Firewall Warning (question)

[CDreier]

Security Suite's firewall blocked an inbound Generic Host Process for Win32 Services - supposedly from MS Windows Publisher. I was going to allow it, but in checking the Remote Computer IP Address, it seems to be in Japan??? I'm attaching a view of my window showing the notice and information on the process. I'm really confused and not knowledgeable about this. What might you guys suggest?

[Seer]

Hello :)

nothing to worry about. Your PC is synchronizing time. Port 123 is a standard for NTP (http://en.wikipedia.org/wiki/Network_Time_Protocol) protocol. This is not Japan, here is what that IP is -

195102

OrgName: Microsoft Corp
OrgID: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US

NetRange: 207.46.0.0 - 207.46.255.255
CIDR: 207.46.0.0/16
NetName: MICROSOFT-GLOBAL-NET
NetHandle: NET-207-46-0-0-1
Parent: NET-207-0-0-0-0
NetType: Direct Assignment
NameServer: NS1.MSFT.NET
NameServer: NS5.MSFT.NET
NameServer: NS2.MSFT.NET
NameServer: NS3.MSFT.NET
NameServer: NS4.MSFT.NET
Comment:
RegDate: 1997-03-31
Updated: 2004-12-09


You should allow this (if you use 'Windows Time' service), better yet, select 'Advanced options' on that popup, and create a custom rule which allows any remote IP on port 123 ;) as Windows tends to update your PC time via various servers worldwide.

Cheers.

[CDreier]

Nick,
I created a custom rule. Thanks!!!!

[Seer]

You're most welcome :thumb: