IE & Internet Connections

[Checkout]

My firewall (ZAP 3.0.118) prompts me occasionally for permission to allow Internet Explorer to "accept connections from the Internet". *I always reply no, and nothing adverse seems to happen. *What's going on here? * ???

[spy1]

Two things come to mind - CodeRed and simple scans. If your browser is using port 80 (probable), then CodeRed servers (and,yes, they're still out there) try to communicate through that.

Scans that include port 80 (from whatever source) will also give you the same message.

Doesn't ZA give you the option of getting more info on the alert? Don't you use either ZoneLogAnalyzer or VisualZone? Both of those will give you a lot clearer picture of what your alerts are trying to tell you. Pete