| View previous topic :: View next topic |
| Author |
Message |
Dan
Guest
IP: 82.61.*.*
|
 Posted: Tue Aug 01, 2006 9:39 am Post subject: [BIG SECURITY BUG]KPFGUI is not isolated by Internet!!! why? |
|
|
Why KPFGUI.exe is not isolated by Internet? Why I always get a lot of incoming attempts from the Internet towards KPFGUI.exe? Please fix this big security issue!
|
|
| Back to top |
|
 |
Graham1
Captain
Joined: Dec 21, 2005
Posts: 340
|
| Posted: Tue Aug 01, 2006 12:56 pm Post subject: |
|
|
Manually create a packet filter rule denying access (both directions) to kpf4gui.exe (or application rule after prompt). Skpf4 will function without problems using internal rules.
|
|
| Back to top |
|
|
ondrej
Guest
IP: 147.229.*.*
|
| Posted: Sat Nov 04, 2006 2:40 am Post subject: Re: [BIG SECURITY BUG]KPFGUI is not isolated by Internet!!! |
|
|
| Dan wrote: | | Why KPFGUI.exe is not isolated by Internet? Why I always get a lot of incoming attempts from the Internet towards KPFGUI.exe? Please fix this big security issue! |
I think there is no reason to be worried about these processes. At least kpfgui.exe should'nt be dangerous. From what I know kpfgui is trying to resolve port, protocol and adress of connections listed in its gui. So mostly you'll see dns lookups, udp traffic and nothing that looks really consistent to make a rule of. You can create a rule to allow (decreases your exposure to potential threats) or deny (doesn't affect working of fw) this kind of communication or you can ignore it.
|
|
| Back to top |
|
|
carl
Guest
IP: 87.16.*.*
|
| Posted: Sat Nov 04, 2006 10:13 am Post subject: Re: [BIG SECURITY BUG]KPFGUI is not isolated by Internet!!! |
|
|
| ondrej wrote: |
I think there is no reason to be worried about these processes. At least kpfgui.exe should'nt be dangerous. From what I know kpfgui is trying to resolve port, protocol and adress of connections listed in its gui. So mostly you'll see dns lookups, udp traffic and nothing that looks really consistent to make a rule of. You can create a rule to allow (decreases your exposure to potential threats) or deny (doesn't affect working of fw) this kind of communication or you can ignore it. |
But sometimes an INCOMING connection go to kpfgui.exe and this is bad!!!
|
|
| Back to top |
|
|
Graham1
Captain
Joined: Dec 21, 2005
Posts: 340
|
| Posted: Sat Nov 04, 2006 6:26 pm Post subject: |
|
|
You just need to create a rule denying access to this process. The worst that would happen, if allowed, would show an open port when scanned (i.e showing your computer as online). Any functions by SKPF4 are performed as normal, regardless of the rule in place.
|
|
| Back to top |
|
|
|
|
Forum FAQ
Search
Usergroups
Profile
Login to check your private messages
Login
