- Port Security question
- Posted by CB on October 11th, 2004
I am using just the Win XP firewall because the ZoneAlarm Pro I
bought/installed seems to use a lot of memory & I'm not sure how to set it
up anyway.
My question is: would it be wise to use ZAP in conjunction with the WinXP
firewall?
I ran tests from the Shields Up site with just the WinXP firewall and it
says:
Port 139 doesn't appear to exist
Can't connect to NetBIOS
Common Ports:
Port 1025 is open
Stealthed 3 ports
Closed 22 ports
Is Port 1025 being open enough of a concern to run ZAP all the time?
Thank you
- Posted by andy smart on October 11th, 2004
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
CB wrote:
| I am using just the Win XP firewall because the ZoneAlarm Pro I
| bought/installed seems to use a lot of memory & I'm not sure how to set it
| up anyway.
| My question is: would it be wise to use ZAP in conjunction with the WinXP
| firewall?
|
| I ran tests from the Shields Up site with just the WinXP firewall and it
| says:
| Port 139 doesn't appear to exist
| Can't connect to NetBIOS
|
| Common Ports:
| Port 1025 is open
| Stealthed 3 ports
| Closed 22 ports
|
| Is Port 1025 being open enough of a concern to run ZAP all the time?
|
| Thank you
|
|
Zone alarm will control outgoing traffic from your pc, whereas the XP
one will (I believe) only control incoming traffic. As there are trojan
devices and other spyware which will try to connect out, I prefer to
know what software is trying to initiate an outgoing connection to the
internet and have some contol over it. The paid-for version of ZA has
lots of other features against popups etc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFBapLPqmlxlf41jHgRAs1XAJ9i8p6lYqCcVLxZl+KMlB Z55nMmGwCfVt5J
bkNsKX7B+G4vUCor255AuAY=
=jvIV
-----END PGP SIGNATURE-----
- Posted by Hairy One Kenobi on October 12th, 2004
"CB" <croy14@noaddress.com> wrote in message
news:bYSdndOo46CYGPfcRVn-sg@comcast.com...
1025 was almost certainly your connection to the website itself - the test
is useful in certain ways, but is about as sophisticated as a plank.
If you have doubts in your mind, then have a friend with the same ISP run a
"proper" port scan. There are many scanners available, including a
knocked-up-in-an-hour version on my own website.
I say "the same ISP", as your ISP contract probably explicitly forbids
trying such things.. ;o)
--
Hairy One Kenobi
Disclaimer: the opinions expressed in this opinion do not necessarily
reflect the opinions of the highly-opinionated person expressing the opinion
in the first place. So there!
