detecting malicious/unwanted connections RE: [thelist] remote administration utils

Scott Schrantz scotts at
Mon Dec 9 23:53:46 CST 2002

> -----Original Message-----
> From: Chris W. Parker [mailto:cparker at]
> my original question had to do with remote administration
> utilities. now
> i'm wondering what tools there are available that would facilitate
> detecting unwanted traffic when using backdoor programs.
> for example, i know my ip address is a.a.a.a and i know the computer i
> am "admin'ing" is b.b.b.b, how can i find out if another computer is
> attempting to connect to the server (me) or the client.
ZoneAlarm is an excellent firewall that works both ways:
	* It will prompt you if any program on your machine tries to connect
to the Internet, and
	* It will block and keep a log of any attempts made on your computer
from the outside.

You can set up ZoneAlarm on b.b.b.b, and set it to allow a.a.a.a to access
the computer while blocking all other IP addresses. Then only you would be
able to get in, and it would keep a log of other, blocked, attempts. It even
allows a range of IPs, so if you have a dynamic IP you could set it to allow

And, of course, the basic version is free.

Scott Schrantz

More information about the thelist mailing list