Results 1 to 10 of 10

Thread: Zonealarm failed probe test. Help please!!

  1. #1
    avguser Guest

    Default Zonealarm failed probe test. Help please!!

    Hi, I was just reading and looking
    in some forums when I came across the site shieldsup which tests Firewalls.I ran the common ports test and failedThe results areGRC Port Authority Report created on UTC: 2007-09-21 at 07:28:20

    Results from scan of ports: 0, 21-23, 25, 79, 80, 110, 113,



























    119, 135, 139, 143, 389, 443, 445,



























    1002, 1024-1030, 1720, 5000




    1 Ports Open


    22 Ports Closed



    3 Ports Stealth
    ---------------------


    26 Ports Tested

    The port found to be OPEN was: 1025

    Ports found to be STEALTH were: 135, 139, 445

    Other than what is listed above, all ports are CLOSED.

    TruStealth: FAILED - NOT all tested ports were STEALTH,


















    - NO unsolicited packets were received,


















    - A PING REPLY (ICMP Echo) WAS RECEIVED.
    Here are the results for the All Service Ports
    Stealth Ports : 135, 136, 137, 138, 139, 445, 593Open Ports



    : 125Closed Ports
    : All Ports not above
    How can I solve this problem?


    Operating System:Windows XP Pro
    Software Version:7.0
    Product Name:ZoneAlarm Pro

  2. #2
    Join Date
    Dec 2002
    Location
    Mikado Michigan
    Posts
    2,596

    Default Re: Zonealarm failed probe test. Help please!!

    How are you connected to the internet? Thru a router or a modem that does NAT?
    My homes are SpywareHammer.com and DonHoover.net and BleepingComputer.com


    Consumer Security - 2011 & 2012

    Tilting at windmills hurts you more than the windmills.
    -From the Notebooks of Lazarus Long
    Senior of the Howard Families

  3. #3
    avguser Guest

    Default Re: Zonealarm failed probe test. Help please!!

    Hello and thanks for the help.I am connected to the internet by Modem. I have ADSL upto 2.4 MbpsI have a Thomson SpeedTouch 330
    As for NAT, if you mean am I connected to a network that is connected to the internet then the answer is no. It is only this machine that is connected.

  4. #4
    Join Date
    Dec 2002
    Location
    Mikado Michigan
    Posts
    2,596

    Default Re: Zonealarm failed probe test. Help please!!

    Thomson is fairly ambiguous in the product descriptions. From what I read, it does do a stupid form of NAT. What I need you to do is to go back to www.grc.com and go to the shields up tgest, turn off ZA and redo the scan and see if anything changes. Also redo the scan with ZA on. Now look in the logviewer and see if there are any entries from www.grc.com.Let me know the results.
    My homes are SpywareHammer.com and DonHoover.net and BleepingComputer.com


    Consumer Security - 2011 & 2012

    Tilting at windmills hurts you more than the windmills.
    -From the Notebooks of Lazarus Long
    Senior of the Howard Families

  5. #5
    avguser Guest

    Default Re: Zonealarm failed probe test. Help please!!

    OK First of all let me correct an error I've just found in my first post: The open port should say 1025 NOT 125The last scan I did was with ZA OFF but Windows Firewall ON.

    Ahhh PS I don't have ZA and Windows Firewall on at the same time.In fact I don't use the Windows Firewall. Just to save you asking ;-)
    ZA FIREWALL OFF<pre>

    Common Ports</pre><pre>
    </pre><pre>


    1 Ports Open</pre><pre>

    22 Ports Closed</pre><pre>


    3 Ports Stealth</pre><pre>---------------------</pre><pre>

    26 Ports Tested</pre><pre>
    </pre><pre>The port found to be OPEN was: 1025</pre><pre>
    </pre><pre>Ports found to be STEALTH were: 135, 139, 445</pre><pre>
    </pre><pre>Other than what is listed above, all ports are CLOSED.</pre><pre>
    </pre><pre>TruStealth: FAILED - NOT all tested ports were STEALTH,</pre><pre>

















    - NO unsolicited packets were received,</pre>



















    - A PING REPLY (ICMP Echo) WAS RECEIVED.




    All Service Ports<pre>
    </pre><pre>


    1 Ports Open</pre><pre> 1048 Ports Closed</pre><pre>


    7 Ports Stealth</pre><pre>---------------------</pre><pre> 1056 Ports Tested</pre><pre>
    </pre><pre>The port found to be OPEN was: 1025</pre><pre>
    </pre><pre>Ports found to be STEALTH were: 135, 136, 137, 138, 139, 445, </pre><pre>































    593</pre><pre>
    </pre><pre>Other than what is listed above, all ports are CLOSED.</pre><pre>
    </pre><pre>TruStealth: FAILED - NOT all tested ports were STEALTH,</pre><pre>

















    - NO unsolicited packets were received,</pre><pre>

















    - A PING REPLY (ICMP Echo) WAS RECEIVED.</pre>




    ZA FIREWALL ON




    Common Ports<pre>
    </pre><pre>


    1 Ports Open</pre><pre>

    22 Ports Closed</pre><pre>


    3 Ports Stealth</pre><pre>---------------------</pre><pre>

    26 Ports Tested</pre><pre>
    </pre><pre>The port found to be OPEN was: 1025</pre><pre>
    </pre><pre>Ports found to be STEALTH were: 135, 139, 445</pre><pre>
    </pre><pre>Other than what is listed above, all ports are CLOSED.</pre><pre>
    </pre><pre>TruStealth: FAILED - NOT all tested ports were STEALTH,</pre><pre>

















    - NO unsolicited packets were received,</pre><pre>

















    - A PING REPLY (ICMP Echo) WAS RECEIVED.</pre>







    All Service Ports<pre>
    </pre><pre>


    1 Ports Open</pre><pre> 1048 Ports Closed</pre><pre>


    7 Ports Stealth</pre><pre>---------------------</pre><pre> 1056 Ports Tested</pre><pre>
    </pre><pre>The port found to be OPEN was: 1025</pre><pre>
    </pre><pre>Ports found to be STEALTH were: 135, 136, 137, 138, 139, 445, </pre><pre>































    593</pre><pre>
    </pre><pre>Other than what is listed above, all ports are CLOSED.</pre><pre>
    </pre><pre>TruStealth: FAILED - NOT all tested ports were STEALTH,</pre><pre>

















    - NO unsolicited packets were received,</pre>



















    - A PING REPLY (ICMP Echo) WAS RECEIVED.







    Scan with ZA OFF and Windows Firewall ON<pre>
    </pre><pre>


    0 Ports Open</pre><pre>


    0 Ports Closed</pre><pre> 1056 Ports Stealth</pre><pre>---------------------</pre><pre> 1056 Ports Tested</pre><pre>
    </pre><pre>ALL PORTS tested were found to be: STEALTH.</pre><pre>
    </pre><pre>TruStealth: FAILED - ALL tested ports were STEALTH,</pre><pre>

















    - NO unsolicited packets were received,</pre>



















    - A PING REPLY (ICMP Echo) WAS RECEIVED.

  6. #6
    Join Date
    Dec 2002
    Location
    Mikado Michigan
    Posts
    2,596

    Default Re: Zonealarm failed probe test. Help please!!

    I am certain the echo is coming from the modem and not the computer. But those results don;t make any sense. Would you please turn off the ZA firewall and the Windows firewall and do the test again and give me the results.
    My homes are SpywareHammer.com and DonHoover.net and BleepingComputer.com


    Consumer Security - 2011 & 2012

    Tilting at windmills hurts you more than the windmills.
    -From the Notebooks of Lazarus Long
    Senior of the Howard Families

  7. #7
    avguser Guest

    Default Re: Zonealarm failed probe test. Help please!!

    <pre>Thanks for your quick reply: The last results I posted were with and without the ZA firewall on. Neither was the Windows one either. That last scan was just my idea to see the difference.</pre><pre>Here are the latest results with ZA Firewall OFF</pre><pre>
    </pre><pre>
    </pre><pre>COMMON PORTS</pre><pre>


    1 Ports Open</pre><pre>

    22 Ports Closed</pre><pre>


    3 Ports Stealth</pre><pre>---------------------</pre><pre>

    26 Ports Tested</pre><pre>
    </pre><pre>The port found to be OPEN was: 1025</pre><pre>
    </pre><pre>Ports found to be STEALTH were: 135, 139, 445</pre><pre>
    </pre><pre>Other than what is listed above, all ports are CLOSED.</pre><pre>
    </pre><pre>TruStealth: FAILED - NOT all tested ports were STEALTH,</pre><pre>

















    - NO unsolicited packets were received,</pre><pre>

















    - A PING REPLY (ICMP Echo) WAS RECEIVED.</pre>







    ALL SERVICE PORTS<pre>


    1 Ports Open</pre><pre> 1048 Ports Closed</pre><pre>


    7 Ports Stealth</pre><pre>---------------------</pre><pre> 1056 Ports Tested</pre><pre>
    </pre><pre>The port found to be OPEN was: 1025</pre><pre>
    </pre><pre>Ports found to be STEALTH were: 135, 136, 137, 138, 139, 445, </pre><pre>































    593</pre><pre>
    </pre><pre>Other than what is listed above, all ports are CLOSED.</pre><pre>
    </pre><pre>TruStealth: FAILED - NOT all tested ports were STEALTH,</pre><pre>

















    - NO unsolicited packets were received,</pre><pre>

















    - A PING REPLY (ICMP Echo) WAS RECEIVED.</pre>

  8. #8
    Join Date
    Dec 2002
    Location
    Mikado Michigan
    Posts
    2,596

    Default Re: Zonealarm failed probe test. Help please!!

    Your results are showing me that the modem is actually doing a stupid version of NAT, so it is the one getting hit by the pings, and not your computer. I have a similar situation. There is nothing you can do, except keep the ZA firewall turned on as tight as possible. That wayh if someone finds a hole in your modem, then they have to get thru the firewall.
    My homes are SpywareHammer.com and DonHoover.net and BleepingComputer.com


    Consumer Security - 2011 & 2012

    Tilting at windmills hurts you more than the windmills.
    -From the Notebooks of Lazarus Long
    Senior of the Howard Families

  9. #9
    avguser Guest

    Default Re: Zonealarm failed probe test. Help please!!

    Just one other thing about this. I tried another Firewall scanner at www.auditmypc.com
    : The only port that found open was 1025 !!! After that I tested again with shileds up and
    had the same results as last time from there....So maybe Shields up is detecting something from the modem that auditmypc isn't. Anyway what are the best settings for zone alarm?Thanks again.

  10. #10
    Join Date
    Dec 2002
    Location
    Mikado Michigan
    Posts
    2,596

    Default Re: Zonealarm failed probe test. Help please!!

    The default settings are fine to start with. Then going thru and turning off or on things you use or don't use will tighten it up. I don't use a VPN so I don't allow them. Things like that. Also writing expert rules for programs that only should have limited access, like your e-mail client, is a good thing. That way you only get what is actually sent via e-mail, and not things stored on a separate server and is only retrieved when you open the HTML e-mail.
    My homes are SpywareHammer.com and DonHoover.net and BleepingComputer.com


    Consumer Security - 2011 & 2012

    Tilting at windmills hurts you more than the windmills.
    -From the Notebooks of Lazarus Long
    Senior of the Howard Families

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •