Hello: I have recently started using ZoneAlarm and the Opera browser started having problems. For example: -- In Yahoo mail, certain buttons won't function. -- Once in a while, I cannot get back to the inbox. In the workarounds these problems? What do I change in the ZoneAlarm settings? Thanks, Deguza (Post your replies here. Hotmail may block your e-mails.)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 You could try disabling ZA's cookie control and privacy settings for yahoo, or just all together. On the other hand, you might just want to get rid of Zone Alarm as it casues so many problems with so many programs. I would suggest Sygate. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (MingW32) - WinPT 0.7.96rc1 iD8DBQFBCwY4MA6GdHjsAuARAg2AAJ0SsjBqsZfIhZEAamliH2N8zkpYjACfWWnN KnikF2sSM+ZzslLfy2TWhrY= =zf3h -----END PGP SIGNATURE-----
What is the version number of ZoneAlarm being used? I have ZoneAlarm version4.5.594.000 that works flawlessly with Opera version 7.53 currently on WindowsXP Home.
To be honest, I'm using Zonealarm 5.1.0 (latest version), and have been using various versions for a good few years now, and I haven't had any problems at all regarding Opera. Are you sure you've given it full access to the net? Ant
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 No, I am referring to v5.x, all the reviews I've read are overwhelmingly negative, as well as seeing in the Opera forums numerous threads where removing ZA5.x fixed all the seemingly random Opera problems. Now, you can argue who is at fault, but as far as I can tell, running a 7.x Opera browser with 5.x ZA is just asking for all sorts of trouble. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (MingW32) - WinPT 0.7.96rc1 iD8DBQFBC4gZMA6GdHjsAuARAsiAAJ4hqeDuxOj3kcFYpcTzLFwpxRPJhQCgqTQr Vq4G78ghoDSQKXCebQhRNMo= =FMdB -----END PGP SIGNATURE-----
I have recently started using ZoneAlarm and the Opera browser Versions 5.0s have severe problems. Use 4.5 or use 5.1 (that came out a few days ago). Thanks. ---raj
You might want to try Sygate firewall. I have been using Opera and Sygate together back through many earlier versions of each. Not one problem have I had. http://soho.sygate.com/free/default.php Casey
Or for that matter Kerio. I've been trying the latest Kerio 4.1 betas and Kerio now has stateful inspection for all protocols and in the next beta they're finally adding good logging. There are still bugs, but it's shaping up nicely. So far, no problems here... Sygate is very good, I actually purchased the Pro version myself, but the main advantage ZA has over it is the stateful inspection. But to get that, you also have to put up with the bloat of unwanted "features" as well.
Sygate has Stateful Packet Inspection (SPI). Quoted from Sygate FAQ: Q-- Does Sygate Personal Firewall do Stateful Packet Inspection? A-- Yes, Sygate® Personal Firewall does Stateful Packet Inspection on every Remote TCP connection. Sygate® Personal Firewall also uses an algorithm to check Remote UDP and DHCP traffic to make sure that the communication is secure. Unquote http://forums.sygate.com/vb/showthread.php?s=7e70845e3330c7f26ab2a2c7fd0245c0&threadid=52
That's news to me! Interesting.. Although I notice that it says SPI on TCP connections only. But that's good then..
I'm certainly no "knowledge whiz" when it comes to protocols but I believe it would destroy the usefulness of UDP and ICMP if you tried to SPI them <G>. Casey
I know next to nothing about the subject, but I believe Kerio SPI's UDP and ICMP now, and I'm pretty sure ZA does too. I used to get random "garbage" packets from my DNS servers (UPD) with Sygate, but with ZA and Kerio I don't. Perhaps that's why?
Zone Alarm 5 was the worst piece of SW I ever installed on my system, it would eventually freeze up my system forcing a reboot. Especially when using bit torrent. I have gone to Sygate Personal firewall. Much better.
I am using ZoneAlarm 5.1.011.000, in other words the latest. I am on W2K with the latest patches and servicepacks. I have Opera 7.53. Thanks! Deguza
I solved that with an advanced rule: Allow, UDP, remote port 53, in/out, to my ISP primary dns IP and secondary dns IP. At tools/options/security smart dns is not enabled. Casey
Yep, that's what I did in Sygate also. Exactly, except I also specified Services.Exe as the program effected too, to tighten it up ever further. That way Sygate will only allow DNS traffic initiated by your machine and no other garbage. At least it's Services.Exe in Win2k. Might be Svchost.Exe in XP. Not sure...
Casey, just another note about that. You'll know when you've got your DNS tightened up good when you stop seeing outbound ICMP type 3 to your DNS servers in your Sygate logs. Watch for that. When it's gone, then you're all set. Try adding Services.Exe or Svchost.Exe (XP) to the effected apps in your DNS rule. Should do the trick.
Zone Alarm 5 was the worst piece of SW I ever installed on my system, You are so right! Going back to stable v4.5 helps! Thanks. ---raj
