- Dec 29, 2014
- 1,716
On Windows 7 using Firefox, I accessed OneDrive but couldn't see pics. I noticed the page was trying to reload, so I checked and could see that Private Firewall's block log was being spammed by an IP. I hardly ever use OneDrive, and the invisible pics problem had me using other file sharing services for months now. Couldn't find an answer for the issue. Turns out I had at some point used PF to manually ban the IP that was being spammed today. So I got the idea to unban the IP and see if the pics would show up. Sure enough, a page refresh and there they were. Obviously, the IP is a MS one, which I did verify with WhoIs.
Can't recall why I banned the IP originally, but I think it had something to do with a previous alert that was associated with Firefox. Think it was a HIPS warning about Firefox attempting a promiscuous behavior (internet) that caused me to ban the IP, but I just can't recall. The "Promiscuous or raw sockets" HIPS alert block does block IPs sometimes (kind of a double chance to block net or network activity since PF alerts a different type of block/alert for actual internet connection attempts). Anyway, this IP must have been in the block log for me to have banned it back whenever I created the original perma block.
My question is, is there a way to be notified when an IP contacts the PC without having to allow or ban the IP? I just want to know if this IP is doing anything else. I think the MS EULA for Windows 10 maybe has me on edge about what MS considers their own personal domain so to speak. I don't use the OneDrive service for anything but online files for sharing, so there isn't any reason for MS to have access to the PC. Private Firewall does have the log, but PF only logs blocks and not allows. For now, I have unblocked the IP, so I can use OneDrive.
Thanks.
Can't recall why I banned the IP originally, but I think it had something to do with a previous alert that was associated with Firefox. Think it was a HIPS warning about Firefox attempting a promiscuous behavior (internet) that caused me to ban the IP, but I just can't recall. The "Promiscuous or raw sockets" HIPS alert block does block IPs sometimes (kind of a double chance to block net or network activity since PF alerts a different type of block/alert for actual internet connection attempts). Anyway, this IP must have been in the block log for me to have banned it back whenever I created the original perma block.
My question is, is there a way to be notified when an IP contacts the PC without having to allow or ban the IP? I just want to know if this IP is doing anything else. I think the MS EULA for Windows 10 maybe has me on edge about what MS considers their own personal domain so to speak. I don't use the OneDrive service for anything but online files for sharing, so there isn't any reason for MS to have access to the PC. Private Firewall does have the log, but PF only logs blocks and not allows. For now, I have unblocked the IP, so I can use OneDrive.
Thanks.