Re: Zonealarm and LinkSys DSL/Cable Router

From: Duane Arnold (notme_at_notme.com)
Date: 02/10/04 

Date: Tue, 10 Feb 2004 04:00:05 GMT

drgrafix@hotpotato.com wrote in
news:u1gg2052bttslpciha0dh82067soipl2j9@4ax.com:

> Duane...
>
> I think you hit the nail on the head. There's a load of us
> non-techies out here in cyberspace who buy these programs like ZAP,
> and really are overwhelmed by the setup... as simple as it might seem
> to some people. I think 75% of the people using ZA and maybe even ZAP
> buy it, install it, and think it's all supposed to be automatic.

I don't know if ZA can do it or not do it. But on BlackIce when I first
started using BI, it had two settings I enabled called Allow Internet
Sharing and Allow NEtbios Neighborhood that allowed me to share the
resources beteen the machines on the network BI was on. I then looked at
the FW rules that were set on port 137-138 UDP and 139-(445 NT based
Only) TCP that BI had set. Once I learned what those ports were for by
using Google, then I proceeded to set the rules I needed for the DHCP IP
(s) issued by the router and discontinued letting BI do it.

>
> I'm using ZAP with W2K on a home network also running thru a LinkSys
> Cable/DSL Router, and I'm terrified to check off the warning that
> flashes up every once in a while that's telling me another computer
> tried to access mine. I honestly don't know if it was my other PC or
> someone outside.

You shouldn't be terrified of anything like that, because you're behind
the protection of a NAT router that's got you protected very well from
attack from the Internet. This gives you the freedom to play around not
only with ZA with various settings but also configure the Win2k O/S as
well.

Most likely, ZA is reacting to the other machine(s) on your network and
does react to the router's device IP of 192.168.1.1 as well.

>
> If you ask me, they ought to write the program so that it explains
> things in layman's terms and that would allow the dufus to set it up
> without any major hiccups.

> Well, I guess I can dream.
>

I encourage you to jump in the damn pool and go for it. <g>

The only thing that's going to happen is that you learn how to protect
your home network.

And do not be afraid to ask this or any other NG like this any question.
The only dumb question is the question you didn't ask.

You can start be understanding how to better secure the Win2K O/S. You
don't have to do everything in the link, because of the NAT router
setting there but doing some of it helps.

http://www.uksecurityonline.com/husdg/windows2000.php

You can use Wallwtacher and it's free (use Google) and watch traffic to
and from the Linksys router. It a must use program.

Use Active Ports (free) and look at the connections to and from the
machine yourself and do not depend upon ZA to tell you what's happening.
 
Use the HOST which is the best damn advise I have gotten from any NG. <g>

http://mvps.org/winhelp2002/hosts.htm
http://accs-net.com/hosts/HostsToggle/

Duane :)

Relevant Pages

  • Re: black ice usage question
    ... The point is with a router already there, all ports are already being ... > With BI set in the Paranoid mode with the 1-65535 rules set, ... > protection for unsolicited inbound traffic to the machine. ...
    (comp.security.firewalls)
  • Re: Newbie Home Network/ADSL Router query.
    ... > Firewall on the router. ... >> ISP so that your router can access the Internet and the machines ... >> protection of the NAT router, either way, the machines are ... >> All ports are closed on the router by default and the ports will ...
    (comp.security.firewalls)
  • Re: Port Forwarding
    ... My advise to you is to get a cheap NAT router, ... MacAfee on the machines behind the router for a layered protection ... approach before you start opening ports or Port Forwarding ports (on a ...
    (comp.security.firewalls)
  • Re: Windows servers dropping like flies!!
    ... A file called 'heat.exe' showed up when I started digging around - Norton was about as much use as a chocolate fireguard and having the Norton Firewall enabled trashed ICS, this being before I had a functional router. ... It was, of course, coming in through Microsoft services that I was genereally unaware were running, through open ports, with no user intervention whatsoever. ... Most routers are protection, in that they're the first contact any outside machine has with your network. ...
    (comp.sys.mac.advocacy)
  • Re: is this right??
    ... ICS supports opening specific ports ... ICS is as functional a firewall as is in some routers, ... but I'll bet that is pretty minimal for a home network. ... in addition a ADSL router has in built-in firewall called SPI. ...
    (microsoft.public.windowsxp.network_web)