connection, strictly internal to my PC...

[Pondus]

Not sure how to answer your Q. I use Bell for internet access and the Firewall profile is set to Public Net

Sett it to private and restart .... any change?

[BRIANH]

I've done that.. recycle my PC and same result... can ping, can tracert but can not TELNET TO PORT 1025.  I temporarily tuned off the AVAST firewall and could connect with no issues. So, no idea what to do at this point...  any logs available which someone (AVAST?) could look at ? 

[Pondus]

did you see this ?


also see post here from  BWhit   https://forum.avast.com/index.php?topic=227130.msg1505540#msg1505540

[BRIANH]

Thanks for the tip.... I followed the steps to get into geek:area  and

I did this and it did not help..

    1. Please set the "Allow Windows File and Printer sharing" option to "Enabled"                       ------------------->  was disabled
    2. Please set the "Allow remote desktop connections to this computer" option to "Enabled"    ------------------->  was disabled
    3. restarted my PC and tested

I then did this and it apparently solved my issue, I can connect now..

    1. Please enable "Internet Connection Sharing mode" (click the box to the right of the setting so that a
       green tick appears).                                                                                      -------------------> did not have a green check mark
    2. Please enable "Allow all connections with Friends when in Private mode"  -------------------> did not have a green check mark
    3. Please disable "Enable automatic profile switching"                                    ------------------->  had a green check mark
    4. Please disable "Enable automatic port scan detection"                               ------------------->  did not have a green check mark
    5. restarted my PC and tested

I then reset the settings below and all was still OK ..

    1. Please set the "Allow Windows File and Printer sharing" option to "Enabled"                       ------------------->  reset to disabled
    2. Please set the "Allow remote desktop connections to this computer" option to "Enabled"    ------------------->  reset to disabled
    3. restarted my PC and tested

I'll monitor for a couple of weeks and then provide a final status. In the meantime thanks for your help... it certainly helped me  !!!!!

[BRIANH]

Well... didn't take too long... I now have a problem with timing out on port 1025 when there is no activity for > ~ 1 min.  This causes me to reconnect ..
I disabled the AVAST firewall and and sat idle for 6 min  and then ran a query and I had no issues... Anyone have an idea what I need to change to ensure there is no timeout / broken connection on port 1025  

thanks Brian

[r@vast]

Hi,

Would you mind trying the new BETA version? There is a new Firewall driver.
https://forum.avast.com/index.php?topic=232718.0

[BRIANH]

Hi r@vast... sorry but I'm not in the position of installing a BETA Version... I just don't have the time to track down, chronicle and resolve issues...I'll wait for the official release of the new version...Thanks for the offer.  That aside... is there any additional advice you can provide to try and resolve my timeout issue ? thanks Brian