My pc security/firewall and paranoia :(

[Fragmast3r]

Ok my pc is on virtualy 24/7 and connected to the net via cable modem, I've recently installed zonealarm and a traceroute program and im getting alert after alert after alert so now paranoia has set it in :(

few questions
1/ will zonealarm stop all attacks and hacks on my pc?

2/ ive heard bout trojans and viruses that leave a way in for peeps, how can i tell if some lurk on my pc?

3/ how can i track the people hacking my pc?

4/im getting attacked by the same person time after time heres a paste of the last time:-

The firewall has blocked Internet access to your computer (UDP Port 5632) from 62.30.92.139 (UDP Port 1251).

Time: 16/01/01 19:43:10


please will some1 tell me if i should be worried or should i just ignore it and let zonealarm just do its job??



cheers :)

[-[Raven]-]

Even when they're probing your PC, they can't do much unless they 'get in'. Zonealarm is fine, just switch it on and forget about it. I do.

They won't get anywhere with ZA stuck on super mode :E (all options high security).

I wouldn't worry about trojans either, as you have to tell zonealarm what programmes can connect to the net, so any trojans you'd have to enable to get through the firewall before anybody would be able to remotely use them :)

[theV0iCe]

1/Yes. Zonealarm stops all hacks. The alerts are just shwoing u the ip the attack came from. They havent actually hacked in.

2/if u have zonealarm then these trojans cannot leave connections open as all progs that access the internet need ur permission under the programs tab. U have nothing to worry about aslong as u dont give access to anything u didnt install.

3/what u can do is click the more info button. Theres some sites which tracks them [dont know name of tho].

/4 hmm...ive noticed most of the IPs are coming from BT isp..ive had 75 [!!!!!!!!!!!] alerts over 2 hours ! Im building up logs [in the ZA options to log hack attemtps] and then im gonna send em to abuse@btinternet.com

[Reality]

I use a combination of Blackice and Zonealarm, with a virus checker and my PC is on 24/7.

I'm happy with that level of protection but Zonealarm and a virus checker together is just fine. If your not sure what a program is when zonealarm ask you if you want to allow it access to the net, deny it access and find out what that program is and why it wants access to the net..

As for tracing people use a program like neotrace or tracert (in dos) to find out where they are comming from. Have a look round the isp's website for an abuse or support email address and send them the relevant part of the log.

Port scanning is usually in breach of the ISP's Acceptable use Policy and they will normally investigate complaints.

I don't usually do anything unless its obvoius that the muppet port scanning is trying over and over again, then the ISP gets an email, the scans tend to stop soon after that :)

Reality

[Edited by Reality on 17-01-2001 at 06:48 PM]

[Shrubbery]

Be aware also that in my experience ZoneAlarm does tend to generate a lot of false alarms, usually connected with ICQ activity, so be a bit careful before accusing somebody whose IP pops up in your alert list of somehing dodgy!

[Uranium]

Make sure you update your anti virus regularly ;)

You can trace IP's with many programs but the best are Visual Route and Neotrace. You can get them both here:

http://www.neotrace.com
http://www.visualroute.com

[Fragmast3r]

cheers everyone u've all been a great help............... :)