zonealarm oddity or maybe not ?

[cheyana]

I just upgraded the firmware on my linksys befsr41 and was reconfiguring everything when I noticed something odd in my zonealarm log - I've no idea if it's a ZA glitch or what.. any ideas ?

heres is a paste of my ZA log soon after a fresh system boot:

ZoneAlarm Logging Client v3.0.118
Windows XP-5.1.2600--SP
type,date,time,source,destination,transport
ACCESS,2003/08/27,09:12:32 -4:00 GMT,ZoneAlarm Pro was blocked from connecting to the Internet (24.153.22.195: DNS).,N/A,N/A
FWOUT,2003/08/27,09:12:32 -4:00 GMT,192.168.1.101:137,195.22.153.24:137,UDP

In above you can see that I block ZoneAlarm from checking with Zone Labs at 24.153.22.195 and right after is a port 137 outgoing block to 195.22.153.24:137 that originates from something in my PC. (no idea what)

What's odd is 24.153.22.195 is the exact reverse of 195.22.153.24 - Is this normal ZA behavior - should I be worried ?

.. cheyana

[rcgreen]

The addresses are the same. The backward version has something to do with
reverse dns lookup

Zonealarm has a bug where it wants to perform this lookup as soon as it starts
Apparently they have promised to fix it.

http://www.computing.net/security/ww...orum/3494.html