zonealarm oddity or maybe not ?
Results 1 to 2 of 2

Thread: zonealarm oddity or maybe not ?

  1. #1
    Junior Member
    Join Date
    Aug 2003
    Posts
    12

    zonealarm oddity or maybe not ?

    I just upgraded the firmware on my linksys befsr41 and was reconfiguring everything when I noticed something odd in my zonealarm log - I've no idea if it's a ZA glitch or what.. any ideas ?

    heres is a paste of my ZA log soon after a fresh system boot:

    ZoneAlarm Logging Client v3.0.118
    Windows XP-5.1.2600--SP
    type,date,time,source,destination,transport
    ACCESS,2003/08/27,09:12:32 -4:00 GMT,ZoneAlarm Pro was blocked from connecting to the Internet (24.153.22.195: DNS).,N/A,N/A
    FWOUT,2003/08/27,09:12:32 -4:00 GMT,192.168.1.101:137,195.22.153.24:137,UDP

    In above you can see that I block ZoneAlarm from checking with Zone Labs at 24.153.22.195 and right after is a port 137 outgoing block to 195.22.153.24:137 that originates from something in my PC. (no idea what)

    What's odd is 24.153.22.195 is the exact reverse of 195.22.153.24 - Is this normal ZA behavior - should I be worried ?

    .. cheyana
    Every time I close the door on reality it comes in through the windows. —Jennifer Unlimited

  2. #2
    AO Curmudgeon rcgreen's Avatar
    Join Date
    Nov 2001
    Posts
    2,716
    The addresses are the same. The backward version has something to do with
    reverse dns lookup

    Zonealarm has a bug where it wants to perform this lookup as soon as it starts
    Apparently they have promised to fix it.

    http://www.computing.net/security/ww...orum/3494.html
    I came in to the world with nothing. I still have most of it.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides