Filesclab FW blocking Windows Update

I've installed Fileseclab FireWall Pro on my XP Pro-SP2 system.

I use Firefox as my default browser. When I open IE6 to go to the MS Windows Update site, Filesclab blocks the "checking for updates" process. When I open the Filseclab monitor (very nice feature by the way), I notice repetitive "DENY" actions due to built-in rule #10011 (SYSTEM and also svchost).

Anyone else experiencing this .. and is there a work around ?

 

No proxies. Please tell me what to look for to verify this.

I am behind a Linksys wireless Router (hardware firewall) - and I'm using KAV, Spybot TeaTimer resident, Spywareblaster, and the MVPS Hosts file.

Thanks.

 

Yes, I am in the General Mode.

I also tried lowering the "Security Level" from Medium to Low, but the update process was still blocked by internal rule 10011.

When I stop the firewall, the update proceeds.

Thanks.

 

I checked the Filseclab "settings" tab, and the 4th box (auto-trust microsoft) is already checked.

For a while I thought that my hosts might be the culprit. But when I switched off the firewall, i was able to update windows WITHOUT touching hosts or any of my other security software or settings.

So - it's probably safe to assume that I have some weird rules conflict in Filseclab.

 

Previous firewall was Kerio 4 and there was no issues with Windows Update.

Your last sentence might be problem. Can you please tell me HOW I permit svchost to connect to Windows update ? How do I write this rule in Filseclab ?

 

SUCCESS !!!

In monitor, I right-clicked the DENY svchost line and was presented with an option to create a new rule to ALLOW for "this program" - which was Windows Update. Easy ... I didn't realize this was possible.

Thanks for your patience and assistance ronjor !

 

Hi ronjor
Pardon the continuation of this thread (I didn't want to create a new one)
I decided to try out Filescab and Dr web spidermail would not fuction (I can fix that) and (this is the bad part), I couldn't get an Internet connection. No IP from the router.
Once I uninstalled filescab, everything went back to being operational.
Am I missing something?
Cheers

 

That should do it, I found this out quite by accident and it took care of the same problem fredra described.
I really like the firewall but switched back to kerio 2.1.5, old faithful.

 

Hi ronjor
Thanks for your feedback and assistance.

"I would look in rules, network type, intranet, and see if the router address shows up."

Yes it is there, however, still no network connectivity.
Using "ipconfig /renew" tells me that I have a broken network connection. That means IMHO that I am not getting a DHCP address from the router.
I am having a conflict somewhere, so I will keep searching and digging deeper to find the answer.
Cheers

 

Thanks for all your help, it is appreciated.
Cheers

 

I think this isyour answer, or at least, it is a separate problem that mkes troubleshooting much harder. Windows Update DOES NOt like firefox. Even without fiesclab in place, Microsoft does not allow any windows updates because firefox does not have any active x controls, which are at the heart of windows update processes.
Doctor Disco

 

Another post comment on the above. You have to click on update in the filesclab program to get stuff from the Internet to make it work. If youhaven't done that, it will be a problem. I think it if found in the status page at the bottom upon installation.

Doc disco