Re: Port scan attacks
One more thing to note:<br /><br />Avoid the new versions (6.xxx.xxx) of ZoneAlarm, even the free versions.<br />If you goto the Zone Labs forums, there are thousands of posts from paying folks who are having MANY problems getting the program to run without problems. <br /><br />My advice?? Go here
ZA Link and scroll down to the section named 5.5 Branch. Look for version 5.5.094.000 OR 5.5.062.011 and d/l same. These older versions don't have the problems of the new releases.

<br />BTW, can you do a copy/paste of the port scan log?? It would be nice for you to post the version s of Windows you both are running. If you are running a router, you already have a firewall.<br /><br />Is your friend hooked up on a Cat5 cable or thru the wireless interface??<br /><br /><br />azfyrfyter63 wrote, "the port scan attacks could be his computer, is it attempting to establish a new address with each connection (I think that's called dynamic) then your computer may be seeing it as a port attack. Good luck."<br /><br />His computer would not be looking at your machine for an IP address, it would be trying to obtain an IP address from the router. Your router by default should have the DHCP server enabled and should be able to hand out IP addresses to your computers based on it's default DHCP range, typically 192.168.1.100===>.192.168.1.150 range. <br /><br />If you click on Start,Run, type in CMD and hit Enter, you'll be at a DOS screen. Type in ipconfig/all, hit Enter.<br /><br />You should see your current IP address, subnet mask, Gateway address (routers IP address) and the DNS server addresses. Type EXIT, hit Enter to exit the DOS screen......<br /><br />If you perform the same commands on HIS computer, you should see everything the same EXCEPT his IP address will be different.<br /><br />Using my example above (explaining the DHCP router addressing range), you'll probably have an IP of 192.168.1.100 and he will have 192.168.1.101. It all depends on who turns on their computer first. The first guy will get an IP of 192.168.1.100 the other , of course will be the next IP number, 192.168.1.101 etc. If another computer is turned on, it's IP would be 192.168.1.102, you get the idea....I hope. All this assumes that everybody's computer is setup to 'Obtain an IP address automatically" ( this is where this DHCP stuff comes into play), this is called dynamically configured IP addressing.<br /><br />The other option is to specify a certain IP address for each computer (under Network and Dial-up Settings). If you specify a specific IP address, this is called Static IP addressing. I personally find it easier to assign certain IP addresses to my machines, they never change the IP. There are benefits to having a 'static' IP.