Zone Alarm

[Kenazo]

SO I'm setting up Zonealarm on our computer here at work, seeing if it's something we might want long term and my question lies in the different types of protocals:

What are:
UDP, ICMP, IGMP and netbios? I've allowed the tcp ports that I know i need for our webserver, email and ftp servers and the other assorted little programs we use, but I don't know what to do w/ the other options.

Also, i keep getting a message that another computer is always trying to access my port 3130. Any idea what program would be trying to use that port?

 

[Zand]

Some SQUID stuff uses that port. Are you on a network (like for a school)?

 

[Kenazo]

nope. Just a small (3 computer) network w/ a dsl connection.

 

[eklass]

3130?

for some reason i want to say that is SQL-related. not totally sure. might even be messanger related (net msg spam)

try googling for (ports 3130) and see what you come up with

 

[dougtran]

short answer, they're protocols.

You can probably filter out/disable ICMP (for ping), IGMP (VPN), netbios (name resolution).

 

[Bglad]

ZoneAlarm really works pretty well. I had it for quite a while on a 5 computer network with a cable modem at my office until I finally upgraded to an outboard router/firewall.

Just set it to do its thing and wait to see if there is anything you do with any of the machines that stops working. Just keep in mind that you've installed ZA and know that is the first place to look if something is not working. If you aren't doing anything like VPN, video conferencing, stuff that needs specific port forwarding etc. it will probably work fine right out of the box.

If you have problems, first thing to try is putting your local ip addresses (probably helpful to assign static ip's in your intranet) in the trusted zone in ZA. Also, you can always easily turn off ZA to be sure that is indeed what is causing your problem before you do more customized settings.

By the way, if you already have a network, what kind of router do you have? Odds are you don't even really need ZA. When I installed my router I kept running ZA for awhile and monitored what was getting through and found that almost nothing got to the individual machines so I'm not using ZA anymore.