Expert: Lenny - 1/13/2012

Question
I detected a intrusion into my firewall w/ a blue tooth ip , it dissapeared or got overwritten w/ and upgrade.  Does this sound right? And is it possible to get it back?

Answer
Hi Roy,

Normally, Norton is on Dynamic IP status meaning, the IP address alternates every now and then. It's possible the intrusive IP address has been alternated and the server within your internet provider is no longer handshaking(having coffee) with your network.

More to speak the Mac address that had been recognized by your router(if your network uses any)has been wiped in the system. But a work of advice would be to disconnect the WIFI or Ethernet then confirm whether Norton Firewall's Intrusion Detection Feature has been enabled.

This would solve or rather avoid problems in the future.

Number 2, confirm whether the fishy/suspicious bluetooth IP address has been added to exclusion list

-Open Norton Firewall.
-Click Intrusion Detection.
-Click Configure.

Check the Computers currently blocked by AutoBlock or AutoBlock section. If an IP address of a computer that should not be blocked appears in the Address list, follow these steps to exclude the computer from the list:
       
-Click IP Address. . . or Exclusions
-Click the IP address in the "Currently Blocked:" list.
-Click Exclude. The IP address should now appear in the Exclude Computers list.
-Click OK.
-Click OK to close the Intrusion Detection window.

Reconnect your networks.
You are sure the IP has been blocked from intruding your privacy now.


Kind Regards,
Lenny.