Added security

[Hurdy]

I feel the need for added security.

I have three PCs networked behind a router with access to the internet via NTL cable.

The online Symantec security scan said I was vulnerable due to ports 22 and 80 being open.

I d/l Zone Alarm and set it up but those ports are still open.

I tried accessing the router, to see if I could close the ports that way, through http://192.168.1.1 which is the default gateway address but I keep getting a 'connection refused' message. Not a ZA message but rather in large letters across a blank IE page.

if someone could help me I would greatly appreciate it.

Bearing in mind that Folding@Home uses port 80 to communicate with its server.

Also I've lost all network capabilities as ZA keeps blocking everything does ZA have to be on all 3 PCs?

I am totally flummoxed.

[Andy-2004]

bering in mind that Folding@Home uses port 80 to communicate with its server.

Do you fold for a team? :offtopic:

If not join us "37446"

[andsome]

bering in mind that Folding@Home uses port 80 to communicate with its server.

Do you fold for a team? :offtopic:

If not join us "37446"

I always fold up the paper when I have finished with it, does this qualify me for your team? It always looks quite neat.

[nellie2]

can we stay on topic here folks? A serious question is being asked.

To be honest Hurdy I don't use ZA so I couldn't tell you how to close ports, is there nothing in the help files?

You can configure ZA to allow certain things through, like your network and your browser and your email etc.

The firewall will only protect the pc that it is on, so yes... you would need a firewall on each pc.

[Hurdy]

Hi Nel

I configured ZA to block anything coming in.

I ran another online checker - Shields Up - which said all of my ports were stealthed except for 113 which was closed.

Apparently some routers won't 'stealth' this port as it is used for email and some chat rooms.

So I don't think I have as much cause for concern.

Or do I?

[nellie2]

It doesn't sound like you have any cause for concern.... the only problem you might have is when your network is trying to talk to the other pc's, but I suppose ZA will alert you of this and you can allow it.

[Hurdy]

It's an absolute pain trying to get the PCs talking.

ZA prompts you every time.

[Guest ellas]

hey this is me being lazy but your best bet is to search the zonelabs forum http://forum.zonelabs.com/zonelabs

[Guest ellas]

I'm not sure if the free zonealarm is suitable for networking,the pro version is though.

[Guest ellas]

have a look at these articles http://catsearch.zonelabs.com/search/catse...30ad9&x=20&y=10

[Guest ellas]

and here http://search.atomz.com/search/?x=20&sp-q=...er+Forum&sp-i=1 :D

[Hurdy]

Right, thank you very much. Bit of reading up to do.

Looks like I might have to get the Pro version then. :shifty:

[Redhat]

Zonealarm will do nothing (in respect of incoming) apart from handle packets through ports that you have redirected in the router software.

I believe the Symantec site is showing you a false positive, and the ShieldsUP site is showing the correct state. TO stealth port 113, forward the port to an internal IP that doesn't exist.