[funsec] Problem with MS Updates?

Paul Ferguson fergdawg at netzero.net
Wed Jul 9 01:35:12 CDT 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

In the spirit of "eat your own dog food" and "FYI self-adherence",
I am happy to report that I managed to successfully install all
of today's MS security updates without incident after lowering
my ZoneAlarm firewall to "Medium" as opposed to "High".

What I am unhappy about is that I had to set it to "Medium".

I await a fix from CheckPoint/ZoneAlarm.

Just an FYI.

Thanks,

- - ferg




- -- "Paul Ferguson" <fergdawg at netzero.net> wrote:

It has been brought to my attention that this is an apparent
conflict between ZoneAlarm and MS update KB951748:

http://forum.zonelabs.org/zonelabs/board/message?board.id=cfg&message.id=52
785 


Apparently, resetting Internet Zone Security from High to Medium is a
workaround:

http://forum.zonelabs.org/zonelabs/board/message?board.id=cfg&message.id=52
733 

FYI,

- - ferg



- -- "Paul Ferguson" <fergdawg at netzero.net> wrote:

Heads-up:

I just had to System Restore a few machines (including my laptop)
after updating with today's monthly Microsoft security patches.

All systems were XP SP2 -- and I have also expressly not selected
the SP3 upgrade.

After rebooting, the Windows TCP/IP API seems to become completely
broken, e.g. network applications (browser, NTP client, etc.) cannot
reach their desired destinations (error: host not found), however,
when you open a DOS Shell, you can successfully resolve DNS queries,
ping target hosts, traceroute, etc.

Very bizarre and very frustrating. I spent ~2 hours futzing with
this issue.

I have seen no mention of this elsewhere yet, but basically if you
do not System Restore, you're functionally dead in the water.

I plan to make some inquires elsewhere, but for now, I would highly
recommend waiting to apply the monthly Microsoft Black Tuesday updates
until things are more clear.

Has anyone else run into any problems?

FYI,

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.3 (Build 3017)

wj8DBQFIdFwPq1pz9mNUZTMRAit9AKDpDggq0a40QsY9BXoqIUwQbAnz/ACfQpzV
H2bsKkS8sPKKCDR+fD+SQl8=
=tMqF
-----END PGP SIGNATURE-----


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/




More information about the funsec mailing list