Why port blocking is bad

[torkell]

Because this is what you get if Java gets given port 3130 by Windows:



And in Eclipse I was greated by the wonderful message of:

FATAL ERROR in native method: No transports initialized
err:: No such file or directory
Error [2] in connect() call!
Socket transport failed to init.
Transport dt_socket failed to initialize, rc = -1.

Thank you, Norton.

Comments

Worms?

[(Anonymous)]

I had what looked like a security breech - someone sniffing around in my computer late at night recently. I found some new files in my Program Files area, one for example was:

com_microsoft.894320_W2K_SP5_x86_WinSE_154269

I searched this file on the internet and was directed to your posting. However, I can't see any reference to that file in the text. Did you encounter something similar? Do you know anything about it? If you could send a quick email to confirm this I would really appreciate it. Thank you.

hright@telusplanet.net

CB

Re: Worms?

[torkell]

No, this was just a false positive by Norton Internet Security. Norton comes configured with a list of "well-known trojan ports" which it blocks.

What happened here was that when the Java runtime (javaw.exe) asked for a free TCP port, Windows gave it one that was on Norton's block list. and so Norton blocked it, which made Eclipse (a Java development enviroment) fall over when it tried to start the debugger for my program. No trojans involved, just a trigger-happy firewall.

As to your problem, it's not something that I've seen before. The first number is the KB code for MS05-024, a patch for a remote code execution in web view. A Google for the whole file turned up nothing, but when I replaced the punctuation with spaces I got a reference on a forum to Software Update Services (specifically, about SUS going on strike and spewing out errors instead of patches). If you're running SUS then it may be worth checking the settings and relevant logs.

Apart from that I don't have any ideas. Hope you have more success than me at solving it!

(x-posted to supplied e-mail and in reply to this comment on this post)

Re: Worms?

[ricold.livejournal.com]

"just a trigger-happy firewall."

Quote of the day!