Microsoft ICS with ZA

pectoral_finn · Cadet Joined: May 01, 2004 Posts: 2 Location: USA

Hello

I am wondering if anyone can anyone help me with my problem?

I have installed Zone Alarm Pro version 4.5.594.000 on my gateway machine. I have set as trusted zones both subnet 192.168.0.2/255.255.255.0 and IP address 192.168.0.2 (for my client machine). But even if I set Trusted Zone Security to Low (Firewall is off) I cannot gain access to the internet with my client machine. The system works fine if I unload ZA completely.

Does anyone know if I have to set expert rules to get this working?

Clueless Finn.

Hoov · Posted: Mon May 03, 2004 11:59 pm Post subject:

You need to set up the ICS settings in ZAP. http://don.hoover.net/icssettings.html

Hoov · Posted: Tue May 04, 2004 12:01 am Post subject:

You need to set up the ICS settings in ZAP. http://don.hoover.net/icssettings.htmlhttp://don.hoover.net/icssettings.html[/url]

pectoral_finn · Cadet Joined: May 01, 2004 Posts: 2 Location: USA

Hi,

Thanks for pointing that part out, but it hasn't helped me. I don't understand what I'm doing wrong. I'm running XP on both machines and ZA is set up and configured on both machines. I have dial-up internet access.

On the client machine I set the gateway to 192.168.0.1.
On the server machine I have tried using my network address(192.168.0.1) and my IP address(different each time I dialup, of course).

Any ideas Question

finn

Hoov · Posted: Thu May 06, 2004 12:00 am Post subject:

If you turn of ZA does the ICS in windows work OK?

hippieJim · Cadet Joined: May 27, 2004 Posts: 1 Location: USA

Just grant "Generic Host Processes" for Windows access in the Trusted & Internet zone as well as act as a Server in the Trusted & Internet Zone. Do the same thing for "Services & Controller" with ONE exception! Grant it full access in Internet & Trusted zone, as well act as a Server in the NETWORK zone only! NOT act as a server in the Internet zone! This will allow outgoing traffic on the Network & Internet, but will block port 1025 (known as the blackjack port) from listening for incoming traffic & exposing a hole in the Windows services. Both PCs should have internet access, now, and then you can test your firewall strength with "Shields UP" at www.grc.com. It worked for me with Zone Alarm 4.5 & 5!

Let me know how it goes,

Hippie Jim


	Home ˇ Topics ˇ Submit News ˇ Top 10 This entire site, Cops Themes, and Computer Cops are Š 2002 - 2004 Computer Cops, LLC. All rights reserved. You can syndicate our news using the file RSS 0.91, ultramode.txt, or RSS 1.0. Acceptable Use Policy. Use signifies your agreement. Engine Copyright Š 2002 by PHP-Nuke, GNU/GPL Licensed. ICRA Member. Paul Laudanski, Member of Computer Cops, LLC Server Load: 988 pages served in previous 5 minutes. Page Rendered: 0.340 seconds.