Re: Generic host svchost asks for internet access?



Question is whether I should permit Host Process for Win32
Services/svchost.exe to act as a "Server"

I do not allow *anything* to act as a Server in ZoneAlarm.

A red X means the program is denied access/server rights.

I have red Xs in both columns, Trusted and Internet under Server.

From ZoneAlarm HELP:

server permission
Server permission allows a program on your computer to "listen" for
connection requests from other computers, in effect giving those computers
the power to initiate communications with yours. This is distinct from
access permission, which allows a program to initiate a communications
session with another computer.

Several common types of applications, such as chat programs, e-mail clients,
and Internet Call Waiting programs, may need server permission to operate
properly. Grant server permission only to programs you're sure you trust,
and that require it in order to work.

If possible, avoid granting a program server permission for the Internet
Zone. If you need to accept incoming connections from only a small number of
machines, add those machines to the Trusted Zone, and then allow the program
server permission for the Trusted Zone only.

The following basic options are available for each program

Allow the program to listen for connection requests

Block the program from listening for connection requests

Ask me whether to allow the program to listen for connection requests (show
Server Program alert)


--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:%23N6DkJMrGHA.4016@xxxxxxxxxxxxxxxxxxxx,
Jeff <jeff@xxxxxxxx> hunted and pecked:
"David" <someone@xxxxxxxxxxxxx> wrote in message
news:uSJBNlGrGHA.3380@xxxxxxxxxxxxxxxxxxxxxxx

"Jeff" <jeff@xxxxxxxx> wrote in message
news:uc3U16FrGHA.4508@xxxxxxxxxxxxxxxxxxxxxxx
I am setting up a new installation of Zone Alarm in a XP PC.

I received an alert saying:

"Generic Host Process for Win32 Services wants to accept connections
from the internet.
Application Svchost.exe
Source IP: 207.46.232.189: Port 123"

I do not recognize this IP. Is this something I should allow?

Thanks.

Jeff

That belongs to time.windows.com

David

Thanks. That's reassuring.

Question is whether I should permit Host Process for Win32
Services/svchost.exe to act as a "Server" with access to the internet or
is that a security risk. I presently have ZA set to:

Access: allowed --- to the internet and trusted zones but
Server: disallowed or Ask --- as"Server" to trusted and internet zones

Could this explain why I am having intermittent loss of internet access
through my router?

Not sure what the correct settings should be for Host Process for Win32
Services/svchost.exe. Any advice?

Jeff

.



Relevant Pages

  • Re: What is Generic Host Process for Win32 Services with the file name/path C:WINDOWSsystem32svchost
    ... program (ZoneAlarm by ZoneLabs), which say that it had blocked ... have server permission for the Internet Zone. ...
    (comp.security.firewalls)
  • Re: Generic host svchost asks for internet access?
    ... I do not allow *anything* to act as a Server in ZoneAlarm. ... I have red Xs in both columns, Trusted and Internet under Server. ... Server permission allows a program on your computer to "listen" for ... Allow the program to listen for connection requests ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Generic host svchost asks for internet access?
    ... I do not allow *anything* to act as a Server in ZoneAlarm. ... I have red Xs in both columns, Trusted and Internet under Server. ... Server permission allows a program on your computer to "listen" for ... Allow the program to listen for connection requests ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Can only start Yast2 from console
    ... This probably has to do with X server permission. ... your local user can access the X server. ... root cannot create a new window on your desktop. ...
    (alt.os.linux.suse)
  • Re: Urgent! New router and big disaster
    ... The SBS DNS server, running on ... its IP it means that your problem is now DNS. ... forward ports to it reliably in the router. ... I should have been more clear about internet connection.. ...
    (microsoft.public.windows.server.sbs)

Quantcast