Another tech question (not blasterworm related)

[AnnabelLee]

I just installed a ZoneAlarm firewall two day ago & am having fun watching it deny access to all kinds of different ports.:D I just got an alert saying that it had denied an "ICMP (ping) Request". I've heard of "ping" before, but, technodoofus that I am, thought this was something that was done in order to trace the source of some sort of attack. Can anyone explain why I'd be recieving a ping request?

[sangha]

1. Ping

is basically a way for one computer to ask "Are you there?" It's often one of the first steps in an attack.

[AnnabelLee]

2. OK, thanks

I've been getting almost non-stop alerts about the 135 port, which is the blasterworm port (for now, at least), but this ping request is the first I've seen.

[Tandalayo_Scheisskopf]

3. IIRC...

139 is the ultra-vulnerable and oft-attacked "Windows Sharing" port, left open by default and a favorrite of trojans, script kiddies and M$'s "Special Marketing Partners". Anyone who values the secureity integrity of his machine would do well to disable this port to the internet. It is the high-tech version of bending over and spreading your cheeks.

[noiretextatique]

4. T_S: how does one disable this port?

i have windows 2000 and zone alarm. thanks!

[Tandalayo_Scheisskopf]

5. ZA SHOULD...

Firewall this port to the internet. ZA is a rules-based firewall. Check the docs and the rules section to make sure that this port is blocked, without qualification.

Do not, and I repeat, DO NOT rely on the integral Windows firewall. It is, to be kind, a PoS. If you are on broad/baseband, get a hardware firewall, either one of those nifty little router/NAT boxes, or build your own from an old 486, two ISA NICs and this(http://www.freesco.org). It also works for dialup. For real peace of mind, also run a firewall on the computer, although some would call that overkill.

[noiretextatique]

6. sounds like a new dsl modem/router is in order

thanks for the information.

[Tandalayo_Scheisskopf]

7. Good choice is...

The NetGear ProSafe 5 in 1. Excellent stuff and has a printserver on it. They make a wireless version as well, which is entirely too cool if you own a laptop. A little more expensive, but well worth it, for the peace of mind.

[dweller]

8. hey thanks for this info

just downloaded and installed ZA, and am getting immed. messages about port135.
already 8 in the last 5 minutes when i logged back on.
jeez. I'm using win98 that i thought was secure against blaster worm. better update my NAV also.

dp