We’d like to remind Forumites to please avoid political debate on the Forum.
This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.
📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!
The Forum now has a brand new text editor, adding a bunch of handy features to use when creating posts. Read more in our how-to guide
Windows update has broken ZoneAlarm Firewall & Kills the Internet
Belnahua
Posts: 1,493 Forumite
in Techie Stuff
This appears to affect only Zonealarm...
By now, everyone who is using ZA, knows that Microsoft's update KB951748 broke ZA. The reason that it broke ZA is that Microsoft had to expand the randomness that the DNS client uses when asking for UDP ports to go to DNS servers. ZA only looks for these requests in a certain range of UDP ports, but with the new DNS client (note that IE has not changed, but some of the base networking programs (svchost.exe)), ZA sees requests outside of this range and blocks them. Therefore, Internet is broken.
Unfortunatly, Microsoft didn't tell firewall manufacturers (hardware and software) that they were updating this. As a note, on one of my computers, I have Norton Internet Security and disabled ZA, and enabled the firewall from Norton until such time as there is an update for ZA.
The Fix :-
Go to Add/Remove Programs in the Control Panel.
Make sure there is a tick in the box to show the Updates (at the top of the window).
Locate KB951748 and remove it.
Reboot.
ZA Internet Zone security can be set to High again.
I think you also need to turn off Windows Update for the time being to stop this update coming down again, until your firewall manufacturer or Microsoft has fixed this problem!
By now, everyone who is using ZA, knows that Microsoft's update KB951748 broke ZA. The reason that it broke ZA is that Microsoft had to expand the randomness that the DNS client uses when asking for UDP ports to go to DNS servers. ZA only looks for these requests in a certain range of UDP ports, but with the new DNS client (note that IE has not changed, but some of the base networking programs (svchost.exe)), ZA sees requests outside of this range and blocks them. Therefore, Internet is broken.
Unfortunatly, Microsoft didn't tell firewall manufacturers (hardware and software) that they were updating this. As a note, on one of my computers, I have Norton Internet Security and disabled ZA, and enabled the firewall from Norton until such time as there is an update for ZA.
The Fix :-
Go to Add/Remove Programs in the Control Panel.
Make sure there is a tick in the box to show the Updates (at the top of the window).
Locate KB951748 and remove it.
Reboot.
ZA Internet Zone security can be set to High again.
I think you also need to turn off Windows Update for the time being to stop this update coming down again, until your firewall manufacturer or Microsoft has fixed this problem!
A friend is someone who understands your past, believes in your future, and accepts you just the way you are.
0
This discussion has been closed.
Confirm your email address to Create Threads and Reply
Categories
- All Categories
- 354K Banking & Borrowing
- 254.3K Reduce Debt & Boost Income
- 455.2K Spending & Discounts
- 247K Work, Benefits & Business
- 603.6K Mortgages, Homes & Bills
- 178.3K Life & Family
- 261.1K Travel & Transport
- 1.5M Hobbies & Leisure
- 16.1K Discuss & Feedback
- 37.7K Read-Only Boards