Results 1 to 5 of 5

Thread: High number of blocked intrusions?

  1. #1
    jjxxxx Guest

    Default High number of blocked intrusions?

    Hi
    I'm finding that
    Zonealarm
    is blocking about 2 to 3,000 intrusions daily of which 50 or more are high-rated. As I'm not using my pc excessively, are those high numbers?
    I have anti-virus and anti-spyware
    programs running all the time and no malware is present according to
    the scans I run regularly.
    Thanks in advance for any advice you can give.
    Regards


  2. #2
    Join Date
    Dec 2005
    Posts
    9,056

    Default Re: High number of blocked intrusions?

    Are you using a router or NAT modem?

    Single PC or multiple PC LAN?

    Wired connection or wireless connection?

    Using P2P or file sharing software?

    Any components with server rights for the Internet Zones?

    Are the DNS servers listed as Trusted in the Zones of the Firewall of the ZA? Follow these guidelimes>

    Make sure your DNS and DHCP server IP's are in your Firewall's Trusted zone. Finding DNS and DCHP servers, etc

    1. Go to Run type in command , hit 'ok', and type ipconfig /all then press enter. In the returned data list will be a line DNS and DHCP Servers with the IP address(s) listed out to the side.
    2. In ZA on your machine on the Firewall>Zones tab click Add and then select IP Address. Make sure the Zone is set to Trusted.
    3. Click OK and then Apply and see if that works to fix it.
    4. The loopback or localhost (127.0.0.1) must be listed as Trusted.
    5. The Generic Host Process (svchost.exe) must have server rights for the Trusted Zone.
    Plus it must have both Trusted and Internet Access.

    See for more details>

    http://www.donhoover.net/dnsdhcp.html

    http://www.microsoft.com/resources/d....mspx?mfr=true

    Oldsod

    Message Edited by Oldsod on 12-24-2006 06:00 PM

    Operating System:Windows XP Home Edition
    Product Name:ZoneAlarm Pro
    Software Version:5.x
    Best regards.
    oldsod

  3. #3
    jjxxxx Guest

    Default Re: High number of blocked intrusions?

    Hi
    Thanks for your reply.
    I'm using ZoneAlarm free, automatically configured.It's a single pc,
    adsl
    modem, wired connection.No
    P2P or file sharing software used.No server rights for the trusted or internet zone for any program, except
    for svchost.exe which has server rights for the trusted zone only
    and
    trusted and internet access.Firewall>Zone tab shows my IP address listed as
    internet
    and loopback listed as trusted.
    I reinstalled
    the free version of ZoneAlarm 10 hours ago and I've been connected for about 6 hours off and on and so far I've had 2366 intrusions blocked, 61 high-rated.
    Regards

  4. #4
    zaswing Guest

    Default Re: High number of blocked intrusions?

    It has been my experience, before I added a router, that these things come in spurts. And someone explained that DSL providers often change your IP address. As they do, you might pick up an address of someone who was just doing IM, p2p or other such unsafe activities. So you're getting all their stuff and ZA just sits there and blocks and logs and keeps your computer very busy logging all that stuff.
    When I added the old BFSR41 Linksys router, it had a fabulous log in the form of a Logviewer utility. It was really funny to watch when IP changed and all those pings were zipping by but no longer reaching ZA. So if all you have is a simple ADSL box, it's to be expected.
    If you could add a recent model router, most of them have very good firewalls. So good in fact that ZA rarely has anything to block (1/month). I've used
    2 models of Linksys router which I like, 1 model of DLink which I don't like, Netgear and some others. All superb.

  5. #5
    Join Date
    Mar 2004
    Location
    Brisbane, Australia
    Posts
    645

    Default Re: High number of blocked intrusions?

    Intrusions is a term used in the software but you are better off thinking of them more like a knocks at your computer's front door. Intrusions cannot happen! The following post explains a lot of the myths surrounding what you think are "intrusions" but are just part of normal internet communications:-


    http://forum.zonelabs.org/zonelabs/b...&message.id=78

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •