ZoneAlarm along with LinkSyS
LinkSys using port forwarding: 80, 53, 25, 110
Services: HTTP, DNS, POP, SMTP
In ZoneAlarm, I set my firewall to HIGH.
and Custum these values:
ALLOW INCOMING TCP: 80, 53, 25, 110
ALLOW INCOMING UDP:53
ALLOW OUTGOING DNS (53) (checked)
Am I doing this right? Do I need other settings?
Do I have to let outgoing TCP for port 80? What does this do?
FWOUT,2002/10/05,09:28:14 -4:00 GMT,192.168.1.2:80,65.94.68.140:1625,TCP (flags:R)
FWOUT,2002/10/05,09:45:44 -4:00 GMT,192.168.1.2:80,68.35.250.188:1337,TCP (flags:R)
FWOUT,2002/10/05,10:11:14 -4:00 GMT,192.168.1.2:80,66.185.84.69:17797,TCP (flags:R)
I notice my out bound traffic are blocked.
LAST
FWOUT,2002/10/05,07:16:02 -4:00 GMT,192.168.1.2:137,209.82.54.202:137,UDP
FWOUT,2002/10/05,07:25:42 -4:00 GMT,192.168.1.2:137,202.163.254.82:137,UDP
FWOUT,2002/10/05,07:55:46 -4:00 GMT,192.168.1.2:137,208.50.58.11:137,UDP
FWOUT,2002/10/05,08:33:00 -4:00 GMT,192.168.1.2:137,66.150.40.71:137,UDP
FWOUT,2002/10/05,08:35:56 -4:00 GMT,192.168.1.2:137,203.87.132.56:137,UDP
Why there is so much activity on port 137 in terms of IN and OUT. I believe that port is stealthed and not forwarded.
Thanks.
