Installed ZoneAlarm. 10k incoming connections in 1 day?

Mozgus · 10-08-2007, 07:56 AM

I got tired of Windows Firewall so I tried Zone Alarm. I had a few apps that had issues with Windows that now work perfectly with Zone. The thing is, Zone is showing me this just 18 hours after installing:

Now I run adaware, a-squared, and avg. I ran all 3 today. I also closed all open apps and killed all non-vital processes. This still hasn't slowed the flow of incoming connections. What is going on? Nearly all the IPs it's reading are from overseas. I'm worried now.

JohnthePilot · 10-08-2007, 08:44 AM

Don't be as long as they aren't getting through. It shows it's doing its job. It also shows what you are vulnerable to without a firewall.

Mozgus · 10-08-2007, 09:29 AM

Quote:

Originally Posted by JohnthePilot

Don't be as long as they aren't getting through. It shows it's doing its job. It also shows what you are vulnerable to without a firewall.

Ok but is this common or not? If not, what triggered this surge of connections? Do you think this is having an effect on my ping times in games, when a bot is connecting to me every 3 seconds or so?

There are times when I do need to take the firewall down. I spent the last 5 years under a router, but recently I moved and dropped the router as I have no network here. It was the first time I used Windows Firewall.

JohnthePilot · 10-08-2007, 02:58 PM

I regularly get that sort of number with my firewall and is I think fairly common. It will be interesting to see what someone from the Networking Team has to say.

**Cellus** · 10-09-2007, 09:47 PM

This is actually not surprising if you do not have a router. Much of the hits you are seeing are probably port probes and broadcasts on your public IP address (EDIT: and subnet). Your router's firewall will most commonly block and drop incorrectly formed packets (malformed packets are sometimes used in probing and fingerprinting), and by the time things trickle through the router to your computer you aren't seeing nearly as much activity.

Even without a home network a router these days can still be useful, especially if you already have one. It provides that extra layer of security which, while fairly basic, is quite handy.

10-08-2007, 07:56 AM	#1 (permalink)
Mozgus Registered User Join Date: Dec 2005 Posts: 87 OS: WinXP SP2	Installed ZoneAlarm. 10k incoming connections in 1 day? I got tired of Windows Firewall so I tried Zone Alarm. I had a few apps that had issues with Windows that now work perfectly with Zone. The thing is, Zone is showing me this just 18 hours after installing: Now I run adaware, a-squared, and avg. I ran all 3 today. I also closed all open apps and killed all non-vital processes. This still hasn't slowed the flow of incoming connections. What is going on? Nearly all the IPs it's reading are from overseas. I'm worried now.

10-08-2007, 08:44 AM	#2 (permalink)
JohnthePilot Asst Manager, TSF Articles Join Date: Mar 2006 Location: Cheltenham, near Wales. Posts: 28,183 OS: XP Home SP3, PCLinux, Vista Home Premium SP1 My System Blog Entries: 1	Re: Installed ZoneAlarm. 10k incoming connections in 1 day? Don't be as long as they aren't getting through. It shows it's doing its job. It also shows what you are vulnerable to without a firewall. __________________ Submit New Articles Here If you feel that TSF has helped you please make a donationand help to keep the forum free Cenedl heb iaith, cenedl heb galon Folding@Home - Team 85015

10-08-2007, 02:58 PM	#4 (permalink)
JohnthePilot Asst Manager, TSF Articles Join Date: Mar 2006 Location: Cheltenham, near Wales. Posts: 28,183 OS: XP Home SP3, PCLinux, Vista Home Premium SP1 My System Blog Entries: 1	Re: Installed ZoneAlarm. 10k incoming connections in 1 day? I regularly get that sort of number with my firewall and is I think fairly common. It will be interesting to see what someone from the Networking Team has to say. __________________ Submit New Articles Here If you feel that TSF has helped you please make a donationand help to keep the forum free Cenedl heb iaith, cenedl heb galon Folding@Home - Team 85015

10-09-2007, 09:47 PM	#5 (permalink)
Cellus Moderator Networking Team Join Date: Aug 2006 Location: Canada Posts: 2,633 OS: Windows Vista Business SP1, Windows XP Professional SP3 My System	Re: Installed ZoneAlarm. 10k incoming connections in 1 day? This is actually not surprising if you do not have a router. Much of the hits you are seeing are probably port probes and broadcasts on your public IP address (EDIT: and subnet). Your router's firewall will most commonly block and drop incorrectly formed packets (malformed packets are sometimes used in probing and fingerprinting), and by the time things trickle through the router to your computer you aren't seeing nearly as much activity. Even without a home network a router these days can still be useful, especially if you already have one. It provides that extra layer of security which, while fairly basic, is quite handy. __________________ TSF Networking Team HijackThis 5 Step Process Donate!