New problem

[SpaceRobot]

I posted earlier about getting low download speeds and now the whole thing has gotten worse... or better. I cant tell.

I tried to connect my modem directly to my PC, like Ive done countless times before, only I couldn't get the internet to work (the light wouldn't stay steady). So I reconnected my router and now the internet works (the light on the modem still is flashing though, and for the life of me I cant remember if its supposed to be). I opened up uTorrent to check on it and a Norton message poped up telling me it detected and blocked a worm, something about an invalid UDP open port. Anyways the port it listed was the port I use for uTorrent, and the Intruder it listed was the name of my computer. My once yellow ! is now Red. Looks like its a Norton problem. So now I change the port uTorrent uses, change the port I put in my router, and make a General rule in Norton to allow that port both TCP/UDP. I still have the red ! and the test still shows my port is not open. Im getting about the same speed as I was when the ! was yellow, but I feel fairly sure its lower than I can get, plus the red ! has to mean something right?

Please please please help me Im pulling out hair here and beating my computer into submission is starting to sound like a viable option.

My router firewall Virtual servers rows for this port are as follows

Enable Inbound Port Type Private IP Adress Private Port

Check 23926-23926 TCP 192.168.2.136 23926-23926

Check 23926-23926 UDP 192.168.2.136 23926-23926

192.168.2.136 is my static IP, 23926 is the random port I have assigned from uTor, and Type: TCP/UDP is not available.

EDIT: I just read somewhere on these forums that for Norton Internet Security users need to create a rule allowing all outbound connections. When making a rule how can I change the direction? Its in the rule description but I never get the option to change it.

My norton is just Norton Antivirus and Norton Protection center, but the antivirus is working as a firewall through "Auto-Protect"

EDIT2: This is the Norton Security alert I just now got:

Norton Internet Worm Protection has detected and blocked an intrusion attempt.

Intrusion: Invalid UDP Destination Port

Intruder: JOE (192.168.2.136)

Risk Level: Medium

Source IP Adress: JOE 192.168.1.136

Destination IP address: 75.111.238.54

UDP Source Port: 23926

UDP Destination Port: 0. Invalid

Joe is my comp name and 23926 is the port assigned to uTorrent.

[jewelisheaven]

First, the reason it wasn't working with just your computer is probably the ISP uses the internal MAC of the router's NIC. This of course is different than the MAC in your NIC on your computer. Many routers have the option of "cloning" the MAC address of a computer. If you wish to have the option of connecting via the computer (if it is your only one) or the router, you may want to call up tech support while you have only your computer connected and tell them you had to change network cards, and then they should be able to reset that for your connection.

Afterwards you will need to "clone" the MAC address of your computer on your router.

NOTE: Please be sure your router supports this option beforehand.

As far as your port problems, I'm not sure if Norton requires a complete ruleset or not. Can you try turning off all "intrusion detection" or "port monitoring" or "internet protection"... It's been years since I've used it honestly so I'm not sure exactly what you'll have to turn off or if you may even have to uninstall it...

Also for other possibilities would you mind running HijackThis and posting the log in this thread?

[SpaceRobot]

Honestly I have no Idea what you just said about NICs and MACs and cloning. But I just posted the complete Norton block message as an edit in my first post, if that helps.

2. Ha. I exited utorrent, disabled auto-protect, and started it up again. Still having a yellow !, i was getting about 40kbps on one download, a little under my highest so far. Then auto-protect gave me the above message again. As if it werent disabled at all. Once the message popped up the ! went from yellow to red. Now Im downloading a total of 55kbps and the ! is red. This seems to me like a Norton problem. I can live with 55kbps if getting more means uninstalling Norton.

[jewelisheaven]

Well, there you have it. Sorry about the techno-jargon. MAC is essentially the same as your WAN IP address, only for the actual chips that allow TCP/IP connections. No chip address is the same. Hence why if your ISP registered the one for your router, you cant just use your computer (different MAC).

Cloning the MAC is a process which essentially masks the router's MAC with your computer's MAC. I set it up on my router back in '02 before my ISP allowed "home networking" on its pipes.

Also, to be perfectly honest, as long as you're an intelligent user who does not click on odd URLs in emails and follow web-pages to sites promising "free nude pixxxx" or "enhance your penis size" the firewall provided by the router should be sufficient for your needs. Sure exploits come out for specific services, but as long as you are not DMZ behind your router, the ports are not accessible anyway.

For the benefit of others, could you post the specific norton package/version you are using, and if/when you get uT to forward correctly with it working inclde the specific settings you had to change?

Sorry I wasn't able to help you.

[SpaceRobot]

Well thanks anyways I appreciate it. And hey, atleast I learned something. If I can get this fixed then sure ill post the details here but Ive done everything I know how so far to "open the gates."

Im using Norton Anti virus 2006 and the firewall feature is Auto-protect or more specifically Internet Worm protection. I posted the exact block message in the first post. I think it would take someone more familiar with Norton to figure out how to get it to stop blocking it.

Also, I noticed my download rate is just as high if not higher when the Red ! is present as when its yellow. Right now its red and doing a total 65kbps.

[bigjake2006]

I have the exact same problem with norton, i have sbc yahoo dsl and they recently swiched to norton as their isp provided anti virus.. I have yet to find a solution, i think the block message indicates it blocked a peer which would explain the slow down speeds