Zonealarm while connecting to my machine

[Xmen]

Hello,
I wanted your opinion on connection attempts to my machine by zonealarm. Indeed zonealarm blocked me about 5-6 attempts "intrusion" per minute on my machine. My PC is also in that allows Windows XP. But then all connection attempts from PCs to start with IP 82.233.xxx.xxx So are all freebox (DNS: *. fbx.proxad.net). I wanted to know if they were taking software's which can alert me when I am regularly on internet? Can you provide some information on this.

[Milton.J]

Hello,
First we need to know on what port (s) are such attempts. In fact most alarms come from the "background noise" of the Internet and have no special meaning. In my case, I just saw my log 23 "attempts" in 30 minutes, most intrusion attempts on port 139 (NetBIOS). So, basically you have to know the ports first.

[Xmen]

Hello,
Yes, for real attacks, I know the ports, but port C is very rarely used here are a few which I have found:

1455
3142
2538
2392
2134
2701
3919
3529
1991
4818
3098
3167
2407
3240

These are scanned ports for 4 Last Minutes

[Zachary]

Hi
I do not understand why do you require a zone alarm. The Freebox router mode based on iptables (Linux kernel) is an excellent firewall. I would like to ask you some more question. After you choose a open ports are you secure? I think your ideas is wrong. The iptables have has many more options, you can try one of those.

[Shen]

Hello,
Interesting discussion! It's been a while since I posed the question of the frequency of these intrusion attempts. What I find "weird" is that the frequency of attempts is very variable, sometimes it does not stop, and sometimes it's pretty quiet. As I am a bit manic side noise (disk) when it "tape too, I disconnect and reconnect immediately. Most often, it is quiet (but sometimes you have to do step 2 or 3 times). What to think? Is the alleged "attack" depends on the IP address (which changes with each connection as I understand)?

[Steve123]

Hi
Here is what I found by searching a little. Furthermore it is possible that the router does not protect against trojans because they filter the fall and not what comes out. But linking the two, as stated in my link, is most effective. Hope this will help you. If you have any more queries then do post back.