allow or not TrueVector Service go outbound?

[charlie R]

"Dick Hazeleger" <Dick@post_it_in_the_newsgroup.com> wrote in message
news:vk7l3lbn26j05f@corp.supernews.com...
charlie R wrote:

"Igor
> Gutman" <gutman@videotron.ca> wrote in message
> news:3F3FD549.BEF33677@videotron.ca... charlie R wrote:
> >
> > Hello again......Go to the ZoneLabs forums website, sign in and ask
> > your question there. charlie R
>
> In any case, ZoneAlarm is not spyware. If True Vector Service doesn't
> connect to the internet, how do you suppose it is going to identify
> the intruders? True Vector Service "protects the client", as I
> understand it, and I trust it to do so. All my ports are
> "Stealthed", thanks to ZoneAlarm, and True Vector Service. When I
> have a question about ZoneAlarm, I go to the ZoneLabs Community
> forums, where experts can answer the question. When I want to know
> more about Spyware, I come to this newsgroup. charlie R

> i don't get it.. can't someone here simply tell me, whether it's
> normal or not that ZoneAalram Pro's TrueVector Service is always
> trying to connect to somewhere outside?
> i just don't want to go to other forums, sign-up, and the whole crap
> - just because of ONE SIMPLE LITTLE QUESTION that can easily be
> answerred here! thank you very much, charlie R

"Mixed posting" corrected

Charly,

And to what site or IP-address does ZAP try to connect? Perhaps that
would give a clue?! Also, you might think of installing and running a
packet sniffer and - after allowing the connection - see what "goes
out"? Then you would know for sure whether there is comething wrong or
not!

Dick

Hi....I guess I'm just not that paranoid. ZAP connects to
fwalerts.zonelabs.com when I ask for more info. It connects to
mynetwatchman.com for a who is lookup and incident report. On the really
rare occasion that it checks for updates, I give it permission to update,
and it does. There are improvements and added features when done. Checks
for spyware, malware, and BHO's find zilch. My Antivirus prog is updated
first thing every day. Lately, new signatures are added sometimes twice a
day. I receive daily virus alerts from Panda Software.com. I have never
had a virus on this machine. Panda has nuked several, though. No reason to
be paranoid. charlie R.

[Dick Hazeleger]

charlie R wrote:

>
> "Dick Hazeleger" <Dick@post_it_in_the_newsgroup.com> wrote in message
> news:vk7l3lbn26j05f@corp.supernews.com...
> charlie R wrote:
>
> "Igor
> > Gutman" <gutman@videotron.ca> wrote in message
> > news:3F3FD549.BEF33677@videotron.ca... charlie R wrote:
> > >
> > > Hello again......Go to the ZoneLabs forums website, sign in and
> > > ask your question there. charlie R
> >
> > In any case, ZoneAlarm is not spyware. If True Vector Service
> > doesn't connect to the internet, how do you suppose it is going to
> > identify the intruders? True Vector Service "protects the client",
> > as I understand it, and I trust it to do so. All my ports are
> > "Stealthed", thanks to ZoneAlarm, and True Vector Service. When I
> > have a question about ZoneAlarm, I go to the ZoneLabs Community
> > forums, where experts can answer the question. When I want to know
> > more about Spyware, I come to this newsgroup. charlie R
>
> > i don't get it.. can't someone here simply tell me, whether it's
> > normal or not that ZoneAalram Pro's TrueVector Service is always
> > trying to connect to somewhere outside?
> > i just don't want to go to other forums, sign-up, and the whole crap
> > - just because of ONE SIMPLE LITTLE QUESTION that can easily be
> > answerred here! thank you very much, charlie R
>
> "Mixed posting" corrected
>
> Charly,
>
> And to what site or IP-address does ZAP try to connect? Perhaps that
> would give a clue?! Also, you might think of installing and running a
> packet sniffer and - after allowing the connection - see what "goes
> out"? Then you would know for sure whether there is comething wrong or
> not!
>
> Dick
>
> Hi....I guess I'm just not that paranoid. ZAP connects to
> fwalerts.zonelabs.com when I ask for more info. It connects to
> mynetwatchman.com for a who is lookup and incident report. On the
> really rare occasion that it checks for updates, I give it permission
> to update, and it does. There are improvements and added features
> when done. Checks for spyware, malware, and BHO's find zilch. My
> Antivirus prog is updated first thing every day. Lately, new
> signatures are added sometimes twice a day. I receive daily virus
> alerts from Panda Software.com. I have never had a virus on this
> machine. Panda has nuked several, though. No reason to be paranoid.
> charlie R.

Hi Charlie,

My answer had nothing to do with being paranoid or not, it just gave
you ideas about how to find out where the "outbound traffic" was going,
and since you didn't mention the addresses etc. I had to assume you
didn't know... in which case the procedure I outlined would have given
you a) Information on IP's and domains it was trying to connect to; and
b) the data it had exchanged (so you could examine that, to find out
whether or not this had to do with spying!) with the outside world!
Hope this clarifies the context in which my answer was posted.

Dick

[charlie R]

"Dick Hazeleger" <Dick@post_it_in_the_newsgroup.com> wrote in message
news:vk9vq4sodvnk83@corp.supernews.com...
charlie R wrote:

>
> "Dick Hazeleger" <Dick@post_it_in_the_newsgroup.com> wrote in message
> news:vk7l3lbn26j05f@corp.supernews.com...
> charlie R wrote:
>
> "Igor
> > Gutman" <gutman@videotron.ca> wrote in message
> > news:3F3FD549.BEF33677@videotron.ca... charlie R wrote:
> > >
> > > Hello again......Go to the ZoneLabs forums website, sign in and
> > > ask your question there. charlie R
> >
> > In any case, ZoneAlarm is not spyware. If True Vector Service
> > doesn't connect to the internet, how do you suppose it is going to
> > identify the intruders? True Vector Service "protects the client",
> > as I understand it, and I trust it to do so. All my ports are
> > "Stealthed", thanks to ZoneAlarm, and True Vector Service. When I
> > have a question about ZoneAlarm, I go to the ZoneLabs Community
> > forums, where experts can answer the question. When I want to know
> > more about Spyware, I come to this newsgroup. charlie R
>
> > i don't get it.. can't someone here simply tell me, whether it's
> > normal or not that ZoneAalram Pro's TrueVector Service is always
> > trying to connect to somewhere outside?
> > i just don't want to go to other forums, sign-up, and the whole crap
> > - just because of ONE SIMPLE LITTLE QUESTION that can easily be
> > answerred here! thank you very much, charlie R
>
> "Mixed posting" corrected
>
> Charly,
>
> And to what site or IP-address does ZAP try to connect? Perhaps that
> would give a clue?! Also, you might think of installing and running a
> packet sniffer and - after allowing the connection - see what "goes
> out"? Then you would know for sure whether there is comething wrong or
> not!
>
> Dick
>
> Hi....I guess I'm just not that paranoid. ZAP connects to
> fwalerts.zonelabs.com when I ask for more info. It connects to
> mynetwatchman.com for a who is lookup and incident report. On the
> really rare occasion that it checks for updates, I give it permission
> to update, and it does. There are improvements and added features
> when done. Checks for spyware, malware, and BHO's find zilch. My
> Antivirus prog is updated first thing every day. Lately, new
> signatures are added sometimes twice a day. I receive daily virus
> alerts from Panda Software.com. I have never had a virus on this
> machine. Panda has nuked several, though. No reason to be paranoid.
> charlie R.

Hi Charlie,

My answer had nothing to do with being paranoid or not, it just gave
you ideas about how to find out where the "outbound traffic" was going,
and since you didn't mention the addresses etc. I had to assume you
didn't know... in which case the procedure I outlined would have given
you a) Information on IP's and domains it was trying to connect to; and
b) the data it had exchanged (so you could examine that, to find out
whether or not this had to do with spying!) with the outside world!
Hope this clarifies the context in which my answer was posted.

Dick
Thanks for the clarification, Dick. I just checked my ZoneAlarm log, and
I've been getting ICMP Echo request pings every few seconds from different
Source IP's. This is not usual. ZA blocks them, but it makes me wonder
what's going on. The Red Alerts (high) are also more frequent. I wonder if
it's connected to the latest Microsoft Security problem that need patches.
I feel sorry for anyone who doesn't have a firewall and antivirus prog right
now. charlie R

[Dick Hazeleger]

charlie R wrote:

>
> "Dick Hazeleger" <Dick@post_it_in_the_newsgroup.com> wrote in message
> news:vk9vq4sodvnk83@corp.supernews.com...
> charlie R wrote:
>
> >
> > "Dick Hazeleger" <Dick@post_it_in_the_newsgroup.com> wrote in
> > message news:vk7l3lbn26j05f@corp.supernews.com...
> > charlie R wrote:
> >
> > "Igor
> > > Gutman" <gutman@videotron.ca> wrote in message
> > > news:3F3FD549.BEF33677@videotron.ca... charlie R wrote:
> > > >
> > > > Hello again......Go to the ZoneLabs forums website, sign in and
> > > > ask your question there. charlie R
> > >
> > > In any case, ZoneAlarm is not spyware. If True Vector Service
> > > doesn't connect to the internet, how do you suppose it is going to
> > > identify the intruders? True Vector Service "protects the
> > > client", as I understand it, and I trust it to do so. All my
> > > ports are "Stealthed", thanks to ZoneAlarm, and True Vector
> > > Service. When I have a question about ZoneAlarm, I go to the
> > > ZoneLabs Community forums, where experts can answer the question.
> > > When I want to know more about Spyware, I come to this newsgroup.
> > > charlie R
> >
> > > i don't get it.. can't someone here simply tell me, whether it's
> > > normal or not that ZoneAalram Pro's TrueVector Service is always
> > > trying to connect to somewhere outside?
> > > i just don't want to go to other forums, sign-up, and the whole
> > > crap - just because of ONE SIMPLE LITTLE QUESTION that can easily
> > > be answerred here! thank you very much, charlie R
> >
> > "Mixed posting" corrected
> >
> > Charly,
> >
> > And to what site or IP-address does ZAP try to connect? Perhaps that
> > would give a clue?! Also, you might think of installing and running
> > a packet sniffer and - after allowing the connection - see what
> > "goes out"? Then you would know for sure whether there is comething
> > wrong or not!
> >
> > Dick
> >
> > Hi....I guess I'm just not that paranoid. ZAP connects to
> > fwalerts.zonelabs.com when I ask for more info. It connects to
> > mynetwatchman.com for a who is lookup and incident report. On the
> > really rare occasion that it checks for updates, I give it
> > permission to update, and it does. There are improvements and
> > added features when done. Checks for spyware, malware, and BHO's
> > find zilch. My Antivirus prog is updated first thing every day.
> > Lately, new signatures are added sometimes twice a day. I receive
> > daily virus alerts from Panda Software.com. I have never had a
> > virus on this machine. Panda has nuked several, though. No reason
> > to be paranoid. charlie R.
>
> Hi Charlie,
>
> My answer had nothing to do with being paranoid or not, it just gave
> you ideas about how to find out where the "outbound traffic" was
> going, and since you didn't mention the addresses etc. I had to
> assume you didn't know... in which case the procedure I outlined
> would have given you a) Information on IP's and domains it was trying
> to connect to; and b) the data it had exchanged (so you could examine
> that, to find out whether or not this had to do with spying!) with
> the outside world! Hope this clarifies the context in which my
> answer was posted.
>
> Dick
> Thanks for the clarification, Dick. I just checked my ZoneAlarm log,
> and I've been getting ICMP Echo request pings every few seconds from
> different Source IP's. This is not usual. ZA blocks them, but it
> makes me wonder what's going on. The Red Alerts (high) are also more
> frequent. I wonder if it's connected to the latest Microsoft
> Security problem that need patches. I feel sorry for anyone who
> doesn't have a firewall and antivirus prog right now. charlie R

Hi Charlie R

I agree, it's those who were ignorant (or arrorgant or both) to install
AV and FW, who's systems are knocking at our FW's now... and believe me
I've seen enough ports 135-139 and 4045 for a while <grin>. ICMP's (in-
or outbound) are dropped here; I never see them (except when looking
into the log).

However those ICMP's coming in on your system now is not something
caused by the original topic of this thread!!!

Dick