Re: ZoneAlarm - Program Control Settings

From: Kerodo (kerodonospamkenny_at_hotmail.com)
Date: 09/10/04


Date: Thu, 9 Sep 2004 16:30:06 -0700

In article <94o1k09ts4b3i8dbt55jqulv748lvovrc1@4ax.com>,
rolleston@tiscali.co.uk says...
> On Thu, 9 Sep 2004 15:54:31 -0700, Kerodo
> <kerodonospamkenny@hotmail.com> wrote:
> >In article <yKWdnWA-LshdQd3cRVn-rg@comcast.com>, "Jeff N."
> ><news.comcast.giganews.com> says...
> >> Rolleston wrote:
> :
> >> > I wonder if anyone can tell me what the automatically
> >> > generated settings would have been for this item:
> >> >
> >> > Generic Host Process for Win32 Services
> >> > File name - C:\WINDOWS\System32\svchost.exe
> >> >
> >> You need to allow that process for several Windows services rely upon it.
> >
> >True, however, he should only allow it outbound. He should deny
> >"server" access for the internet for that program.
>
> Do you know what the automatically generated default settings
> would have been? I did not have to set these controls manually
> before, so I assume ZoneAlarm must have allowed access of
> some sort then. Any idea where the ticks, crosses and question
> marks would have been?
>

If all else fails, you might try setting everything to question marks,
then when you're prompted for various programs, tell it what to do.
Just do not give any programs "server" rights. Say no to this. 99% of
the time, you won't need it. I don't believe Generic Host needs it at
all. Just permission to access the internet, but no server permission.

-- 
Kerodo


Relevant Pages

  • Re: how to create domain policy to restrict users ???
    ... Software Restriction policies to manage what applications users can run and ... install on their computers with hash, certificate, and path rules. ... To control logons you can use the user rights for logon locally and deny ... settings and password protect the cmos settings. ...
    (microsoft.public.windows.group_policy)
  • Re: Deny Group Policy
    ... >> Can you explain why the settings were still taking effect after I went to ... > Administratiove Templates. ... I am still puzzled as you deny ... > Mark Heitbrink - MVP Windows Server ...
    (microsoft.public.windows.group_policy)
  • Re: OT: remote cups printing
    ... >> AuthType None ... >> Deny From None ... > I put the settings at the top of same section in the file and never am ... Jeff ...
    (Debian-User)
  • Re: Print server that gives a usage report
    ... >>different depending on distro), you will find something like this in the file ... >>Deny From All ... I'm quite pleased with the default settings of cups, so I haven't tried out it ...
    (alt.linux)
  • Re: More User Setup Problems in XP
    ... the application of local group policy by setting a Deny ... to put it back on or else the settings will apply to them too. ... Group Policy snap-in into a new mmc) you can tighten ...
    (microsoft.public.windowsxp.security_admin)