Repeated Access Attempts from DNS?

From: Erehwon (NoGranmarkSpam@yahoo.com)
Date: 05/17/02


From: "Erehwon" <NoGranmarkSpam@yahoo.com>
Date: Thu, 16 May 2002 20:02:51 -0500

Just had to reformat PII-266 WIN95 system running on shared T1 line and
using Zone Alarm for firewall. Since reloading system I'm getting a daily
series of alerts indicating "Firewall blocked internet access to your
computer (UDP Port XXXX or "Net Bios Name) from nnn.nnn.n.n (DNS)".
Anywhere between a few seconds and several minutes between alerts with this
activity lasting an hour and a half or so and clocking up 50 - 150 alerts.
Generally occurs about the same time each day (+/- an hour or two). If I
look at the Zone Alarm log, I get an attempt at one of my ports from one DNS
for my ISP and then another attempt at the same port from another DNS for my
ISP. The first DNS then trys another port and so on. Occasionally Alert
says trying to access "net bios name" instead of a UDP port (whatever that
means). Never saw this activity in the 4 months or so I was using Zone
Alarm prior to reformating and reloading my system. ISP tech support said
this was normal ?? Don't know enough about what I'm looking at to ask
intelligent questions, but seems like there's a problem of some kind. (Been
a real pain having to go back and forth acknowledging alerts as I type
this). Tried shutting down everything from "Close Program" box except
Explorer, Systray, and Zone Alarm to make sure my machine wasn't initiating
activity somehow but still getting alerts. Have I got something screwed up
in my setup or is something playing games with me from the outside??



Relevant Pages

  • Repeated Access Attempts from DNS?
    ... Since reloading system I'm getting a daily ... Anywhere between a few seconds and several minutes between alerts with this ... look at the Zone Alarm log, I get an attempt at one of my ports from one DNS ... The first DNS then trys another port and so on. ...
    (comp.security.firewalls)
  • help!!! reformatted still have too many zone alarm alerts
    ... ok i also noticed that in zone alarm there are 2 generic ... host processes running one is a shared and listening to ... also most of the alerts are trying TCP port 6346 ... >500 alerts in the last five minutes.. ...
    (microsoft.public.security.virus)
  • Re: Help Turning on Ports...
    ... install media for Zone Alarm I still think it's a recent update because ... In ZA control panel disable the "Start when windows starts" or whatever the ... > Hi Charlie, ... > Nothing show up on netstat -ano (or Fport) as using the port. ...
    (microsoft.public.windowsxp.general)
  • Re: Zone Alarm Pro and Outlook Web Access thru IE6
    ... I recently installed Zone Alarm Pro and now cannot access OWA ... | settings ) to no avail. ... | The guy who administers our network says I need to open "Port 8080 ... | settings should match those provided by your local area network ...
    (comp.security.firewalls)
  • Re: computer problem update
    ... Double click on the Zone Alarm taskbar icon to open the program window. ... Down at the bottom of the list on the left click on "Alerts & Logs". ... > networking 3 computers sometime later this year and figured what the ... > Anyway.....I keep getting these pop up windows form Zone Alarm telling me ...
    (sci.med.transcription)