What is the best way to tell what ports a programs is using?

I've got a wireless network, and have a network usb hub connected to it for a print and file server.The router is a Belkin N F5D8233-4, and the hub is a Belkin Network USB Hub F5L009. I have two printers and two external hard drive connect to the hub. The hard drives are both Western Digital My Book Essential Edition 750gb WDH1U7500 I use ZoneAlarm Security Suite which seems to be blocking me from connecting to any device while it's running. When ZoneAlarm is shut down the hub works perfect. So my question is what is the best way to figure out what ports the hub is using to connect to my computer? Jeremyt

The necessity or effectiveness of a firewall on a private network like you have is arguable. The fact is that for incoming connections they are all blocked absolutely at the router unless it is specifically configured to allow certain connections. No other software or firewall is required on the local machines.

But, because you didn't ask this, I can only give you general information about how to resolve your problem. Neither ZoneAlarm, or Belkin provides specific information that could help to configure ZoneAlarm properly.

You are going to have to make a change in ZoneAlarm's configuration in two areas. One is the trusted zones, and the other is the programs.

Read this link: EDITED OUT - I have copy and pasted the article below.

It provides some general information how to modify the trusted zone settings and the program settings. YOu need to add your local network to the trusted zone settings. According to the manual for your Belkin, your local network address is 192.168.2.0 with a subnet of 255.255.255.0. This should be listed in your trusted zone, and you should find the Belkin software that run the network hub and make sure it has full rights (connect and server).

I don't use ZoneAlarm so I can't be more specific as to the instructions of how to do this, but zonealarm.com has lots of information.

Again, the necessity of a firewall on a private network is questionable. You must weigh the benefits of being able to block outgoing connections from your PC to all the drawbacks of running software like ZoneAlarm.

Question

I am having problems with an application when it tries to access the network, or when users try and connect from the network.

Answer

Solution:

We have not evaluated the specific product that you have inquired about,
or the specific issue with the application you have inquired about. We
would like to give you a few methods to attempt to correct the problem you
are having. Almost every program we have ever tested can work with ZA.

Verify it is a ZoneAlarm issue, by right-clicking on the ZA icon near the
clock, and select Shutdown ZoneAlarm. You should no longer have a ZA
icon by the clock. Launch the application that you are having trouble with,
and attempt to use it. If the application now works correctly, please follow
the troubleshooting guide. If the application still DOES NOT work, then the
issue is not caused by ZoneAlarm.

If ZoneAlarm is not running, restart it by clicking START -> PROGRAMS ->
Zone Labs -> ZoneAlarm. After a short pause you should have a ZA icon
by the clock. Launch the application that you are having trouble with, and
attempt to use it. If any popup appear, allow the application access,
including checking the box to remember your answer.

Be sure to log all alerts from the Alerts -> Advanced screen, or you may
miss the ones you need.

Verify with the software manufacturer if the application requires access,
server rights (i.e. has to listen for incoming connections), or if there are
other special requirements for using the software through a firewall (such
as opening specific ports). Verify that the application is listed in the
programs tab of the ZA program list. If it is not listed, you may need to
add the program manually. To find out how to do this:

- Open The ZoneAlarm console, then press F1.
- From the search tab, type ADDING and press enter
- Double-click on 'Adding a program to the program list.'

Try giving the application that is listed connect and server rights by making
sure there are green check marks next to the program. Try running the
program again and see if it is working. If not, follow the process below.

Click on the ALERTS & LOGS -> LOG VIEWER Panel and find out what the
last few alerts were. If it appears an IP address is being blocked when you
launch the program, you can try adding that address to your Trusted Zone
(this could include DHCP, DNS or a server that the application needs to
connect to). To find out how to do this:

- Open The ZoneAlarm console, then press F1.
- From the search tab, type Trusted Zone
- Double-click on 'Adding to the Trusted Zone' and follow the instructions
there.
- Try your program again. If unsuccessful you may need to add additional
IP addresses to the Trusted Zone.

Many applications have an FAQ for firewall configuration on their
manufacturers page, and you can try to use this as a shortcut to add the
appropriate ports that you want open. (NOTE - Using the STOP or LOCK
features will block network access, and DHCP renewal, possibly causing loss
of your Internet connection. If you experience any problems, do NOT use
these.) Click on the ALERTS & LOGS -> LOG VIEWER panel again to find
out the last few alerts. Try to isolate the alert that is related to your
program that is being blocked. Note the port that is being blocked either
incoming or outgoing, and whether the blocked packet is UDP or TCP.
Using this information, you can open specific ports. For more information
on how to do this:

- Open The ZoneAlarm console, then press F1.
- From the index tab, type SECURITY
- Under Security components, double-click on Customizing.

The necessity or effectiveness of a firewall on a private network like you have is arguable. The fact is that for incoming connections they are all blocked absolutely at the router unless it is specifically configured to allow certain connections. No other software or firewall is required on the local machines.

I'd still advice anyone to run a software Firewall, regardless. Mostly because todays software firewalls are not
only used for blocking lines. Thats a conception that belongs in the stone-age. One can't compromise security.
Security will always have priority over convinience, doing otherwise, is at ones own peril, and ultimately mine and
yours, when a infected machine spreads to other machines through mail, worms etc. Its important to be able to
block outbound connections. So the saying: "Be a part of the solution instead of the problem", would fit nicely here.
Not to mention, that a great deal of todays software firewalls also blocks various other forms of malware.

@jeremy_smitty5

I'll advice trying find a answer here: http://forums.zonealarm.com/zonelabs
if Appleoddity's instructions doesn't work out.

Someone using Zonealarm might also drop by, providing a answer.

Regards Abydos

I know enough about networking and firewalls to get me into trouble, so appleoddity your answer was a good answer but is one of the first things you doing when setting up a network with a software based firewall. My USB Hub uses a software called "Belkin Network USB Hub Control Center." that programs and all it's components that I know of has full access to my computer and network. On Belkin's website the only port that it says it uses is 19540. so I've allowed both incoming and outgoing TCP UDP for this port. I also noticed that the control center was using 49501 so I done the same with this port. So somehow I missing a port that ZoneAlarm is blocking. I need a way to monitor the control center to see what components it's using and the port the components are trying to open. Jeremy

Ok.. You'll have to turn off zone alarm to run this test.

So, once ZoneAlarm is off, start up the control center software and make sure everything is connected.

You can then go to a command prompt (start -> run -> type cmd press ENTER).

Now, type netstat -abn and press ENTER.

It will take a few moments to run the command, and while it is running it will list the IP address, port number, and status of every TCP/UDP connection on your PC and what executable file has created it. This will take a trained eye to identify and use to your advantage, but it sounds like you have some knowledge about it and it should prove useful.

Be aware though, that the program may create random high numbered ports and it will be impossible to input that directly into zone alarm because it is always changing. Instead, you need a way to allow the program to open and communicate on any port it wants.

I strongly feel it is only a matter of those two things I previously mentioned. Trusted zone, and program permissions.

Good luck.

Found and installed a program called Active Ports, so the netstat command works but this program makes it so much more easier. It's a freeware program that shows the active ports and the program that is using the port. After adding the ports that the program showed me, I'm still having problems I do not believe that it is a trusted zone or program permission problem but just to make you I double checked everything. The hubs ip address as been added as a trusted zone and all the known ports have been added as a expert rule. Jeremy

Well, one thing you DO know. Its the firewall! I'm sorry but I can not provide any more information. I don't use ZoneAlarm, and your problem is something that I would have to be looking at in order to know what to change to make it work. Its not a program I know like the back of my hand. I admire your tenacity to make ZoneAlarm work. There are a lot of other FREE choices that might not be so difficult to configure. I would suggest you look to the ZoneAlarm forum for more support as previously suggested.

I just posted on the ZoneAlarm Forum, so hope for the best. I'll post back as soon as I hear something from them. Thanks Jeremy