Generic Host Process for Win 32

[Dale]

My zone alarm (professional) frequently notifies me that
Server Program Generic Host Process for Win 32 is trying
to access the internet. Zone Alarm explains that the
program serves things such as chat, media streaming, voice
over, etc.

One guru explained to me that he only allows this generic
host process to access certain ports and denys it access
to others.

Do you know how I might do this while using zone alarm?
When I deny access, I do find a lot of internet pages
unavailable and wonder whether I'd run into problems if I
just give the program access across the board. Thanks
dale

 

[Jason [MSFT]]

Hey Dale,


Generic Host Process for Win 32 is another name for svchost. The first
thing i would do would be to use a utility such as "process explorer" from
www.sysinternals.com to determine what is running under that particular
instance of svchost that is requiring internet access. Once that has been
determined, consult the documentation and/or vendor of that application to
determine what ports it requires. Open and/or close your ports as needed

Jason Hoffman (e-mail address removed)
MSCE,MSCA,CISSP, Security +
PSS Security
Available Mon.-Fri 9:00 a.m. - 6:00 p.m.


This posting is provided "AS IS" with no warranties, and confers no rights.




--------------------
| Content-Class: urn:content-classes:message
| From: "Dale" <[email protected]>
| Sender: "Dale" <[email protected]>
| Subject: Generic Host Process for Win 32
| Date: Mon, 1 Dec 2003 12:26:31 -0800
| Lines: 15
| Message-ID: <[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="iso-8859-1"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Thread-Index: AcO4SWhYn5lMNlqZSwWtIXO0VO4PSA==
| X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
| Newsgroups: microsoft.public.windowsxp.security_admin
| Path: cpmsftngxa06.phx.gbl
| Xref: cpmsftngxa06.phx.gbl
microsoft.public.windowsxp.security_admin:100342
| NNTP-Posting-Host: tk2msftngxa09.phx.gbl 10.40.1.161
| X-Tomcat-NG: microsoft.public.windowsxp.security_admin
|
| My zone alarm (professional) frequently notifies me that
| Server Program Generic Host Process for Win 32 is trying
| to access the internet. Zone Alarm explains that the
| program serves things such as chat, media streaming, voice
| over, etc.
|
| One guru explained to me that he only allows this generic
| host process to access certain ports and denys it access
| to others.
|
| Do you know how I might do this while using zone alarm?
| When I deny access, I do find a lot of internet pages
| unavailable and wonder whether I'd run into problems if I
| just give the program access across the board. Thanks
| dale
|