ZoneAlarm reports Alert from Scoobynet?
14 May 2001, 10:47 PM
#1
Scooby Regular
Thread Starter
Join Date: Jun 1999
Posts: 1,496
Likes: 0
Received 0 Likes
on
0 Posts
Just got this in my ZA (V 2.1.44) window:
"The firewall has blocked Internet access to your computer (NetBIOS Name) from bbs.scoobynet.co.uk (195.166.79.208) (NetBIOS Name).
Time: 14/05/01 22:17:16"
I've been running ZA for about six weeks now and this is the first time ZA has reported anything about ScoobyNet
Any clues what's up?????
"The firewall has blocked Internet access to your computer (NetBIOS Name) from bbs.scoobynet.co.uk (195.166.79.208) (NetBIOS Name).
Time: 14/05/01 22:17:16"
I've been running ZA for about six weeks now and this is the first time ZA has reported anything about ScoobyNet
Any clues what's up?????
15 May 2001, 08:26 AM
#2
Scooby Regular
Join Date: May 2000
Location: MY00,MY01,RX-8, Alfa 147 & Focus ST :-)
Posts: 10,371
Likes: 0
Received 0 Likes
on
0 Posts
Martin
Nothing to worry about with this - it is a simple name lookup request. Zone Alarm blocks it as an unidentified incoming traffic. It is just doing what it is meant to do and block all non-authorised connections to your PC. In this case you know the source (Scoobynet) and as DV says, there are cookies that track when you last logged onto Scoobynet etc.
Firewalls don't make distinctions between friendly and unfriendly attemtped connections, they just block everything unless you say not to.
If you see connections made from unidentified sources, using high TCP / UDP port numbers such 12345 etc, then this is more likely to be an attempted scan / attack on your PC. More details
Nothing to worry about with this - it is a simple name lookup request. Zone Alarm blocks it as an unidentified incoming traffic. It is just doing what it is meant to do and block all non-authorised connections to your PC. In this case you know the source (Scoobynet) and as DV says, there are cookies that track when you last logged onto Scoobynet etc.
Firewalls don't make distinctions between friendly and unfriendly attemtped connections, they just block everything unless you say not to.
If you see connections made from unidentified sources, using high TCP / UDP port numbers such 12345 etc, then this is more likely to be an attempted scan / attack on your PC. More details
15 May 2001, 09:13 AM
#3
Scooby Regular
Thread Starter
Join Date: Jun 1999
Posts: 1,496
Likes: 0
Received 0 Likes
on
0 Posts
I think cookies are a red herring - I get loads of cookies from other web sites and ZA doesn't report anything, and if ZA is getting confused between a name lookup (if that is what it is) and a cookie read/write, then it doesn't know which way is up 
...and I think, anyway, that ZA is just a packet-inspection firewall that examines TCP/IP headers, not the actual contents, so it can't tell the dfference between a Scoobynet General Forum post, a Muppet Forum post (how I wish), a cookie or a virus.
So, still wondering why Scoobynet is attempting a name lookup on my PC? - if that is what it is. I'm not aware of any other web site that does that, and why haven't I seen it before in the circa 40 days that I've been using ZA?
...and I think, anyway, that ZA is just a packet-inspection firewall that examines TCP/IP headers, not the actual contents, so it can't tell the dfference between a Scoobynet General Forum post, a Muppet Forum post (how I wish
), a cookie or a virus.So, still wondering why Scoobynet is attempting a name lookup on my PC? - if that is what it is. I'm not aware of any other web site that does that, and why haven't I seen it before in the circa 40 days that I've been using ZA?
15 May 2001, 12:05 PM
#4
Scooby Regular
Join Date: Jun 2000
Posts: 3,783
Likes: 0
Received 0 Likes
on
0 Posts
Best speak to the admin, but Scoobynet does deposit a 'cookie' on your hardisk - which ZoneAlarm could misinterpret to be a virus or something.
(A cookie is simply a file that a site like scoobynet checks for the existence of on your PC - it holds your user info in this case)
-DV
(A cookie is simply a file that a site like scoobynet checks for the existence of on your PC - it holds your user info in this case)
-DV
Thread
Thread Starter
Forum
Replies
Last Post