Syn Flood attacks?

[Alex]

If this is not a right forum, I apologize in advance. This is a brand new
laptop from Dell running WindowsXP Service pack 1 and Java from SUN. I
think I am getting fake SynFlood attacks? I am running SMC firewall, Norton
AV, and ZoneAlarm. This only occurs when connection is slow and it appears
to load various images from the website. Sometime it works fine. I can
probably duplicate this 7 out of 10 tries. This website invokes JSP
file(JavaScript). Is there something strange about JavaScript. My other
Windows98SE PCs on my LAN don't experience same problem. Thanks.

I get the following logs in my SMC firewall:

Time: 01/05/2004, 19:47:09
Message: SYN Flood to Host
Source: 192.168.XXX.XXX, 1297
Destination:YYY.YYY.YYY.YYY, 80 (from WAN Outbound)

192.168.XXX.XXX - PC on my LAN with NATed address.
YYY.YYY.YYY.YYY - is website for well known camera/printer/copier company.

 

[Carey Frisch [MVP]]

You should only have one (1) firewall program installed and enabled.
More than one firewall program enable will cause conflicts with the others.

How can I harden my computer or server to secure it from hackers?
http://securityadmin.info/faq4.asp#harden

To secure your computer and prevent future security breeches,
consider installing a first-rate internet security program:

Norton Internet Security 2004
http://www.symantec.com/sabu/nis/nis_pe/

-- Includes Norton AntiVirus 2004
-- Includes Norton Personal Firewall
-- Includes prevention of annoying web pop-ups
-- Includes Parental Controls
-- All in one, easy-to-install package

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

---------------------------------------------------------------------------------------------


| If this is not a right forum, I apologize in advance. This is a brand new
| laptop from Dell running WindowsXP Service pack 1 and Java from SUN. I
| think I am getting fake SynFlood attacks? I am running SMC firewall, Norton
| AV, and ZoneAlarm. This only occurs when connection is slow and it appears
| to load various images from the website. Sometime it works fine. I can
| probably duplicate this 7 out of 10 tries. This website invokes JSP
| file(JavaScript). Is there something strange about JavaScript. My other
| Windows98SE PCs on my LAN don't experience same problem. Thanks.
|
| I get the following logs in my SMC firewall:
|
| Time: 01/05/2004, 19:47:09
| Message: SYN Flood to Host
| Source: 192.168.XXX.XXX, 1297
| Destination:YYY.YYY.YYY.YYY, 80 (from WAN Outbound)
|
| 192.168.XXX.XXX - PC on my LAN with NATed address.
| YYY.YYY.YYY.YYY - is website for well known camera/printer/copier company.

 

[Alex]

SMC Firewall is hardware based router/firewall. There is nothing wrong with
running two firewalls(hardware and software).