Questions About Zonealarm In Winxp

[opalhort]

I installed Zone Alarm on two WinXP PCs. One PC is running OK without problems.

The other one keeps on blocking outgoing traffic by svchost.exe which is trying to contact 192.168.1.1:56 which results in me not being able to access the Internet.

192.168.1.1 is our router and 192.168.1.33 is the PC with problems.

Generic Host Process for Win32 Services , which is svchost.exe is allowed in program settings, only as Internet server it is blocked, but this is the same setting as on the other PC.

Now I have put 192.168.1.1 into the trusted zone only on the problem PC and everything appears to be fine for now.

My questions: Is there any risk having the router address in the trusted zone and why has only one PC this problem even though all settings are identical on both PCs?

opalhort

[Guest Reimar]

I installed Zone Alarm on two WinXP PCs. One PC is running OK without problems.

The other one keeps on blocking outgoing traffic by svchost.exe which is trying to contact 192.168.1.1:56 which results in me not being able to access the Internet.

192.168.1.1 is our router and 192.168.1.33 is the PC with problems.

Generic Host Process for Win32 Services , which is svchost.exe is allowed in program settings, only as Internet server it is blocked, but this is the same setting as on the other PC.

Now I have put 192.168.1.1 into the trusted zone only on the problem PC and everything appears to be fine for now.

My questions: Is there any risk having the router address in the trusted zone and why has only one PC this problem even though all settings are identical on both PCs?

opalhort

Hi opalhort,

I never use Zonealarm but it can be the Firewall settings. May you need to open the port 56 in your Router. May you also need to define the ACL settings in the router. If you set this settings to 0.0.0.0 all IP's will be opened or you have to set the available fixed IP's manually (ACL means: Access Connection Limitation). Or some routers need to be opened for all connection instead of single!

Hope this can help you.

[cdnvic]

You need to add svchost.exe to the trusted zone and give it server permissions.

Don't open any ports on the router, it's not needed, and it opens up your network to intrusion. Just add 192.168.0.1 and your ISP's DNS servers into the trusted zone. Port 53 outbound/inbound traffic is your DNS lookups and replies.

Adding each system's Ip addresses into the trusted zone will fix the rest of the problems. To find this info go to Start/Run/Command and type ipconfig/all.

[opalhort]

You need to add svchost.exe to the trusted zone and give it server permissions.

Don't open any ports on the router, it's not needed, and it opens up your network to intrusion. Just add 192.168.0.1 and your ISP's DNS servers into the trusted zone. Port 53 outbound/inbound traffic is your DNS lookups and replies.

Adding each system's Ip addresses into the trusted zone will fix the rest of the problems. To find this info go to Start/Run/Command and type ipconfig/all.

Thanks cdnvic,

I have no open ports on the router.

since I put 192.168.1.1 in the internet zone things improved but if I call a website the first time it still comes up with not found, then click refresh and it loads.

here are some screen shots of my ZA settings:

opalhort

Edited February 17, 2007 by opalhort

[cdnvic]

here are some screen shots of my ZA settings:

It's blocking DNS lookups on port 53, that's why it's having trouble finding websites.

[opalhort]

It's blocking DNS lookups on port 53, that's why it's having trouble finding websites.

OK I figured that much out, but svchost has all rights except to act as an Internet server (ZA's default setting!). see the second screen shot.

How can I stop ZA to block this program?

Is it safe to allow svchost as a server in the Internet zone?

opalhort

[cdnvic]

Give it server rights everywhere.

[opalhort]

Give it server rights everywhere.

Thanks.

Done and working OK for now. If this is safe I'm wondering why ZA blocks this program in the Internet server section as a default.

opalhort

[cdnvic]

Some malware programs will overwrite it and use it to hijack the computer but that's not ZA's problem really, it should let the antivirus deal with that.