Results 1 to 8 of 8

Thread: Inbound Protection

  1. #1
    jepo Guest

    Default Inbound Protection

    Hi all, I am currently test driving ZAPro, and was wondering, where do I find
    the programs that
    Inbound Protection
    says it has blocked?
    Thanks for your help.
    :-)

  2. #2
    Join Date
    Dec 2005
    Posts
    9,056

    Default Re: Inbound Protection

    Check out the Firewall and Program Logs found in the Log Viewer of the Alerts and Logs.
    Oldsod.
    Best regards.
    oldsod

  3. #3
    jepo Guest

    Default Re: Inbound Protection

    <blockquote><hr>Oldsod wrote:
    Check out the Firewall and Program Logs found in the Log Viewer of the Alerts and Logs.
    Oldsod.
    <hr></blockquote>
    Yes, just where you said it would be :-), thanks Oldsod. It shows that it was blocking **bleep**.com. Shouldn't it be allowing my Antivirus to phone home, or is there something suspicious about the destinations it was trying to go to? Thanks again :-)

    http://i240.photobucket.com/albums/f...ar5454/ZA2.jpg

  4. #4
    Join Date
    Dec 2005
    Posts
    9,056

    Default Re: Inbound Protection

    I can see outgoing ICMP Type 8 listed for every one of the events.
    Haven't bothered to check the actual destinations, but the destinations/IP/addresses should not be a factor in the blocked events.

    ICMP Type 8 is Echo Request for the puposes of pinging is usually set to be allowed for only outgoing, along with allowing incoming ICMP Type 0 (Echo Reply). This is the normal arrangement for the home user with home PCs and not involved with a server or such.

    Basically your antivirus is attempting to "ping" the home servers to attempt or establish connections and the ZA is always blocking. Once the servers are replying with ICMP Echo Reply back, then the usual TCP connections will begin.

    Now comes a few questions.

    Are the DNS servers listed as Trusted in the Zones in the Firewall of the ZA?
    Are the DHCP (default gateway) listed as Trusted in the Zones?
    Does the generic host process (svchost.exe) have both trusted and internet access and trusted server allowed?
    Is the Trusted Zone Security Zone set at Medium?
    Are the antivirus's updaters listed with trusted and internet access and trusted server?

    Best regards.
    Oldsod.
    Best regards.
    oldsod

  5. #5
    jepo Guest

    Default Re: Inbound Protection

    Excellent response Oldsod, excellent information, and questions you asked. :-) Thanks for the time and effort you put into your response, I've learned from you, and will learn more as I look into answering your questions, and checking my settings and configurations. Well done, thanks again :-)

  6. #6
    Join Date
    Dec 2005
    Posts
    9,056

    Default Re: Inbound Protection

    Thank you very much.

    Follow this thread for help with the DNS and DHCP server to be added into the Zones of the Firewall.

    http://forum.zonelabs.org/zonelabs/b...ssage.id=49999

    Once the previous set of questions in the above reply are followed through, lets us then see if the blocked events still are occuring.
    This may fix things and get it correct, but if not then we shall continue into other directions.

    Oldsod.
    Best regards.
    oldsod

  7. #7
    jepo Guest

    Default Re: Inbound Protection

    Thanks for the follow up thread, and your willingness to help me understand, and tweak my ZAPro settings.

  8. #8
    Join Date
    Dec 2005
    Posts
    9,056

    Default Re: Inbound Protection

    You are very welcome Jepo.
    Best regards.
    Oldsod.
    Best regards.
    oldsod

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •