What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Hardware

High Rated Firewall Alerts

3 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1 last edited
Ok so i posted a topic in the hiijack log forum, was inspected by ldtate, and it turns out my computer is all apparantly clean of maraware/spyware.

My concern is my strange amount of firewall alerts by zone alarms pro. Normally just a few alerts would not bother me, but as i said on my other topic, i clicked a link a couple months back, and found multiple trojans on my lapt top (this computer), and my desktop computer the same day. The very next day i started expeirencing these high rated alerts, on 3 or 4 different ports almost daily.

Well after getting my computer completly inspected on the other forum, and finding no source of malaware or spyware, i was told to come here. What leads me to believe its a network problem, is both of my computers are experiencing this problem. And just recently i found out my mothers computer was infected with some sort of virus, i really don't think its part of my problem, because her computer was just infected recently, and my problem started months ago. I think my sister just went to some stupid site on accident, and the only anti virus/spyware she has is norton internet securit.. But still it gives me thoughts that it just might be some sort of network infection.

Heres what the typical alert looks like for my computer. Like i said, i get these on a daily basis. Any help or advice as to what im expeirencing would be awesome.

[external image: Posted Image]
Post #5

well you dont have to turn it off. i think you should be able to add that ip which is on your internal LAN to the trusted zone in ZA. i havent used ZA in a long time. or use the check box– "dont show" what advice does the "smartdefense advisor" say?

http://www.attackdenied.com/disable_file_sharing.htm


I use Zone alarm, and have a Network - Shelf Life is correct, add your ISP to the Trusted Zone -
right click on Zone Alarm near the clock>Firewall>Zonestab>at the bottom Add……………..

kind regards,
Post #6 last edited
I read on that zone alarms forum of a topic in which someone said that an "ip address of 192.168.x.x can not be spoofed from the internet. It is a private address not an internet address. "


what advice does the "smartdefense advisor" say?



The smart advisor says its my lan address. and it says most likely its normal, but sometimes it can be forged by a hacker to gain access. I'll post the ZA aritcle the next time i get an alert.

And 192.168 are the begginings of the IP that i keep getting alerts from. But 192.168 is already in my trusted zone, which is why i don't know what to think or do.


And also thanks shell for that link, disabled all file sharing.
Post #7
hi, ip's in the range 192. 168.0.0-192.168.255.255 are reserved for private networks and are not routeable on the internet. the "alerts" must be originating from your network, another computer or your router.
Post #8
Hi Bonson,

But 192.168 is already in my trusted zone


Are you referring to the Trusted Zone in Internet Explorer?

Actually, Shelf Life and Tallin are recommending that you Enter the address of your machines into the Zone Alarm listing

Double-Click Zone Alarm Icon in tray near your clock.
Select Firewall - from the left hand column
Select - Zones(tab)

Your Network Interface Card - Subnet should already be listed there.
If it is not, you can use the "Add" button at the bottom of the panel to add your IP Range

Best Regards,

Doug

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI