ZoneLabs 'ZoneAlarm' Firewall question

[krazo1961]

Hello,

I have a cable modem and I use ZoneAlarm as my Firewall. I recently went to Steve Gibson's web site (Gibson Research - grc.com) and used the security test program called 'Shields Up' which probes ports etc.

Everything was great except port 135 (RPC). It said this port cant be closed and said to get a fire wall program.

I just started using ZoneAlarm, how do I block this port?

Thanks for help

 

[Rockn]

Not sure what they are talking about, but port 135 is for Telnet. I would look at your cable modem and see if it can be disabled there and I would suspect that is the port they are looking at.

 

[angel]

I just started using ZoneAlarm, how do I block this port?

As long as Zone Alarm is installed, everything is blocked by default. So, unless you specifically allow something In or Out, you should be fine. Head back over to GRC and run the test again. Let us know if you still show that port open.

 

[Rockn]

If 135 is open on his router (ahead of the firewall) shutting it down in ZA won't do anything. Somone could still Telnet his router.

 

[angel]

I have a feeling he isn't using a router. And if he is, then someone would have had to go in and open that port (very possible). At least I've never seen one where it was open by default anyway. Mine specifically denies telneting to the router completely unless I have it set to forward to an internal IP.

Oh ya, and after re-reading what he said and what I said originally, I was assuming that you checked out GRC, saw that port was open, and then installed Zone Alarm. If you had Zone Alarm installed to begin with, I apologize, but I read it wrong.

 

[Rockn]

The cable modem in essence is a router. I know there are telnet capabilities out of the box on my DSL "router" and if his ISP set it up and never disabled telnet it is sitting there waiting for a logon connamd.