Re: ZoneAlarm log shows probes *from* 127.0.0.1 ?

From: Peter (nospam_at_nospam.com)
Date: 10/01/03 

Date: Wed, 1 Oct 2003 21:31:24 +0000 (UTC)

ClareOldie wrote:

> Peter wrote:
>
>>Hi all,
>>
>>My ZoneAlarm log is showing entries that have a Source address of
>>127.0.0.1 ! There are a number of ports being tried e.g. 1331, 1487,
>>1524, 1660, 1835, 1891, 1908, 1914 and 1991.
>>
>>This only happens when I am connected to the internet (I'm on a
>>dialup BTW).
>>
>>Screen grab from ZoneAlarm here if anyone is interested (190Kb):
>>http://www.btinternet.com/~peter.ryan/20030914/zonealarm.jpg
>>
>>(my machine is called "pbw2k")... its running Windows 2000.
>>
>>Should I worry about this?
>>
>>Thanks in advance,
>>
>>Peter.
>
> I suggest that you consider implementing IPSec to supplement ZA
> Link here for one implementation
> http://www.analogx.com/contents/articles/ipsec.htm
> Tweak the rules for your machine - only tick the client rules for the ports
> you need if you don't run a server. See thread Win2K Firewall
> Seán
>

Great link - thanks for that!

I'm not sure if this would solve this problem, although I totally go
with the concept of layered security so I'll investigate this further
and will likely implement it.

Thanks again!!

Peter.

Relevant Pages

  • Re: ZoneAlarm log shows probes *from* 127.0.0.1 ?
    ... Peter wrote: ... > My ZoneAlarm log is showing entries that have a Source address of ... Tweak the rules for your machine - only tick the client rules for the ports ...
    (comp.security.firewalls)
  • ZoneAlarm log shows probes *from* 127.0.0.1 ?
    ... My ZoneAlarm log is showing entries that have a Source address of ... This only happens when I am connected to the internet (I'm on a dialup BTW). ...
    (comp.security.firewalls)