Thanks for the responses everybody. Now I took some time and made some test. First, shocking:
I was selecting ALL programs in ZA and said "remove entries", so ZA would have to ask for every app, as if it was newly installed. It warned me some of them may be system processes that requires access to prevent my PC from crashing (?...), I said yes, remove all. First they were all gone. Then I cicked a few tabs in ZA, came back to the programs tab and SHOCK! there were 4 new entries, added without any query. Most scary was Generic Host was added with full permissions except internet server rights. I never gave these permissions.
I was under the impression there are two guis, the real one and a filtered one.
I then unpugged the web, uninstalled ZA, then installed again FROM A MAGAZINE COVERDISK. I turned ZA autoupdate off and disallowed it to connect to its home server without notice.
I think this is really a good idea if you´re afraid of DNS-Spoofing, as mentioned before: use distributions of coverdisks, not your "personal download". I think for a firewall this is important.
Now I have disallowed the generic host to access the internet zone, both as a client and as a server. Although ZA warned again, everything seems to work. I also stopped the process "generic host: dns service" using sysinternals Process explorer (must have), now there is no more traffic caused by the dubious "generic host".
There is still this problem with apache: I CAN load a page on the other machine BEFORE i give apache the server permission, although this works only for the first page, for some really strange reason. It IS scary and I definitifely will try other firewalls.
unfortunately the low bandwith from apache to the other machine (0.4 Mbit, instead of 10.0 as usual with my lan) doesn´t seem to be caused by ZA, since ending ZA won´t fix it. Any Ideas what to do?
I was selecting ALL programs in ZA and said "remove entries", so ZA would have to ask for every app, as if it was newly installed. It warned me some of them may be system processes that requires access to prevent my PC from crashing (?...), I said yes, remove all. First they were all gone. Then I cicked a few tabs in ZA, came back to the programs tab and SHOCK! there were 4 new entries, added without any query. Most scary was Generic Host was added with full permissions except internet server rights. I never gave these permissions.
I was under the impression there are two guis, the real one and a filtered one.
I then unpugged the web, uninstalled ZA, then installed again FROM A MAGAZINE COVERDISK. I turned ZA autoupdate off and disallowed it to connect to its home server without notice.
I think this is really a good idea if you´re afraid of DNS-Spoofing, as mentioned before: use distributions of coverdisks, not your "personal download". I think for a firewall this is important.
Now I have disallowed the generic host to access the internet zone, both as a client and as a server. Although ZA warned again, everything seems to work. I also stopped the process "generic host: dns service" using sysinternals Process explorer (must have), now there is no more traffic caused by the dubious "generic host".
There is still this problem with apache: I CAN load a page on the other machine BEFORE i give apache the server permission, although this works only for the first page, for some really strange reason. It IS scary and I definitifely will try other firewalls.
unfortunately the low bandwith from apache to the other machine (0.4 Mbit, instead of 10.0 as usual with my lan) doesn´t seem to be caused by ZA, since ending ZA won´t fix it. Any Ideas what to do?