Re: ZoneAlarm log shows probes *from* 127.0.0.1 ?

From: ClareOldie (ClareOldie_at_nowhere.ie)
Date: 10/01/03 

Date: Wed, 1 Oct 2003 11:43:35 +0100

Peter wrote:
> Hi all,
>
> My ZoneAlarm log is showing entries that have a Source address of
> 127.0.0.1 ! There are a number of ports being tried e.g. 1331, 1487,
> 1524, 1660, 1835, 1891, 1908, 1914 and 1991.
>
> This only happens when I am connected to the internet (I'm on a
> dialup BTW).
>
> Screen grab from ZoneAlarm here if anyone is interested (190Kb):
> http://www.btinternet.com/~peter.ryan/20030914/zonealarm.jpg
>
> (my machine is called "pbw2k")... its running Windows 2000.
>
> Should I worry about this?
>
> Thanks in advance,
>
> Peter.
I suggest that you consider implementing IPSec to supplement ZA
Link here for one implementation
http://www.analogx.com/contents/articles/ipsec.htm
Tweak the rules for your machine - only tick the client rules for the ports
you need if you don't run a server. See thread Win2K Firewall
Seán