Results 1 to 4 of 4

Thread: Blocking ISP access

  1. #1
    mm_sea Guest

    Default Blocking ISP access

    Hello,

    I just installed ZA for the first time (free version) and find I am continually getting "Security Alerts" that it is blocking access to my computer by my ISP. I searched the forums and added the DHCP and DNS servers to the Trusted zone per the question of another forum member, but I still get these blocking messages. The DNS and DHCP servers have a different IP address than what is being blocked.

    Should I continue to let these be blocked or will it eventually affect my internet service? I see I can add an IP range to the Trusted zone - should I add these blocked ranges? I am a novice at this, and I am not even sure why my provider keeps trying to access my computer.

    Thank you in advance for any advice.

    Melinda

    Operating System:Windows XP Pro
    Software Version:7.0
    Product Name:ZoneAlarm (Free)

  2. #2
    Join Date
    Dec 2002
    Location
    Mikado Michigan
    Posts
    2,596

    Default Re: Blocking ISP access

    Can you copy one of the entries out of the log and post it here. Actually post a half dozen or so like the ones you are talking about. The raw log is in c:\windows\internet logs\zalog.txt
    My homes are SpywareHammer.com and DonHoover.net and BleepingComputer.com


    Consumer Security - 2011 & 2012

    Tilting at windmills hurts you more than the windmills.
    -From the Notebooks of Lazarus Long
    Senior of the Howard Families

  3. #3
    mm_sea Guest

    Default Re: Blocking ISP access

    Thank you for your help. Here are a few:

    FWIN,2008/04/20,09:20:22 -7:00 GMT,66.167.194.195:4269,66.167.252.172:1433,TCP (flags:S)

    FWIN,2008/04/20,09:19:42 -7:00 GMT,66.167.194.195:3070,66.167.252.172:135,TCP (flags:S)

    ACCESS,2008/04/19,19:48:52 -7:00 GMT,Generic Host Process for Win32 Services was blocked from accepting a connection from the Internet (67.100.88.27: DNS).,N/A,N/A

    ACCESS,2008/04/19,19:48:50 -7:00 GMT,Generic Host Process for Win32 Services was blocked from accepting a connection from the Internet (64.105.163.108: DNS).,N/A,N/A

    FWIN,2008/04/19,19:24:40 -7:00 GMT,72.244.64.236:4598,72.244.202.120:1433,TCP (flags:S)

    FWIN,2008/04/19,19:24:28 -7:00 GMT,72.244.24.4:54204,72.244.202.120:135,TCP (flags:S)

  4. #4
    Join Date
    Dec 2002
    Location
    Mikado Michigan
    Posts
    2,596

    Default Re: Blocking ISP access

    Look at the top one, the destination is 66.167.252.172:1433 tells me two things, first your internet connection is Covad, but the more important part is the port 1433. The next part of the line tells me TCP. This is more than likely an infected computer someplace on your ISP's network trying to connect with your computers Microsoft's SQL Server, even if you don't have it installed. The next line is port 135 can also be an infection.

    The middle two lines are telling me that Generic Host Process for Win32 Services (this is a windows process) is trying to connect to your DNS servers. They were denied. I recommend that everyone puts their DNS servers into the trusted zone in ZA. Let me know if you need help with this.
    My homes are SpywareHammer.com and DonHoover.net and BleepingComputer.com


    Consumer Security - 2011 & 2012

    Tilting at windmills hurts you more than the windmills.
    -From the Notebooks of Lazarus Long
    Senior of the Howard Families

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •