Zonealrm: Need to identify the source of outgoing request
Available news archives: comp.lang.tcl - comp.lang.python - comp.security.firewalls - sci.crypt - comp.lang.php - comp.lang.javascript
Google
 
Web news.hping.org


comp.security.firewalls archive

Zonealrm: Need to identify the source of outgoing request

From: <cpurvis3@csc.com>
Date: Fri Mar 24 2006 - 05:54:01 CET

I'm running ZoneAlarm free version.

Every night (it seems) I have a few ip's that ZoneAlarm is successfully
blocking going out from my pc to port 80 of the following ip's (the
names I got from ip lookups):

63.211.66.76 Level 3 Communications, Inc
146.82.218.144 Global Crossing
69.31.88.54 nLayer Communications, Inc

It appears these hosts are all running AkamaiGHost.

The logs don't indicate which process or program is originating the
request - the log's Program column is always empty.

How can I determine where/what application originated these request?
Should I allow them through?

The fact that I can't see which program/process may be associated with
the outgoing attempts - could this be because I'm using the free
version (not the pro version)?
...thanks for your help!
P.S - I have anti virus sw (from Zonealarm) - there's no indication
it's some kind of a virus.
Received on Mon May 1 01:01:42 2006