Results 1 to 3 of 3

Thread: RE: That's a whole lot of action

  1. #1
    trooperbridges Guest

    Default RE: That's a whole lot of action

    Hello all,

    This is aimed to all the experienced Zone users. I installed Zonealarm firewall less than 24 hours ago, I have had the internet connected for approx 12 hours all in all with the program running.. During this period, I have had 15,274 intrusions blocked and 153 high rated ones blocked. Is this normal? It seems very high to me, can you please give me examples of what or who this could be. Any help with this matter would be very much appreciated.

    Thank you,

    trooperbridges

    Operating System:Windows XP Home Edition
    Product Name:ZoneAlarm (Free)
    Software Version:7.0

  2. #2
    Join Date
    Dec 2005
    Posts
    8,990

    Default Re: RE: That's a whole lot of action

    Hi

    Check the IP of those attacks.

    Got the DNS and DHCP servers listed as Trusted in the Zones of the Firewall of the ZA?

    Something like this...


    1. Go to Run type in command, hit OK, and type ipconfig /all then press enter. In the returned data list will be a line DNS and DHCP Servers with the IP address(s) listed out to the side
    2. In ZA on your machine on the Firewall>Zones tab click Add and then select IP Address. Make sure the Zone is set to Trusted
    3. Click OK and then Apply for each one.
    4. The localhost or loopback must be listed as Trusted. It has the address of 127.0.0.1
    5 The Generic Host Process or the svchost.exe listed in the Program list must have both Trusted and Internet access and it must have server rights for the Trusted Zone, but not the Internet Zone.

    http://zonealarm.donhoover.net/dnsdhcp.html

    http://www.microsoft.com/resources/d....mspx?mfr=true


    Often when the router, or modem and the porvider DNS server(s) are added as Trusted, those intrusions will stop.

    If there is a SPI/NAT router or a NAT modem in front of the PC, there should be no intrusions even seen by the ZA. So then you definitely know it is the router trying to talk to the PC that is labeled "intrusions".

    Oldsod
    Best regards.
    oldsod

  3. #3
    trooperbridges Guest

    Default RE: Thanks

    A quick message just to say thank you for your suggestions, they are much appreciated.
    :manhappy:

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •