charlie R wrote:

>
> "Dick Hazeleger" <Dick@post_it_in_the_newsgroup.com> wrote in message
> news:vk9vq4sodvnk83@corp.supernews.com...
> charlie R wrote:
>
> >
> > "Dick Hazeleger" <Dick@post_it_in_the_newsgroup.com> wrote in
> > message news:vk7l3lbn26j05f@corp.supernews.com...
> > charlie R wrote:
> >
> > "Igor
> > > Gutman" <gutman@videotron.ca> wrote in message
> > > news:3F3FD549.BEF33677@videotron.ca... charlie R wrote:
> > > >
> > > > Hello again......Go to the ZoneLabs forums website, sign in and
> > > > ask your question there. charlie R
> > >
> > > In any case, ZoneAlarm is not spyware. If True Vector Service
> > > doesn't connect to the internet, how do you suppose it is going to
> > > identify the intruders? True Vector Service "protects the
> > > client", as I understand it, and I trust it to do so. All my
> > > ports are "Stealthed", thanks to ZoneAlarm, and True Vector
> > > Service. When I have a question about ZoneAlarm, I go to the
> > > ZoneLabs Community forums, where experts can answer the question.
> > > When I want to know more about Spyware, I come to this newsgroup.
> > > charlie R
> >
> > > i don't get it.. can't someone here simply tell me, whether it's
> > > normal or not that ZoneAalram Pro's TrueVector Service is always
> > > trying to connect to somewhere outside?
> > > i just don't want to go to other forums, sign-up, and the whole
> > > crap - just because of ONE SIMPLE LITTLE QUESTION that can easily
> > > be answerred here! thank you very much, charlie R
> >
> > "Mixed posting" corrected
> >
> > Charly,
> >
> > And to what site or IP-address does ZAP try to connect? Perhaps that
> > would give a clue?! Also, you might think of installing and running
> > a packet sniffer and - after allowing the connection - see what
> > "goes out"? Then you would know for sure whether there is comething
> > wrong or not!
> >
> > Dick
> >
> > Hi....I guess I'm just not that paranoid. ZAP connects to
> > fwalerts.zonelabs.com when I ask for more info. It connects to
> > mynetwatchman.com for a who is lookup and incident report. On the
> > really rare occasion that it checks for updates, I give it
> > permission to update, and it does. There are improvements and
> > added features when done. Checks for spyware, malware, and BHO's
> > find zilch. My Antivirus prog is updated first thing every day.
> > Lately, new signatures are added sometimes twice a day. I receive
> > daily virus alerts from Panda Software.com. I have never had a
> > virus on this machine. Panda has nuked several, though. No reason
> > to be paranoid. charlie R.
>
> Hi Charlie,
>
> My answer had nothing to do with being paranoid or not, it just gave
> you ideas about how to find out where the "outbound traffic" was
> going, and since you didn't mention the addresses etc. I had to
> assume you didn't know... in which case the procedure I outlined
> would have given you a) Information on IP's and domains it was trying
> to connect to; and b) the data it had exchanged (so you could examine
> that, to find out whether or not this had to do with spying!) with
> the outside world! Hope this clarifies the context in which my
> answer was posted.
>
> Dick
> Thanks for the clarification, Dick. I just checked my ZoneAlarm log,
> and I've been getting ICMP Echo request pings every few seconds from
> different Source IP's. This is not usual. ZA blocks them, but it
> makes me wonder what's going on. The Red Alerts (high) are also more
> frequent. I wonder if it's connected to the latest Microsoft
> Security problem that need patches. I feel sorry for anyone who
> doesn't have a firewall and antivirus prog right now. charlie R

Hi Charlie R

I agree, it's those who were ignorant (or arrorgant or both) to install
AV and FW, who's systems are knocking at our FW's now... and believe me
I've seen enough ports 135-139 and 4045 for a while <grin>. ICMP's (in-
or outbound) are dropped here; I never see them (except when looking
into the log).

However those ICMP's coming in on your system now is not something
caused by the original topic of this thread!!!

Dick