Zone Alarm & Router

[AceFlyer11]

First, my sincere THANKS to all the wonderful folks who brought our beloved WinMX back to life !    Your hard work and talents are so appreciated by all of us.

  Now for my question(s)...      

  I use Zone Alarm for my firewall connected to a Comcast
cable modem.    I went searching for config instructions
specific to Zone Alarm and did not find any.   I am
assuming this is because no changes are required ?  Is
this true only if you are a secondary connection ?

  With the 1.9 patch and secondary connection everything
works GREAT !    Are there problems if I add a router to
the mix or change my connection to Primary ?

  I ask because prior to WinMX disappearing on us, I used
to have a router and could connect to WinMX network, but
could not download/upload files.    I could never figure
out if it was:

1. Zone Alarm config probs
2. Primary vs. secondary ?
3. Comcast  (there were rumors? Comcast was blocking WinMX stuff??)
4. Router (D-Link) related

  Would appreciate any thoughts.   And if there is something
specific to Zone Alarm, I would be happy to try and write
up something (once I understand it !) to post and help others.

 Thanks again to the wonderful people here.

ps.  if I have installed the 1.9 patch...   do I need to do anything
      else for RI A blocking ?   Reading the forums I was not
      sure if I am covered, or if something only needs to be
      done if I am Primary connection ?

[Me Here]

Hi AceFlyer11
Welcome to the site and Thanks.

This link is for Zone Alarm Pro, and will help you to allow your WinMX into a trusted Zone.
For a primary connection you will need this and for that matter also for a secondary if you want to use specific ports.  A good idea if its possible, because it allows more users to access your files.

http://firewalling.com/personalfirewalls/ZoneAlarmPro.htm

There shouldn't be a problem with adding a router to your mix, its just a matter of setting it up to allow the correct ports in order to keep your uploads and downloads, room list, and browses working correctly.  
For this you will have to set up rules for your router that allow WinMX on certain ports.  The default ones are TCP 6699 and UDP 6257.  For your situation though I would Highly suggest non-standard ports because the rumors you have heard are true. ComCast is blocking and filtering your use of p2p systems.  Many times using high ports in the 40000 + range are better.  Again its simply a matter of making sure these all match in your router, firewalls, and WinMX to get that primary connection, and have it working to its best.

As far as the Added Block programs, No if your not using other P2P Networks and your using our 1.9 patch on a XP or 2K Windows system you should be fine.  I always used something when on a secondary, like Peerguardian just for my own peace of mind, however your pretty safe to run without this on secondary.  You will also be fine on a primary with the 1.9 installed as far as keeping them off the network.

I hope this helps you and if you decide to use that router let me know or have a look at this page:

Info you need to set up the router

And its worth mentioning not to forget your XP firewall, if that is your operating system.

[Anonymous]

Thanks so much for your reply.   I appreciate how informative and lucid
your explainations are.   And thank you for confirming the Comcast
blocking.   I had wondered for some time about this.    I guess the
1.9 patch somehow changes things because WinMX now works for me ?

  I do have Windows XP (Pro), but since I disable it and use Zone Alarm
I am not sure what I need to be aware of when you say "not to forget your XP firewall" ?

  Thanks for confirming that 1.9 patch will provide sufficient protection.  I
was not sure if I had to download additional add/block lists.   I guess they
come with the 1.9 patch ?

  The Zone Alarm walk through was interesting, but seems to apply
to Doom.   Am I to specify specific port numbers: TCP 6699 and
UDP 6257, rather than "ANY" as shown in the tutorial ?   Actually
given your comments about Comcast, maybe they should be
different numbers, such as TCP 46699 and UDP 46257 ? (both
greater than 40000 to avoid Comcast blocking?)   I guess I am
still a little confused, because I made no changes to either
firewall config values, nor the default port values and despite
still using Comcast...  everything appears to work with the
1.9 patch.   What am I missing ?    Sorry to belabor this and
thank you again for your help.

[Me Here]

AceFlyer11,
No worries at all.

Let me be more clear.  
The 1.9 patch has a small block list for WinMX protection, it isnt a huge list like the ones that Peerguardian use and so no allow list is needed.  You should be fine with it.

The ComCast issue is simple, the 1.9 didnt change anything.  For many.. let me be more realistic.. Many many many ComCast customers have woken up one day and their uploads on WinMX are gone nearly, maybe 1 in 100 would work.  Now if yours  is working now thats great.  But they have done it and its usually in rural areas that have no choice but to use them, such as areas with no dsl option.  So you are fine for now if all is working.  My point was that you could be in the next area of customers they decided to do this to, and having your ports already set is just a good idea.

The XP firewall is another one that would have to be configured to allow WinMX and many folks just dont think of it when they use a firewall such as Zone Alarm or Sygate.  Just didnt want you to forget and be frustrated later.

The Zone Alarm tutorial is using a game as the example and you are correct using the ports you have chosen TCP 46699 and UDP 46257 would be right.  Also using the names appropriate for WinMX in any places needed.

[Anonymous]

Bless you - I now feel up to speed !    

  I have read many of your other posts on this board and you are so very
knowledgeable and such a wonderful help to everyone.

  Thank you for explaining everything to me.

 
ps.  saw this article this morning - thought it was interesting.  Maybe
      we can hope for some greater sensibility in the near future ?

http://www.tgdaily.com/2005/11/08/former_riaa_chief_berman_joins_wurld_media/