PDA

View Full Version : How to configure Inbound and Outbound?


woobook
May 22nd, 2006, 01:36 AM
I use Panda Titanium 2006, Panda automatically configure its firewall as below. I want manually set the permissions. but I am not sure how to configure it. I use dial-up.
There are four choices:
Outbound
Inbound
Inbound and Outbound
No Connection

How to change following configuring:

Client Server Runtime Process --- CSRSS.EXE Outbound
File Transfer Program --- FTP.EXE Inbound and Outbound
Generic Host Process for Win32 Services --- svhost.exe Outbound
Hostname APP --- hostname.exe Outbound
Hyper Terminal Applet --- hypertem.exe Outbound
Internet Explorer --- iexplore.exe Inbound and Outbound
LSA Shell (Export Version) --- LSASS.EXE Inbound and Outbound
Microsoft Connection Manager Auto-Download ---cmdl32.exe Outbound
Microsoft RSVP ---rsvp.exe Inbound and Outbound
Microsoft Synchronization Manager ---mobsync.exe Outbound
Microsoft Telnet Client ---telnet.exe Outbound
mplayer2.exe Outbound
Multicast Information --- mrinfo.exe Outbound
Net Command --- net1.exe Outbound
Net Command --- net.exe Outbound
NetFlt --- NETFLT.SYS Inbound and Outbound
nslookup APP --- NSLOOKUP.EXE Outbound
NT Kernel System --- ntoskrnl.exe Outbound
Opera Internet Browser --- opera.exe Outbound
Opera.exe stub --- program\netscape.exe Outbound
Outlook Express(I use hotmail) ---- msimn.exe Outbound
Schedule service command line interface --- at.exe Outbound
Services and Controller app --- SERVICES.EXE Inbound and Outbound
Spooler SubSystem App --- SPOOLSV.EXE Inbound and Outbound
TAPI 3.0 Dialer and IP Multicast Conference Viewer --- dialer.exe Outbound
TCP/IP Arp Command --- arp.exe Outbound
TCP/IP NetBios Information --- nbstat.exe Outbound
TCP/IP Ping Command --- ping.exe Outbound
TCP/IP Remote Copy Command --- rcp.exe Outbound
TCP/IP Remote Exec Command --- rexec.exe Outbound
TCP/IP Remote Shell Command --- rsh.exe Outbound
TCP/IP Route Command --- route.exe Outbound
TCP/IP Traceroute Commnd --- tracert.exe Outbound
TCPIP Finger Command --- finger.exe Outbound
Trivial File Transfer Protocol App --- tftp.exe Outbound
Windows Explorer --- explorer.exe Outbound
Windows Messenger (never use it) --- msmsgs.exe Inbound and Outbound
Windows Movie Maker(what is it?) --- moviemk.exe Outbound
Windows NT Base API Client DLL --- Kernel32.dll Outbound
Windows NT Logon Application --- winlogon.exe Outbound
Windows NetMeeting --- conf.exe Inbound and Outbound

Thanks for your help!

woobook
May 22nd, 2006, 02:19 AM
TCPView show my connection as:

[System Process]:0 TCP OWNER-xxxxxxxxx:31595 localhost:1060 TIME_WAIT
[System Process]:0 TCP OWNER-xxxxxxxxx:31595 localhost:1057 TIME_WAIT
[System Process]:0 TCP OWNER-xxxxxxxxx:31595 localhost:1054 TIME_WAIT
[System Process]:0 TCP OWNER-xxxxxxxxx:31595 localhost:1093 TIME_WAIT
[System Process]:0 TCP OWNER-xxxxxxxxx:31595 localhost:1090 TIME_WAIT
[System Process]:0 TCP OWNER-xxxxxxxxx:31595 localhost:1087 TIME_WAIT
firefox.exe:1864 TCP OWNER-xxxxxxxxx:1033 localhost:1034 ESTABLISHED
firefox.exe:1864 TCP OWNER-xxxxxxxxx:1034 localhost:1033 ESTABLISHED
firefox.exe:1864 TCP OWNER-xxxxxxxxx:1072 localhost:31595 ESTABLISHED
lsass.exe:488 UDP OWNER-xxxxxxxxx:4500 *:*
lsass.exe:488 UDP OWNER-xxxxxxxxx:isakmp *:*
svchost.exe:1104 UDP OWNER-xxxxxxxxx:1026 *:*
svchost.exe:716 TCP OWNER-xxxxxxxxx:epmap OWNER-xxxxxxxxx:0 LISTENING
System:4 TCP OWNER-xxxxxxxxx:microsoft-ds OWNER-xxxxxxxxx:0 LISTENING
System:4 UDP OWNER-xxxxxxxxx:microsoft-ds *:*
WEBPROXY.EXE:1980 TCP OWNER-xxxxxxxxx:31595 OWNER-xxxxxxxxx:0 LISTENING
WEBPROXY.EXE:1980 TCP OWNER-xxxxxxxxx:31595 localhost:1072 ESTABLISHED
WEBPROXY.EXE:1980 TCP owner-xxxxxxxxx:1074 xxxxx.net:http ESTABLISHED
WEBPROXY.EXE:1980 UDP OWNER-xxxxxxxxx:18001 *:*
WEBPROXY.EXE:1980 UDP OWNER-xxxxxxxxx:18002 *:*

woobook
May 22nd, 2006, 10:53 PM
I changed some of them as followings:

File Transfer Program --- FTP.EXE Inbound and Outbound--------------Outbound
Generic Host Process for Win32 Services --- svhost.exe Outbound-----------------Outbound
Internet Explorer --- iexplore.exe Inbound and Outbound----------------Outbound
LSA Shell (Export Version) --- LSASS.EXE Inbound and Outbound---------------Outbound
Microsoft RSVP ---rsvp.exe Inbound and Outbound-----------------no connection
Microsoft Telnet Client ---telnet.exe Outbound-----------------no connection
mplayer2.exe Outbound---------------no connection
Services and Controller app --- SERVICES.EXE Inbound and Outbound-------------Outbound
Spooler SubSystem App --- SPOOLSV.EXE Inbound and Outbound-------------Outbound
Windows Messenger (never use it) --- msmsgs.exe Inbound and Outbound-------------no connection
Windows Movie Maker(what is it?) --- moviemk.exe Outbound-------------no connection
Windows NetMeeting --- conf.exe Inbound and Outbound----------------no connection

I can't do more, I don't know very much about the functions of the other processes.