Port Scanning

Port Scanning

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Port Scanning Evan Joanette 07-12-2004
`--> Re: Port Scanning Sheila aka Pipp...07-12-2004
Posted by Evan Joanette on July 12, 2004, 4:26 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I'm on Telewest Blueyonder Broadband in the UK and reaquainted myself
with ZoneAlarm recently. Every ten seconds I was notified of some
port intrusion, some from Blueyonder IP's, some not. Telewest informs
me that their servers will port scan clients. Does this seem
reasonable? Most of the other port intrusions I presume are from
virus-hijacked computers?

Furthermore, as ZoneAlarm has this nasty side-effect of crashing my
computer, I'd like to replace it with a much more reliable means of
security--a router. Does anyone have any opinions as to why a hardware
firewall (I'm leaning toward Linksys BEFW11S4) might NOT be a better
idea than software firewall?

I know ZoneAlarm isn't the end all and be all of firewalls. I like
Norton's antivirus, maybe their Internet Security combo is decent?
Though ...it's still cheaper to buy the router!

Thanks for your opinions in advance.

Evan Joanette
ejoanett@hotmail.dot.com


Posted by JRF on July 12, 2004, 1:50 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I use two routers, an alpha shield which is connected to a watchguard
firebox, and I use NIS on my system. I too use broadband and every so often
my ISP servers scan, I'm given the option to allow or block, which I block.
When I checked with my ISP they say it's sop.

> I'm on Telewest Blueyonder Broadband in the UK and reaquainted myself
> with ZoneAlarm recently. Every ten seconds I was notified of some
> port intrusion, some from Blueyonder IP's, some not. Telewest informs
> me that their servers will port scan clients. Does this seem
> reasonable? Most of the other port intrusions I presume are from
> virus-hijacked computers?
>
> Furthermore, as ZoneAlarm has this nasty side-effect of crashing my
> computer, I'd like to replace it with a much more reliable means of
> security--a router. Does anyone have any opinions as to why a hardware
> firewall (I'm leaning toward Linksys BEFW11S4) might NOT be a better
> idea than software firewall?
>
> I know ZoneAlarm isn't the end all and be all of firewalls. I like
> Norton's antivirus, maybe their Internet Security combo is decent?
> Though ...it's still cheaper to buy the router!
>
> Thanks for your opinions in advance.
>
> Evan Joanette
> ejoanett@hotmail.dot.com




Posted by ac on July 12, 2004, 3:43 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello,
On your question about hardware firewalls; I use a Linksys router and find
it very reliable. The only problem is it doesn't monitor / alert on outgoing
traffic, so you don't get warned of spyware, etc that might phone home. I am
looking to have the best of both worlds by having both router and software
firewall. So far I've looked at Zonealarm (but this can't be configured to
block outgoing traffic by ip address to block known ad servers) and Kerio
(which is very configurable in what it can block, but unfortuantely also
regularly crashed my computer).
On your first point, I'm not sure I like the sound of a provider port
scanning my system - but as you've probably gathered from my above comments
I'm slightly paranoid!

Hope these thoughts are helpful...

> I'm on Telewest Blueyonder Broadband in the UK and reaquainted myself
> with ZoneAlarm recently. Every ten seconds I was notified of some
> port intrusion, some from Blueyonder IP's, some not. Telewest informs
> me that their servers will port scan clients. Does this seem
> reasonable? Most of the other port intrusions I presume are from
> virus-hijacked computers?
>
> Furthermore, as ZoneAlarm has this nasty side-effect of crashing my
> computer, I'd like to replace it with a much more reliable means of
> security--a router. Does anyone have any opinions as to why a hardware
> firewall (I'm leaning toward Linksys BEFW11S4) might NOT be a better
> idea than software firewall?
>
> I know ZoneAlarm isn't the end all and be all of firewalls. I like
> Norton's antivirus, maybe their Internet Security combo is decent?
> Though ...it's still cheaper to buy the router!
>
> Thanks for your opinions in advance.
>
> Evan Joanette
> ejoanett@hotmail.dot.com




Posted by Sheila aka Pippie on July 12, 2004, 9:51 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I use D-Link router, and can block ports in there (block 135-139 btw) and
Norton Firewall where you can chose incoming and outgoing.


> I'm on Telewest Blueyonder Broadband in the UK and reaquainted myself
> with ZoneAlarm recently. Every ten seconds I was notified of some
> port intrusion, some from Blueyonder IP's, some not. Telewest informs
> me that their servers will port scan clients. Does this seem
> reasonable? Most of the other port intrusions I presume are from
> virus-hijacked computers?
>
> Furthermore, as ZoneAlarm has this nasty side-effect of crashing my
> computer, I'd like to replace it with a much more reliable means of
> security--a router. Does anyone have any opinions as to why a hardware
> firewall (I'm leaning toward Linksys BEFW11S4) might NOT be a better
> idea than software firewall?
>
> I know ZoneAlarm isn't the end all and be all of firewalls. I like
> Norton's antivirus, maybe their Internet Security combo is decent?
> Though ...it's still cheaper to buy the router!
>
> Thanks for your opinions in advance.
>
> Evan Joanette
> ejoanett@hotmail.dot.com




Similar ThreadsPosted
computer scanning port 445 July 21, 2005, 11:56 am
Somebody is scanning your computer ... January 25, 2005, 6:12 pm
snort don't log a scanning to local IP September 24, 2008, 1:14 pm
Scanning E-mails with Norton AntiVirus February 5, 2005, 1:22 am
Can't Turn Off NAV Outgoing E-mail Scanning June 25, 2005, 2:13 pm
Harris-STAT scanning software - help? August 30, 2006, 5:14 am
Does a security scanning program needs to know the OS's of the machines being scanned? May 24, 2004, 6:59 am
OSD CIO: Network configuration, scanning softened cyberattack blow March 10, 2008, 5:21 pm
Re: Download freeware RKR scanning software (detect Sony rootkit & others) November 26, 2005, 4:58 am
Port 8640 UDP July 2, 2004, 9:25 pm

The site map in XML format XML site map

Contact Us | Privacy Policy