specialspam
join:2002-11-28
Woodstock, GA
| [Help Me] DLink-604 prevents ZA Pro alerts
I've been using the 604 for over a year. Sometime back, I noticed that I was not getting firewall alerts while connected thru the router. If I hook directly to my dsl modem, or use dialup, I get alerts (and blocks). I've checked, and done a reset of the 604, making sure that gaming & vpn related features are off, that the DMZ is off, that discard wan pinging is off. It seems that my computer was being left open while using the router.
I tested incoming traffic using Essential net tools Netstat, and could see the incoming traffic attempts, but ZA wasn't showing it. If I'm using DSL modem directly, or dialup, ZA blocks the incoming traffic.
Any one have any ideas on why that is.
Thanks
Mike |
|
DLinkFan
join:2003-05-14
Claremont, CA | You...
It's because the NAT Firewall in the 604 is working. They're being stopped at the router, the "intrusions" (for lack of a better term) are not making it to your PC, therefore, ZA will not show any alerts...
-Hope this helps- |
|
DLinkFan
join:2003-05-14
Claremont, CA | reply to specialspam
/\/\/\/\
Should be "yup"...not "you"
Sorry... |
|
rperkin
join:2003-12-12
UK
| As DLinkFan says, the router is protecting you from incoming baddies.
The software firewall is protecting you from *outgoing* baddies.
These could include viruses, trojans, adware reporting your surfing habits. Or just 'normal' programs checking for updates, or perhaps checking your registration details...
Hope this helps |
|
specialspam
join:2002-11-28
Woodstock, GA
| reply to specialspam
Thanks for the replies. They were helpful.
I've partially solved the problem that I think was a real oddity and misled me into think I'd been invaded. The first entry in my host file began showing up in Netstat as being connected to Firefox and showing tcp connections to the system. The first entry in hosts was 007arcadegames.com. After several days of trying many things to prevent this, and having it happen either with the router in, or out direct, and with two different firewalls, ZA Pro and Sygate PFW, a multitude of scanners, virus, spyware, etc, I changed the first line of my hosts file to 127.0.0.1 test.test; then firefox would show a connection to test.test, obviously not a site. Removing the hosts file altogether showed just my computer name being connected to firefox 127.0.0.1, also other connections to whatever site I was really on.
To prevent being misled, I added my own computer's name to the first line of hosts and now it works normally.
Anyone seen this oddity when using a hosts file?
Thanks,
Mike |
|
funchords
Hello
Premium,MVM
join:2001-03-11
Washington, DC
 ·Verizon Online DSL
 ·Skype
| said by specialspam  :Anyone seen this oddity when using a hosts file? Yes. One of my security programs used to do it.
By the way, if you need a virgin hosts file, here it is:
# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
127.0.0.1 localhost
--
Robb Topolski ;) http://www.funchords.com/ :D Hillsboro, Oregon USA
Dear Anonymous, Thank you!!! Thank you!!! |
|
