[Dshield] contradiction

melvin smith Foxtail at emailaccount.com
Thu Feb 19 18:42:00 GMT 2004


Best regards to all;
A Zone alarm pop-up alert says that it blocked access to my computer 
from 10.0.0.2

Heres the firewall entry saying so.
FWIN,2004/02/19,13:18:52 -5:00 GMT,10.0.0.2:2375,67.74.227.227:139,TCP 
(flags:S)

But commview (by TamoSoft) shows my computer sending packets to 10.0.0.2.
Heres one of the packets I'm sending to 10.0.0.2.

IP/ICMP  44:45:53:54:00:00=>20:53:52:43:00:00      67.74.277.277=>10.0.0.2  
port N/A                                           (volatile)
delta0.000


0x0000   20 53 52 43 00 00 44 45-53 54 00 00 08 00 45 00    SRC..DEST....E.
0x0010   00 54 91 13 00 00 40 01-B8 66 43 4A E3 E3 0A 00   .T‘... at .¸fCJãã..
0x0020   00 02 08 00 DC 2C 01 00-19 00 41 42 43 44 45 46   ....Ü,....ABCDEF
0x0030   47 48 49 4A 4B 4A 4C 4D-4E 4F 50 51 52 53 54 55   GHIJKJLMNOPQRSTU
0x0040   56 57 58 59 5A 20 20 20-20 20 20 20 20 20 20 20   VWXYZ           
0x0050   20 20 20 20 20 20 20 20-20 20 20 20 20 20 20 20                   
0x0060   20 20   

Question: If Zone Alarm blocked all communication to my computer from 
10.0.0.2, then how come my computer is responding to 10.0.0.2??
Puzzled; TIA      Mel.  

_____________________________________________________________
Free, simple, fast, memorable email
Become you at EmailAccount.com at http://www.emailaccount.com/




More information about the list mailing list