Zone Alarm?

[Sweeper]

What's the best setting being connected to the internet all the time? Just had Roadrunner installed and I am connected 24/7. I had both on medium using dial-up. Should I set them both to high now?

Thanks,
Sweeper

BTW 497.6 kbps is so much better that 28.8kbps http://www.sysopt.com/forum/smile.gif

[wyvrn]

Yep broadband rocks. I have mine on high and just give access to each program that I use. Kind of tedious, but I am paranoid about getting a trojan (My computer has never been infected).

[club_med]

I have mine on default settings, no problems. Been using ZA for about 6 months now, sofar no damage. although if I think about it I have never had problems in the past either (even before ZA), but it's a good tool to monitor ones connection.

cm.

[Sweeper]

I am new to this so bear with me. I keep getting "Alarms" stating that Zone Alarm has block unauthorized access to my PC "ICMP Echo Request "PING" from xxx xxx xxxx Host.

What exactly is this? It started when I set Zone Alarm's security to "HIGH".

Sweeper

[club_med]

It could be something like an e-mail server requesting a ping request from your computer before sending e-mail.

cm.

[Sweeper]

The firewall has blocked Internet access to your computer (TCP Port 6699) from 217.84.6.49 (TCP Port 2943) [TCP Flags: S].

Ok I am being hit every few minutes. Should I just set it back to Medium? On high, I keep getting "BLOCKED INTERNET ACCESS" over and over every few minutes.

Is this normal?

Sweeper

[jim.t]

It's normal since I've had ZA. Some days you get a lot of hits, others none at all. I have some necessary downloads occasionally that won't work unless I set it to medium, but after I'm done it's right back to high. So far, so good.

[jansson_markus]

I recommend "HIGH" on both areas. Only stuff that dont work well with it are Napster (if you are sharing stuff) and Gnutella. ALL others work just fine.

In security, there is no such thing as overkill... http://www.sysopt.com/forum/wink.gif

[Sweeper]

Didn't think I would be hit so much when I switched to cable. I will leave it on HIGH.
Thanks again.
Sweeper

[korgul]

If you want a little bit more information on the hits that you are getting, get this addon to zone alarm. I have it installed and realised that in one day I had over 100 trojan attacks against my PC. It also has a built in Whois button that will get you alittle more info.

You can also get visual route. It is a program that traces back to the origin of the IP address and gives a visual display of where it came from.


Zone alarm addon link http://zonelog.co.uk/

Visual Route Link http://www.visualware.com/visualroute/index.html

Check these programs out they are well worth the cost. Addon = $FREE

Visual Route = $40 for 1 license
www.grc.com (http://www.grc.com) has a very indepth article on a DoS attack

Hope these links help

Korgul

[Imperion1]

Some of those blocked addresses are from websites you have visited and haven't cleared your cache or temporary internet files. I get those too, with my settings on high. I just set ZA so its pop up box does not come on.

[Bsdboy]

Also my cable company pings me quite a few times a day that can account for some of the hits you are getting.

Bsdboy

[Sweeper]

Yeah, I noticed alot were from NaPsTeR and Roadrunner. korgul Thanks for the links. Zone Log really helped out tracing back the origin of the attacks. I only had 2 "RED" warnings , but both of them were traced back to RoadRunner. Most were from NaPsTeR. Is it good to block Roadrunner from pinging my pc? Excuse my ignorance, but this cable modem stuff is all new to me. I have had dial-up since I began on the internet years ago.Also, why is NaPsTeR trying to access my pc anyways? Thought they were out of business?
Sweeper


[This message has been edited by Sweeper (edited 06-08-2001).]