Is This Correct?

[Ryan Hayward]

Host Process For Windows Services

- Deny communication for svchost Internet IN - Deny

I have outbound set for allow but I was getting a popup window asking me if I wanted to allow or deny an inbound...

I just need to know if I need to change it to allow...

Trusted zone settings are blank.

[Ryan Hayward]

Hmm, looks like I need to set it to allow as I couldn't check email or activate new software I purchased today with the deny setting....

Sorry for the waste of a thread.

[osip]

take a look here :
http://www.wilderssecurity.com/showthread.php?t=205686

check these inbounds and the ip...after configuring as described here:
http://www.wilderssecurity.com/showthread.php?t=205802
all seems to be fine...

[Ryan Hayward]

Oh crap! Good thing I came back here and thanks for the response.
I've switched it back to ask.

Its funny as I always thought that a firewall blocks all incoming, though?:what:
Good example being Comodo and windows firewall.. They never asked me for permission with inbounds. Does this mean they have a flaw in allowing inbounds to access Host Process or are they configured so that only your ISP and trusted apps can have the priviledge?

[Ryan Hayward]

Sorry for the double post but is it really safe to allow DHCP inbound, regardless of IP address? I've noticed I cannot edit the rules for DHCP so I'm presuming its safe...;)

[MasterTB]

-{ Quote: "Sorry for the double post but is it really safe to allow DHCP inbound, regardless of IP address? I've noticed I cannot edit the rules for DHCP so I'm presuming its safe...;)" }-

I'm not an expert but DHCP stands for Dinamic Host Configuration Protocol (if I'm not mistaken) and what is does is to give you an IP whenever you join a network (domain wise or not) so I your machine is set to use a fixed IP on the network it is working or to connect to the modem/router that gives you internet acces you "could" disable it (given all is perfectly configured) but if it is set to obtain an IP dinamicaly, then you NEED DHCP in order for it to work properly.
In most cases (virtually all) DHCP is not an immediate threat and thus all machines have it enabled.

[Ryan Hayward]

Thankyou for that. Yes, I'm still on dialup.

BTW, Just wanted to say how much I love this security suite. For their first year, I have to say they have done a stellar job in comparison to many vendor's first attempts at an all-in-one suite. I can only imagine how much better it will become in the future, not that it really needs any serious changes. Its what I loved about Nod32, the improvements never became bloatware like Trend Micro's and Norton's so called improvements.

[MasterTB]

-{ Quote: " Its what I loved about Nod32, the improvements never became bloatware like Trend Micro's and Norton's so called improvements." }-

You're most certaily right!!