Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion GroupsWindows VistaWindows XPWindows MeWindows 98Windows 95Virtual PCInternet ExplorerOutlook ExpressWindows MediaSecurity
Related Topics
MS Server ProductsMS OfficePC HardwareMore Topics ...

Windows Forum / Windows XP / Networking and Web / May 2006

Tip: Looking for answers? Try searching our database.

Home Network - ZoneAlarm Pro won't allow "Mummy" to connect to Internet thru "Daddy"

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
paulo@hiswitsend.com - 31 May 2006 05:45 GMT
Could anyone help me with this please?

Daddy:
WinXP Pro
ZoneAlarm Pro
Wireless connection to Internet
Network Card to connect to "Mummy" (the wife's) PC

Mummy:
WinMe
ZoneAlarm Free
Network Card to connect to "Daddy"

"Mummy" accesses the Internet thru "Daddy" just fine until Zonealarm
Pro is started in "Daddy" - then "Mummy" just keeps waiting for
response or gives "page not found"

ZoneAlarm Pro in "Daddy" shows 2 "zones":

1. name=Wireless, IP=10.10.0.0/255.255.255.0,
Entry Type=network, Zone=Internet

2. name=LAN, IP=192.168.0.0/255.255.255.0,
Entry Type=network, Zone=Trusted

In Daddy's ZoneAlarm Pro:
Internet Zone Security is set HIGH
Trusted Zone Security is set LOW

In Daddy the local connection is defined as:
TCP/IP Protocol :
IP/SM = 192.168.0.1/255.255.255.0

In Mummy the LAN connection is defined as:
TCP/IP Protocol --> Ethernet Adapter :
IP/SM = 192.168.0.2/255.255.255.0

So why does ZoneAlarm say 192.168.0.0 (that's "zero, zero" on the
end)?

As I said, it all works fine WITHOUT ZoneAlarm Pro activated in Daddy.

When ZoneAlarm is activated in Daddy then Mummy can't even surf.

Attempts in Mummy to surf to the "Google" site give an "Alert" in
ZoneAlarm in Daddy with the following characteristics:

Type = Firewall Alert
Protocol = TCP/IP (flags:S)
Source IP = 10.10.0.35:61423
(10.10.0.35 is the IP address used by Daddy for the WAN connection -
although Zonealarm states it in the "Zone" section as 10.10.0.0)
Destination IP = 64.233.161.147:80 (=Google)
Direction = Outgoing
Action Taken = Blocked

The Windows XP Firewall is disactivated in Daddy.

Does anyone have any ideas?
Keep it simple - I'm not very clever :(
And, english is not my native language :-(
Also, if this is the wrong group to ask this then I would appreciate
being pointed at the right one.

TIA for any help. I'm at a loss here :-(

... and "Mummy" (the wife) gets upset if "Daddy" (I) puts the
ZoneAlarm Firewall up :-(

--
Paulo, Rio, Brasil, aka "Daddy"
Steve Winograd [MVP] - 31 May 2006 06:42 GMT
>Could anyone help me with this please?
>
[quoted text clipped - 64 lines]
>... and "Mummy" (the wife) gets upset if "Daddy" (I) puts the
>ZoneAlarm Firewall up :-(

This Zone Labs web page should help:

http://www.nohold.net/noHoldCust25/Prod_1/Articles55646/ICS-NAT.html
Signature

Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see.  I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com

paulo@hiswitsend.com - 31 May 2006 06:57 GMT
>This Zone Labs web page should help:
>
>http://www.nohold.net/noHoldCust25/Prod_1/Articles55646/ICS-NAT.html

Thanks Steve.

After a "quick" look at the reference that you gave, I tried an
experiment:

I reduced the Internet Zone Security to MEDUIM and the other PC
managed to surf, etc.

Now I have to figure out what exceptions, permissions or whatever I
have to register for the local network in order to be able to yank the
Internet Zone Security back up to HIGH still leaving Mummy "happy"

Back to reading the ZoneAlarm page...

... now where did I put the dictionary?...

Cheers
--
Paulo
paulo@hiswitsend.com - 31 May 2006 08:03 GMT
>>This Zone Labs web page should help:
>>
>>http://www.nohold.net/noHoldCust25/Prod_1/Articles55646/ICS-NAT.html

Yep! It was easy! Even for an idiot like myself!

In case anyone needs to know in the future:

ZoneAlarm Pro:

Click on "Firewall"
Click on the "Main" tab
Click the "Advanced" button at the bottom of the page
Click the "This computer is an ICS/NAT Gateway" radio button
It should show the local IP address in the box beneath the words
Click "OK"

"Internet Zone" can be maintained at HIGH :-))

Done!

Once again, many thanks Steve

--
Paulo
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.