|
Donations |
|
|
|
|
|
If you found this site helpful, please donate to help keep it online
Don't want to use PayPal? Try our physical address
|
|
|
Survey |
|
|
|
|
|
|
|
|
Translate |
|
|
|
|
|
|
|
|
|
|
View previous topic :: View next topic |
Author |
Message |
tummage1
Cadet
Joined: May 05, 2004
Posts: 2
Location: USA
|
Posted: Wed May 05, 2004 1:56 am Post subject: Zone alarm and a router |
|
|
Hey guys/gals,
I am running a D-Link DI-604 router. Behind it I have zone alarm installed.
ZA says I have 22 intrusion attempts. Since the router should act as a firewall,it has built in NAt, why is ZA getting hit? I'm a newbie so be gentle please.
_________________
\ |
|
Back to top |
|
|
Hoov
Zone Alarm Host
Premium Member
Joined: Jun 21, 2002
Posts: 166
Location: USA
|
Posted: Wed May 05, 2004 11:57 pm Post subject: |
|
|
Yes, but it depends on where your alerts are coming from. Look in zalog.txt. What do the lines begin with?
_________________
TeamZ Member
http://don.hoover.net
Natural laws have no pity.
-Lazarus Long
Senior of the Howard Families. |
|
Back to top |
|
|
tummage1
Cadet
Joined: May 05, 2004
Posts: 2
Location: USA
|
Posted: Thu May 06, 2004 3:51 pm Post subject: oh duh!!!! |
|
|
Here is one of the logs--If i'm correct the intrusion are bouncing back from within the network?? I'm so green at this, it hurts..AAARRRGGGHHH!!
ZoneAlarm Logging Client v4.5.594.000
Windows XP-5.1.2600-Service Pack 1-SP
type,date,time,source,destination,transport
PE,2004/05/04,16:15:32 -5:00 GMT,Generic Host Process for Win32 Services,0.0.0.0:5000,N/A
PE,2004/05/04,16:16:30 -5:00 GMT,Support.com Scheduler and Command Dispatcher,0.0.0.0:53,N/A
ACCESS,2004/05/04,16:16:34 -5:00 GMT,Support.com Scheduler and Command Dispatcher was temporarily blocked from connecting to the Internet.,N/A,N/A
_________________
\ |
|
Back to top |
|
|
Hoov
Zone Alarm Host
Premium Member
Joined: Jun 21, 2002
Posts: 166
Location: USA
|
Posted: Thu May 06, 2004 11:39 pm Post subject: |
|
|
If they all start with PE or ACCESS or FWOUT then basically its just logging the fact that your programs want out. FWIN, FWROUTE and a few others are the inbound stuff.
_________________
TeamZ Member
http://don.hoover.net
Natural laws have no pity.
-Lazarus Long
Senior of the Howard Families. |
|
Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum
|
Powered by phpBB 2.0.8a © 2001 phpBB Group
Version 2.0.6 of PHP-Nuke Port by Tom Nitzschner © 2002 www.toms-home.com
Version 2.2 by Paul Laudanski © 2003-2004 Computer Cops
|