Zone Alarm Alert Question. Don't know how to answer.

[Jack Gillis]

I just installed Zone Alarm. ON booting, I get an Zone Alarm Alert
asking, "Do you want to allow Generic Host Process for Win32 Services to
act as a server?" The application is shown in the alert is svchost.exe.

I have no idea whether or not I want to or not.

My two computers are connected through NIC's and crossover cable. The
Primary machine is the one that connects to the Internet through a dial
up connection and the Secondary machine connects to the Internet through
it.

I choose to answer no the question asked in alert for no reason I
understand. Clearly, I am in over my head here and would appreciate
some explanation of why I should or should not want the Generic Host
Process to act a server.

Thank you for your help.

 

[Will Denny]

Hi

You need to allow svchost.exe access to the Internet, but don't allow it to act as a Server.

Will

 

[Jack Gillis]

Thank you very much Roger. That makes sense to me.

 

[Jeff Malka]

You need to allow svchost.exe access to the Internet, but don't allow it
to
act as a Server.

Thank you. I was in the same position and appreciate the response. I
suspect that many people have ZA misconfigured on their PCs simply because
they do not understand what they should reply to the many alerts that ZA
gives you when first installed.

I believe the great majority of users have this identical situation:

My two computers are connected through NIC's and crossover cable. The
Primary machine is the one that connects to the Internet through a dial
up connection and the Secondary machine connects to the Internet through
it.

What should be the correct responses to ZA alerts for most of us?
Should any program be permitted as "server"? If not, should server be set
as "block" (=do not permit) or "ask"? How about "Pinger". Very confusing to
the uninitiated!

Thanks.

--
Jeff Malka
(e-mail address removed)
Hi

You need to allow svchost.exe access to the Internet, but don't allow it to
act as a Server.

Will

 

[Jeff Malka]

What should I do with:

Ad-aware 6 core application
Adobe Reader 6.0
Application Layer Gateway Service
DCOMbobulator
Downloading update
SVC (you replied)
Giant Bounce service
Internet Explorer
Messenger (I do not use it)
Microsoft HTML Help Executable
Mozilla
Outlook Express
Postal Inspector Outlook Express Edition
Spooler SubSystem App
Spybot
Toshiba pinger
Windows Explorer
WS_FTP

Thank you.

 

[Will Denny]

Hi Jeff

Personally I don't allow any programs server rights. I have that option set to "block" whenever a program does ask for server rights - not all do. Have a look in the help file under ''server permission" - some programs may need this option 'turned on'.

Will

 

[Alex Nichol]

I just installed Zone Alarm. ON booting, I get an Zone Alarm Alert
asking, "Do you want to allow Generic Host Process for Win32 Services to
act as a server?" The application is shown in the alert is svchost.exe.

That is support for system services, some of which need to get at the
Net. So you want to allow it access. But I have found no reason for it
to be a server - I would check the 'always answer' and then click No

 

[NobodyMan]

That is support for system services, some of which need to get at the
Net. So you want to allow it access. But I have found no reason for it
to be a server - I would check the 'always answer' and then click No

Why does everybody here say "yes", and many even have said "it must
have access to the net?" One of my boxes is a standalone machine, not
hooked up to the internet (it doesn't even have a modem). It has this
service, but obviously never access the net and that system runs just
fine.

Generic Host Proccess for Win32 Services doesn't have to be allowed to
access the net for your computer to function.

 

[Larry(LJL269)]

Any video cam app(Netmeet) needs server permissions
unless u just wanna watch

On Mon, 8 Sep 2003 16:52:44 +0100, "Will Denny"

|Hi Jeff
|
|Personally I don't allow any programs server rights. I have that option set to "block" whenever a program does ask for server rights - not all do. Have a look in the help file under ''server permission" - some programs may need this option 'turned on'.
|
|Will
|
|> > You need to allow svchost.exe access to the Internet, but don't allow it
|> to
|> act as a Server.
|>
|> Thank you. I was in the same position and appreciate the response. I
|> suspect that many people have ZA misconfigured on their PCs simply because
|> they do not understand what they should reply to the many alerts that ZA
|> gives you when first installed.
|>
|> I believe the great majority of users have this identical situation:
|> > My two computers are connected through NIC's and crossover cable. The
|> > Primary machine is the one that connects to the Internet through a dial
|> > up connection and the Secondary machine connects to the Internet through
|> > it.
|>
|> What should be the correct responses to ZA alerts for most of us?
|> Should any program be permitted as "server"? If not, should server be set
|> as "block" (=do not permit) or "ask"? How about "Pinger". Very confusing to
|> the uninitiated!
|>
|> Thanks.
|>
|> --
|> Jeff Malka
|> (e-mail address removed)
|> |> Hi
|>
|> You need to allow svchost.exe access to the Internet, but don't allow it to
|> act as a Server.
|>
|> Will
|>
|> |> > I just installed Zone Alarm. ON booting, I get an Zone Alarm Alert
|> > asking, "Do you want to allow Generic Host Process for Win32 Services to
|> > act as a server?" The application is shown in the alert is svchost.exe.
|> >
|> > I have no idea whether or not I want to or not.
|> >
|> > My two computers are connected through NIC's and crossover cable. The
|> > Primary machine is the one that connects to the Internet through a dial
|> > up connection and the Secondary machine connects to the Internet through
|> > it.
|> >
|> > I choose to answer no the question asked in alert for no reason I
|> > understand. Clearly, I am in over my head here and would appreciate
|> > some explanation of why I should or should not want the Generic Host
|> > Process to act a server.
|> >
|> > Thank you for your help.
|> >
|> >
|>
|>
|> ---
|> Outgoing mail is certified Virus Free.
|> Checked by AVG anti-virus system (http://www.grisoft.com).
|> Version: 6.0.515 / Virus Database: 313 - Release Date: 01/09/2003
|>
|>
|>
|>
|
|
|---
|Outgoing mail is certified Virus Free.
|Checked by AVG anti-virus system (http://www.grisoft.com).
|Version: 6.0.515 / Virus Database: 313 - Release Date: 01/09/2003


Any advice given is my attempt to show appreciation for all
the excellent help I've received here but I'm no MVP so it
may only apply NUGS. Personal attacks, nitpicking & criticism
of anything but content will NOT be responded to. Those
posters should spend their time taking the test @
http://www.nimh.nih.gov/publicat/ocdtrt1.htm

 

[Larry(LJL269)]

I agree- looked under Programs in ZA and only ones that
are checked for servers are webcams. Others have ? but
I never hear from them.

On Mon, 08 Sep 2003 19:42:44 -0400, NobodyMan

|On Mon, 08 Sep 2003 20:33:55 +0100, Alex Nichol
|
|>Jack Gillis wrote:
|>
|>>I just installed Zone Alarm. ON booting, I get an Zone Alarm Alert
|>>asking, "Do you want to allow Generic Host Process for Win32 Services to
|>>act as a server?" The application is shown in the alert is svchost.exe.
|>
|>That is support for system services, some of which need to get at the
|>Net. So you want to allow it access. But I have found no reason for it
|>to be a server - I would check the 'always answer' and then click No
|
|Why does everybody here say "yes", and many even have said "it must
|have access to the net?" One of my boxes is a standalone machine, not
|hooked up to the internet (it doesn't even have a modem). It has this
|service, but obviously never access the net and that system runs just
|fine.
|
|Generic Host Proccess for Win32 Services doesn't have to be allowed to
|access the net for your computer to function.


Any advice given is my attempt to show appreciation for all
the excellent help I've received here but I'm no MVP so it
may only apply NUGS. Personal attacks, nitpicking & criticism
of anything but content will NOT be responded to. Those
posters should spend their time taking the test @
http://www.nimh.nih.gov/publicat/ocdtrt1.htm

 

[Bob Byrne]

......... Also, when you right click to
check options on many of your listed programs in ZA, be sure you have
checked to enable privacy and authenticate components.

What is "Enable Privacy" for?
The help files tell you how to enable it but not why except that IE has it
enabled by default.

 

[Alex Nichol]

Personally I don't allow any programs server rights. I have that optionset to "block" whenever a program does ask for server rights - not all do. Have a look in the help file under ''server permission" - some programs may need this option 'turned on'.

The one that you need is Windows/MSN Messenger if you want to use it to
send files to people (and it is rather a good tool for doing so). That
works by the accept at the receiving end sending a request to be served
the file, and so Messenger needs to be able to act as a service

 

[Jeff Malka]

If you use FTP to update files on your ISP hosted website, should you allow
FTP server rights?

--
Jeff Malka
(e-mail address removed)

Personally I don't allow any programs server rights. I have that option

set to "block" whenever a program does ask for server rights - not all do.
Have a look in the help file under ''server permission" - some programs may
need this option 'turned on'.


The one that you need is Windows/MSN Messenger if you want to use it to
send files to people (and it is rather a good tool for doing so). That
works by the accept at the receiving end sending a request to be served
the file, and so Messenger needs to be able to act as a service

 

[Larry(LJL269)]

I agree- see my post about 4 previous - it refers to
this PC which is connected to Net.

Some of the posters who said it 'has to connect' give
rock solid advise tho- perhaps we have something
disabled that calls the app (a service, Restore,
Messenger, Task Sch...) I shutdown those & everything
else I can.

'If it works, dont fix it' is always applicable 4 me

On Tue, 09 Sep 2003 18:59:00 -0400, NobodyMan

|On Tue, 09 Sep 2003 14:26:49 GMT, "Larry(LJL269)" <[email protected]>
|wrote:
|
|>
|>He's giving a counter example of PC where apps never
|>connect to net but the PC runs just fine, But that
|>logic is flawed if app is only used in Net stuff(like
|>if it pings a server)!!
|
|Thanks. What I was trying to get at is that you CAN deny this service
|access to the 'Net and your computer will run just fine.
|
|>
|>HTH- Larry
|>
|>On Tue, 09 Sep 2003 12:11:27 +0100, Alex Nichol
|>
|>|NobodyMan wrote:
|>|
|>|>Why does everybody here say "yes", and many even have said "it must
|>|>have access to the net?" One of my boxes is a standalone machine, not
|>|>hooked up to the internet (it doesn't even have a modem). It has this
|>|>service, but obviously never access the net and that system runs just
|>|>fine.
|>|
|>|The presumption of someone asking if Zone Alarm should allow it to be a
|>|service is that the machine *is* hooked up to the net - otherwise why is
|>|Zone Alarm being run?
|>
|>
|>Any advice given is my attempt to show appreciation for all
|>the excellent help I've received here but I'm no MVP so it
|>may only apply NUGS. Personal attacks, nitpicking & criticism
|>of anything but content will NOT be responded to. Those
|>posters should spend their time taking the test @
|>http://www.nimh.nih.gov/publicat/ocdtrt1.htm
|


Any advice given is my attempt to show appreciation for all
the excellent help I've received here but I'm no MVP so it
may only apply NUGS. Personal attacks, nitpicking & criticism
of anything but content will NOT be responded to. Those
posters should spend their time taking the test @
http://www.nimh.nih.gov/publicat/ocdtrt1.htm

 

[Alex Nichol]

If you use FTP to update files on your ISP hosted website, should you allow
FTP server rights?

Should not be necessary, but if it asks to be one, say Y for the
occasion

 

[Alex Nichol]

He's giving a counter example of PC where apps never
connect to net but the PC runs just fine, But that
logic is flawed if app is only used in Net stuff(like
if it pings a server)!!

But then there are services like Internet Time Sync, or Windows Update.

 

[Jeff Malka]

Well, that is my problem: I set almost everything to blocked as server and
now when I try to connect to Windows update, it won't connect and tells me I
need to be an administrator, which I am.

Which item do I turn back on to permit Windows Update to work?

Thanks.

--
Jeff Malka
(e-mail address removed)

He's giving a counter example of PC where apps never
connect to net but the PC runs just fine, But that
logic is flawed if app is only used in Net stuff(like
if it pings a server)!!

But then there are services like Internet Time Sync, or Windows Update.

 

[Larry(LJL269)]

That may not be ur problem cause I use IE to go to
WUpdate page & both IE & Wupdte (in SYSTEM32 folder) r
NOT given server permissions.(Auto Update is OFF)

Anyway, in ZA look in ProgramControl >> ProgramsTab

HTH - Larry

On Wed, 10 Sep 2003 11:07:56 -0400, "Jeff Malka"

|Well, that is my problem: I set almost everything to blocked as server and
|now when I try to connect to Windows update, it won't connect and tells me I
|need to be an administrator, which I am.
|
|Which item do I turn back on to permit Windows Update to work?
|
|Thanks.
|
|--
|Jeff Malka
|[email protected]
||Larry(LJL269) wrote:
|
|>He's giving a counter example of PC where apps never
|>connect to net but the PC runs just fine, But that
|>logic is flawed if app is only used in Net stuff(like
|>if it pings a server)!!
|
|But then there are services like Internet Time Sync, or Windows Update.


Any advice given is my attempt to show appreciation for all
the excellent help I've received here but I'm no MVP so it
may only apply NUGS. Personal attacks, nitpicking & criticism
of anything but content will NOT be responded to. Those
posters should spend their time taking the test @
http://www.nimh.nih.gov/publicat/ocdtrt1.htm

 

[Jeff Malka]

Thanks for replying. I used restore and all is fine. The problem seems to
have been with my installation of Gimp for windows.