View Full Version : New Linksys Router and Sygate Pro Problems
Conan
February 22nd, 2004, 12:20 PM
I just got a new Linksys BEFSR41 Cable/DSL Router with 4 Port Switch for the purpose of allowing my 2nd PC being used by my Dad to connect to the internet. With my PC, Internet Explorer can't connect unless I choose "Allow All" traffic. The 2nd PC also with Sygate Pro connects falwlessly in "Normal" mode.
I've already reformatted but the result is always the same. I've noticed however that testing both PC's on "Shields Up" results in identical findings. One port is closed while the rest are stealthed, however this results in a "Failed" grade at Shields Up.
This is how the hardware is connected:
DSL Modem>Router>2 PC's on port 1 and 2.
I've tried using Advanced Rules that I found in the Sygate Forum to no avail. Any suggestions would be appreciated!
Big Booger
February 22nd, 2004, 12:22 PM
Conan,
Have you tried another browser? Maybe it is Ie acting screwy? I know that doesn't help your problem but at least you can see if another browser works then that rules out it being a port issue with port 80.
Conan
February 22nd, 2004, 12:34 PM
I don't have another browser installed at the moment. But isn't it weird that both PC's would have identical results at Shields Up? It's like only one configuration is being tested.
Big Booger
February 22nd, 2004, 13:24 PM
That or Sygate really doesn't matter? Perhaps your router is doing all the firewall work and having a software solution is just redundant?
egghead
February 22nd, 2004, 18:31 PM
i have lost the ability to use sygate for a month and a half
i don't know what happened but it dont work with my gigabyte lan no matter which router i use
internet only works with allow all
i chasnged to znealarm and it works but i uninstalled it and i am just using the builtin xp firewall protection
Conan
February 23rd, 2004, 09:27 AM
Zone Alarm is working fine right now, but my results at Shields Up are the same.
Big Booger
February 23rd, 2004, 11:58 AM
see below:
http://www.techzonez.com/forums/showpost.php?p=51824&postcount=4
hehehe
Conan
February 23rd, 2004, 12:20 PM
see below:
http://www.techzonez.com/forums/showpost.php?p=51824&postcount=4
hehehe
It's probably true but I just don't feel as safe without the software firewall.
Big Booger
February 23rd, 2004, 12:23 PM
:P I know what you mean. Why do you think I have sygate running with my router? :D
egghead
February 23rd, 2004, 12:23 PM
i have ident open detected by shields up
sygate wont give me internet without allow all
this suxor my nutsor...
using d-link 604 router
reset router
Conan
February 23rd, 2004, 12:25 PM
i have ident open detected by shields up
sygate wont give me internet without allow all
this suxor my nutsor...
using d-link 604 router
reset router
That's the same result I get at Shields Up.
phishhead
February 23rd, 2004, 12:28 PM
hey conan are you using dns or forced IPs. I have a feeling its an issue with a setting in the router. I was having some similar issues and stripe helped me out with forced IPs and checking some settings because I couldnt get netmeeting to work thru the router while sygate was loaded.
Conan
February 23rd, 2004, 12:34 PM
hey conan are you using dns or forced IPs. I have a feeling its an issue with a setting in the router. I was having some similar issues and stripe helped me out with forced IPs and checking some settings because I couldnt get netmeeting to work thru the router while sygate was loaded.
Well the router is set to be a DHCP server. Don't know why it works with the other PC running Sygate.
Big Booger
February 23rd, 2004, 12:40 PM
I tried to get him to set the IPs manually on the ethernet cards on the PC. It makes it simple to identify traffic on a network in the router logs. :D
I don't know if you tried it fully or not Conan. But I would go through and get rid of DHCP.
Set all cards to have a manually assigned Ip. Restart pcs and router, then play around with the settings in the linksys config.
:D
egghead
February 23rd, 2004, 12:41 PM
Well the router is set to be a DHCP server. Don't know why it works with the other PC running Sygate.youhave the p4p800 conan?
is that the one that doesnt work with sygate?
i have an asus p4p8x with a p4p800 bios installed
could it be a problem with the 1,000mbit ethernet?
1 gbyte
might be new and sygate needs an update?
the ident prob on the router cannot be fixed
Why isn't my Port 113 Stealthed? I'm using a firewall to stealth my entire machine, but the ShieldsUP! port probe shows port 113 to only be closed instead of stealthed! What gives? http://image.grc.com/su-a.gifPort 113 is associated with the Internet's Ident/Auth (Identification / Authentication) service. When a client program in your computer contacts a remote server for services such as POP, IMAP, SMTP, or IRC, that remote server sends back a query to the "Ident" server running in many systems listening for these queries on port 113. Essentially, the remote server is asking your system to identify itself . . . and you. This means that port 113 is often probed by attackers as a rich source of your personal information.
http://grc.com/transpixel.gif
You may recall, from my explanation of Stealthed ports, that attempting to connect to a stealthed port is both costly and painful for the contact initiator — which is why it's so cool to stealth our machines. But the problem with simple stealthing of port 113 is that we don't want to hurt the servers we are trying to contact when they turn around and send us their IDENT query. If they get no response at all from their port 113 query, our connection to them (which initiated their query in the first place) will be delayed or perhaps completely abandoned.
http://grc.com/transpixel.gif
Note that not all servers generate IDENT queries. So, depending upon your ISP, stealthing port 113 may not be any problem for you. However, you'll note that requirements for port 113 are common enough that most mature firewalls (BlackICE Defender, AtGuard, NIS2K, etc.) include built-in default rules allowing IDENT queries to pass through. These rules result in the IDENT's status being "closed" rather than "stealth."
http://grc.com/transpixel.gif
So what can you do?
http://grc.com/transpixel.gif
http://image.grc.com/textbullet.gif You may be able to remove or disable your firewall's default rule for IDENT (port 113) and run it in full stealth mode without trouble. If you do this, keep on the lookout for trouble connecting to less common servers, like IRC, which might have problems that you haven't encountered before.
http://grc.com/transpixel.gif
http://image.grc.com/textbullet.gif Or, you can leave the default rule in place and live with your system's IDENT service port being visible to the outside world. Be aware that this provides a means for intruders to detect an otherwise stealthed computer. And they'll know you're running a firewall since other things are stealthed, but not port 113.
http://grc.com/transpixel.gif
http://image.grc.com/textbullet.gif Or, you can switch to the very latest, highest technology, and best adaptive firewall which is smart enough to stealth this port against random probes, while still showing it as "closed" to queries from valid servers . . .
http://grc.com/faq-shieldsup.htm#IDENT
phishhead
February 23rd, 2004, 12:43 PM
to elaborate on bbs post not sure if it matters but I would turn everything off. then boot the modem all the way up, then turn on the router>>>then all the pcs...since you use pppoe the router has to log into the isp first.
Conan
February 23rd, 2004, 21:45 PM
I tried to get him to set the IPs manually on the ethernet cards on the PC. It makes it simple to identify traffic on a network in the router logs. :D
I don't know if you tried it fully or not Conan. But I would go through and get rid of DHCP.
Set all cards to have a manually assigned Ip. Restart pcs and router, then play around with the settings in the linksys config.
:D
You would have to work me through this as this "networking' stuff is totally new to me. :p
youhave the p4p800 conan?
is that the one that doesnt work with sygate?
i have an asus p4p8x with a p4p800 bios installed
could it be a problem with the 1,000mbit ethernet?
1 gbyte
might be new and sygate needs an update?
Yes it is the P4P800 that won't work with Sygate, however I have the ethernet set to run at 100 mb only. Zone Alarm works but all the rules got reset when I turned on the PC this morning! :mad:
egghead
February 23rd, 2004, 21:57 PM
I'm not a big fan of Zonealarm after always being forced to let M$ services acces to the internet or be bocked myself.
I had a virus posing as a win32 application gateway or wahtever its called so thats my story.
I couldnt locate anyone else with this problem so i am at a wall or naked.....
phishhead
February 23rd, 2004, 22:23 PM
yup my 113 is closed also
|
|