ICS, I'm on client pc, cant access websites!

Discussion in 'LnS English Forum' started by okpc, Jun 1, 2010.

Thread Status:
Not open for further replies.
  1. okpc

    okpc Registered Member

    Joined:
    Jun 1, 2010
    Posts:
    7
    Location:
    Latvia
    Hi all,
    please help!
    We have home network - server pc without look'n'stop, and my client pc with look'n'stop, imported ICS client rule, and still can't access websites, only homepage google, and I can see search results. Home network is ok.
    What do I do? :doubt:
     
  2. okpc

    okpc Registered Member

    Joined:
    Jun 1, 2010
    Posts:
    7
    Location:
    Latvia
    please help, I'm new to LNS!
     
  3. Stem

    Stem Firewall Expert

    Joined:
    Oct 5, 2005
    Posts:
    4,948
    Location:
    UK
    HI,

    Welcome to Wilders

    Sorry to see your post go by without a reply.

    I am not sure what the problem could be with you saying that you can connect to google and search.

    Could you check your log file (open L`n`S-> log tab) to see if there are any blocked packets.


    - Stem
     
  4. okpc

    okpc Registered Member

    Joined:
    Jun 1, 2010
    Posts:
    7
    Location:
    Latvia
    Hello Stem,
    thanks for your attention,
    Im young mom with lack of time and skills for such complicated matter like firewall tuning :rolleyes:

    The logfile after I start firefox goes:
    Code:
    06-07-10,17:13:20  U-0    'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:13:24  U-1    'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:13:24  U-2    'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:13:25  U-3    'APP: Stopped            ' Windows NT Logon Application RUN       C:\WINDOWS\SYSTEM32\WINLOGON.EXE,C:\WINDOWS\SYSTEM32\LSASS.EXE
    06-07-10,17:13:30  U-4    'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:13:30  U-5    'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:13:30  U-6    'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:13:30  U-7    'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:13:34  U-8    'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\ALG.EXE
    06-07-10,17:13:34  U-9    'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:38  U+10   'APP: Allowed            ' Windows Explorer   RUN       C:\WINDOWS\EXPLORER.EXE,C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
    06-07-10,17:16:39  U+11   'APP: Allowed            ' Windows Explorer   RUN       C:\WINDOWS\EXPLORER.EXE,C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
    06-07-10,17:16:41  U+12   'APP: Allowed            ' Windows Explorer   RUN       C:\WINDOWS\EXPLORER.EXE,C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
    06-07-10,17:16:41  U+13   'APP: Allowed            ' Windows Explorer   RUN       C:\WINDOWS\EXPLORER.EXE,C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
    06-07-10,17:16:42  U-14   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:42  U-15   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:42  U-16   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:49  U-17   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:50  U-18   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:50  U-19   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:50  U-20   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:50  U-21   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:50  U-22   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:50  U-23   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:50  U-24   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:51  U-25   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:51  U-26   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:51  U-27   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:51  U-28   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:51  U-29   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:51  U-30   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:51  U-31   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:51  U-32   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:52  U-33   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:52  U-34   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:52  U-35   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:52  U-36   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:54  U-37   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:55  U-38   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:55  U-39   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:56  U-40   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:16:58  U-41   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:17:00  U-42   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:17:02  U-43   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:17:03  U-44   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:17:03  U-45   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    06-07-10,17:17:05  U-46   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    
    I'll be really grateful, if you or someone will say what do I need to unblock or such.

    Maybe ppl are irritated to see this noobish question like this here, which, maybe, can be answered by reading FAQ or google. But I really have no time for this, and before the baby I would do that, and always did.
    Maybe someone with expertise and some free time could help.
     
  5. Stem

    Stem Firewall Expert

    Joined:
    Oct 5, 2005
    Posts:
    4,948
    Location:
    UK
    Hello okpc,

    Go into the "Application Filtering" tab and remove from the list "Services.exe" and "svchost.exe" (just select the program in the list, then at the bottom of that window press "Remove")

    Then connect out with Firefox, you should then get a popup to allow svchost to connect out to remote port 53 which you should allow.


    - Stem
     
  6. okpc

    okpc Registered Member

    Joined:
    Jun 1, 2010
    Posts:
    7
    Location:
    Latvia
    I didn't get a popup, it allowed firefox to start without noticing me. What should I do? Or maybe bcos it (firefox) is whitelisted?

    But shouldn't I have "Services.exe" and "svchost.exe" blocked in LNS to block applications from using BITS?
     
  7. Cudni

    Cudni Global Moderator

    Joined:
    May 24, 2009
    Posts:
    6,956
    Location:
    Somethingshire
    No you shouldn't, that breaks useful things. What app are you trying to block?
     
  8. Stem

    Stem Firewall Expert

    Joined:
    Oct 5, 2005
    Posts:
    4,948
    Location:
    UK
    There is no white listing in L`n`S.
    If you allow svchost outbound, does that then allow you internet access?

    If you are not making windows auto updates, then you can disable the bits service (in the windows services).

    If you want to block svchost all together, then you would need to make your PC a fixed IP, and disable the DHCP service, then disable the DNS service.


    What OS are you using?
     
  9. okpc

    okpc Registered Member

    Joined:
    Jun 1, 2010
    Posts:
    7
    Location:
    Latvia
    Corel DRAW, adobe photoshop, Illustrator etc

    I meant firefox is in LNS list with "allowed to connect" status

    o_O I didn't understand that...


    I wanted to disable everything that can transfer information without me knowing (everything that I won't see in LNS)

    Im on win XP SP3

    And also I saw somewhere, maybe on LNS FAQ or such that best solution for security is having LNS both on server and client. Is that truth?
     
  10. Stem

    Stem Firewall Expert

    Joined:
    Oct 5, 2005
    Posts:
    4,948
    Location:
    UK
    We first need to see why you are being blocked from the internet. I wanted to see if you allowed svchost if that then allowed you internet access.

    Go into the windows services and disable the windows DNS client. (at the start menu select "Run", then type services.msc then press "OK". In the services popup window, find the "DNS client entry, right click and select "properties". In the properties window, press "stop" then select "Disabled"

    01.png



    Reboot the PC then try and connect out to the internet, if you cannot, then check the firewall log again.
     
  11. okpc

    okpc Registered Member

    Joined:
    Jun 1, 2010
    Posts:
    7
    Location:
    Latvia
    now that I removed system processes from LNS Internet is working fine.
    Do I still have to disable DNS Client?
    Thanks for help.
     
  12. Stem

    Stem Firewall Expert

    Joined:
    Oct 5, 2005
    Posts:
    4,948
    Location:
    UK
    You can leave the DNS service active if you want. It will only connect to the ICS server(host) for DNS.

    Do you have windows auto update service active? as that will make svchost attempt to connect out for windows updates.
     
  13. okpc

    okpc Registered Member

    Joined:
    Jun 1, 2010
    Posts:
    7
    Location:
    Latvia
    Well I don't care of "svchost attempt to connect out for windows updates", if only it won't make other applications on my PC make connections without me "seeing" (with LNS) this.

    What about having LNS both on server and client?
     
  14. Stem

    Stem Firewall Expert

    Joined:
    Oct 5, 2005
    Posts:
    4,948
    Location:
    UK
    IMHO it would depend on what firewall is currently on the Host. If one is installed and the computer is safe/clean, then why change.

    - Stem
     
Thread Status:
Not open for further replies.