www.donhoover.net Home Page ZoneAlarm Help ZoneAlarm Help Home How to Add to a Zone What to Place in the Trusted Zone How to Setup ICS in ZoneAlarm Interpreting zalog.txt Using the Privacy Settings Performing a Clean Uninstall/Reinstall IPCONFIG & DNS & DHCP address's A Glossary Expert Rules How they work Adding Expert Rules The How and Why Examples Links to various useful sites

ACCESS an application was blocked because it did not have access permission access permission Access permission allows a program on your computer to initiate communications with another computer. This is distinct from server permission, which allows a program to "listen" for connection requests from other computers. You can give a program access permission for the Trusted Zone, the Internet Zone, or both. act as a server A program acts as a server when it "listens" for connection requests from other computers. Several common types of applications, such as chat programs, e-mail clients, and Internet Call Waiting programs, may need to act as servers to operate properly. However, some hacker programs act as servers to listen for instructions from their creators. Zone Labs security software prevents programs on your computer from acting as servers unless you grant server permission. Advanced Program control Advanced Program Control is an advanced security feature that tightens your security by preventing unknown programs from using trusted programs to access the Internet. AlertAdvisor Zone Labs AlertAdvisor is an online utility that enables you to instantly analyze the possible causes of an alert, and helps you decide whether to respond Allow or Deny to a Program alert. To use AlertAdvisor, click the More Info button in an alert pop-up. Zone Labs security software sends information about your alert to AlertAdvisor. AlertAdvisor returns an article that explains the alert and gives you advice on what, if anything, you need to do to ensure your security. Blocked Zone The Blocked Zone contains computers you want no contact with. Zone Labs security software prevents any communication between your computer and the machines in this Zone. clear text Clear text, also referred to as "plain text," is data that is being transmitted in textual form and is not encrypted. Because the data is not encrypted, it could be intercepted and read by others during transmission. Command Prompt DES Short for Data Encryption Standard, a popular symmetric-key encryption method using a 56-bit key. DHCP (Dynamic Host Configuration Protocol) A protocol used to support dynamic IP addressing. Rather than giving you a static IP address, your ISP may assign a different IP address to you each time you log on. This allows the provider to serve a large number of customers with a relatively small number of IP addresses. DHCP (Dynamic Host Configuration Protocol) Broadcast/Multicast A type of message used by a client computer on a network that uses dynamic IP addressing. When the computer comes online, if it needs an IP address, it issues a broadcast message to any DHCP servers which are on the network. When a DHCP server receives the broadcast, it assigns an IP address to the computer. DNS (Domain Name Server) A data query service generally used on the Internet for translating host names or domain names (like www.yoursite.com) into Internet addresses (like 123.456.789.0). hash A hash is a number generated by a formula from a string of text in such a way that it is unlikely that some other text would produce the same value. Hashes are used to ensure that transmitted messages have not been tampered with. FWIN indicates that the firewall blocked an inbound packet of data coming to your computer. Some, but not all, of these packets are connection attempts FWLOOP the firewall blocked a packet addressed to the loopback adapter (127.0.0.1) FWOUT indicates that the firewall blocked an outbound packet of data from leaving your computer. FWROUTE the firewall blocked a packet that was not addressed to or from your computer, but was routed through it. ICS (Internet Connection Sharing) ICS is a service provided by the Windows operating system that enables networked computers to share a single connection to the Internet. ICMP (Internet Control Message Protocol) An extension to the Internet Protocol (IP)that allows for the generation of error messages, test packets, and informational messages related to IP IGMP (Internet Group Management Protocol) An extension to the Internet Protocol, used by IP hosts to report their host group memberships to immediately-neighbouring multicast routers. Internet Zone The Internet Zone contains all the computers in the world-except those you have added to the Trusted Zone or Blocked Zone.Zone Labs security software applies the strictest security to the Internet Zone, keeping you safe from hackers. Meanwhile, the medium security settings of the Trusted Zone enable you to communicate easily with the computers or networks you know and trust-for example, your home network PCs, or your business network. IP address The number that identifies your computer on the Internet, as a telephone number identifies your phone on a telephone network. It is a numeric address, usually displayed as four numbers between 0 and 255, separated by periods. For example, 172.16.100.100 could be an IP address.Your IP address may always be the same. However, your Internet Service Provider (ISPs) may use Dynamic Host Configuration Protocol (DHCP) to assign your computer a different IP address each time you connect to the Internet. LOCK the firewall blocked a packet due to a lock violation MD5 Signature A digital "fingerprint" used to verify the integrity of a file. If a file has been changed in any way (for example, if a program has been compromised by a hacker), its MD5 signature will change as well. Mobile Code Executable content that can be embedded in Web pages or HTML e-mail. Mobile code helps make Web sites interactive, but malicious mobile code can be used to modify or steal data, and for other malevolent purposes. MS MailSafe quarantined a file attachment NetBIOS (Network Basic Input/Output System) A program that allows applications on different computers to communicate within a local network. By default, Zone Labs security software allows NetBIOS traffic in the Trusted Zone, but blocks it in the Internet Zone. This enables file sharing on local networks, while protecting you from NetBIOS vulnerabilities on the Internet. NIC Network Interface Card Is the card that you plug the Cat5 (Ethernet) cable into to network two or more computers together. packet A single unit of network traffic. On "packet-switched" networks like the Internet, outgoing messages are divided into small units, sent and routed to their destinations, then reassembled on the other end. Each packet includes the IP address of the sender, and the destination IP address and port number. PE indicates that a popup appeared asking for permission for a program to access the network. ping A type of ICMP message (formally "ICMP echo") used to determine whether a specific computer is connected to the Internet. A small utility program sends a simple "echo request" message to the destination IP address, and then waits for a response. If a computer at that address receives the message, it sends an "echo" back. Some Internet providers regularly "ping" their customers to see if they are still connected. port A channel in or out of your computer. Some ports are associated with standard network protocols; for example, HTTP (Hypertext Transfer Protocol) is traditionally addressed to port 80. Port numbers range from 1 to 65535. server permission Server permission allows a program on your computer to "listen" for connection requests from other computers, in effect giving those computers the power to initiate communications with yours. This is distinct from access permission, which allows a program to initiate a communications session with another computer.Several common types of applications, such as chat programs, e-mail clients, and Internet Call Waiting programs, may need server permission to operate properly. Grant server permission only to programs you're sure you trust, and that require it in order to work.If possible, avoid granting a program server permission for the Internet Zone. If you need to accept incoming connections from only a small number of machines, add those machines to the Trusted Zone, and then allow the program server permission for the Trusted Zone only. SHA1 An algorithm used for creating a hash of data. subnet A subdivision of an IP network. Each subnet has its own unique subnetted network ID. TCP (Transmission Control Protocol) One of the main protocols in TCP/IP networks, which guarantees delivery of data, and that packets are delivered in the same order in which they were sent. TCP/IP Transmission Control Protocol/Internet Protocol A set of networking protocols widely used on the Internet that provides communications across interconnected networks of computers with diverse hardware architectures and various operating systems. TCP/IP includes standards for how computers communicate and conventions for connecting networks and routing traffic. Trusted Zone The Trusted Zone contains computers you trust and want to share resources with.For example, if you have three home PCs that are linked together in an Ethernet network, you can put each individual computer or the entire network adapter subnet in the Zone Labs security software Trusted Zone. The Trusted Zone's default medium security settings enable you to safely share files, printers, and other resources over the home network. Hackers are confined to the Internet Zone, where high security settings keep you safe. UDP (User Datagram Protocol) A connection-less protocol that runs on top of IP networks and is used primarily for broadcasting messages over a network. WAP Wireless Access Point WEP Wireless Encryption Protocol