Zone alarm and a router

tummage1 · Cadet Joined: May 05, 2004 Posts: 2 Location: USA

Hey guys/gals,

I am running a D-Link DI-604 router. Behind it I have zone alarm installed.
ZA says I have 22 intrusion attempts. Since the router should act as a firewall,it has built in NAt, why is ZA getting hit? I'm a newbie so be gentle please.

Hoov · Posted: Wed May 05, 2004 11:57 pm Post subject:

Yes, but it depends on where your alerts are coming from. Look in zalog.txt. What do the lines begin with?

tummage1 · Cadet Joined: May 05, 2004 Posts: 2 Location: USA

Here is one of the logs--If i'm correct the intrusion are bouncing back from within the network?? I'm so green at this, it hurts..AAARRRGGGHHH!!

ZoneAlarm Logging Client v4.5.594.000
Windows XP-5.1.2600-Service Pack 1-SP
type,date,time,source,destination,transport
PE,2004/05/04,16:15:32 -5:00 GMT,Generic Host Process for Win32 Services,0.0.0.0:5000,N/A
PE,2004/05/04,16:16:30 -5:00 GMT,Support.com Scheduler and Command Dispatcher,0.0.0.0:53,N/A
ACCESS,2004/05/04,16:16:34 -5:00 GMT,Support.com Scheduler and Command Dispatcher was temporarily blocked from connecting to the Internet.,N/A,N/A

Hoov · Posted: Thu May 06, 2004 11:39 pm Post subject:

If they all start with PE or ACCESS or FWOUT then basically its just logging the fact that your programs want out. FWIN, FWROUTE and a few others are the inbound stuff.


	Home ˇ Topics ˇ Submit News ˇ Top 10 This entire site, Cops Themes, and Computer Cops are Š 2002 - 2004 Computer Cops, LLC. All rights reserved. You can syndicate our news using the file RSS 0.91, ultramode.txt, or RSS 1.0. Acceptable Use Policy. Use signifies your agreement. Engine Copyright Š 2002 by PHP-Nuke, GNU/GPL Licensed. ICRA Member. Paul Laudanski, Member of Computer Cops, LLC Server Load: 966 pages served in previous 5 minutes. Page Rendered: 0.364 seconds.