Firewall Warning (question)

Discussion in 'ESET Smart Security' started by CDreier, Nov 14, 2007.

Thread Status:
Not open for further replies.
  1. CDreier

    CDreier Registered Member

    Joined:
    Apr 30, 2006
    Posts:
    34
    Location:
    Southeast U.S.
    Security Suite's firewall blocked an inbound Generic Host Process for Win32 Services - supposedly from MS Windows Publisher. I was going to allow it, but in checking the Remote Computer IP Address, it seems to be in Japano_O I'm attaching a view of my window showing the notice and information on the process. I'm really confused and not knowledgeable about this. What might you guys suggest?
     

    Attached Files:

  2. Seer

    Seer Registered Member

    Joined:
    Feb 12, 2007
    Posts:
    1,596
    Location:
    Singidunum
    Hello :)

    nothing to worry about. Your PC is synchronizing time. Port 123 is a standard for NTP protocol. This is not Japan, here is what that IP is -

    Untitled-1.jpg

    OrgName: Microsoft Corp
    OrgID: MSFT
    Address: One Microsoft Way
    City: Redmond
    StateProv: WA
    PostalCode: 98052
    Country: US

    NetRange: 207.46.0.0 - 207.46.255.255
    CIDR: 207.46.0.0/16
    NetName: MICROSOFT-GLOBAL-NET
    NetHandle: NET-207-46-0-0-1
    Parent: NET-207-0-0-0-0
    NetType: Direct Assignment
    NameServer: NS1.MSFT.NET
    NameServer: NS5.MSFT.NET
    NameServer: NS2.MSFT.NET
    NameServer: NS3.MSFT.NET
    NameServer: NS4.MSFT.NET
    Comment:
    RegDate: 1997-03-31
    Updated: 2004-12-09


    You should allow this (if you use 'Windows Time' service), better yet, select 'Advanced options' on that popup, and create a custom rule which allows any remote IP on port 123 ;) as Windows tends to update your PC time via various servers worldwide.

    Cheers.
     
  3. CDreier

    CDreier Registered Member

    Joined:
    Apr 30, 2006
    Posts:
    34
    Location:
    Southeast U.S.
    Nick,
    I created a custom rule. Thanks!!!!
     
  4. Seer

    Seer Registered Member

    Joined:
    Feb 12, 2007
    Posts:
    1,596
    Location:
    Singidunum
    You're most welcome :thumb:
     
Thread Status:
Not open for further replies.