antdude
A Ninja Ant
Premium,VIP
join:2001-03-25
2 edits |  Kerio Personal Firewall v2.1.5 & KB951748? Kerio forum?
Hi!
Is anyone else here using old KPF v2.1.5, Windows XP SP2, and with this KB951748? If so, then are you seeing any problems like Windows Explorer crashing randomly (e.g., ntdll.dll) when using Windows Explorer?
Also, where is the forum for old KPF users? I can't remember where it is. 
Thank you in advance. 
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer |
|
grobinette
Premium,MVM
join:2001-01-27
Springfield, VA
clubs:
 ·Verizon FIOS
| Re: Kerio Personall Firewall v2.1.5 & KB951748? Kerio forum?
said by antdude  :Also, where is the forum for old KPF users? I can't remember where it is. Thank you in advance. The old Kerio forum fell by the wayside.
»Old Forums
I used it from back when it was Tiny and enjoyed reading in the forum but eventually dropped it.
--
Team Discovery |
|
BandHeight
join:2004-08-30
Portland, TX
| reply to antdude
I've got the following PC set-ups:
1 - XP Home SP2 w/ Kerio v2.1.5
2 - XP Pro SP3 w/ Kerio v2.1.5
1 - XP Pro SP3 w/ Kerio v2.1.5 running simultaneously with Comodo Firewall Pro (testing the Defense+ portion)
All are patched and everything is perfectly stable. Internet connections are fine. |
|
antdude
A Ninja Ant
Premium,VIP
join:2001-03-25 | Strange. I uninstalled this KB update and restarted explorer.exe (it crashed actually and I needed to reboot PC), but no crashes now. Hmm! |
|
antdude
A Ninja Ant
Premium,VIP
join:2001-03-25
| reply to grobinette
said by grobinette :said by antdude :Also, where is the forum for old KPF users? I can't remember where it is. Thank you in advance. The old Kerio forum fell by the wayside. » Old ForumsI used it from back when it was Tiny and enjoyed reading in the forum but eventually dropped it. Is this the only forum that old KPF users hang out now? I thought Sunbelt had a forum for them.
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer |
|
Sentinel
Premium
join:2001-02-07
Florida | reply to antdude
I have 5 PCs running XP Home Ed w/SP3 and KPF 2.1.5 and I have all updates that I know of and I am having no problems. But I don't use IE. I don't know if that matters or not. |
|
redrebel
join:2001-12-06
Oxnard, CA
1 edit | reply to antdude
I'm one of the minority that still uses KPF v2.1.5 (desktop and laptop) and yes when I installed the dreaded KB951748 it knocked out IE and Firefox for me. Looking at my logs it was using highports for DNS resolution. I had it specifically set to only use the range of 1024-5000. Made the change to allow highports (1024-65535) and it works fine (desktop only).
On the laptop I said forget it and uninstalled the patch and will wait to figure out what happens next. |
|
antdude
A Ninja Ant
Premium,VIP
join:2001-03-25
| reply to Sentinel
said by Sentinel :I have 5 PCs running XP Home Ed w/SP3 and KPF 2.1.5 and I have all updates that I know of and I am having no problems. But I don't use IE. I don't know if that matters or not. I rarely use IE6 as well.
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer |
|
antdude
A Ninja Ant
Premium,VIP
join:2001-03-25
1 edit | reply to redrebel
said by redrebel :I'm one of the minority that still uses KPF v2.1.5 (desktop and laptop) and yes when I installed the dreaded KB951748 it knocked out IE and Firefox for me. Looking at my logs it was using highports for DNS resolution. I had it specifically set to only use the range of 1024-5000. Made the change to allow highports (1024-65535) and it works fine (desktop only). On the laptop I said forget it and uninstalled the patch and will wait to figure out what happens next. Hmm, DNS? I wonder if Explorer is calling out even though I use hosts and my old Netgear RT311 router (firmware from 2002 or so). I do use LAN file sharing with a Linux/Debian box (Samba). What's the rule called for this DNS resolution?
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer |
|
antdude
A Ninja Ant
Premium,VIP
join:2001-03-25 |  reply to antdude
Re: Kerio Personal Firewall v2.1.5 & KB951748? Kerio forum?
Hmm, it doesn't seem like KB951748 is causing my Explorer crashes. I just had a crash again.
Thanks to everyone who replied about this. |
|
Curiosity
join:2001-10-01
Dawson Creek, BC
| reply to redrebel
Re: Kerio Personall Firewall v2.1.5 & KB951748? Kerio forum?
said by redrebel :I'm one of the minority that still uses KPF v2.1.5 (desktop and laptop) and yes when I installed the dreaded KB951748 it knocked out IE and Firefox for me. Looking at my logs it was using highports for DNS resolution. I had it specifically set to only use the range of 1024-5000. Made the change to allow highports (1024-65535) and it works fine (desktop only). Why is changing the local port range going to make DNS more secure? What is the idea behind that? |
|
redwolfe_98
join:2001-06-11
 ·RoadRunner Cable
2 edits | reply to antdude
Re: Kerio Personal Firewall v2.1.5 & KB951748? Kerio forum?
said by antdude :Hmm.. it doesn't seem like KB951748 is causing my Explorer crashes have you installed the new "spybot 1.6"? if you have, maybe it is the culprit? |
|
antdude
A Ninja Ant
Premium,VIP
join:2001-03-25
| said by redwolfe_98 :said by antdude :Hmm.. it doesn't seem like KB951748 is causing my Explorer crashes have you installed the new "spybot 1.6"? if you have, maybe it is the culprit? Yes, but I already uninstalled it and was able to reproduce it. I think I know what's the cause. K-Lite Codec v4.00, I need to test it later.
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer |
|
NetFixer
Freedom is NOT Free
Premium
join:2004-06-24
Murfreesboro, TN
 ·Cingular Wireless
 ·AT&T CallVantage
 ·AT&T Southeast
·Vonage
| reply to Curiosity
Re: Kerio Personall Firewall v2.1.5 & KB951748? Kerio forum?
said by Curiosity :Why is changing the local port range going to make DNS more secure? What is the idea behind that? Try doing a Google or Yahoo! search for DNS spoofing and you will find a lot of answers to your question. Here is a sample link from such a search, I hope some of the results you get will match your technical knowledge level, since I don't know exactly how high or low to shoot.
From SANS Internet Storm Center: Multiple Vendors DNS Spoofing Vulnerability
--
We can never have enough of nature.
We need to witness our own limits transgressed, and some life pasturing freely where we never wander.
Test your firewall. |
|
lilhurricane
Crunchin' For Cures
Premium,Mod
join:2003-01-11
Purple Zone
clubs:
·Comcast
Host:
TV over IP
Software
RCN
Inside Insight
Team Discovery
| reply to redrebel
said by redrebel :I'm one of the minority that still uses KPF v2.1.5 (desktop and laptop) You aren't the "only" one 
This plus BlitzenZeus 's ruleset work well for me..multiple browsers..
No issues as yet
--
~Safe Hex~ Team Discovery ~ Project Hope ~ Like A Hurricane~ |
|
Jarmo P
join:2003-11-12
Finland | reply to antdude
Re: Kerio Personal Firewall v2.1.5 & KB951748? Kerio forum?
Kerio 2.1.5 works fine with me. I needed to change my DNS rules though as already told to local port range 1024-65535. |
|
antdude
A Ninja Ant
Premium,VIP
join:2001-03-25
| reply to antdude
said by antdude :said by redwolfe_98 :said by antdude :Hmm.. it doesn't seem like KB951748 is causing my Explorer crashes have you installed the new "spybot 1.6"? if you have, maybe it is the culprit? Yes, but I already uninstalled it and was able to reproduce it. I think I know what's the cause. K-Lite Codec v4.00, I need to test it later. Dang, this stuff is getting crazy. I can still reproduce the crashes without K-Lite Codec Full Pack installed. I don't know what the heck is happening. I might upgrade to XP SP3 to see if that helps. It seems like explorer.exe crashes with ntl.dll file. SP3 has newer versions to fix the issue.
I was able to reproduce the crazy crashes in safe mode without networking as well. Same for another administrator account. It can be reproducable if I rename a file (sometimes changes or not), viewing a file property, using Start Menu, etc.
If anyone is interested or can help, I posted in "XP Pro. SP2's explorer.exe crashing a lot and randomly." newsgroup thread on msnews.microsoft.com news server in three newsgroups: microsoft.public.windowsxp.general, microsoft.public.windowsxp.help_and_support, and microsoft.public.windbg. It has logs from Process Explorer, Debug Diagnostics Tool, etc.
I hate computers (easy to break and hard to fix).
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer |
|
redwolfe_98
join:2001-06-11
·RoadRunner Cable
| reply to antdude
antdude, i have heard of software that is used for burning cd's causing problems with explorer, due to its monitoring folder contents.. you could look into that if you burn cd's..
i have read about that, in the past, particularly in hewlett-packard forums.. |
|
antdude
A Ninja Ant
Premium,VIP
join:2001-03-25
1 edit | said by redwolfe_98 :antdude, i have heard of software that is used for burning cd's causing problems with explorer, due to its monitoring folder contents.. you could look into that if you burn cd's.. i have read about that, in the past, particularly in hewlett-packard forums.. Hmm, I still use the same programs many years. I don't have any HP CD burners. I do have a HP printer. And wouldn't safe mode disable these things?
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer |
|
antdude
A Ninja Ant
Premium,VIP
join:2001-03-25
1 edit | reply to antdude
Found the culprit!!
I think I found it: CmdLineExt.dll (SecuROM context menu for Explorer)
ShellViewEx said: CmdLineContextMenu Class Yes Context Menu SecuROM context menu for Explorer. 1,1,224,0 Sony DADC Austria AG. No No No No No No C:\WINDOWS\system32\CmdLineExt.dll {F0407C3D-349C-42B9-B83E-821E31623DF9} 5/30/2005 2:36:01 PM 7/9/2008 12:37:25 AM No .exe, .vtx, exefile A 107,888
7/9/2008 12:37:25 AM matches the time I installed this and started having problems!! This was from Command & Conquer: Kane's Wrath v1.01 update!
Crossing my fingers that no more crashes (already over an hour with two reboots -- safe mode and normal with all stuff back except this one). Damn these copy protections.
»groups.google.com/group/microsof···dd75937e had the same symptoms in his Vista. Lots of people seem to have this type of problem: »www.google.com/search?q=CmdLineE···xe+crash ... Heads up for those if you ever run into this problem.
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer |
|
