ZA and internet access permission

[Pianorak]

ZoneAlarm keeps asking whether I want to give permission for "Generic Host Process for Win32 Services 5.1.2500.0" to connect to the internet. What is it and what does it do, and should I allow it to connect?

System spec: Windows XP, Pentium III/900, 256 MB, IE 6.

------------------
Our minds never work so fast as when they have to find an excuse J.L.H. Thomas

[buck52]

Howdy Pianorak

Here's (http://www.computing.net/security/wwwboard/forum/272.html) a link that I saved a while ago that might help.

If I do not allow it to connect, eventually ( but not imediately) it stops allowing me to connect...I allow it to connect but no server rights

buck

------------------
just hav'n fun

[buck52]

Decided to look some more

Got this...
"I sent an email to the ZA Tech Support and here's what they say about the Generic Host process:

"There are some default Windows processes which
may prompt for access to the Internet. In some
cases you may see some of these processes 'listening'
for incoming connections.

Note that if a program asks for Server rights and
you say Yes, it will have Server rights to both
Local AND Internet Zones. If the program only
requires Server rights to Local Zone (i.e. if you
have added the servers that the program will connect
to, into the trusted Local Zone, you should go
into the Programs Panel and deny Access and Server
rights for that program to the Internet Zone).

The Services and Controller App (services.exe) is
necessary in order for you to surf the web.

Generic host process for win32 is (like the name
implies) a generic process, which acts as a host
for other processes running from DLLs.
Therefore, more than one entry for this process is
possible. If you are using Windows 2000, you can see
what processes are running by using the Microsoft
file Tlist.exe found on the Windows 2000 CD-ROM.
The syntax is tlist -s at the command prompt (in
Windows XP the program is called tasklist)."

from Here (http://www.tweakxp.com/idealbb/view.asp?login=&mode=viewtopic&topicID=5564&forumID=2&catID=1&search=1&searchstring=&sessionID={9DC60F48-D50B-48A6-ABF1-BEA16BC84A80})

buck

------------------
just hav'n fun

[sea69]

I allow it in ZA.

don't allow "application layer gateway service".

http://www.PCGuide.com/ubb/wink.gif



------------------
sea1_69@hotmail.com

homepage (http://www.seanweb1.homestead.com/index.html)

[Pianorak]

Thanks Buck52 and Sea for prompt replies. Shall follow up all the links and hopefully digest all the information. For the time being shall allow it to connect but not to act as a server.

------------------
Our minds never work so fast as when they have to find an excuse J.L.H. Thomas

[Mitch Hatfield]

I'd let it have the access it seeks, Pinorak.
I do and I've come to no harm yet - or none that I know of!!

Basically, ZA is just doing its usual thorough job. It's a super piece of FREE software and causes few if any problems, which is more than can be said for McAfee, which I would steer well clear of.

Hope this helps to reassure u! http://www.PCGuide.com/ubb/smile.gif

------------------
Regards


Mitch Hatfield


Looking out for some signs of Evolution

[kayofcircles]

Probably just being fussy here, but doesn't seem to me that having to allow more outgoing stuff on a puter is a step in the right direction. And I find that one link off Buck's link... at bugnet (http://www.bugnet.com/analysis/0201/sfxpfbi1.html)..a bit alarming. Maybe I don't want W2K as much as I thought, and one wonders why XP would come with a one way firewall. I did read through the info twice, but have a question. Is that connected to the NT kernel stuff..or something altogether different?

[kfh]

Hi All,
This how I was advised. http://www.pcguide.com/ubb/Forum8/HTML/000673.html
And have'nt let it acess since.
http://www.PCGuide.com/ubb/biggrin.gif
kfh.

------------------
-------
Sequitur Patrem Non Passibus Aequis

[This message has been edited by kfh (edited 05-13-2002).]

[Pianorak]

Kay and Mitch Thanks for replying. Alas, I have decided to throw in the towel. AOL v.7 + ZA + XP Home Edition just will not live in harmony and I am fed up trying to keep the peace among that unruly lot. One of them has just been kicked out – and guess who? Well, you guessed right – it had to be ZA.

Does anyone know whether the native XP firewall actually works with AOL v. 7? There seems to be no way of activating it. Phoned AOL but they have absolutely no idea. Heigh-ho, surprise, surprise. http://www.PCGuide.com/ubb/frown.gif

kfh thanks for link which I shall follow up tomorrow – being a bit pressed for time right now.


------------------
Our minds never work so fast as when they have to find an excuse J.L.H. Thomas

[Pianorak]

There is just one thing I can’t figure out: In the absence of Zone Alarm politely enquiring whether X, Y or Z, incl. Generic Host bla-bla, should be given permission to connect to the net – get X, Y or Z connected anyway and irrespective – WITHOUT my permission and without my knowledge? http://www.PCGuide.com/ubb/confused.gif

------------------
Our minds never work so fast as when they have to find an excuse J.L.H. Thomas

[MichaelMHP]

I personally disallow any outgoing anything that I don't initiate. That said, certain things I know must go out. Wasn't it here that someone was talking about XP sending information about help inquiries back home? I know that I have tested it and was very surprised to see how much XP was sending about my help search habits back to Redmond...

------------------
I'll try to learn anything you'll teach me...

[kayofcircles]

Wandered through so many links that I am dizzy..but the most relevant seems to be this thread.. from here (http://www.pcguide.com/ubb/Forum15/HTML/000765.html) where Ghost describes much of the current question in AWESOME detail WAY over my head...lol.

Sea : I know you love XP..but truthfully, right at this moment, I am very happy NOT to have this problem to sort out. http://www.PCGuide.com/ubb/smile.gif

[Pianorak]

Originally posted by kayofcircles:
Wandered through so many links that I am dizzy..

Not only dizzy but cross-eyed with me day-dreaming and wandering off into most surreal and not altogether unpleasant regions . . .

Thanks kay and kfh. Shall try and persevere wading through the various offerings.

If in the meantime someone could PLEASE let me know how to activate the native XP firewall for AOL v. 7 I'd be most grateful. http://www.PCGuide.com/ubb/smile.gif



------------------
Our minds never work so fast as when they have to find an excuse J.L.H. Thomas