BigGT3Fan

Need some advice from some of the all-knowing ZoneAlarm gurus on here ;-)

Just recently, whenever I start my PC, zone alarm pops up with an alert asking if I want to allow a program to accept connections from the network, but the program name is missing, so the message is just "Do you want to allow to accept connections from the local network"

The source ip address is the IP address of my machine (192.168.1.100) which sits behind a Linksys NAT Router/firewall which has IP address 192.168.1.1 and dishes out DHCP addresses to anything I connect to it, which is currently just the one PC and occasionally my laptop, hence the .100

The Port the alert is generated on is different every time the alert appears, and I guess my paranoia is suggesting it's a trojan or something...

Given the alert, and no program name, how can I found out from Zonealarm what is generating it?

All assistance gratefully received,

Thanks,





Alex

ozzy

That address is usually assigned to the Cable modems supplied by Telewest. Do you have Blueyonder or NTL cable installed?

You can turn on the ZA logging to see all the alerts. If it was generated by a program, then the alert pop-up should display the full path.

Might be worthwhile changing your IP address to 192.168.1.2xx (something high anyway) to see if the alert stays with your PC. Also try connecting to http://192.168.1.100 to see if you can get into the cable modem.

Stefan

[Edited by ozzy - 3/13/2002 10:04:32 AM]

howardb

I also get the same alert occasionally. I have NTL cable via the set-top box. IIRC preventing this request stops all internet traffic so I put it down to a 'compatability' issue between Zonealarms and windows XP. I couldnt find anyway of tracking this.

BigGT3Fan

Thanks guys,

I am on Telewest.

I am running XP and it didn't happen when I was on W2k so maybe that's it.

I will look at the ZA logging too.




Alex

akshay67

I would use sygate personal firewall, which is also free, but lets you look at traffic/packet logs coming/going from your computer - and it lets you run traces to sources. You can also hardwire rules.