ZoneAlarm Pro is a facist piece of shit!

[Refalm]

If your on Windows, do NOT use ZoneAlarm Pro... this is what hapenned to me:

Installed the new update.
Went to nl.openoffice.org, and a screen poped up that the website was blocked because according to ZoneAlarm Pro it contained "hacker/proxy cracking tools".
It was done by ZoneAlarm Pro's webfilter. If I payed $ 20 more for ZoneAlarm Pro, I would be able to control the webfilter  :mad:

I'm now using an alternative firewall... I just can't wait until I get a larger hard-disk, so that my relatives will allow me to install Red Hat 8.0 on MY computer.

"NOFX - What's the matter with parents today"

[Master of Reality]

I wont be using Zone Alarm, but thats because i have a good Linux firewall/proxy setup

[beltorak0]

ZA got a lot of press, but Kirio Personal Firewall is a lot better IMO.  It allows application AND ip filtering; ZA (the free one anyway) is purely application based, and the default firewalls for *nix's are primarily ip based.

I'm trying to write an app/ip/user+group based firewall that will rest on the NetFilter design, mostly to suppliment iptables.  It is still pre-ALEPH (exisits only on paper) though, since I am starting to learn C++.

-t.

[Mr Smith]

I remember when I first got the free version of ZA 2.0, I really liked it. Then one day, I check for an update (I don't like programs that try try to get updates automatically, it pisses me off) and there is  one waiting. It wasn't until after I installed this update and re-started the program that I found out it was an update for ZA Pro! I was highly pissed, and almost decided to take it off my computer and write ZoneLabs a nasty letter. Almost. But then I just decided to get a crack for it and have been using ZA Pro FREE ever since. The customer is always right.  

[Kintaro]

nmap -O -p0 exeleven.sytes.net

Just try to h4x0r my b0x0r...
Refalm, if its your computer, then tell them to put windows up there asses!

[HPC GUY]

for windows based machines i would recommend Sygate personal firewall its free!

www.sygate.com

it detected and successfully stoped a DOS attack on me

[ December 16, 2002: Message edited by: HPC GUY ]

[beltorak0]

I hear Sygate has a good firewall; I use thier site when I want to check my firewall for integrity and accuracy.  Just to make sure that they don't catch something I didn't see when I nmap my box locally.

-t.

[Kintaro]

My gateway is on "high" with the Red-Hat firewall for the 2 ppp connections, but it is on "trust" for the ethernet connection.

The standard sygate scan says:
 Trying to find out your computer name...

Unable to determine your computer name!

Trying to find out what services you are running...

Unable to detect any running services!

The stealth one says:
FTP DATA
20
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
FTP
21
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
SSH
22
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
TELNET
23
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
SMTP
25
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
DNS
53
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
DCC
59
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
FINGER
79
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
WEB
80
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
POP3
110
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
IDENT
113
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
NetBIOS
139
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
HTTPS
443
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
Server Message Block
445
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
SOCKS PROXY
1080
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
WEB PROXY
8080
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
SOURCE PORT
33247
BLOCKED
This is the port you are using to communicate to our Web Server. A firewall that uses Stateful Packet Inspection will show a 'BLOCKED' result for this port.

And afterwards they tell me i was using there software:
 

quote:
 You have blocked all of our probes! We still recommend running this test both with
and without Sygate Personal Firewall enabled... so turn it off and try the test again.

And now stop iptables and it tells me that only DNS, Netbios (oooh), and SSH are open.

now ill do some more scans!

[voidmain]

Maybe this is why your DNS isn't working? See if it works with the firewall turned off, if it does you need to add more allowances for TCP/UDP port 53. And possibly add the following to your "options" section in /etc/named.conf:

query-source port 53;

[ December 18, 2002: Message edited by: void main ]

[Kintaro]

From the inside network, everything is open, i told it "eth0" was a "trusted" device.

From the inside everything is open
My system passed all tests with nothing open.
Try to h4x0r my b0x0r!
exeleven.sytes.net is my dyndns

[Kintaro]

The DNS is working, i just have to add the 2 DNS Servers from my ISP that was put in /etc/resolv.conf on the server in my /etc/resolv.conf on my client(s) my brothers computer uses DHCP and i set that automaticly. I also have the servers IP in my resolv.conf so i have no troubles there.

But here is an nmap of the server from the inside network...

Code: [Select]

I just noticed my Serva thinks its X11.X11.HOME but i just ssh'd to serva.x11.home and it worked it also says root@serva in the title.

[voidmain]

quote:Originally posted by BOB 11: Stallman Wannabe:
The DNS is working, i just have to add the 2 DNS Servers from my ISP that was put in /etc/resolv.conf on the server in my /etc/resolv.conf on my client(s) my brothers computer uses DHCP and i set that automaticly. I also have the servers IP in my resolv.conf so i have no troubles there.

Well then there is no point in you running a DNS server as none of your machines would be using it in that configuration. If you were running your DNS server on your server this should be in your /etc/resolv.conf:

Code: [Select]

And on your clients you would have:

Code: [Select]

Where the above address is the IP address of your DNS server. Of course if you had DHCP configured properly it would automatically configure your clients that way.

[voidmain]

quote:Originally posted by BOB 11: Stallman Wannabe:
The DNS is working, i just have to add the 2 DNS Servers from my ISP that was put in /etc/resolv.conf on the server in my /etc/resolv.conf on my client(s) my brothers computer uses DHCP and i set that automaticly. I also have the servers IP in my resolv.conf so i have no troubles there.

Well then there is no point in you running a DNS server as none of your machines would be using it in that configuration. If you were running your DNS server on your server this should be in your /etc/resolv.conf:

Code: [Select]

And on your clients you would have:

Code: [Select]

Where the above address is the IP address of your DNS server. Of course if you had DHCP configured properly it would automatically configure your clients that way. If you have your DHCP server configured properly and the /etc/resolv.conf is getting different information than what your DHCP server is configured for then you have more than one DHCP server on your network and they are conflicting.