RE: [PcTech] Linksys Router

[Joe Giusto <jgiusto@xxxxxxxxxxxxxx>]

I will have to look it up in the log when I get home and then post it when I
get back in tomorrow.  
It looked like incoming (from the IP address of my router [internal address,
not the IP that it gets from the cable modem]) to the IP address of the PC
with the Zone Alarm message.  That's why I was thinking that someone may
have hacked into the router.  I will double check the remote administration
though.  And I have changed the admin password from the default setting that
came with it.  I did a firmware download a few months ago but should
probably go out and check the web site again for updates.  I do a virus scan
weekly (automated) using Norton 2003, with live update so I have the latest
virus data files.

Thanks,

Joe Giusto II
Programmer/Analyst
Ritz Camera
Beltsville, MD
301-479-3347 

 -----Original Message-----
From:   David Gibbs [mailto:dgibbs@xxxxxxx] 
Sent:   Wednesday, August 27, 2003 4:48 PM
To:     'PC Technical Discussion for iSeries Users'
Subject:        RE: [PcTech] Linksys Router

> I have a Linksys router also and recently had to switch to 
> cable modem from DSL due to a recent move.  I also run the 
> Zone Alarm.  Since the switch I have been noticing the Zone 
> Alarm messages about denying some kind of TCP request (not 
> sure the exact message right now) that I did not experience 
> with the DSL line.  

The exact message is kind of key.  Is it an outgoing tcp connection or
incoming?  My guess is that it's an outgoing request.

Have you scanned for viruses?

> The question that I have is:  
> Could this be someone hacking into my router and then trying 
> to get to my PC's that are connected to it?

Doubtful, unless you've enabled remote administration of the router (bad
idea in any case).

The router should turn away any incoming connection request unless you've
setup port forwarding.

david