Zone Alarm with today's windows update is blocking 
all internet access.  What program (something 
new?) to I have to grant access to to restore it?

XP Home SP2.
-- 
rhhardin@mindspring.com

On the internet, nobody knows you're a jerk.

Ron,
    Is it possible you have XP to automatically install MS updates, and it 
installed, today, KB981748? If it did it is likely you cannot access the 
Web. Look for it in your IE updates of "Add or Remove Programs" and 
uninstall that update, reboot, & I suspect it will get you back on the Web. 
I have asked about the problem in the windowsupdate group. I also use 
ZoneAlarm. That should not be the problem; ZA would generally ask permission 
for a file or process.
John


"Ron Hardin"  wrote in message 
news:4873C02D.24E6@mindspring.com...
> Zone Alarm with today's windows update is blocking
> all internet access.  What program (something
> new?) to I have to grant access to to restore it?
>
> XP Home SP2.
> -- 
> rhhardin@mindspring.com
>
> On the internet, nobody knows you're a jerk.

Zone Alarm knows about this issue and are investigating.

http://forum.zonelabs.org/zonelabs/board/message?board.id=cfg&thread.id=52785

Either uninstall 951748 or set Internet Zone security to Medium in ZA's 
Firewall/main tab

"Ron Hardin"  wrote in message 
news:4873C02D.24E6@mindspring.com...
> Zone Alarm with today's windows update is blocking
> all internet access.  What program (something
> new?) to I have to grant access to to restore it?
>
> XP Home SP2.
> -- 
> rhhardin@mindspring.com
>
> On the internet, nobody knows you're a jerk.

This problem got me too.

I tried upgrading Zone Alarm (free) form 7.0.470.00 to 7.0.473.00, but that 
did not help.

Using the add/remove programs function of XP, I removed KB951978 and 
KB951748, in that order, then normal internet access was possible.

Glad I had a full backup image of C: (via True Acronis Image), since if the 
add/remove option failed to fix things, then restoring that image would have 
been my next step.

"Ron Hardin"  wrote in message 
news:4873C02D.24E6@mindspring.com...
> Zone Alarm with today's windows update is blocking
> all internet access.  What program (something
> new?) to I have to grant access to to restore it?
>
> XP Home SP2.
> -- 
> rhhardin@mindspring.com
>
> On the internet, nobody knows you're a jerk.

"IT Lite"  wrote in message 
news:ecVn7cT4IHA.4856@TK2MSFTNGP02.phx.gbl...
> Ron,
>    Is it possible you have XP to automatically install MS updates, and it 
> installed, today, KB981748? If it did it is likely you cannot access the 
> Web. Look for it in your IE updates of "Add or Remove Programs" and 
> uninstall that update, reboot, & I suspect it will get you back on the 
> Web. I have asked about the problem in the windowsupdate group. I also use 
> ZoneAlarm. That should not be the problem; ZA would generally ask 
> permission for a file or process.
> John


Yes that's  it ZA normally asks.
It looks like it is a 100 microsofts fault as one would expect from those 
amateurs.

>
>
> "Ron Hardin"  wrote in message 
> news:4873C02D.24E6@mindspring.com...
>> Zone Alarm with today's windows update is blocking
>> all internet access.  What program (something
>> new?) to I have to grant access to to restore it?
>>
>> XP Home SP2.
>> -- 
>> rhhardin@mindspring.com
>>
>> On the internet, nobody knows you're a jerk.
>
>

I have just (8 July) done a Windows update and hey presto Zone Alarm
won't allow any access to the internet unless I reduce the Internet Zone
security setting from High to Medium. No warnings or info it just
behaves as if its diconnected. 

Did a system restore to remove the update and everything works OK
again. Looks like a cock up in the Windows update. SDoes anybody have
any more information on what the problem is ?


-- 
gdevoy
------------------------------------------------------------------------
gdevoy's Profile: http://forums.techarena.in/member.php?u=52779
View this thread: http://forums.techarena.in/showthread.php?t=998075

http://forums.techarena.in

gdevoy wrote:
> Did a system restore to remove the update and everything works OK
> again. Looks like a cock up in the Windows update. SDoes anybody have
> any more information on what the problem is ?

Best explanation I've seen is MS increased the randomness in choosing
a port to query the DNS server on, so that a bad guy can't plant a false
entry in some cache and wait for you to be redirected to his site by
the answer.  (Some gaps in what the mechanism is here, in my knowledge.)

The increased range of ports is incompatible with ZA's assumptions
about what ports should happen, and so they block it.

I assume if you use actual ip addresses there's no problem, from the
description.
-- 
rhhardin@mindspring.com

On the internet, nobody knows you're a jerk.

Cloned reply (I'm posting this on multiple boards)

---


The problem is with Zone Alarm. They are aware of the issue, and are
working on it:

http://forum.zonelabs.org/zonelabs/board/message?board.id=cfg&thread.id=52785

For ZA Free, there are two possible fixes: uninstall KB951748, or reset
your internet 

security level to Medium in ZA. Neither is ideal. Uninstalling the
update is 

preferable, but only just.

For those using ZA Pro, here's a suggested solution. IDK if it works,
since I'm running 

ZA Free, but it's worth a try:

http://www.dslreports.com/forum/r20762892-

For the rest of us, you can always try Comodo Firewall instead:

http://www.personalfirewall.comodo.com/download_firewall.html

Comodo is not tweaking over the expanded range of ports this update
appears to 

implement.

For those folks suggesting you drop ZA and all other 3rd-party
firewalls and rely on 

the Windows firewall, I suggest *you* go right ahead. Then call me to
fix your computer 

when you get overrun by malware. Be sure to tell me how proud you are
to have ditched 

those evil 3rd-party firewalls for the Windows Crayola version, so I
can charge you 

extra for stupidity.


-- 
xanifred
------------------------------------------------------------------------
xanifred's Profile: http://forums.techarena.in/member.php?u=52792
View this thread: http://forums.techarena.in/showthread.php?t=998075

http://forums.techarena.in

I removed KB951748 to find that it fixed Internet access.
But it got automatically reinstalled because it is downloaded.
I removed it again - how do I stop this automatic reinstall?
Thanks.

On Wed, 09 Jul 2008 07:28:07 -0400, Ron Hardin
 wrote:

>gdevoy wrote:
>> Did a system restore to remove the update and everything works OK
>> again. Looks like a cock up in the Windows update. SDoes anybody have
>> any more information on what the problem is ?
>
>Best explanation I've seen is MS increased the randomness in choosing
>a port to query the DNS server on, so that a bad guy can't plant a false
>entry in some cache and wait for you to be redirected to his site by
>the answer.  (Some gaps in what the mechanism is here, in my knowledge.)
>
>The increased range of ports is incompatible with ZA's assumptions
>about what ports should happen, and so they block it.
>
>I assume if you use actual ip addresses there's no problem, from the
>description.

In article , rhhardin@mindspring.com says...
>
>
>Zone Alarm with today's windows update is blocking 
>all internet access.  What program (something 
>new?) to I have to grant access to to restore it?
>
>XP Home SP2.
>
The official temp workarounds from ZA are here:

http://download.zonealarm.com/bin/free/pressReleases/2008/LossOfInternetAccessIssue.html

whosbest54
-- 
The flamewars are over...if you want it.
 
Unofficial rec.audio.opinion Usenet Group Brief User Guide:
http://www.geocities.com/whosbest54/
 
Unofficial rec.music.beatles Usenet Group Brief User Guide:
http://www.geocities.com/whosbest54/rmb.html

whosbest54 wrote:
> 
> In article , rhhardin@mindspring.com says...
> >
> >
> >Zone Alarm with today's windows update is blocking
> >all internet access.  What program (something
> >new?) to I have to grant access to to restore it?
> >
> >XP Home SP2.
> >
> The official temp workarounds from ZA are here:
> 
> http://download.zonealarm.com/bin/free/pressReleases/2008/LossOfInternetAccessIssue.html

Option 2 (adding DNS servers from ipconfig /all to the trusted zone) won't work.
I run that way already and had the access loss from the update, in any case.

Something about my DSL service seemed to require it.
-- 
rhhardin@mindspring.com

On the internet, nobody knows you're a jerk.

Ron Hardin;3849394 Wrote: 
> whosbest54 wrote:[color=blue]
> >
> 
> Option 2 (adding DNS servers from ipconfig /all to the trusted zone)
> won't work.
> I run that way already and had the access loss from the update, in any
> case.
> 
> 

You're absolutely right, I considered this before I uninstalled the
Windows update and checked the message boards. The problem is with the
Internet Zone, not the Trusted Zone. My router is in the truted zone and
i stilldont get any internet access.

The problem, as I understand it is a conflict between the how the
Windows Update  has modified the networking files in order to prevent
hackers redirecting DNS requests and the way Zone Alarm uses the files.

Still waiting for any official comment from Zone Alarm or Microsoft.
(probably be a cold day in Hell before Bill Gates admits hes screwed
up).

Best advice seems to be "uninstall MS securit update KB951748" or set
the Internet Zone security to "medium" if your behind a router firewall,
then wait for a propper fix. it might be a long wait.

I have also seen some mention of resetting the Zone Alarm log file but
this sounds like brain surgery for the hard of understanding to me so I
decided to leave that to the gurus.


-- 
gdevoy
------------------------------------------------------------------------
gdevoy's Profile: http://forums.techarena.in/member.php?u=52779
View this thread: http://forums.techarena.in/showthread.php?t=998075

http://forums.techarena.in

New release of all ZA products now available. They fix the problem:

http://download.zonealarm.com/bin/free/pressReleases/2008/LossOfInternetAccessIssue.html
"gdevoy"  wrote in message 
news:gdevoy.3cbpjd@DoNotSpam.com...
>
> Ron Hardin;3849394 Wrote:
>> whosbest54 wrote:[color=blue]
>> >
>>
>> Option 2 (adding DNS servers from ipconfig /all to the trusted zone)
>> won't work.
>> I run that way already and had the access loss from the update, in any
>> case.
>>
>>
>
> You're absolutely right, I considered this before I uninstalled the
> Windows update and checked the message boards. The problem is with the
> Internet Zone, not the Trusted Zone. My router is in the truted zone and
> i stilldont get any internet access.
>
> The problem, as I understand it is a conflict between the how the
> Windows Update  has modified the networking files in order to prevent
> hackers redirecting DNS requests and the way Zone Alarm uses the files.
>
> Still waiting for any official comment from Zone Alarm or Microsoft.
> (probably be a cold day in Hell before Bill Gates admits hes screwed
> up).
>
> Best advice seems to be "uninstall MS securit update KB951748" or set
> the Internet Zone security to "medium" if your behind a router firewall,
> then wait for a propper fix. it might be a long wait.
>
> I have also seen some mention of resetting the Zone Alarm log file but
> this sounds like brain surgery for the hard of understanding to me so I
> decided to leave that to the gurus.
>
>
> -- 
> gdevoy
> ------------------------------------------------------------------------
> gdevoy's Profile: http://forums.techarena.in/member.php?u=52779
> View this thread: http://forums.techarena.in/showthread.php?t=998075
>
> http://forums.techarena.in
>

Thanks for your link.

Now installed supper upgraded Zone Alarm and all seems well


-- 
gdevoy
------------------------------------------------------------------------
gdevoy's Profile: http://forums.techarena.in/member.php?u=52779
View this thread: http://forums.techarena.in/showthread.php?t=998075

http://forums.techarena.in