Was just curious about this: Windows 7 Home Premium. I have DNS Client service set to automatic. In TCPView it shows it connecting on local port 5355. It shows up as LLMNR. My question is, on a home pc, is the service beneficial to me? If so, are there any firewall rules I should be creating with port 5355 or should I just leave it alone?
The DNS service is used for caching the fetched IPs even if you are in auto mode getting them from your router or ISP. If you use a very large HOSTS file for blocking, it can be worth changing the service to manual or disabled. When you connect to the net, the DNS service will take a while going through the HOSTS file. You will notice it as one of the instances of svchost will be using a lot of CPU, and you may have trouble accessing any sites until it has finished.
I don't think I have a HOSTS file? Just using a home PC. Wasn't sure if this was one of those services, like workstation and server, that were safe to disable.
You have a hosts file whether or not it's large or "empty." By your question, yours is the latter. You'll note LLMNR is connecting to 0.0.0.0 which is not out there on the internet. So, leave it as is. The DNS client is your friend. All Windows versions have been very happy with it for a loooooong time. A_mouse's post is spot-on.
best advise! btw its not a dns service as server, its a dns resolver with cache. nevertheless i wont ask you again about the goal, i assume you will let the thread closed as the other one.
OK so what is winit doing listening on port 49152 eventlog on port 49153 Schedule on port 49154 Are those not remote connections?
