ZASS 7.0.302.000WIN XP PRO
OK, this is odd.
Last time I looked at my logs my firewall alerts were 0.
I think this is mainly because I also have a firewall router which blocks incoming nasties before they reach ZA.
My ISP IP is something like 24.21.xxx.xxx.
My internal LAN IP addresses start at 192.254.xxx.xxx.
I am getting
blocked intrusions from different source DNS and source IP addresses every minute.
The strange thing is it's just one machine on the LAN being hammered, and the destination IP is 192.254.xxx.xxx, which of course is not my actual IP address.
I logged in to my router and changed the IP address for this one computer to 192.254.xxx.xxx+100 and according to ZASS the original xxx IP is still getting hammered, even though it's no longer the IP of this box?!?!
I switched off all other PC's on the LAN, I removed everything from startup apart from MS services and ZASS.
Made sure no P2P proggies were running.
In fact only ZASS is running.
So, what could be doing this, and how is it hammering an internal LAN IP address and not the external ISP IP.
What can I do about it?
Operating System:Windows XP Pro
Product Name:ZoneAlarm Internet Security Suite