Firewall FAQ'S
 

 

 

 
Do I need a firewall?
 

Yes, we strongly encourage the use of firewall protection for any dedicated Internet connection. Firewalls not only keep hostile apps from entering your PC from the outside, they also block hidden or unknown software on your PC (the sort a virus could install) from connecting to the Internet without your knowledge and giving away your valuable information.

Download and install FREE EZ Armor Security Software* provided by Computer Associates to Road Runner customers. You get FREE Anti-Virus protection, Firewall protection, Pop up Blockers, Anti-Spam, Anti-Spyware, product upgrades and updates, and web support* Please note: You must have the latest version of Flash Player** to download EZ Armor Security Software* from Road Runner.
*Subject to terms and conditions. Road Runner reserves the right to discontinue any feature or offer at any time. EZ Armor Security Suite software must be downloaded from the Road Runner National site.
*Spam and Virus protection software not available on Macintosh computers.

 
 
 
What is a firewall?
  "Firewall" is a term for any software or hardware device that sits between your computer and the Internet, watching what comes through. Firewalls provide an additional layer of security that can prevent computer viruses or hackers from attacking your system; stealing your files, passwords or personal information; or even hijacking your computer to attack others. Firewalls can be implemented in hardware, software, or a combination of the two.
What is port scanning?
  Port scanning is a method of probing a computer to find out which ports are open. This is usually a brute force operation where one simply tries to establish a connection to each and every port on the target computer. When a connection is established, the scanner makes note of the port number and continues on. A hacker or computer virus can then examine these open ports and potentially exploit them to steal information from your computer or use it to wage similar attacks on other computers or servers.
Is port scanning the same as "hacking"?
  No. By itself port scanning is not hacking, or cracking. But, someone who INTENDS to hack into other computers may use port scanning as a way to find out WHO they might want to target for an attack. In other words, port scanning can be interpreted as a PRELUDE to a real attack. But please remember, just because you've been the target of a port scan DOES NOT MEAN YOU'VE BEEN "HACKED".
I have a firewall and my alarm went off. Should I be worried?
 

Maybe. Just because your computer is scanned doesn't necessarily mean someone is trying to hack into your system. Your computer was probably one of thousands that just got scanned looking for open ports. For example, in an effort to combat recent malicious computer viruses and worms like Nimda and Code Red, some Internet Service Providers routinely scan computers on their networks in an effort to identify systems at risk and proactively warn their customers that they are at risk.

You may receive a log entry (24.30.218.54) from National Security. This is a network scan from Road Runner. We do not enter any machine or look at any personal information. The purpose of this scan is to locate those subscribers who may be running unsecure proxies, mail servers with open relay enabled, other unauthorized servers, or who may have a Trojan Horse application running.

Try to judge the severity of the alarm. In many cases, your computer was probably scanned looking for open ports. A firewall is doing its job if detects, prevents and reports on possible intrusions. So, if your firewall has reported that an incident has occurred, you should feel comfortable that your firewall has also prevented intrusion.

If you repeatedly see attempts coming from the same IP address or computer you should be concerned.

   
How do I report a hacking incident?
 

If you get repeated port scans, harassing e-mail, or any other violation of our Operator Acceptable Use Policy that you can document as coming from a Road Runner customer, send a complaint to our Security Center at abuse@rr.com  In order to properly investigate a report of abuse, you must include detailed time stamped logs in plain text format. Road Runner will not accept logs that are not in plain text (ascii) format. Be sure to copy the information and paste it into the body of your message. Do not send attachments. Make sure your log files include the following information:

  • Date of Incident
  • Time of Incident
  • Time Zone that logs are captured in
  • Source IP Address or Host Name
  • Destination IP Address or Host Name
  • Destination Port

    (Note that because of privacy laws, we cannot disclose to you the identity of customers or what action we have taken.)

When you get any sort of attack from outside of the Road Runner domain, you should contact the Internet service provider that the attack came from. Most Internet service providers maintain e-mail addresses like "abuse@domain.com", where "domain.com" is the domain name where the attack came from. Include as much information as you can.

   
  If you choose not to use EZ Armor Security Software please purchase and use another Firewall protection software. The following links will take you to some other popular firewall options**
 
 
  **Time Warner Cable and Road Runner do not endorse or support any of the products. They are listed for your reference and represent only a portion of those commercially available. Please keep in mind that the Road Runner Help Desk does not support personal firewalls. If you need assistance contact your firewall vendor.
 
 
     
 
©2006 Time Warner Cable, Inc. All rights reserved. ROAD RUNNER character and name are trademarks of Warner Bros.