is this normal?

[Octavius]

Being semi-uneducated in some (ok most) parts of networking the workings of the internet... I need a little input.

I decided to download ZoneAlarm a few weeks ago and give it a shot.  I disabled it when connectivity started getting wonky.  The cable connection would seem to cut out for a few minutes in certain programs and refuse to come back (even after a restart and modem refresh).  I reconfigured all the programs I wanted to have access, but the connectivity still sucked.  I disabled ZA altogether last week and all was well.  

I decide to fire it up once more tonight and within minutes of re-configuring the program from default settings, I get a few warnings and alerts.  It seems random IP addresses are constantly bombarding my computer every few seconds.  No address has repeated itself.  

Here is the message it sends:  

"The firewall has blocked Internet access to your computer (ICMP Echo Request ('Ping')) from 65.##.###.##"

Could my computer have been used to act as a server for someone elses business (pr0n?)   Are there any programs that will allow me to monitor exactly what is being sent in and out?

Thanks in advance!

[whels]

i have been using ZA pro for about 5 months now without a problem. Con has been great n steady. dont know why it
would degrade your con.

whels

Originally posted by Octavius
Being semi-uneducated in some (ok most) parts of networking the workings of the internet... I need a little input.

I decided to download ZoneAlarm a few weeks ago and give it a shot.  I disabled it when connectivity started getting wonky.  The cable connection would seem to cut out for a few minutes in certain programs and refuse to come back (even after a restart and modem refresh).  I reconfigured all the programs I wanted to have access, but the connectivity still sucked.  I disabled ZA altogether last week and all was well.  

I decide to fire it up once more tonight and within minutes of re-configuring the program from default settings, I get a few warnings and alerts.  It seems random IP addresses are constantly bombarding my computer every few seconds.  No address has repeated itself.  

Here is the message it sends:  

"The firewall has blocked Internet access to your computer (ICMP Echo Request ('Ping')) from 65.##.###.##"

Could my computer have been used to act as a server for someone elses business (pr0n?)   Are there any programs that will allow me to monitor exactly what is being sent in and out?

Thanks in advance!

[Tarmac]

I used to lose vox a lot with ZA (regular free version) running.  Hasn't happened in about 4 months though.  I changed ISPs and reinstalled zonealarm around that time, so I don't know which may have changed things.  

Maybe something to try though.

Another question... do you have winXP's firewall running?  Never really looked into it, but could there be some sort of conflict there?

You may need to turn your security level in ZA down too.

[214thCavalier]

You can play AH with ZA set to max security level with no problems, although i should be specific and say Zone alarm Pro.

When i was using the free version after a few months i would get similar problems as you stated above.
Disabling etc never cured it, only thing i found to work was to completely uninstall ZA and when you reload it choose ignore the previous installs settings and start fresh.

[Tarmac]

Pro doesn't do that though?  

I've been thinking about upgrading, but figured Pro would have the same problems.

[capt. apathy]

do you use winmx or other file sharing software?

 when someone does a search for a file, you pop-up as having it, and then they choose you to D/L from, that their computer will check periodically to see if you have an open slot to let it start d/l'ing.  unless they do a new search and cancel your file from their list it will keep checking your conection to see if you are ready to give up the file.

this continues even after you shut down the sharing software. and if you have a static IP it would continue even after re-boot.  up until the other person decides to refresh his search and try a different source (and many of the ones who download alot of files don't go through and delete the 'dead links' very often.

I'm by no means an expert but this is how it was explained to me.

it may be completely unrelated to what you have going on, just a thought, but if you are sharing files, all those pings could be demanding a lot of attention from your firewall.

you may be able to check it by turning on your file sharing software when you are having this problem and see if it goes away (assuming you have set the firewall to allow transfers through this program, it should stop being seen as an attack if the software is running and able to recieve the request.)

there are a bunch of guys here who know more about this than me.   for those of you who do know more, am I correct on this possability, or am I missing something?

[SKurj]

Only problem I ever had with ZA, (loong time ago) was that damn tray icon.

It seemed to affect AH causing the odd stutter etc.  When i disabled ZA it was fine.  When I changed video cards the problem went away.

I can't remember now if that was my TNT or V3 that had the prob


SKurj

[Octavius]

Thanks for the input... but the connectivity isnt an issue anymore.  

The thing that concerns me is the constant pinging of my IP address.  Is THAT normal?  I have no file sharing programs running at all.

[dfl8rms]

Oct,

You may not have file sharing, but if your IP address is in DHCP (not statically assigned by your ISP) and you tend to connect/disconnect from your ISP often, then you may be getting an IP address of someone who does use the sharing programs.  And as such, may be feeling the residual effect of their broadcasting the IP address to the file sharing networks.

My ISP says I keep my DHCP lease as long as my connection is up, but since I am up 7x24 with a firewall/router I still get new IP addresses at least twice a week.  So I occasionaly have to put up with pings.

If it is consistent and you are getting the same IP address regularly, I would have your ISP check to see if they can see anything.

Good luck in tracking this down.

[Dennis]

Octavius,

Others ... like Skuzzy, perhaps ... probably have a better handle on this than I do, but yeah, I believe getting pinged a lot is quite normal.  Sometimes it's heavier than others.  Click on that "more info" button on ZA for a little background on the kind of 'pings' you're getting.

I use the free version of ZA, and have never had any trouble with it ... (although I do have that disappearing vox problem -- maybe there's a connection there ...? )  
As I understand it, the way mine is configured I am essentially "invisible" to probing evildoers out there.  ZA may be feeding me a line of crap ... but it's free.

Anyway, if you upgrade to the paid version, I think you can get a better handle on WHO is pinging your IP address, if that concerns you.

Splash1