On 9 Sep 2005 at 19:50, Bob Weis wrote:

> Intrusion:                                 Invalid Source IP Address.
>
> Intruder:                                  255.255.255.255.
>
> Risk Level:                             Medium.
>
> Destination IP address:            YOUR-B80B6C408A(165.247.168.231).
>
> Protocol:                                   ICMP.
>
> The Source IP address 255.255.255.255 is invalid.

  It would be nice if Norton provided a wee bit more detail -- ICMP packets
have a "type" and "subtype" field -- but I'm now convionced that this is
your ISP trying to confirm the IP address that your machine is actually
using.  If you weren't running a firewall, your machine would respond to
their router using its actual address, and it would be possible for them to
then provide you with a working configuration even if your machine was
configured for an incorrect (but not invalid) address.

  The address you're using belongs to EarthLink.  If that's still your ISP,
then it appears that you're correctly receiving a DHCP assignment and so
this extra step should be unnecessary and ignorable.  If you've moved to a
different ISP, that may be why you're getting this message.  If the ISP says
all of your settings are correct for their service, yoou can safely ignore
this alert.  (If they're not, fixing the settings should eliminate the
alert....).

David Gillett

               The NOSPIN Group Promotions is now offering
                 our special coffee cups and mouse pads
              with the PCSOFT logo...  at a great price!!!
             http://freepctech.com/goodies/promotions.shtml