Need to permit SVCHOST through Sygate firewall - help!

[Vance Roos]

I use XP Pro and I would like to know how to permit three programs to
pass through my Sygate Pro 5.0 firewall.

These programs are:

C:\windows\system32\SVCHOST.EXE
C:\windows\system32\NTOSKRNL.EXE
C:\windows\system32\drivers\NDISUIO.SYS

XP's own firewall is turned off.

These programs do not *seem* to me to be listed in the application
prorams which Sygate has been told to block.

More and more frequently I am getting locked out from accessing the
Net. I also notice in Task Manager that at times (like at bootup
time) the system program SVCHOST.EXE is using 80 or 90 percent cpu!

What do I need to do to permit Sygate to allow these three programs
to pass?

 

[Jarmo P]

C:\windows\system32\SVCHOST.EXE
C:\windows\system32\NTOSKRNL.EXE
C:\windows\system32\drivers\NDISUIO.SYS

XP's own firewall is turned off.

These programs do not *seem* to me to be listed in the application
prorams which Sygate has been told to block.

More and more frequently I am getting locked out from accessing the
Net. I also notice in Task Manager that at times (like at bootup
time) the system program SVCHOST.EXE is using 80 or 90 percent cpu!

What do I need to do to permit Sygate to allow these three programs
to pass?

You must not put a check mark in the Sygate main Window: Hide Windows
Services. Otherwise you are not for sure going to see them
Then click Applications, and select from the list:
1. NDIS Allow setting I think. (There is no advanced button for that)
2. For NTOSKRNL, Allow, and click also Advanced button, and uncheck Act as
Server.
3. Do the same for svchost.exe. That might block the XP updating it's clock,
the Auto synchronization. But the main thing is, computer should be
stealthed.

Above is just what i have read in forums and leanrned, works with my
computer. I have not done any other konfiguration changes for the default
install settings to any other Windows Services.
Propably you could block and deny some more, but when to know if the system
is not working anymore as it should be.

Main thing how to operate the firewall is then. You open a program, and SPF
tells, it wants to connect to internet. You decide either Allow or Block,
and also if the SPF should remember it.
If you Allow, better go to Applications afterwards, select that program, and
uncheck the Act as Server, unless really needed to have that option.
Jarmo P

 

[Jarmo P]

I think that Hide Windows Services has been left checked for a quite a few
others too, and causing annoyances to them too.
Sygate should have included the same check mark also in the Applications
window in my opinion, or better a show them win services button there

 

[Martin C.E.]

You must not put a check mark in the Sygate main Window: Hide
Windows Services. Otherwise you are not for sure going to see
them Then click Applications, and select from the list:
1. NDIS Allow setting I think. (There is no advanced button for
that) 2. For NTOSKRNL, Allow, and click also Advanced button,
and uncheck Act as Server.
3. Do the same for svchost.exe. That might block the XP updating
it's clock, the Auto synchronization. But the main thing is,
computer should be stealthed.

Above is just what i have read in forums and leanrned, works
with my computer. I have not done any other konfiguration
changes for the default install settings to any other Windows
Services. Propably you could block and deny some more, but when
to know if the system is not working anymore as it should be.

Main thing how to operate the firewall is then. You open a
program, and SPF tells, it wants to connect to internet. You
decide either Allow or Block, and also if the SPF should
remember it. If you Allow, better go to Applications afterwards,
select that program, and uncheck the Act as Server, unless
really needed to have that option.

Jarmo, thanks for your patience. You have helped me a lot with your
explanation.

I have made the necessary changes to Sygate.