New today to both ZA and this forum so apologies if I've posted in the wrong place (I did look around before posting!)
Been live for a few hours and nearly all the entries in the ZA log (74 of them) were all incoming and look like the following:
Firewall UDP sourceIPport 192.168.1.2:52249 (i.e. destination is my PC port 52249)
There are 26 source IPs - all public - though the majority of the entries (29/74) are from the outside (public) side of my gateway which is a BTHomeHub2.
Some questions spring to mind:
Do routers generally not prevent ports that high being passed through the gateway - I can't see anything open on my HH2?
Alternatively, why are these getting through the gateway to my PC?
What tries to communicate using UDP on port 52249 - several Google searches didn't throw up anything obvious?
Is there anyway to get ZA to ask which destination IPs are valid rather than just the application being allowed? (I would like to be asked which mail systems Outlook is allowed to communicate with rather than allow Outlook to connect anywhere)
I have had a problem with some software sending spam from my home network (probably this PC) through someone else's mail system. I'm still trying to get "the egg off my face"!