Re: Cant view https with zone alarm on
Available news archives: comp.lang.tcl - comp.lang.python - comp.security.firewalls - sci.crypt - comp.lang.php - comp.lang.javascript
Google
 
Web news.hping.org


comp.security.firewalls archive

Re: Cant view https with zone alarm on

From: Duane Arnold <notme@notme.com>
Date: Mon Sep 05 2005 - 15:05:46 CEST

cc900630@ntu.ac.uk wrote in news:1125912000.294196.192170
@o13g2000cwo.googlegroups.com:

> After updating ZA , Any https site wont connect - DNS/Server not found.
>
> Have tried adding to trusted sites, changing privacy settings ,
> lowering security settings , repairing winsock, - nothing works but
> turning ZA off when connecting to https sites.

The fact that you turned it off is a NO NO and it doesn't take much to
compromise a machine exposed to the Internet like that with a machine that
has a direct connection to the Internet, especially with the MS NT based
O/S that presents vulnerable services that are not protected.

> When ZA is turned off it
> works fine and once connected I can turn ZA back on and continue using
> the SSL site. But then if I open a new broswer on a secure site with ZA
> on it fails. Wierd.

That's the risk you take with any 3rd party solution like ZA that needs the
O/S to function.

Maybe, you should consider putting the machine behind the protection of a
cheap $20 NAT router that won't interfere like that. You can then drop ZA
at will and the machine will not be compromised because nothing is there to
protect it.

Duane :)
Received on Thu Sep 29 20:06:24 2005