Incoming IIS connection but who?

Hello

But how do I handle these Mike V06.

I know they are not from me so I have them blocked.

But the day I want to use my IIS server for myself, I will also be blocked.

I am not a network person so please excuse me if the question is naive.

Thanks

Dave Neve
"MikeV06" <me.RemoveThis@privacy.net> a écrit dans le message de news:
1jsys2869pavw$.dlg@mycomputer06.invalid.com...
> On Mon, 26 Dec 2005 18:01:50 +0100, Dave Neve wrote:
>
>> Hi
>>
>> I am trying to reinstall IIS onto my computer (and haven't quite
>> suceeded
>> yet as you can see from a prev question)
>>
>> Anyway, I am a bit worried cos my firewall (Kerio) keeps alerting about
>> an
>> incoming connection for this service
>>
>> As I am the only person who uses my http and ftp addresses (I use IIS to
>> access my computer when I am away from home), I don't understand who
>> could
>> be calling up this program.
>>
>> The firewall message is below.
>>
>> Any explanations please?
>>
>> Thanks
>>
>> Dave Neve
>>
>> [26/12/2005 17:56:13]
>>
>> Direction: entrant
>> Point local: 84.98.111.94, port http [80]
>> Matériel: N/A
>> Point distant: 84.98.254.212 [84.98.254.212], port 3389
>> Protocole: TCP
>>
>> Fichier: c:\WINDOWS\system32\inetsrv\inetinfo.exe
>> Description: Services Internet (IIS)
>> Version: 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
>> Créé le: 2005/12/24, 21:34:31
>> Modifié le: 2004/8/19, 15:09:56
>> Accédé le: 2005/12/26, 15:50:54
>>
>> RuleId = 2415920009
>
> Not at all unexpected. I have packets from all over the world hitting my
> firewall. I guess they are just random looks to see if they can find
> anything they can hack.
 >> Stay informed about: Incoming IIS connection but who? 

On Tue, 27 Dec 2005 09:09:19 +0100, Dave Neve wrote:

> Hello
>
> But how do I handle these Mike V06.
>
> I know they are not from me so I have them blocked.
>
> But the day I want to use my IIS server for myself, I will also be blocked.
>
> I am not a network person so please excuse me if the question is naive.
>
> Thanks
>
> Dave Neve
> "MikeV06" <me DeleteThis @privacy.net> a écrit dans le message de news:
> 1jsys2869pavw$.dlg@mycomputer06.invalid.com...
>> On Mon, 26 Dec 2005 18:01:50 +0100, Dave Neve wrote:
>>
>>> Hi
>>>
>>> I am trying to reinstall IIS onto my computer (and haven't quite
>>> suceeded
>>> yet as you can see from a prev question)
>>>
>>> Anyway, I am a bit worried cos my firewall (Kerio) keeps alerting about
>>> an
>>> incoming connection for this service
>>>
>>> As I am the only person who uses my http and ftp addresses (I use IIS to
>>> access my computer when I am away from home), I don't understand who
>>> could
>>> be calling up this program.
>>>
>>> The firewall message is below.
>>>
>>> Any explanations please?
>>>
>>> Thanks
>>>
>>> Dave Neve
>>>
>>> [26/12/2005 17:56:13]
>>>
>>> Direction: entrant
>>> Point local: 84.98.111.94, port http [80]
>>> Matériel: N/A
>>> Point distant: 84.98.254.212 [84.98.254.212], port 3389
>>> Protocole: TCP
>>>
>>> Fichier: c:\WINDOWS\system32\inetsrv\inetinfo.exe
>>> Description: Services Internet (IIS)
>>> Version: 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
>>> Créé le: 2005/12/24, 21:34:31
>>> Modifié le: 2004/8/19, 15:09:56
>>> Accédé le: 2005/12/26, 15:50:54
>>>
>>> RuleId = 2415920009
>>
>> Not at all unexpected. I have packets from all over the world hitting my
>> firewall. I guess they are just random looks to see if they can find
>> anything they can hack.

You can configure IIS ip security to either allow only your ip or add ip
address ranges that are denied. You can set security policies to reject ip
address ranges. The firewall won't really help here because you do not want
to block port 21 and 80 packets so you will have to setup up security
through the other two approaches. Neither is as robust as provided by other
OSs, but one has to work with what one has.
 >> Stay informed about: Incoming IIS connection but who? 

Hi

Either I am loosing it or.....

I don't know who I am!!!

If I go to work and know I'll need to access my computer from a clients or
while on hols from a friends, I don't normally know their IP addresses in
advance.

Anyway, friends don't have static IP addresses normally so I can't configure
the firewall to let them through.

While typing this, I've been getting more warnings and I never had this many
before.

As each attempt tries to use a different port, I've had to deal with them
individually and the window keeps coming up.

If I block all incoming calls to IIS, then it'll never work.

Have I misunderstood sth still?

Thanks

Dave Neve
"MikeV06" <me.TakeThisOut@privacy.net> a écrit dans le message de news:
130ssjmpen21a.dlg.TakeThisOut@mycomputer06.invalid.com...
> On Tue, 27 Dec 2005 09:09:19 +0100, Dave Neve wrote:
>
>> Hello
>>
>> But how do I handle these Mike V06.
>>
>> I know they are not from me so I have them blocked.
>>
>> But the day I want to use my IIS server for myself, I will also be
>> blocked.
>>
>> I am not a network person so please excuse me if the question is naive.
>>
>> Thanks
>>
>> Dave Neve
>> "MikeV06" <me.TakeThisOut@privacy.net> a écrit dans le message de news:
>> 1jsys2869pavw$.dlg@mycomputer06.invalid.com...
>>> On Mon, 26 Dec 2005 18:01:50 +0100, Dave Neve wrote:
>>>
>>>> Hi
>>>>
>>>> I am trying to reinstall IIS onto my computer (and haven't quite
>>>> suceeded
>>>> yet as you can see from a prev question)
>>>>
>>>> Anyway, I am a bit worried cos my firewall (Kerio) keeps alerting about
>>>> an
>>>> incoming connection for this service
>>>>
>>>> As I am the only person who uses my http and ftp addresses (I use IIS
>>>> to
>>>> access my computer when I am away from home), I don't understand who
>>>> could
>>>> be calling up this program.
>>>>
>>>> The firewall message is below.
>>>>
>>>> Any explanations please?
>>>>
>>>> Thanks
>>>>
>>>> Dave Neve
>>>>
>>>> [26/12/2005 17:56:13]
>>>>
>>>> Direction: entrant
>>>> Point local: 84.98.111.94, port http [80]
>>>> Matériel: N/A
>>>> Point distant: 84.98.254.212 [84.98.254.212], port 3389
>>>> Protocole: TCP
>>>>
>>>> Fichier: c:\WINDOWS\system32\inetsrv\inetinfo.exe
>>>> Description: Services Internet (IIS)
>>>> Version: 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
>>>> Créé le: 2005/12/24, 21:34:31
>>>> Modifié le: 2004/8/19, 15:09:56
>>>> Accédé le: 2005/12/26, 15:50:54
>>>>
>>>> RuleId = 2415920009
>>>
>>> Not at all unexpected. I have packets from all over the world hitting my
>>> firewall. I guess they are just random looks to see if they can find
>>> anything they can hack.
>
> You can configure IIS ip security to either allow only your ip or add ip
> address ranges that are denied. You can set security policies to reject ip
> address ranges. The firewall won't really help here because you do not
> want
> to block port 21 and 80 packets so you will have to setup up security
> through the other two approaches. Neither is as robust as provided by
> other
> OSs, but one has to work with what one has.
 >> Stay informed about: Incoming IIS connection but who?