Firewall?

[DoeZ0763]

Good Morning...I posted in the "adware spyware & hijacking cleaning"...I was having some other problems that I believe have been fixed BUT...when I first downloaded Zone-Alarm it was ok...after a bit I couldn't get my Outlook Express to work or a few other items...so I uninstalled ZA...I'm running Windows XP Home and not sure if I have a firewall...or if I should try Zone-Alarm one more time...Any suggestions or advice would greatly be appreciated :)

[dangitall]

Mornin', DoeZ!

Is everything working now without ZoneAlarm? If so, I'd try downloading ZA again, making sure you're getting the free version (at least to start with). Save the file to your computer; do not install it while connected to the net.

After the download is complete, disconnect from the net and disable (temporarily) your active AV scanner. Install ZA and reboot your computer. Connect to the net.

You'll get a number of popups from ZA, letting you know that various programs are looking to do various things online. Be selective in what you allow, especially those you choose to always allow access with the "Remember my answer ..." checkbox.

On my machine, using the free version of ZA, the only thing I've 'always' granted access to is my ISP's dialer; everything else requires my interaction.

I hope this helps. If it doesn't, you know where else you can contact me. ;)

[DoeZ0763]

Good to see you dangitall...Everything seems to be working fine since uninstalling the ZA...I'm a little worried that if I install it again...it's not going to allow my Outlook Express to work again...Is there a way to look at everything and click on what I want and don't want? ???

[meneer]

There is supposed to be a wizard like screen, asking you to allow or disallow the aplication to communicate with the internet. You only have to accept this warning once, if you check a little box, to allow always.

[RedLobster]

Before you go randomly checking outbounds....be sure NOT TO ALLOW ANY PROGRAM TO ACT AS A SERVER!
An you may want to disable your XP firewall if using ZA

[melissa]

the server option is only in zone alarm not in other firewalls like outpost

[DoeZ0763]

dangitall...I reinstalled ZA and think I checked the rite things to allow...I'm a little nervous here...How do I find that page that shows what it allows and all those check marks? Also...there's this thing here that sorta confused me...it was asking it I would allow this...192.168.1.101(NETBioS Session) I have no clue what this is...I hate say this but I'm gonna get so confused with this now...Help :'(

[meneer]

Don't :'( surf to this page: http://www.securityfocus.com/guest/11486 ;)

[DoeZ0763]

I don't understand please...what is this page and why not? ???

[dvk01]

-{ Quote: " quoting: DoeZ0763 link=board=23;threadid=26388;start=0#msg153171 date=1080763850]
I don't understand please...what is this page and why not? ???
" }-

He is saying don't worry

go to that page which shows you exactly how to set up Zone alarm with nice easy to understand pictures

[sig]

Are you on a local area network and are sharing files between your computers? Offhand, it looks like your computer wants to talk to another computer in a local network (netbios session). But if you don't have a LAN, definitely don't allow.

As for the page linked to, it's OK to go to and you should check it out. It's a Security Focus article on how to configure ZA securely.

[DoeZ0763]

::)Well why didn't he just say that :-*

[DoeZ0763]

Ok let's see here...bare with me cuz I'm not computer literate...I was afraid of this here...zone alarm asked me and I didn't know...it looked like some type of address that I dont know...192.168.1.101 (NETBIOS Session)

As for local network...I have cable modem...and I don't believe I'm sharing files with another computer...

[meneer]

Again, don't worry (I hope..) :)

the indicated ip address, 192.168.1.101, is a private address, this means that this is an ip address that is not on the internet. Since you are on a cable, this might mean that this is either the ip address of your computer on the network of your cable internet provider, or it is the ip address of the computer form you internet provider. In both cases this is ok, both these systems can be trusted.

The ip address 192.168 is a so called private ip address, that can be used on local networks only. This address can not be found on the internet. The internet routers do not support ip addresses in this range (19.1.68.*.*). There are two other private ranges, but they are not iomportant right now.

You can check the ip address of yor computer by doing this (sorry, I am not on an english language windows system): from the Start button: choose run
in the command line enter: cmd and press ok
in the new windows (don't fear) enter ' ipconfig' and press the enter-button on your keyboard.

The ipconfig tool will show you lots of information, but most important, it will show the ip-address of your computer.
If this ip-address is 192.168.1.101, then your are okay. If it shows a different number... call back here :)

[DoeZ0763]

I'm going to the run window and typing in ipconfig...a black window comes up and then goes away...I can't even get my eyes to see anything its that fast...it doesn't stay open...

[meneer]

Sorry... I'm on a linux system and on a dutch language Windows 2000 system. I can't even figure how to get to the Windows network settings.... must be my ignorance (i really don't like windows ;)) sorry...

[gerardwil]

Doe,

Click on start, run, cmd
A new doslike window will open
Then type: ipconfig /all

Gerard

[dangitall]

Hiya, Doez! ;)

Unless you are connected to a home network (yours is a standalone machine, right?), do not allow that NetBios connection in the ZA popup. When you see the popup for NetBios, click on the 'Rember my answer ..' (or however it's worded) checkbox right above the 'Yes' and 'No' buttons and then select 'No'.

The only problem I see with that page that Meneer linked you to is that it seems to be for older versions of ZA. There's some good information there, but you'd probably do just as well to view the ZA tutorial, for which there should be an entry in your Start Menu.

Now, to get to that screen with all the checkmarks in it that you were shown in your HJT post, right-click the ZA icon in the lower right corner of your screen. Select "Restore ZoneAlarm Control Center'. On the left side of the Control Center, select 'Program Control' and, at the upper right of that screen, click on the 'Programs' tab. This will show you exactly which programs are allowed which permissions for access. Check the settings here for your OutlookExpress. If you have four blue question marks, OE will ask for permission each time that you open it (when you open OE, you'll get that ZA popup; simply hit the 'Yes' button). This is the way I recommend leaving it.

Someone else suggested this: if you are using the firewall built-in to WinXP, you may want to disable it (I can't tell you how, though, as I run Win98SE). I seem to recall having read that the MS firewall doesn't play nice with other firewalls.

If you have any other questions, feel free to ask! I may not be able to get right back to you due to our apparently incompatible schedules, but someone else here can help, and many of them know more than I do about the issues you're having.

[gerardwil]

open network connections
rightclick on your connection
choose properties
choose advanced tab
here you can disable your XPfirewall

It may look a bit different on your machine because i am using a dutch version

Better to disable it if using another FW
And also disable when using a home network

Gerard

[Peaches4U]

-{ Quote: " quoting: RedLobster link=board=23;threadid=26388;start=0#msg153080 date=1080753557]


Before you go randomly checking outbounds....be sure NOT TO ALLOW ANY PROGRAM TO ACT AS A SERVER!
An you may want to disable your XP firewall if using ZA
" }-

I concur - it is highly recommended to disable your XP firewall in order to prevent conflict.

[Peaches4U]

-{ Quote: " quoting: DoeZ0763 link=board=23;threadid=26388;start=0#msg152939 date=1080733981]
Good Morning...I posted in the "adware spyware & hijacking cleaning"...I was having some other problems that I believe have been fixed BUT...when I first downloaded Zone-Alarm it was ok...after a bit I couldn't get my Outlook Express to work or a few other items...so I uninstalled ZA...I'm running Windows XP Home and not sure if I have a firewall...or if I should try Zone-Alarm one more time...Any suggestions or advice would greatly be appreciated :)
" }-

Hi - I encountered this problem myself. In order for OE to work you must give it access to the internet. Without it being connected to the internet there is no way you can receive and send mail that I know of if your firewall is blocking access. You will also have to allow your anti-virus program [you do if you are using Avast] to access the internet for updates and for scanning incoming and outgoing mail.

I am using WinXP, ZoneAlarm Pro which is password protected.

[DoeZ0763]

Doe,

Click on start, run, cmd
A new doslike window will open
Then type: ipconfig /all

Gerard


Ok...I did this and I saw that IP address 192etc...it says it's my IP address...so I'm gonna assume to allow this...yes?

Also...I'm not sure about this homenetwork thing or stand alone? What's that about? And also...the XP Firewall was disabled. Am I a stupid idiot or what?

[DoeZ0763]

Dangitall...I got to that ZA page...there was something there I remember seeing somewhere..."PDP RPC SERVER" it has ??? Do you remember what this was? Also...in the one column named SERVER...they all have a ?? should they? Sorry? ::)

[dangitall]

-{ Quote: "Before you go randomly checking outbounds....be sure NOT TO ALLOW ANY PROGRAM TO ACT AS A SERVER!" }-

If the ZoneAlarm popup says that something wants permission to acces the net as a server, click the 'Remember' box and then the 'No' button.

Standalone: your computer is not connected to any other computer
Networked: your computer is part of a group of intercommunicating, directly connected computers

Yours is a home computer? Are there any wires or cables connecting it to another computer in the house/apartment/building? If not, then it is a standalone.

If your WinXP firewall was already disabled, that is a good thing ... at least for the purposes of this discussion!

Unfortunately, the 'PDP RPC SERVER' entry doesn't ring any bells, but I'll doublecheck and try to get back to you.

All of the entries in my 'Server' column are blue question marks. I have to figure that I'm doing something right as everything is working.

Are you still having problems with OutlookExpress? If so, what are the error messages (if any), and what are the entries in ZA (from the screen with the question marks) for it?

[DoeZ0763]

Ok dangitall...I have another computer hooked up thru a router...that is my sons...we have cable modem...so i am to say I am a network computer...that is my final answer ;D No problems with the OE...I must have done something wrong the last time...stupid is as stupid does :P

[dangitall]

Okay, DoeZ. If everything is working now, you should be okay. If something comes up, though, you know where to reach me!

You might also consider going back to the MyWay forum and let folks know that your (current) problems have been adequately dealt with. Pappy appreciates a 'thank you' as much as anyone else does! If you do go there for this, start a new thread: your original one has been moved to the second page.

;) ;D :D :) *puppy* 8)

[DoeZ0763]

I'm actually waiting to hear from papakid in regards to a few other things he was gonna help me with. I do more than ever appreciate all the help you people have given me...I know it's not easy dealing with people that aren't up on the lingo and all... ::)But I ThanK You Again :-*a million {{{hugs & kisses}}}.

[RedLobster]

Doe

Looks like you are getting nervous..relax..its
going to be just fine.....keep it simple.

Netbios: NO!! don't care if you are on dial-up, cable, or on a bike..Netbios; NO!

Some examples that may help you understand. Lets use spywareblaster.....it needs to be updated.....so you check for update and up pops ZA asking if you want to allow spyblaster OUT.....you check OK....but AS A CLIENT..NOT AS A SERVER....so any program that asks for SERVER..you say no..an denie.
Now, if you are not sure..just DENIE....an in the ZA setup an entry of THAT program will appear...once it does you can make the needed adjustment....ok, as a CLIENT....
Thing to remember is that YOU HAVE A CHOICE....the program wont go away if you denie.....you can make adjustments...an the use the program........
ok, lets try this:

Internet Explorer: allow out, as a CLIENT not as a SERVER.

Anti-virus update: allow as a client..not a server.

Aol/yahoo messenger: allow as a client not as a server.

Nothing gets out as a SERVER

an again Netbios: DENIE...no exceptions..if you are not using file sharing....

[dangitall]

-{ Quote: " quoting: DoeZ0763 link=board=23;threadid=26388;start=15#msg153284 date=1080776185]
{{{hugs & kisses}}}.
" }-

Right back at ya! ;)

[RedLobster]

Doe asked:

Ok...I did this and I saw that IP address 192etc...it says it's my IP address...so I'm gonna assume to allow this...yes?


NO!!! DENIE!

ZA is an application firewall.......a Rulebased firewall your question would be answered differantly.

Remember Doe...in doubt DENIE....if then you can't access the internet THEN OK AS A CLIENT.......when in doubt: DON'T

[gerardwil]

-{ Quote: " quoting: DoeZ0763 link=board=23;threadid=26388;start=15#msg153284 date=1080776185]
a million {{{hugs & kisses}}}.
" }-

Thanks Doe!

Gerard

Finally for the die hards:

Fast Bytes Zone Alarm By: Oliver Keuten, Oliver Kuerten
Catalog: Book
Publisher: Data Becker
Released: May, 2004
List price: $12.95
Amazon price: $10.36
Availability: Not yet released.

[RedLobster]

Here is a link with pictures and explanations

http://www.markusjansson.net/eza.html


I've no idea if it fits your version but ZA is what ZA is.....so you should get some understanding.
Just noticed that you are on a home network so its best for other networkers to answer your questions....which I am not.
Nice to see everyone helping you this way.

[CrazyM]

Hi DoeZ

-{ Quote: " quoting: DoeZ0763 link=board=23;threadid=26388;start=15#msg153277 date=1080775404]
Ok dangitall...I have another computer hooked up thru a router...that is my sons...we have cable modem...so i am to say I am a network computer...that is my final answer ;D" }-

Having a home network behind the router (LAN = Local Area Network) you can add the LAN subnet (range of IP addresses) to your trusted zone in ZA. From the IP you mentioned earlier you will want to enter the following subnet: 192.168.1.0/255.255.255.0

This should allow communications between the systems behind the router (you should not see that netbios prompt anymore), and still protect your system from the outside. Although your router will already be protecting the systems behind it from unsolicited inbounds from the Internet.

Regards,

CrazyM