Grrr! ZA & ICS troubles!

[Assimilator1]

Host PC Win2k with ICS enabled & working

Client PC Win98SE ,is able to access the net no probs over the LAN................as long as Zone Alarm is off!

,I can't see obvious any way to allow permission for it to get through.The NIC IP is allowed though.
When I try to access google.com on the client I get this alert from ZA

Rating....date/time....type.........protocol.......source_IP....................DestinationIP..........Direction...Action_taken..count..Source DNS.....Destination DNS
medium... 2002/8 etc...firewall..TCP(flag S)..213.107.xx.xxx:xxxx...216.239. etc :80..outgoing...blocked..........2.....Assimilator1.......www.google.com

The source IP is the IP of my cable modem

Anyone know how to allow it permission?

[edit]
I just had a stupid thought ,would I just allow the IP of my cable modem to have access? ,or would that leave me wide open for attacks?

 

[joinT]

I just had a stupid thought ,would I just allow the IP of my cable modem to have access? ,or would that leave me wide open for attacks?

in either case, even Cable ISP's are using dynamic IP's now anyways.
is there any particular reason to have ZoneAlarm on the 98SE machine (I'm a little ) is ZA on the client or host?
truthfully, it only needs to be on the host - but are you using the free ZA version?
apparently it suX0rs & you might wanna think about using another app. There was a large thread about ZA in software forum about 1-2 weeks ago.

I haven't used ZoneAlarm in a long time, so i don't really remember much settings. I'll try to find the software forum thread for you.

 

[joinT]

big zone alarm thread linky

maybe ask ffmcobalt for some assistance

 

[joinT]

or just download tiny personal firewall which seems to be recommended over the free version of ZA.

 

[Assimilator1]

ZA is only installed on the Host & yes it is the free version
My cable IP stays fixed unless I unplug the power AFAIK

Thanks for the link ,I'll check it out

[edit]
Found this at the ZA FAQ

5. How do I set up ZoneAlarm to work with NAT?
ZoneAlarm is compatible with NAT. If you set the Internet zone security level to "High," the computer running ICS will be protected by the firewall. However, Internet access for the other computers (that access the Internet through the ICS machine), will be blocked. As a workaround, you can set the security level on the ICS machine (for the Internet Zone) to "Medium."

And it works ,Though I'm a little uneasy at reducing its security................

 

[joinT]

good to hear. i found setting up security on my network such a PITA, that I just went & bought a residential gateway w/ hardware firewall. Let's me share my DSL pretty easily too

 

[ColinP]

You could set the destination IP address to be a local one (trusted), you can do that with ranges too.
I'm still using a slightly older version of ZA but you should still be able to do it in the latest one.

Go into Security - Advanced - then add the dest IP address in there.

I wouldn't set security to medium though (on the cable modem side), this will stop pings etc (icmp) from being ignored.

2 sightings of ColinP in a day........!!!!!



Col

 

[ColinP]

A person with lower moral standards might download the full version of ZA from Kazaa............



Col

 

[Assimilator1]

You could set the destination IP address to be a local one

Wouldn't I have to set the range to include all possible internet IP addresses? ,& if I did that wouldn't that allow anything to go out to the net from my machines without query?

this will stop pings etc (icmp) from being ignored.
*Manuel voice*

k?

I have Kazaa lite btw!:Q...............

JoinT
Btw TPF doesn't work properly with ICS